ite$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 250.538483][T12022] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 250.551302][T12019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 250.559713][T12019] FAT-fs (loop0): Filesystem has been set read-only [ 250.577742][T12019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x66e80, 0x0) ftruncate(r3, 0x2008001) dup3(r4, r3, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x200a00}]) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) fcntl$setsig(r7, 0xa, 0x8) getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) io_cancel(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0xfff, r0, &(0x7f0000000400)="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", 0x1000, 0xffffffffffffffe0, 0x0, 0x0, r6}, &(0x7f0000000200)) getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) [ 250.587325][T12022] FAT-fs (loop5): Filesystem has been set read-only [ 250.595034][T12019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 250.647143][T12031] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 250.659710][T12033] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 250.673631][T12022] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) 22:44:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x4c000000, 0x0) [ 250.702506][T12031] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 250.725381][T12042] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 250.874796][ T4996] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 250.906552][T12047] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 250.914886][T12047] FAT-fs (loop0): Filesystem has been set read-only [ 250.922193][T12045] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 250.934913][T12045] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 250.943289][T12045] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 251.114695][ T4996] usb 2-1: Using ep0 maxpacket: 16 [ 251.234753][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.245842][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.255604][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 251.264803][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.273350][ T4996] usb 2-1: config 0 descriptor?? [ 251.315234][ T4996] usbhid 2-1:0.0: can't add hid device: -22 [ 251.321267][ T4996] usbhid: probe of 2-1:0.0 failed with error -22 [ 251.515739][T12017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 22:44:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x80200, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r4, &(0x7f0000001680)=[{{&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000000580)=""/90, 0x5a}], 0x5, &(0x7f0000000680)=""/4096, 0x1000}, 0x7}], 0x1, 0x2, &(0x7f00000016c0)={0x77359400}) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x10, r5, 0x6f164000) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001780)={0xffffffffffffffff, &(0x7f0000001700)="2bcf6bf847267ee807c2b390b5b6fbdacd87aaf7fc676854d89989027a0fdb3c648ece125822", &(0x7f0000001740)}, 0x20) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') madvise(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0xe) getdents(r7, &(0x7f0000000100)=""/164, 0x20000118) 22:44:12 executing program 3: prlimit64(0x0, 0x2, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x81, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd0c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000005) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14400000", @ANYRES16=r4, @ANYBLOB="050400000000000000007e000000"], 0x14}}, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000001700)=[{&(0x7f0000001600)=""/207, 0xcf}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 22:44:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x60000000, 0x0) [ 253.495523][ T140] usb 2-1: USB disconnect, device number 44 22:44:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 253.558840][T12065] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 253.573632][T12065] FAT-fs (loop0): Filesystem has been set read-only [ 253.616350][T12077] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 253.654527][T12065] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x68000000, 0x0) [ 253.669406][T12081] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 253.703702][T12065] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 253.904306][ T140] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 253.997250][T12091] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 254.019266][T12091] FAT-fs (loop0): Filesystem has been set read-only [ 254.026974][T12091] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 254.067597][T12091] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 254.144297][ T140] usb 2-1: Using ep0 maxpacket: 16 [ 254.264385][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.275436][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.285545][ T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 254.294709][ T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.304347][ T140] usb 2-1: config 0 descriptor?? [ 254.768042][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.775458][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.782304][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.789189][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.796128][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.802980][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.809857][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.816743][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.823851][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.830727][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.837639][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.844528][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.851528][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.858416][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.865389][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.872232][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.879289][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.886282][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.893146][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.900131][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.907046][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.913898][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.920774][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.927667][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.934546][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.941418][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.948368][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.955330][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.967523][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.975225][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.982089][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.990468][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 254.998360][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.006102][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.013074][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.021311][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.029357][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.037068][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.044092][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.052408][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.061496][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.069439][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.078597][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.087456][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.095859][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.103018][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.111309][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.118993][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.126595][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.133464][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.142542][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.150399][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.158304][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.166231][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.173263][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.181650][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.189330][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.197000][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.203879][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.212214][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.220406][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.228136][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.235812][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.242976][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.251472][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.259396][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.267277][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.274900][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.281792][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.290066][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.297713][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.305339][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.312203][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.321275][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.329023][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.336672][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.343545][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.351798][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.359514][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.367655][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.375567][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.382479][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.390751][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.398824][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.406673][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 22:44:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x6c000000, 0x0) 22:44:14 executing program 3: prlimit64(0x0, 0x2, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x81, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd0c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000005) write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14400000", @ANYRES16=r4, @ANYBLOB="050400000000000000007e000000"], 0x14}}, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000001700)=[{&(0x7f0000001600)=""/207, 0xcf}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 22:44:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) sendmmsg$unix(r0, &(0x7f00000008c0)=[{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000400)="a0422181dc22e19f51fe7ab72d914e05a6825221fa609bce3b1cfa009cc5fbecd198949904db2212e292d2faf60909b32e9671d9c11539903219a8de120e264f00179f9f2f3dff78d5f23fefdab12e52c47fb8", 0x53}, {&(0x7f0000000480)="47a5dfcbd88e704e625f5e99c52ee854dc121f63958b6b39ad5109c2edcab405528298d3c03f1e1c5f5fedfad61fa5f5a399bf84b905dc1c5d4f874276d679ad0985082c70acb92fcbe2de8410b3c3d735636573f71a79f2f2f64ac15fc4888d7e050f7427f2d42fef6bfab3312dc5ccc0bc0f7bb37684d8c84a032e945de8acbf8d9f7f584eea3609447a0bfe35699df4ffdb0aa434ad140153b7337daed1ec0b3eda56d648edf1ac72892bbcd8817556dfde904ee8d88f2665e972c175b3ebb48badb0613b0c74e85d70b4a57a68601d183b599a744eff2a04d4368809adf964b7a3", 0xe3}], 0x2, 0x0, 0x0, 0x20000800}, {&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x1}, {&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000006c0)="3698bc583830413424210df2efa894ad5b24a4d9f995238c9b03b5886110b4094377a3a255e94125673bda619edcfb697037434583704ae9acb95c0bf5d86786ca06dfb0944fb85c7024bad259ac2c571dbca27764e3fd5438d4002793e6bd3d4794c0603a3c815b7f4d0b594831519f86a93e93087b4b0c34ef7cb007881d73a1a3bbf7e15488c226c5219e1eb246d76171df0db5d726826977460b737749880f7a0f3495491535fa4a09d3a160a690f657cb3115c25d53d229eb676e23c0e5300e008d526f2b8b349d384e685c29556f4c72a9", 0xd4}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000ff858f66b700000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r6], 0x98, 0x240000c5}], 0x3, 0x8000) utimensat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x77359400}}, 0x100) r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f00000003c0)='./file0\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x30e9c3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r8, &(0x7f0000000100)=""/164, 0x20000118) [ 255.418450][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.426361][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.434047][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.442562][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.450824][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.458574][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 22:44:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 255.466855][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.473953][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.496708][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.514339][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 22:44:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) readv(r1, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/17, 0x11}], 0x1) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) [ 255.548668][T12124] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 255.550611][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.589818][T12124] FAT-fs (loop0): Filesystem has been set read-only [ 255.597359][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.620911][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.629672][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.637726][T12137] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 255.651576][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.653787][T12124] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 255.669164][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.677794][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.685999][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.692889][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.701765][T12138] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 255.711394][T12124] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 255.711547][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.727591][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 22:44:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x74000000, 0x0) [ 255.735652][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.742548][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.751395][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.767903][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.776004][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.782988][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.791818][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.800213][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.808210][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.816209][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.823117][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.832265][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.840251][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.848382][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.855343][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.862342][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.873324][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.881430][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.889960][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.897982][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.906699][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.913699][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.923176][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.931295][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.939513][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.947585][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.955570][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.962560][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.971705][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.979767][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.987889][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 255.996046][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.002974][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.012066][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.020128][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.028310][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.036343][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.044442][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.051630][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.060800][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.068743][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.076813][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.083791][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.092710][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.101097][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.109279][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.117396][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.125522][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.132502][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.141583][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.149641][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.157838][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.166088][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.173026][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.181941][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.189978][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.198107][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.206064][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.213021][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.222234][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.230241][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.238445][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.246530][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.253489][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.262517][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.270718][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.279005][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.287151][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.305182][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.316869][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.332876][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.347807][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.363278][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.371996][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.380083][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.388089][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.396384][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.403364][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.412470][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.421372][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.430325][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.439572][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.449178][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.458163][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.466344][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.473285][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.482222][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.490675][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.498841][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.506897][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 22:44:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) r2 = dup(0xffffffffffffffff) recvfrom$inet(r2, &(0x7f0000000140)=""/175, 0xaf, 0x160, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8a}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c2634927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07eff8a44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) [ 256.514962][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.522043][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.531239][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.539351][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.553821][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.562232][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.570187][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.578051][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.585724][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.592688][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.601490][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.609668][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.617789][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.625618][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.632625][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.640930][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.648664][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.656805][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.664957][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.671870][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.680773][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.688442][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.696024][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.702990][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.711362][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.719067][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.726741][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.733595][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.742004][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.749693][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.757488][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.765257][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.772125][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.780516][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.789351][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.797137][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.804750][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.811627][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.819914][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.832483][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.840239][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.848058][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.855987][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.862976][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.871345][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.878978][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.886632][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.893662][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.902146][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.910141][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.917815][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.925547][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.933271][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.941457][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.949511][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.957776][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.965682][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.972535][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.981005][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.988720][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 256.996393][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.003267][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.012178][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.019928][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.027614][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.035430][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.042287][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.050461][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.058121][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 22:44:15 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'wg1\x00', {0x3}}) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r0, 0x0, 0x81420000a77, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="353581", 0x3}], 0x1}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[], 0x17) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x486, 0x186, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x8, 0x7}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x0, 0x40}}]}}}]}}]}}, 0x0) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x80010, r6, 0x4) keyctl$get_persistent(0x4, 0xffffffffffffffff, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r7, &(0x7f0000000100)=""/164, 0x20000118) [ 257.066189][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.073079][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.082122][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.096577][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.109474][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.117291][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.125376][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.132253][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.140749][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.148920][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.156806][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.166147][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.173156][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.181742][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.189399][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.197156][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.204915][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.211795][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.220386][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.228201][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.235973][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.242852][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.251297][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.258940][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.266579][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.273432][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.281679][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.289323][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.297009][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.304926][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.311805][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.319985][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.327648][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.335333][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.342211][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.350483][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.358704][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.366571][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.373435][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.381888][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.389771][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.398717][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.407260][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.416061][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.422938][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.431430][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.439418][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.443917][ T4996] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 257.447951][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.460951][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.467892][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.475037][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.482077][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.489293][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.496924][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.504102][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.511087][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.518089][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.525013][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.532170][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.539203][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.546389][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.553238][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.560139][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.567214][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.574251][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.581112][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.588097][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.594995][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.601859][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.608915][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.616468][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.623337][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.630321][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.637408][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.644504][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.651549][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.658635][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.665651][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.672534][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.679606][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.686499][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.693362][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.693863][ T4996] usb 4-1: Invalid ep0 maxpacket: 16 [ 257.700245][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.712376][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.719272][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.726376][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.733321][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.740570][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.747481][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.754724][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.761591][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.768477][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.775383][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.782228][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.789249][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.796165][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.803029][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.809924][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.816824][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.823695][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.830600][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.837497][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.844388][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.851260][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.858283][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.863842][ T4996] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 257.865172][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.879474][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.886496][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.893367][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.900517][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.907445][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.914372][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.921515][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.928417][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.935662][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.942518][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.949442][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.956514][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.963356][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.970391][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.977310][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.984205][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.991275][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 257.998170][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.005077][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.012003][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.018991][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.025893][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.032737][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.039611][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.046597][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.053454][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.060567][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.067493][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.074389][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.081303][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.088217][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.095125][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.102150][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.109160][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.113812][ T4996] usb 4-1: Invalid ep0 maxpacket: 16 [ 258.116072][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.121612][ T4996] usb usb4-port1: attempt power cycle [ 258.128184][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.140570][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.147487][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.154386][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.161281][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.168293][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.175212][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.182072][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.189043][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.195976][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.202844][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.209742][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.216642][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.223489][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.230383][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.237402][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.244351][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.253226][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.260173][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.267382][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.274291][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.281158][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.288275][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.295198][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.302175][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.309222][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.316386][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.323255][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.330165][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.337065][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.344126][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.351423][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.358310][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.365232][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.372097][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.379005][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.385903][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.394605][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.401479][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.408383][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.415388][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.422307][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.429305][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.436236][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.444440][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.451836][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.458805][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.465698][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 22:44:17 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 258.472543][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.479459][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.486359][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.493207][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.500292][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.507585][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.517618][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.524577][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.531436][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.538345][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.545331][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.552335][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.559253][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.566241][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.573096][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.579992][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.586916][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.594241][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.601096][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.608022][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.615114][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.621965][ T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0 [ 258.629061][ T140] wacom 0003:056A:0023.000E: Unknown device_type for 'HID 056a:0023'. Assuming pen. [ 258.639014][ T140] input: Wacom Intuos 12x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0023.000E/input/input15 [ 258.653905][ T140] wacom 0003:056A:0023.000E: hidraw0: USB HID v0.00 Device [HID 056a:0023] on usb-dummy_hcd.1-1/input0 [ 258.672201][ T140] usb 2-1: USB disconnect, device number 45 [ 258.833807][ T4996] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 258.907652][T12170] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 258.923765][ T4996] usb 4-1: Invalid ep0 maxpacket: 16 22:44:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 258.951861][T12170] FAT-fs (loop0): Filesystem has been set read-only [ 258.961411][T12177] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 258.973033][T12178] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 258.984461][T12177] FAT-fs (loop5): Filesystem has been set read-only 22:44:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x7a000000, 0x0) 22:44:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 259.008823][T12170] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 259.073887][ T4996] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 259.084123][ T140] usb 2-1: new high-speed USB device number 46 using dummy_hcd 22:44:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 259.163776][ T4996] usb 4-1: Invalid ep0 maxpacket: 16 [ 259.169326][ T4996] usb usb4-port1: unable to enumerate USB device [ 259.333674][ T140] usb 2-1: Using ep0 maxpacket: 16 [ 259.473761][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.484816][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.495321][ T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 259.504763][ T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.513488][ T140] usb 2-1: config 0 descriptor?? 22:44:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xc0060000, 0x0) 22:44:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) eventfd2(0x8000, 0x800) [ 259.670703][T12177] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 259.679323][T12202] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 259.782747][T12208] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 259.790687][T12208] FAT-fs (loop0): Filesystem has been set read-only [ 259.808185][T12208] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 259.828376][T12216] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 259.837813][T12208] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 259.860511][T12216] FAT-fs (loop5): Filesystem has been set read-only [ 259.948225][T12216] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 260.008303][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.018338][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.027144][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.034994][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.041875][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.050314][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.058224][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.065919][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.072800][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.080991][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.088653][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.096462][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 22:44:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 260.103330][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.112404][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.120384][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.128416][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.139765][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.147870][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.156597][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.164724][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.171741][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.180791][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.188666][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.197057][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.206164][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.213072][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.221824][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.229796][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.237932][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.245960][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.255620][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.264746][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.271961][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.280399][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.288230][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.296197][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.303413][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.311690][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.319418][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.327197][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.335430][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.342856][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.351622][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.361472][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.369669][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.377911][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.386185][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.393396][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.402411][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.410471][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.418927][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.429851][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.437727][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.445492][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.452351][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.460885][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.468468][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.476101][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.483239][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.491544][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.499299][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.507284][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.515032][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.521897][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.530068][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.537808][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.545507][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.552372][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.560861][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.568668][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.576583][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.583477][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.591756][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.599533][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.607400][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.615074][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.621936][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.630267][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.638002][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.645667][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.652633][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.660955][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.668655][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.676421][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.683298][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.691633][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.699330][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 22:44:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xf6ffffff, 0x0) 22:44:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) 22:44:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 260.707384][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.715750][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.733617][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.740516][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 22:44:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 260.756853][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.777282][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.781723][T12239] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 260.796335][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.804391][T12239] FAT-fs (loop5): Filesystem has been set read-only 22:44:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 260.807852][T12240] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 260.818390][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.835804][T12252] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) 22:44:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 260.863069][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.880531][T12239] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 260.901193][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 22:44:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getresuid(&(0x7f0000000280)=0x0, &(0x7f0000000400), &(0x7f0000000440)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f0000000200)='./file0\x00', 0x6, 0x1, &(0x7f0000000240)=[{&(0x7f0000000300)="9d4c87daf966490de8d6bf7aaa25e07d2de208470106925e9d52c9f00725a28a24ffd885ef8b54d913fe6f704069ebb24cff79ba9e4e40c4f92aa0bc902f2f795a39d177e512d8ded917b999b512c63a505e670a01b4bc2223ce01623ecf94379ba2ce70a6e4ffeb40be9bdaaf7f7911c891e863bcf55953b0d828fb2aa23faad2460723064593b85abe3c", 0x8b, 0x7fff}], 0x2060000, &(0x7f0000000480)={[{@fastboot='fastboot'}, {@fsync_mode_strict='fsync_mode=strict'}, {@inline_dentry='inline_dentry'}, {@inline_dentry='inline_dentry'}, {@fastboot='fastboot'}, {@alloc_mode_reuse='alloc_mode=reuse'}, {@noinline_data='noinline_data'}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@fowner_gt={'fowner>', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, ']'}}, {@fowner_gt={'fowner>', r5}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@appraise='appraise'}, {@hash='hash'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_type={'subj_type'}}]}) fchdir(r0) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f00000003c0)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) getdents(r9, &(0x7f0000000100)=""/164, 0x20000118) [ 260.912667][T12240] FAT-fs (loop0): Filesystem has been set read-only [ 260.925583][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.949483][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.960642][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.969041][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.983210][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 260.991521][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.006736][T12240] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 261.056121][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.069635][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.077880][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.085615][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.092467][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.100698][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.108343][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.116328][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.123208][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.131931][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.140039][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.148018][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.156021][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.162982][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.171182][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.178983][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.186700][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.194514][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.201564][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.210052][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.217972][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.226339][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.233217][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.241994][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.249670][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.257468][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.265373][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.272381][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.280842][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.288677][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.296420][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.303283][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.311594][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.319301][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.326900][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.334654][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.341547][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.349740][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.357439][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.365210][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.372064][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.380182][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.387882][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.395662][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.402622][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.410967][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.418841][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.426527][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.434204][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.441280][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.449648][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.457414][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.465036][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.471916][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.480353][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.487973][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.495907][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.502859][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.511125][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.518815][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.526541][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.534232][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.541081][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.549201][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.556780][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.564456][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.571392][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.579605][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.587570][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.595455][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.602402][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.610709][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.618424][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.626125][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.632977][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.641274][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.649069][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.656751][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.664404][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.671259][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.679472][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.687194][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.695172][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.702296][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.710618][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.718907][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.726667][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.734428][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.741292][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.749798][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.757417][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.765310][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.772197][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.780413][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.788411][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.796112][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.802969][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.811465][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.819399][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.827154][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.834902][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.841767][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.850398][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.858358][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.866362][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.875005][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.882065][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.890418][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.898167][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.905951][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.912960][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.921304][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.929126][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.936930][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.944667][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.951604][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.960005][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.967864][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.975563][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.982435][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.990960][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 261.998679][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.006310][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.013177][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.021632][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.029313][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.036915][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.044626][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.051503][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.059687][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.067421][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.075504][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.082386][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.091256][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.098911][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.106541][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.114231][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.121087][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.129567][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.137372][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.145084][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.152058][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.160376][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.168127][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.175967][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.184960][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.191839][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.200119][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.207784][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.215535][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.222828][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.231264][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.239141][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.246789][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.254590][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.261617][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.269847][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.277568][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.285279][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.292146][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.300498][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.308330][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.315977][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.322990][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.331272][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.338948][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.346917][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.354955][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.361841][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.370056][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.377750][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.385448][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.392311][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.400948][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.408709][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.416550][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.424561][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.431729][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.440084][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.448070][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.456359][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.464386][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.471297][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.479755][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.487496][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.495158][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.502037][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.510506][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.518343][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.526127][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.533001][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.541296][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.548949][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.556611][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.564660][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.571526][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.579906][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.587724][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.595525][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.602411][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.610739][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.618882][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.626662][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.634702][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.641727][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.650348][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.658695][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.666722][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.674637][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.681627][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.690353][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.698183][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.706083][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.713053][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.722041][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.729869][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.738158][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.746141][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.753014][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.761447][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.769403][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.777280][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.785057][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.792144][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.800503][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.808248][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.816626][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.824681][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.831544][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.839894][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.847765][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.855731][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.862651][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.871077][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.878770][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.887172][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.895118][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.902108][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.910543][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.918422][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.926255][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.934102][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.940973][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.949245][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.957043][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.964721][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.971574][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.980076][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.987938][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 262.995662][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.002525][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.010835][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.018765][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.026407][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.033989][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.040839][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.049051][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.056658][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.064348][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.071286][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.079520][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.087141][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.094742][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.101636][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.109908][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.117927][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.125570][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.132616][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.140842][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.148481][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.156102][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.164207][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.171065][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.179297][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.186885][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.194697][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.201554][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.209850][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.217522][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.225225][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.232170][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.240403][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.248125][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.255849][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.262704][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.271019][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.278741][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.286419][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.294070][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.301020][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.309236][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.316915][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.324613][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.331474][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.339929][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.348791][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.356792][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.364583][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.371445][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.379694][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.387510][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.395870][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.402745][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.410922][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.418751][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.426385][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.434297][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.441426][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.450368][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.458119][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.465832][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.472707][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.480920][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.488789][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.496571][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.504191][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.511062][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.519422][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.527213][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.535194][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.542066][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.550465][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.558322][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.566168][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.573040][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.581328][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.589125][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.596786][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.604630][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.611515][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.619807][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.627527][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.635293][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.642177][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.650387][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.658212][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.665877][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.672736][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.681214][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.688897][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.696726][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.704592][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.711655][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 22:44:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$pptp(0x18, 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') 22:44:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) getdents(r3, &(0x7f0000000100)=""/152, 0x98) 22:44:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xfeffffff, 0x0) [ 263.720023][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.727878][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.735921][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.742932][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.758454][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 22:44:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 263.770331][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.778222][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.787959][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 22:44:22 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18020000000000000000000010000000850000002a0000009500000000000000e8b6a6f350e4edbd1beac1fd0c51bbd356b68fd53e32e6fb983effea0d26f2f033e08d43cb000000000000000000000000000000858200002bd0d1e30624daff7a2f58fa7cf6b67b1a62ff445a7d5e04ab437555fe96769b6645a35e4404a7a3dacfbad1cefcc6fe746646f6f4590a17a83d4a35d8c6d65f3c8320b7253769aedc3a0e3b4de8275365299588fe7d4796a1d16f681f46a61894882eda0fee0ffae224eaf57213"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="4be624e60b8588ae2b8961abc53c", 0x0, 0x4000}, 0x28) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000100)=""/246, &(0x7f0000000080)=0xf6) [ 263.821124][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.829725][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.842414][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.850453][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 22:44:22 executing program 3: flock(0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) r0 = dup(0xffffffffffffffff) write$P9_RCREATE(r0, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x10, 0x2}, 0x1}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x3000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/232) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) [ 263.866463][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.878390][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.889687][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.902294][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.922887][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 22:44:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x1d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="036974001410e5b14d000c45ec59acfa1dc10100"/36, @ANYRES32], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000100000000000000000000038e3ff0000", @ANYRES32=r3, @ANYBLOB="00000000000000000c001a8008000280040001800500270000000000"], 0x34}}, 0x0) [ 263.974036][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.992368][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 263.999317][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 264.006721][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 264.013689][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 264.020909][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 264.023077][T12294] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.027839][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 264.043707][T12297] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.044263][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 264.060452][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 264.067345][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 264.074241][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 264.081115][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 264.089084][ T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0 [ 264.099257][ T140] wacom 0003:056A:0023.000F: Unknown device_type for 'HID 056a:0023'. Assuming pen. [ 264.109927][ T140] input: Wacom Intuos 12x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0023.000F/input/input18 22:44:22 executing program 3: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x78) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000040)="401f08010000193000009727c100020800002da5b149bf2ded26f2ac42343ffa2fa16eaa6de8eba7ccf87732aa623ed2f27203a9422cf8e79b7c30895f0d782afcf50085c14af2010000007be4e34c40f5b2ed463d9e6b0b319a366238bd909524c322ef3e7333c0b6f5de6379710ae5f300000000000000", 0x78) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) r3 = syz_open_procfs(0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x95) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_logind_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:init_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040054) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`P\x00\x00', @ANYRES16=r5, @ANYBLOB="060127bd7000ffdbdf250600000008000500ffffffff14000300ff01000000000000000000000000000114000300fe88000000000000000000000000010108000500e000000214000200ff020000000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x42}, 0x40880) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f00000001c0)) [ 264.131147][ T140] wacom 0003:056A:0023.000F: hidraw0: USB HID v0.00 Device [HID 056a:0023] on usb-dummy_hcd.1-1/input0 [ 264.153957][ T140] usb 2-1: USB disconnect, device number 46 [ 264.399743][T12320] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 264.431258][T12320] FAT-fs (loop5): Filesystem has been set read-only [ 264.496897][T12320] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 264.506133][T12329] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 264.543173][ T140] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 264.783128][ T140] usb 2-1: Using ep0 maxpacket: 16 [ 264.903172][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.914283][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.924059][ T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 264.933204][ T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.941787][ T140] usb 2-1: config 0 descriptor?? [ 265.194699][T12278] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 265.423549][ T140] hid (null): unknown global tag 0xc [ 265.432208][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.440330][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.448589][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.456335][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.464051][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.470937][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.479258][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.487031][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.493978][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.500837][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.509550][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.517190][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.524917][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.531779][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.540064][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.547818][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.555430][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.562310][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.570552][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.578212][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.585942][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.593784][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.600662][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.609157][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.616837][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.624667][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.631555][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.639939][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.647770][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.655516][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.662423][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.670751][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.678420][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.686023][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.692896][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.701217][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.709171][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.716902][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.724674][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.732245][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.740434][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.748103][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.755792][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.763773][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.770738][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.779656][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.787347][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.795345][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.802229][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.811797][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.819592][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.827474][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.835783][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.842658][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.851158][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.860386][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.868074][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.875872][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.882753][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x1 [ 265.891094][ T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0 [ 265.898952][ T140] wacom 0003:056A:0023.0010: unknown global tag 0xc [ 265.906775][ T140] wacom 0003:056A:0023.0010: item 0 1 1 12 parsing failed [ 265.914825][ T140] wacom 0003:056A:0023.0010: parse failed [ 265.920586][ T140] wacom: probe of 0003:056A:0023.0010 failed with error -22 [ 265.929974][ T140] usb 2-1: USB disconnect, device number 47 22:44:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:24 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0xa8) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r1, 0x2008002) r2 = socket(0x0, 0x1, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118) r3 = dup(r2) setsockopt$inet_tcp_buf(r3, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$inet_tcp_buf(r4, 0x6, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x0, 0x11, 0x0, r4}) sendfile(r0, r1, 0x0, 0x200fff) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x10000007) r6 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r6, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@empty, 0x8, 0x0, 0x4e21, 0x1ff, 0xa, 0x80, 0x20, 0x2f}, {0x6, 0x6, 0x7, 0x8, 0xfffffffffffffe01, 0x8, 0x8e, 0x2}, {0x6, 0x7, 0x4, 0x7}, 0x101, 0x6e6bc0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x1f}, 0x0, 0x4, 0x1, 0x8, 0x9, 0x9, 0xffffffff}}, 0xe8) read(r2, &(0x7f0000000180)=""/19, 0x13) 22:44:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xffff1f00, 0x0) 22:44:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x6, &(0x7f0000000200)={&(0x7f00000001c0)="7a1931427da4bea5089435d82c78", 0xe}) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) 22:44:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 266.204681][T12348] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 266.222814][T12345] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:25 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x44000600) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r4 = dup2(r3, r0) clone3(&(0x7f0000000200)={0x2200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/101, 0x65, &(0x7f0000000140)=""/10, &(0x7f00000001c0)=[r1, r2], 0x2, {r4}}, 0x58) recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 266.248976][T12348] FAT-fs (loop5): Filesystem has been set read-only [ 266.260333][T12345] FAT-fs (loop0): Filesystem has been set read-only [ 266.276186][T12362] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/164, 0x20000118) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x12c67341075437d5}, 0x6) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0x124) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0xfffffffffffffb5a, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) capget(&(0x7f0000000480)={0x19980330}, &(0x7f00000004c0)={0xa8, 0x6, 0x3ff, 0x1000, 0x5d, 0x7}) getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000000104dad65be64a9dbbfbca834bf3c701020000000000000600060000000000000040000000000000", @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) [ 266.298063][T12348] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 266.321585][T12361] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) 22:44:25 executing program 3: writev(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0) arch_prctl$ARCH_GET_CPUID(0x1011) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) r3 = gettid() clone(0xd7a69000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) wait4(0x0, 0x0, 0x0, 0x0) [ 266.389987][T12345] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 266.405342][T12378] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 266.442965][ T140] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 266.521919][T12391] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) [ 266.682879][ T140] usb 2-1: Using ep0 maxpacket: 16 [ 266.816589][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.827573][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.838181][ T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 266.847558][ T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.858298][ T140] usb 2-1: config 0 descriptor?? [ 267.103258][T12349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 267.323346][ T140] hid (null): unknown global tag 0xc [ 267.331856][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.339755][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.347449][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.355227][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.362100][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.370385][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.378037][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.385841][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.392701][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.401039][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.409059][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.416690][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.424387][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.431264][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.439602][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.447796][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.454735][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.461596][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.470474][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.478216][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.486081][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.494253][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.501140][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.509436][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.517743][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.525767][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.532651][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.540860][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.549213][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.557026][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.564762][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.571623][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.580164][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.587847][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.596052][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.604204][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.611382][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.619943][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.627783][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.635864][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.642782][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.649625][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.658505][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.666249][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.674043][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.682094][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.689840][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.697580][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.705318][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.712214][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.720370][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.728110][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.735975][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.743660][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.750521][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.758668][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.766374][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.774355][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.781225][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x1 [ 267.789767][ T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0 [ 267.797487][ T140] wacom 0003:056A:0023.0011: unknown global tag 0xc [ 267.804949][ T140] wacom 0003:056A:0023.0011: item 0 1 1 12 parsing failed [ 267.812150][ T140] wacom 0003:056A:0023.0011: parse failed [ 267.819224][ T140] wacom: probe of 0003:056A:0023.0011 failed with error -22 [ 267.827993][ T140] usb 2-1: USB disconnect, device number 48 22:44:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xffffff0f, 0x0) 22:44:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e660ef8b4de37618b24b870fb3f", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) 22:44:26 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 268.083962][T12402] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 268.091812][T12402] FAT-fs (loop0): Filesystem has been set read-only [ 268.112085][T12408] FAT-fs (loop5): invalid media value (0x00) [ 268.124124][T12408] FAT-fs (loop5): Can't find a valid FAT filesystem 22:44:26 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:26 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xfffffff6, 0x0) [ 268.236133][T12402] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 268.260316][T12408] FAT-fs (loop5): invalid media value (0x00) [ 268.267518][T12408] FAT-fs (loop5): Can't find a valid FAT filesystem [ 268.312732][ T140] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 268.501422][T12436] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 268.510142][T12436] FAT-fs (loop0): Filesystem has been set read-only [ 268.535561][T12436] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 268.543701][T12439] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 268.552786][ T140] usb 2-1: Using ep0 maxpacket: 16 [ 268.672724][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.683619][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.693490][ T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 268.702514][ T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.711232][ T140] usb 2-1: config 0 descriptor?? [ 268.963052][T12406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 269.203208][ T140] hid (null): unknown global tag 0xc [ 269.211716][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.219574][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.227182][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.234975][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.241834][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.250003][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.258559][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.266209][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.273958][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.280818][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.289146][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.296918][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.304620][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.311475][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.319678][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.327559][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.335254][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.342146][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 22:44:28 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @broadcast, 0x0, 0x0, 'lblcr\x00', 0x0, 0x80003ff}, {@empty}}, 0x44) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x186}], 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x800) ioctl$FIOCLEX(r0, 0x5451) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) rt_sigaction(0x5, &(0x7f00000001c0)={&(0x7f0000000140)="430f1ea4c700000100c421385de8c4c209cfb93d625ced400faef8c402f91cfb47d8c8660f38f6dbc4c3b5cf1933c423414b5d00652e2e64430fae83de0e0000", 0x80000004, &(0x7f0000000180)="c44101d2cb3081f8ffffffc401a95e6e06642e41d9f8c423556c6300a9f245e005c4e27d78180f53c947a3e800000000000000c4a17c28bebab3118d", {[0x5]}}, &(0x7f0000000200)={&(0x7f00000002c0)="660fe557fec481fc77c482f91d17c42215048900000000c4e2d597550df2400f12ed0f0f800000000097c4e3097ba334a6e2a700f342d201460f0f96000000001c", 0x0, &(0x7f0000000340)="650f8e00000000c48191fa9f6774b8153e660f1b9d00080000c44269455b05c4a3791d08e36664f344aef2426fc4e1645f7579c4a2b9039fcd000000f226da1d78558ce1"}, 0x8, &(0x7f00000003c0)) [ 269.350520][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.358539][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.366346][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.374154][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.381034][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.389408][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.397668][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.405715][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.412849][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.419730][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.426692][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.433606][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.440477][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.447492][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.454477][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.461391][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.468361][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.475273][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.482134][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.489014][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.495905][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.502801][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.509641][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.516522][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.523441][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.530298][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.537170][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.544091][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.550943][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.557860][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.564780][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.571626][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.578502][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.585426][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.592280][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.599180][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.606100][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.612996][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.619873][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.626758][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.633654][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x1 [ 269.640516][ T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 269.647404][ T140] wacom 0003:056A:0023.0012: unknown global tag 0xc [ 269.654016][ T140] wacom 0003:056A:0023.0012: item 0 1 1 12 parsing failed [ 269.661173][ T140] wacom 0003:056A:0023.0012: parse failed [ 269.666943][ T140] wacom: probe of 0003:056A:0023.0012 failed with error -22 [ 269.675391][ T140] usb 2-1: USB disconnect, device number 49 22:44:28 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x202880, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) 22:44:28 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xfffffffe, 0x0) 22:44:28 executing program 3: prlimit64(0x0, 0xb, &(0x7f0000000280)={0x470000000000, 0x20000000006}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000000000000}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x4, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) syz_open_procfs(0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 269.951395][T12459] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 269.964669][T12459] FAT-fs (loop0): Filesystem has been set read-only 22:44:28 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:28 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 269.995256][T12463] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 270.010804][T12459] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 270.013126][T12463] FAT-fs (loop5): Filesystem has been set read-only 22:44:28 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x80000000000, 0x0) [ 270.043519][T12476] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x400200, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000200)=""/178, 0xb2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) connect$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x9}}, 0x10) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f0000000100)=""/25, &(0x7f0000000300)=0x19) 22:44:28 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 270.159942][T12480] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 270.212549][ T140] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 270.283394][T12490] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 270.301395][T12490] FAT-fs (loop0): Filesystem has been set read-only [ 270.312581][T12490] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 270.332367][T12490] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 270.462806][ T140] usb 2-1: Using ep0 maxpacket: 16 [ 270.582543][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.593543][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.603589][ T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 270.612738][ T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.621316][ T140] usb 2-1: config 0 descriptor?? [ 270.863108][T12464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 271.102927][ T140] hid (null): unknown global tag 0xc [ 271.111426][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.119566][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.126509][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.133941][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.140822][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.147984][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.154884][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.161739][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.168722][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.175641][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.182547][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.189518][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.196532][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.203482][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.210335][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.217262][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.224303][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.231460][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.238359][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.245276][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.252145][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.259130][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.266093][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.272994][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.279858][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.286757][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.293788][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.300658][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.309073][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.316851][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.324463][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.331330][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.339553][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.347237][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.354864][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.361944][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.370409][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.378135][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.386024][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.393820][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.400772][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.409026][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.416811][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.424783][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.431666][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.440369][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.448131][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.456117][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.463932][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.470908][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.479208][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.487139][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.494871][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.501747][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.510010][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.517786][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.525585][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.533719][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.540662][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x1 [ 271.548855][ T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0 [ 271.556481][ T140] wacom 0003:056A:0023.0013: unknown global tag 0xc [ 271.563807][ T140] wacom 0003:056A:0023.0013: item 0 1 1 12 parsing failed [ 271.570972][ T140] wacom 0003:056A:0023.0013: parse failed [ 271.578234][ T140] wacom: probe of 0003:056A:0023.0013 failed with error -22 [ 271.586945][ T140] usb 2-1: USB disconnect, device number 50 22:44:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:30 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:30 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:30 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x40, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000ffc1df250b00000005002d00000000000800320009000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8, 0x8000) ioctl$LOOP_CLR_FD(r3, 0x4c01) fchdir(r2) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x10000, 0x62) mkdirat(r4, &(0x7f00000003c0)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000400)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) 22:44:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x100000000000000, 0x0) 22:44:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xddf}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"#'], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x2, 0x88}}}, &(0x7f0000000080)={0x37, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:44:30 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 271.858950][T12515] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00'}) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) 22:44:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x200000000000000, 0x0) [ 271.912271][T12515] FAT-fs (loop0): Filesystem has been set read-only [ 271.921921][T12534] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 271.940892][T12515] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 272.092330][ T140] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 272.102749][ T115] usb 2-1: new high-speed USB device number 51 using dummy_hcd 22:44:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:30 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 272.216683][T12549] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 272.225791][T12549] FAT-fs (loop0): Filesystem has been set read-only [ 272.236846][T12549] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 272.265429][T12547] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 272.276623][T12547] FAT-fs (loop5): Filesystem has been set read-only [ 272.319816][T12547] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 272.330142][T12549] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 272.339578][T12560] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 272.356422][ T115] usb 2-1: Using ep0 maxpacket: 16 [ 272.482503][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.496597][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.508439][ T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 272.518065][ T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.527062][ T115] usb 2-1: config 0 descriptor?? [ 272.533262][ T140] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.612392][ T140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.623324][ T140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 272.636713][ T140] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 272.646100][ T140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.654949][ T140] usb 4-1: config 0 descriptor?? [ 272.762628][T12524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 273.002789][ T115] hid (null): unknown global tag 0xc [ 273.011305][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.019183][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.026784][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.034402][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.041310][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.049943][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.057764][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.065411][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.073148][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.080027][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.088213][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.096095][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.103758][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.110631][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.117872][T12512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 273.119788][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.132466][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.139406][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.146374][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.153368][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.160230][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.167112][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.174253][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.181215][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.188110][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.195091][ T140] usbhid 4-1:0.0: can't add hid device: -71 [ 273.201035][ T140] usbhid: probe of 4-1:0.0 failed with error -71 [ 273.207465][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.215201][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.222060][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.228987][ T140] usb 4-1: USB disconnect, device number 23 [ 273.235219][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.242564][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.249433][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.256619][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.263535][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.270388][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.277302][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.284231][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.291086][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.300352][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.307433][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.314346][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.321210][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.328128][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.335148][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.342320][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.349196][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.356299][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.363304][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.371227][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.378135][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.385215][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.392307][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.399191][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.406120][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.413050][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.420003][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.430413][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.440154][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.447597][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.455196][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.462082][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x1 [ 273.469003][ T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0 [ 273.475927][ T115] wacom 0003:056A:0023.0014: unknown global tag 0xc [ 273.482540][ T115] wacom 0003:056A:0023.0014: item 0 1 1 12 parsing failed [ 273.489784][ T115] wacom 0003:056A:0023.0014: parse failed [ 273.495577][ T115] wacom: probe of 0003:056A:0023.0014 failed with error -22 [ 273.504168][ T115] usb 2-1: USB disconnect, device number 51 22:44:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x300000000000000, 0x0) 22:44:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1594e450bd3449e9}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f00000001c0)={0x3, 0x3, 0xbc77, 0x8, 0x2, 0x6}) [ 273.725640][T12582] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 273.736284][T12582] FAT-fs (loop5): Filesystem has been set read-only [ 273.747732][T12582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12582 comm=syz-executor.5 [ 273.768241][T12582] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 273.790741][T12598] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 273.814184][T12589] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 273.825543][T12589] FAT-fs (loop0): Filesystem has been set read-only [ 273.834349][T12589] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 273.883493][T12589] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 273.892603][ T140] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 273.904174][T12601] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 274.002143][ T115] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 274.252160][ T115] usb 2-1: Using ep0 maxpacket: 16 [ 274.302156][ T140] usb 4-1: unable to get BOS descriptor or descriptor too short [ 274.382186][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.394266][ T140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.405344][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.415101][ T140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 274.430521][ T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 274.439933][ T140] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 274.449156][ T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.458667][ T140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.468188][ T115] usb 2-1: config 0 descriptor?? [ 274.475348][ T140] usb 4-1: config 0 descriptor?? 22:44:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) 22:44:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x400000000000000, 0x0) 22:44:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/164, 0x20000118) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0xd, 0x0, 0xd}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x0, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x0, 0x1480}, [@IFLA_MTU={0x8, 0x4, 0x1a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040005}, 0x8004) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) unshare(0x60040600) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x1ff) pipe(&(0x7f00000004c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 274.712617][T12591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 274.713101][T12607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 22:44:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 274.812092][ T140] usbhid 4-1:0.0: can't add hid device: -71 [ 274.819244][T12617] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 274.820656][ T140] usbhid: probe of 4-1:0.0 failed with error -71 [ 274.836408][T12615] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 274.840234][T12619] FAT-fs (loop2): bogus number of reserved sectors [ 274.856385][T12619] FAT-fs (loop2): Can't find a valid FAT filesystem [ 274.874785][T12617] FAT-fs (loop5): Filesystem has been set read-only [ 274.880403][T12615] FAT-fs (loop0): Filesystem has been set read-only [ 274.889375][T12635] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 274.889418][ T140] usb 4-1: USB disconnect, device number 24 22:44:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 274.942734][ T115] hid (null): unknown global tag 0xc [ 274.948144][T12617] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 274.957413][T12615] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 274.969613][T12637] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 274.975496][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.000435][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.007563][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.018290][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.028157][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.035080][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.042078][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.048947][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.055839][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.063431][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.070365][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.077243][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.084870][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.094256][T12639] FAT-fs (loop2): bogus number of reserved sectors [ 275.101520][T12639] FAT-fs (loop2): Can't find a valid FAT filesystem [ 275.109925][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.118320][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.126107][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.133910][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.140865][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.150227][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.159594][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.167449][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.175307][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.182939][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.189813][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.198266][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.206281][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.214959][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.221846][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.231142][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.239708][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.247873][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.256076][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.263727][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.270585][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.278947][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.286729][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.294788][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.303062][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.310199][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.319034][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.327505][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.335428][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.343333][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.350189][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.358319][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.366176][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.374155][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.381044][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.389398][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.397128][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.404836][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.411869][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.420212][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.428471][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.436161][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.443760][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.450644][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.458912][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.466591][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x1 [ 275.474792][ T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0 [ 275.481773][ T115] wacom 0003:056A:0023.0015: unknown global tag 0xc [ 275.489926][ T115] wacom 0003:056A:0023.0015: item 0 1 1 12 parsing failed [ 275.498036][ T115] wacom 0003:056A:0023.0015: parse failed [ 275.504842][ T115] wacom: probe of 0003:056A:0023.0015 failed with error -22 [ 275.513401][ T115] usb 2-1: USB disconnect, device number 52 22:44:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_vs_stats\x00') r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)={0x4, 0x2, 0x0, 0x1fe7a10c, 0x1, [{0x2, 0x3, 0xcd0d, [], 0x4b00}]}) getdents(r0, &(0x7f0000000100)=""/164, 0x20000118) symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000300)=0xc) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000340)={&(0x7f0000000400)=""/216, 0xd8}) mkdirat(r3, &(0x7f00000003c0)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r6, &(0x7f0000000100)=""/164, 0xa4) 22:44:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x500000000000000, 0x0) 22:44:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000506030000000000000000000300000a05000100070000000900020073797a30000000000900030073797a30090000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, @perf_config_ext={0x1, 0x1}, 0x0, 0xfffffffffffffffd, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x22) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r4, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) 22:44:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 275.675141][T12646] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 275.688917][T12646] FAT-fs (loop5): Filesystem has been set read-only [ 275.697576][T12653] FAT-fs (loop4): bogus number of reserved sectors [ 275.705657][T12646] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 275.709829][T12653] FAT-fs (loop4): Can't find a valid FAT filesystem [ 275.724800][T12654] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 275.728144][T12662] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 275.733266][T12656] FAT-fs (loop2): bogus number of reserved sectors [ 275.748809][T12654] FAT-fs (loop0): Filesystem has been set read-only [ 275.754604][T12656] FAT-fs (loop2): Can't find a valid FAT filesystem [ 275.756424][T12654] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffff57a, 0x3, &(0x7f0000000340)=[{&(0x7f0000000200)="a171de38f8fcf9499e413e5a0ffb1544acf87b28b740eda76ea97215999de794c2d6fb26ca5068a02c11277288c515b9cfae34e2898866a2b091b0aac0751e2dbb99f69c4dcb10b711d1ef8b572d0791b01cc53415dc922f1437bdc53270445cca811eabe15aa3516163c0ad4cb61067852d978a5ca7ecb8f08eb8ad8ebba6a8fac19ade07", 0x85}, {&(0x7f0000000500)="e48e3cccd6930bca7fe20a7d0c91579d946c5844eb1a7cb0fdc5d26ee12c5c4f2ddda6a9fae225ac606bebbe82c194f7cbd936e9ffffffff2c9165aa5ed1ac940a679af4641add1f880b2b08cf6d5c6a256f9c74e77257d09c8c3e433ab3fc9e7336ea811cb3", 0x66, 0x40000001}, {&(0x7f0000000400)="8c97c96ce3b9d60a5d1451f6f21e4d16cd8b9d10c88984328ee1c27bd4aa664607dec38cf80d16c5e2de4239046f34aca87f08d7e8d0f29fd460f9d4654b72c6dca9bfd582915cc627fc28e3a7fd6013ec0443c475f75f4675f647e6437e96194ba17f3c73ada7db84843e600759ed0dcc60a4fb3d297df6920fb05ee1be77a1cdeda16dd742a98e1cfcfd87da79eed36ce953592951a162e2418072d80ee5e6ef09a70d8922fc08360a02df61a3c8c871683b7c90e8f3adfa41f648cf0d70f156dcfb3e53f05fbf000f54d209d46cbd5fb46dc71151bb154fbb4051d960946f407e2daf134a2951720addab0e44fb280652", 0xf2, 0x3}], 0x2000, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x28000044}, 0x4000040) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r2 = gettid() ptrace$setopts(0x4200, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) 22:44:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x600000000000000, 0x0) [ 275.775706][T12654] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000506030000000000000000000300000a05000100070000000900020073797a30000000000900030073797a30090000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, @perf_config_ext={0x1, 0x1}, 0x0, 0xfffffffffffffffd, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x22) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r4, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) 22:44:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 275.949628][T12678] FAT-fs (loop4): bogus number of reserved sectors [ 275.956600][T12678] FAT-fs (loop4): Can't find a valid FAT filesystem 22:44:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x700000000000000, 0x0) 22:44:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x4, &(0x7f0000000240)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}, {&(0x7f0000000400)="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", 0x1000, 0x186}, {&(0x7f00000001c0)="9c753416e94aa609f15b9f7b3d58ab1633a08e749f32e5ce4313458f5dee859e9fe9d1ffc85b0ef8420e0c692c7ac1c8e72c7a42fc1875ffdbd4ddee3e61ae55d7ad50c245f97ae27715d559bd286bb553f392a5832f559c69e4150e2f35dee0a1bc4773a25a2123257c37d4f1c4", 0x6e, 0x3}, {&(0x7f0000001400)="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", 0x1000, 0x40}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x24a083, 0x182) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300)='wireguard\x00') lseek(r0, 0x5, 0x3) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) creat(&(0x7f0000000340)='./file0\x00', 0x4) [ 276.034951][T12685] FAT-fs (loop2): bogus number of reserved sectors [ 276.042320][T12685] FAT-fs (loop2): Can't find a valid FAT filesystem [ 276.071940][ T115] usb 2-1: new high-speed USB device number 53 using dummy_hcd 22:44:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 276.197213][T12699] FAT-fs (loop5): invalid media value (0x8e) [ 276.203476][T12699] FAT-fs (loop5): Can't find a valid FAT filesystem [ 276.214061][T12697] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 276.230553][T12702] FAT-fs (loop4): bogus number of reserved sectors [ 276.237275][T12702] FAT-fs (loop4): Can't find a valid FAT filesystem [ 276.257460][T12697] FAT-fs (loop0): Filesystem has been set read-only [ 276.278255][T12707] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 276.321953][ T115] usb 2-1: Using ep0 maxpacket: 16 [ 276.332668][T12697] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 276.353356][T12699] FAT-fs (loop5): invalid media value (0x8e) [ 276.359497][T12699] FAT-fs (loop5): Can't find a valid FAT filesystem [ 276.442463][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.453667][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.472280][ T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 276.481312][ T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.491067][ T115] usb 2-1: config 0 descriptor?? [ 276.732375][T12650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 277.031914][ T115] usbhid 2-1:0.0: can't add hid device: -71 [ 277.037982][ T115] usbhid: probe of 2-1:0.0 failed with error -71 [ 277.046356][ T115] usb 2-1: USB disconnect, device number 53 22:44:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:36 executing program 3: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8a}]}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c2634927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) truncate(&(0x7f00000002c0)='./file0\x00', 0xc9) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101c83, 0x0) 22:44:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x800000000000000, 0x0) 22:44:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rt_sigsuspend(&(0x7f00000001c0)={[0x3]}, 0x8) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) [ 277.481887][T12724] FAT-fs (loop2): bogus number of reserved sectors [ 277.489055][T12724] FAT-fs (loop2): Can't find a valid FAT filesystem [ 277.505537][T12731] FAT-fs (loop4): bogus number of reserved sectors [ 277.519214][T12731] FAT-fs (loop4): Can't find a valid FAT filesystem 22:44:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 277.582970][T12726] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 277.604423][T12739] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 277.608097][T12726] FAT-fs (loop0): Filesystem has been set read-only [ 277.619389][T12739] FAT-fs (loop5): Filesystem has been set read-only [ 277.622735][T12744] FAT-fs (loop4): bogus number of reserved sectors 22:44:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 277.633223][T12744] FAT-fs (loop4): Can't find a valid FAT filesystem [ 277.652778][T12738] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 277.664060][T12726] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x900000000000000, 0x0) [ 277.678739][T12748] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 277.712078][T12749] FAT-fs (loop4): bogus number of reserved sectors [ 277.720048][T12749] FAT-fs (loop4): Can't find a valid FAT filesystem 22:44:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 277.755137][ T5] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 277.807292][T12754] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 277.833602][T12754] FAT-fs (loop0): Filesystem has been set read-only [ 277.846033][T12754] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 277.876562][T12754] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 277.887166][T12760] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 278.011749][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 278.131797][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.143083][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.153047][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 278.163907][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.172972][ T5] usb 2-1: config 0 descriptor?? [ 278.288541][T12739] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 278.334402][T12739] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 278.412089][T12729] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 278.721726][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 278.727899][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 278.735911][ T5] usb 2-1: USB disconnect, device number 54 22:44:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:37 executing program 3: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8a}]}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f00000012c0)="0c2634927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) truncate(&(0x7f00000002c0)='./file0\x00', 0xc9) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101c83, 0x0) 22:44:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xa00000000000000, 0x0) 22:44:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x674}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4) bind$xdp(r4, &(0x7f0000000900)={0x2c, 0xa, r6}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x82400250}, 0xc, &(0x7f0000000340)={&(0x7f0000000a80)={0xfc, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x0) getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) [ 279.189058][T12778] FAT-fs (loop4): bogus number of reserved sectors [ 279.189394][T12776] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 279.195741][T12781] FAT-fs (loop2): bogus number of reserved sectors [ 279.222966][T12778] FAT-fs (loop4): Can't find a valid FAT filesystem [ 279.228403][T12776] FAT-fs (loop0): Filesystem has been set read-only [ 279.232610][T12781] FAT-fs (loop2): Can't find a valid FAT filesystem [ 279.253174][T12780] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 279.261363][T12780] FAT-fs (loop5): Filesystem has been set read-only [ 279.263750][T12792] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 279.323339][T12776] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 279.351385][T12800] FAT-fs (loop4): bogus number of reserved sectors [ 279.358749][T12800] FAT-fs (loop4): Can't find a valid FAT filesystem 22:44:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xb00000000000000, 0x0) 22:44:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 279.366141][T12780] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 279.379245][T12796] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x410002, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000200)={0x68, 0x0, 0x4, [{0x5, 0x1, 0x1, 0x9, '{'}, {0x2, 0x2, 0x5, 0x626, 'fd/3\x00'}, {0x6, 0x9, 0x0, 0x101}]}, 0x68) [ 279.441663][ T5] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 279.572888][T12806] FAT-fs (loop4): bogus number of reserved sectors [ 279.579459][T12806] FAT-fs (loop4): Can't find a valid FAT filesystem [ 279.618747][T12817] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 279.626851][T12817] FAT-fs (loop0): Filesystem has been set read-only [ 279.636964][T12817] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 279.681581][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 279.701984][T12810] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 279.707518][T12816] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 279.717832][T12816] FAT-fs (loop5): Filesystem has been set read-only [ 279.729821][T12816] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 279.821693][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.832624][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.842517][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 279.851581][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.860156][ T5] usb 2-1: config 0 descriptor?? [ 280.112077][T12785] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 280.391590][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 280.397687][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 280.405258][ T5] usb 2-1: USB disconnect, device number 55 22:44:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6a7bedcdd0e8f042, 0x0, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xb3, &(0x7f0000000180)=""/181, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x78) 22:44:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xc00000000000000, 0x0) 22:44:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setuid(r1) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_getevents(0x0, 0x0, 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000300)={r4, r5+10000000}) mkdirat(r3, &(0x7f00000003c0)='./file0\x00', 0x0) syz_open_pts(r2, 0x181200) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) 22:44:39 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) [ 280.852000][T12833] FAT-fs (loop2): bogus number of reserved sectors [ 280.856460][T12832] FAT-fs (loop4): bogus number of reserved sectors [ 280.869828][T12833] FAT-fs (loop2): Can't find a valid FAT filesystem [ 280.881282][T12841] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:39 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000002400070500"/19, @ANYRES32, @ANYBLOB="00000000ffffffff", @ANYRESHEX=r0], 0x3}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd6e2bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000dc0)=0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ff4d09ff0f000000000000fffff7", @ANYRES32=r7], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) r8 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r8, 0x0, 0x84ffde, 0x0) 22:44:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 280.904250][T12832] FAT-fs (loop4): Can't find a valid FAT filesystem [ 280.912372][T12841] FAT-fs (loop0): Filesystem has been set read-only [ 280.934017][T12850] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x7}, 0x8) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsync(r1) mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) [ 280.972806][T12841] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 280.995978][T12858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12858 comm=syz-executor.3 22:44:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xd00000000000000, 0x0) [ 281.016831][T12856] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 281.057211][T12860] FAT-fs (loop4): bogus number of reserved sectors [ 281.060284][T12858] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.070360][T12860] FAT-fs (loop4): Can't find a valid FAT filesystem [ 281.141485][ T115] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 281.151025][T12868] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 281.165659][T12868] FAT-fs (loop5): Filesystem has been set read-only [ 281.201698][T12870] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 281.210556][T12870] FAT-fs (loop0): Filesystem has been set read-only [ 281.219491][T12870] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 281.231509][T12871] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 281.239637][T12866] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 281.248608][T12868] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 281.257137][T12866] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 281.381441][ T115] usb 2-1: Using ep0 maxpacket: 16 [ 281.521505][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.532406][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.542239][ T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 281.551254][ T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.560012][ T115] usb 2-1: config 0 descriptor?? [ 281.801944][T12846] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 282.101456][ T115] usbhid 2-1:0.0: can't add hid device: -71 [ 282.107442][ T115] usbhid: probe of 2-1:0.0 failed with error -71 [ 282.115471][ T115] usb 2-1: USB disconnect, device number 56 22:44:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16, 0x6}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) 22:44:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xe00000000000000, 0x0) 22:44:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xd00000000000000, 0x0) [ 282.551827][T12891] FAT-fs (loop5): invalid media value (0xed) [ 282.557895][T12891] FAT-fs (loop5): Can't find a valid FAT filesystem [ 282.581944][T12888] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 282.592459][T12888] FAT-fs (loop0): Filesystem has been set read-only 22:44:41 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000202505a8a440000102030109020b000101000000090400000007010009090501020000000000"], &(0x7f0000000340)={0x0, 0x0, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xea, &(0x7f00000001c0)=@string={0xea, 0x3, "483b50276a5036ebbb7834a898319b8613bd6e2f980565cee3e5e0684c25ca665011ef3b474af714dd797fed5cc1dabd5e547245bef55bcbc14d8ddf5d07302a3b06ce2cbb825c759c21ab4469c72797d707a2569376c70955fad1c87a29e507a3d2814077d0d1ccb1d7c26c56f24fd8459eb7cffd7b75eb9f7fd769aab5cd882c22f40a410c7f06159446baa36f0d7f6b22b4b805fa63315f393837925cf889ce2976fec6f9fa3dd9cfc3a8561b9ff4458323c5cbf60eeb57d559cf3b4dd3b7320529f0b248a7bc7b41d172688a30958e34a986f6b1817c0c560dcd3695fcbd385a191aecedf6dd"}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x7, &(0x7f00000000c0)={r3, r4+10000000}) 22:44:41 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000700)={0xcc, 0x0, &(0x7f0000000540)=[@exit_looper, @register_looper, @request_death={0x400c630e, 0x1}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x3d}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/219, 0xdb, 0x2, 0x20}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @exit_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x742cb9d02d060a52}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}], 0xa4, 0x0, &(0x7f0000000640)="fa7c9bb145470532235c6597e6f6570a03ec528a519809cd86b9a20891bce81eb29c1c2e360bfb7d9fae7a0cb921cf8f29bee438f1f64ab213fd52a7490e5e99423afdf1174da345585e8d53f7686c5718af72fbd5321a5b2bb1796d0534fc8cdefa1bb6a0a85512ed1c97281ee6f62de6d5bfa6e660b436e33ec70d148d4612f6f4681c5d5d40bd35b79f888309ec63414a5bd530accbdc74b3cc145e5b0763fcaa30ef"}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) fallocate(r4, 0x78, 0x1f, 0x200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x10000, 0x531}, {0x10c, 0x8001}], r6}, 0x18, 0x3) [ 282.599368][T12888] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 282.614060][T12895] FAT-fs (loop2): bogus number of reserved sectors [ 282.620739][T12890] FAT-fs (loop4): bogus number of reserved sectors [ 282.627386][T12890] FAT-fs (loop4): Can't find a valid FAT filesystem [ 282.631025][T12895] FAT-fs (loop2): Can't find a valid FAT filesystem 22:44:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xf00000000000000, 0x0) 22:44:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 282.657805][T12888] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) 22:44:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 282.772948][T12913] FAT-fs (loop4): bogus number of reserved sectors [ 282.787096][T12913] FAT-fs (loop4): Can't find a valid FAT filesystem [ 282.804229][T12918] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 282.812263][ T115] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 282.820515][T12918] FAT-fs (loop0): Filesystem has been set read-only [ 282.827498][T12918] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 282.892377][T12923] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 282.900390][T12923] FAT-fs (loop5): Filesystem has been set read-only [ 282.901354][ T140] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 282.918122][T12918] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 282.930161][T12919] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 283.051265][ T115] usb 2-1: Using ep0 maxpacket: 16 [ 283.151349][ T140] usb 4-1: Using ep0 maxpacket: 32 [ 283.171420][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.182540][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.192419][ T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 283.201498][ T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.209983][ T115] usb 2-1: config 0 descriptor?? [ 283.351299][ T140] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 283.361420][ T140] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 283.451868][T12887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 283.521281][ T140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 283.530344][ T140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.538354][ T140] usb 4-1: Product: syz [ 283.542581][ T140] usb 4-1: Manufacturer: 㭈❐偪碻꠴㆘蚛봓⽮֘칥棠╌曊ᅐ㯯䩇ᓷ秝셜뷚呞䕲쭛䷁ݝ⨰ػⳎ芻畜↜䒫읩霧ߗ嚢皓ে突죑⥺ߥ튣䂁큷쳑ힱ泂鹅쾷篽羟槗떪裍∬૴ుٿ鐕멆澣缍≫뢴洞ㅣ㥟㜸岒觸⧎ﹶ阮㷺쿙ꣃ᭖荅씣핗콙䴻럓Բ䢲벧䅻狑詨锰㒎蚩뇶粁嘌촍锶뷼娸ᨙ [ 283.575761][ T140] usb 4-1: SerialNumber: syz [ 283.751250][ T115] usbhid 2-1:0.0: can't add hid device: -71 [ 283.757394][ T115] usbhid: probe of 2-1:0.0 failed with error -71 [ 283.764887][ T115] usb 2-1: USB disconnect, device number 57 [ 283.813182][ T140] usb 4-1: USB disconnect, device number 25 22:44:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1000000000000000, 0x0) 22:44:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) fchdir(r0) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) [ 284.217391][T12939] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 284.225971][T12942] FAT-fs (loop2): bogus number of reserved sectors [ 284.232592][T12941] FAT-fs (loop4): bogus number of reserved sectors [ 284.239143][T12941] FAT-fs (loop4): Can't find a valid FAT filesystem [ 284.249020][T12942] FAT-fs (loop2): Can't find a valid FAT filesystem 22:44:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 284.261687][T12939] FAT-fs (loop0): Filesystem has been set read-only [ 284.296886][T12953] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 284.387177][T12939] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 284.406017][T12956] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 284.461138][ T140] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 284.485919][T12957] FAT-fs (loop2): bogus number of reserved sectors [ 284.497562][T12957] FAT-fs (loop2): Can't find a valid FAT filesystem [ 284.591124][ T115] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 284.711112][ T140] usb 2-1: Using ep0 maxpacket: 16 [ 284.831247][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.842238][ T115] usb 4-1: Using ep0 maxpacket: 32 [ 284.847385][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.857238][ T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 284.866365][ T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.875046][ T140] usb 2-1: config 0 descriptor?? [ 285.041151][ T115] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 285.051292][ T115] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 285.111476][T12944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 285.221410][ T115] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 285.230570][ T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.238591][ T115] usb 4-1: Product: syz [ 285.242797][ T115] usb 4-1: Manufacturer: 㭈❐偪碻꠴㆘蚛봓⽮֘칥棠╌曊ᅐ㯯䩇ᓷ秝셜뷚呞䕲쭛䷁ݝ⨰ػⳎ芻畜↜䒫읩霧ߗ嚢皓ে突죑⥺ߥ튣䂁큷쳑ힱ泂鹅쾷篽羟槗떪裍∬૴ుٿ鐕멆澣缍≫뢴洞ㅣ㥟㜸岒觸⧎ﹶ阮㷺쿙ꣃ᭖荅씣핗콙䴻럓Բ䢲벧䅻狑詨锰㒎蚩뇶粁嘌촍锶뷼娸ᨙ [ 285.276010][ T115] usb 4-1: SerialNumber: syz [ 285.411116][ T140] usbhid 2-1:0.0: can't add hid device: -71 [ 285.417100][ T140] usbhid: probe of 2-1:0.0 failed with error -71 [ 285.424602][ T140] usb 2-1: USB disconnect, device number 58 22:44:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1100000000000000, 0x0) 22:44:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201a960", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf2503000000050005000100000005000300800000002c0001801400020067656e6576653100000000000000000014000200726f736530000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0xa, r5}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES16, @ANYBLOB="ae2e13c26638d7ff77699bdc53e27483b9d9d172f5c5d25dc8a48d64203ae3c0e22558d294f726ab889f24726ec66e355e6ad869407acdd880be7dba097217983e4031"], 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x1400c010) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118) 22:44:44 executing program 3: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0xc0000, 0x0) ioctl$FIOCLEX(r3, 0x5451) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x95}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) rmdir(&(0x7f0000000000)='./bus\x00') 22:44:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 285.522249][ T115] usb 4-1: USB disconnect, device number 26 [ 285.561111][T12974] FAT-fs (loop2): invalid media value (0x00) [ 285.568692][T12974] FAT-fs (loop2): Can't find a valid FAT filesystem [ 285.590763][T12980] FAT-fs (loop4): bogus number of reserved sectors [ 285.604956][T12975] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 285.610505][T12980] FAT-fs (loop4): Can't find a valid FAT filesystem [ 285.624484][T12982] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 285.633136][T12975] FAT-fs (loop5): Filesystem has been set read-only [ 285.640706][T12982] FAT-fs (loop0): Filesystem has been set read-only [ 285.649637][T12982] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1200000000000000, 0x0) [ 285.674002][T12982] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 285.702976][T12975] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) 22:44:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 285.738356][T12996] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 285.759874][T12999] FAT-fs (loop4): bogus number of reserved sectors [ 285.776799][T12999] FAT-fs (loop4): Can't find a valid FAT filesystem 22:44:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) r2 = accept4$tipc(r1, 0x0, &(0x7f00000001c0), 0x0) getpeername$tipc(r2, &(0x7f0000000200)=@id, &(0x7f0000000240)=0x10) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f00000003c0)='./file0\x00', 0x8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) 22:44:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:44:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 285.918160][T13009] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 285.926242][T13009] FAT-fs (loop5): Filesystem has been set read-only 22:44:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1300000000000000, 0x0) 22:44:44 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setuid(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r9) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [{0x2, 0x4}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x1, r3}, {0x2, 0x6, r5}, {0x2, 0x5, r7}], {0x4, 0x1}, [{0x8, 0x1, r9}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="01fc8f9c3c4ed78a3fe4ed9a018d521ec3ec3ac86c4494f9df2969adc6938745ef07ca8352e8ddf51e47427b8d137a798b72859cd86d6d51679c87f466332e1209f26bb30c15bf4c48615b25a599072c4d5aa10912b7021e402ef6c58d2e863a55ebd3d7147a8d3a088eea6112b2bfc1c9", @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000001c0009800800010000000000080002a65f6d5f0008000100"], 0x3}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 285.964939][T13009] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0) [ 285.978222][T13015] FAT-fs (loop4): bogus number of reserved sectors [ 286.004134][T13015] FAT-fs (loop4): Can't find a valid FAT filesystem [ 286.142116][T13026] FAT-fs (loop2): invalid media value (0x00) [ 286.149528][T13026] FAT-fs (loop2): Can't find a valid FAT filesystem [ 286.186497][ T5] usb 2-1: new high-speed USB device number 59 using dummy_hcd 22:44:45 executing program 3: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0xc0000, 0x0) ioctl$FIOCLEX(r3, 0x5451) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x95}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) rmdir(&(0x7f0000000000)='./bus\x00') 22:44:45 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r1 = socket$inet(0x10, 0x800, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r2 = dup3(r0, r1, 0x80000) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="50336ee9ff46a638cae7684e7670512f6743ea322dc769e37900bc86a37389708db8") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071119f00000000008510000006000000850000000000000095000003000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:44:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000000000000000, 0x0) 22:44:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:45 executing program 3: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x78) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0xc0000, 0x0) ioctl$FIOCLEX(r3, 0x5451) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x95}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) rmdir(&(0x7f0000000000)='./bus\x00') [ 286.387727][T13046] FAT-fs (loop4): bogus number of reserved sectors [ 286.397372][T13044] FAT-fs (loop2): invalid media value (0x00) [ 286.408608][T13048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 286.417931][T13046] FAT-fs (loop4): Can't find a valid FAT filesystem [ 286.420722][T13044] FAT-fs (loop2): Can't find a valid FAT filesystem 22:44:45 executing program 5: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000140)=ANY=[@ANYBLOB="0200260009bf64f31864855d987f4e1c654c69299fabf54db67a40b37bf9bba43ad2802148acf64a229c49d2f2bfc9ecf604e4f2"]) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0xfffffff8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xb) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, &(0x7f0000000400)) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {0x0}, {&(0x7f0000003cc0)=""/66, 0x42}], 0x6, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}], 0x2, 0x120, 0x0) process_vm_readv(0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/23, 0x17}, {&(0x7f0000000340)=""/25, 0x19}], 0x2, &(0x7f0000000a00)=[{&(0x7f0000000480)=""/106, 0x6a}, {0x0}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/5, 0x5}, {&(0x7f00000006c0)=""/50, 0x32}, {&(0x7f0000000840)=""/109, 0x6d}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/89, 0x59}], 0x8, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x2000000, 0xa5cc, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x50) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280)='NLBL_CALIPSO\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x5000000, &(0x7f0000000a80)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 286.433455][T13048] FAT-fs (loop0): Filesystem has been set read-only [ 286.445324][T13048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 286.460964][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 286.493468][T13048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 286.530255][T13066] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 286.539620][T13048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 286.621053][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.633113][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.652517][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 286.664264][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.678231][ T5] usb 2-1: config 0 descriptor?? [ 286.941437][T13012] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 287.250983][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 287.257464][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 287.265158][ T5] usb 2-1: USB disconnect, device number 59 22:44:46 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:44:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x10) sendto$inet6(r0, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x67, 0x0, [], [@jumbo={0xc2, 0x4, 0x1f}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') modify_ldt$write2(0x11, &(0x7f0000000040)={0x1000, 0x1000, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) 22:44:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2500000000000000, 0x0) 22:44:46 executing program 5: mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x8001, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x2) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) [ 287.693139][T13085] FAT-fs (loop2): invalid media value (0x00) [ 287.710381][T13087] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 287.715876][T13085] FAT-fs (loop2): Can't find a valid FAT filesystem [ 287.731677][T13094] FAT-fs (loop4): invalid media value (0x00) 22:44:46 executing program 5: unshare(0x60040600) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/164, 0x20000118) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) 22:44:46 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xc00000000000000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 287.747058][T13087] FAT-fs (loop0): Filesystem has been set read-only [ 287.763204][T13094] FAT-fs (loop4): Can't find a valid FAT filesystem 22:44:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 287.800499][T13104] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0) 22:44:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 287.840977][T13087] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 287.946986][T13117] FAT-fs (loop4): invalid media value (0x00) [ 287.965702][T13117] FAT-fs (loop4): Can't find a valid FAT filesystem [ 288.010883][ T5] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 288.083454][T13123] FAT-fs (loop2): invalid media value (0x00) [ 288.089817][T13123] FAT-fs (loop2): Can't find a valid FAT filesystem [ 288.250823][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 288.380918][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.391919][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.401810][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 288.410982][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.419559][ T5] usb 2-1: config 0 descriptor?? [ 288.661202][T13099] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 288.950828][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 288.956791][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 288.964772][ T5] usb 2-1: USB disconnect, device number 60 22:44:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22:44:48 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340)) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 22:44:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x4000080000000000, 0x0) 22:44:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:48 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000320001000000001ef6000000f62b30344f6290085b6a5a008c0001000c000e000700012078740000105493adc5c5c9420080000000000000000000"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 289.400956][T13143] FAT-fs (loop4): invalid media value (0x00) [ 289.409331][T13143] FAT-fs (loop4): Can't find a valid FAT filesystem [ 289.431024][T13146] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 289.439562][T13148] FAT-fs (loop2): invalid media value (0x00) 22:44:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 289.445034][T13146] FAT-fs (loop0): Filesystem has been set read-only [ 289.454688][T13146] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 289.455335][T13148] FAT-fs (loop2): Can't find a valid FAT filesystem [ 289.463390][T13158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13158 comm=syz-executor.3 [ 289.486066][T13146] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 289.520320][T13146] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da072100000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B') 22:44:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x4800000000000000, 0x0) 22:44:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 289.678489][T13165] FAT-fs (loop4): invalid media value (0x00) [ 289.684561][ T115] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 289.697247][T13165] FAT-fs (loop4): Can't find a valid FAT filesystem 22:44:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 289.778122][T13175] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 289.796929][T13175] FAT-fs (loop0): Filesystem has been set read-only [ 289.803672][T13178] FAT-fs (loop4): invalid media value (0x00) [ 289.807159][T13175] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 289.809647][T13178] FAT-fs (loop4): Can't find a valid FAT filesystem [ 289.832651][T13175] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 289.847699][T13181] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 289.950694][ T115] usb 2-1: Using ep0 maxpacket: 16 [ 289.980695][ T5] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 290.100875][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.111908][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.121917][ T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 290.131162][ T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.139743][ T115] usb 2-1: config 0 descriptor?? [ 290.250640][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 290.370696][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.381045][T13154] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 290.381620][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.402110][ T5] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.21 [ 290.411155][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.419694][ T5] usb 6-1: config 0 descriptor?? [ 290.680658][ T115] usbhid 2-1:0.0: can't add hid device: -71 [ 290.686709][ T115] usbhid: probe of 2-1:0.0 failed with error -71 [ 290.694476][ T115] usb 2-1: USB disconnect, device number 61 22:44:49 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x4c00000000000000, 0x0) 22:44:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private=0xa010104}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {}, {0x200000000000000}}, {{@in=@private=0xa010101}, 0x0, @in=@private=0xa010101}}, 0xe8) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @remote}}]}, 0x110) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x94) [ 291.131267][T13201] FAT-fs (loop4): invalid media value (0x00) [ 291.147774][T13193] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 291.155828][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 291.156111][T13201] FAT-fs (loop4): Can't find a valid FAT filesystem [ 291.164590][ T5] usbhid: probe of 6-1:0.0 failed with error -71 22:44:49 executing program 3: r0 = socket$inet6(0xa, 0x4, 0x0) connect(r0, &(0x7f0000000280)=@ipx={0x4, 0x5, 0x1, "5b2640a2bdca", 0xff}, 0x80) syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 22:44:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 291.199371][T13193] FAT-fs (loop0): Filesystem has been set read-only [ 291.210970][T13208] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 291.212188][ T5] usb 6-1: USB disconnect, device number 16 22:44:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 291.242954][T13193] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 291.262997][T13212] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 291.308633][T13218] FAT-fs (loop4): invalid media value (0x00) [ 291.315349][T13218] FAT-fs (loop4): Can't find a valid FAT filesystem [ 291.410565][ T4996] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 291.650522][ T4996] usb 2-1: Using ep0 maxpacket: 16 [ 291.780590][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.791514][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.801568][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 291.810890][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.819579][ T4996] usb 2-1: config 0 descriptor?? [ 291.860549][ T115] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 292.060912][T13204] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 292.120500][ T115] usb 6-1: Using ep0 maxpacket: 16 [ 292.240543][ T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.251451][ T115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.264255][ T115] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.21 [ 292.273411][ T115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.282163][ T115] usb 6-1: config 0 descriptor?? [ 292.370533][ T4996] usbhid 2-1:0.0: can't add hid device: -71 [ 292.376550][ T4996] usbhid: probe of 2-1:0.0 failed with error -71 [ 292.384897][ T4996] usb 2-1: USB disconnect, device number 62 22:44:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x6000000000000000, 0x0) 22:44:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6, 0x0, 0x400000000}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001040)=[{{&(0x7f0000000a80)=@isdn, 0x80, 0x0}, 0x1a}, {{&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000004340)=""/4077, 0xfed}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000000b00)=""/216, 0xd8}, {0x0}], 0x4}, 0x9840}, {{0x0, 0x0, &(0x7f0000002c40)}}, {{&(0x7f0000002d40)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/151, 0x97}, {0x0}, {&(0x7f0000000900)=""/110, 0x6e}, {&(0x7f0000000dc0)=""/182, 0xb6}, {&(0x7f0000001400)=""/157, 0x9d}], 0x5, &(0x7f0000000d00)=""/141, 0x8d}}, {{&(0x7f0000000300)=@x25={0x9, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/24, 0x18}, {&(0x7f0000000640)=""/169, 0xa9}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/154, 0x9a}, {&(0x7f0000000440)=""/58, 0x3a}, {&(0x7f0000000f80)=""/140, 0x8c}], 0x7}, 0x6}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000740)=[{&(0x7f0000000500)}, {&(0x7f0000001180)="16479519b78ce359f09b78294a4d53dd9f6690e44d10cf3e9164253c062b042938c40c7925cc7b5098ec7c61616d89a53b7752c504f79962caa3728d9c35122e57a4fd692a837479d7483201ded621b0fbb7b411427501eef7ea03f9966ebb3f263137fe4bb978ff5debe8d1f5dd4e24c787947199384a060083c4f192690c64bf457954af49d356b97f0983018499a0ab2fefe8c113de116684c74f44a029e493ed0723faf449bd17fa9fa923a583dadeab61359e44756d57a51be080a0422cd3aa0d83b168202bd8d4ef264edc652f0112be99a98aa5", 0xd7}, {&(0x7f00000003c0)="27459e365fbdebd925bbf241cecbe37501258685d3d8b9", 0x17}, {&(0x7f0000000700)="364ec2dbce10b25a6337ca0a231e73f35efdda1f5500f5b141", 0x19}], 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2000, 0x0, 0x0, 0x4f}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ftruncate(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0xc438) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001940)="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"/441, 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x8085, 0x11, 0x0, 0xfffffef1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) [ 292.601582][T13239] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 292.614444][T13241] FAT-fs (loop4): invalid media value (0x00) [ 292.631215][T13241] FAT-fs (loop4): Can't find a valid FAT filesystem [ 292.633576][T13239] FAT-fs (loop0): Filesystem has been set read-only [ 292.644598][ T115] usbhid 6-1:0.0: can't add hid device: -71 [ 292.650892][ T115] usbhid: probe of 6-1:0.0 failed with error -71 [ 292.658364][ T115] usb 6-1: USB disconnect, device number 17 [ 292.664896][T13249] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 292.690786][T13239] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000280)={{0x2, 0x4e24, @multicast1}, {0x1, @broadcast}, 0x20, {0x2, 0x4e22, @rand_addr=0x64010101}, 'veth0\x00'}) getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xe1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006100100000000000e4ff000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:44:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x6800000000000000, 0x0) 22:44:51 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x27) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0xc) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x5, 0x0, 0xfffffffffffffff7}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x6, 0x4}, 0x0, 0x0, &(0x7f0000000180)={0x3, 0x5, 0x3, 0x3}, &(0x7f00000001c0)=0x3f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0xfff}}, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x4000, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x109240, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r0, r4, 0x4, r5}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x10000, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x6, 0x6, 0x201, 0x0, 0x0, {0xf, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000540)=':%\x00'}, 0x30) write$binfmt_elf32(r6, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x20, 0x9, 0xff, 0x2, 0x3e, 0x9, 0x1eb, 0x38, 0x360, 0x7f, 0x80, 0x20, 0x2, 0x4, 0x1ff}, [{0x60000000, 0x3, 0x9, 0x15d8, 0x7, 0x20, 0x10000, 0x1ff}], "4e2c0424b1a1ddeaa1486e14ace3e351e1b52e7bade8602aea03a30ca20546f661c12c5f1935003d9f591a1f2a7984c45e8dd077dfb79234d0a17e96380576dd5bd7b58e2282790362e7d13fc954b4ef93f09c9b0291d062690a3f1960e3ef76a3fe020adca79a0bc393afc9181339da0291b60dd0ac0047e7c44c8d9c425e647d7401a28434e8762128af81ccddb10595911966a56d6b08d4144f9518", [[], []]}, 0x2f5) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={r7, &(0x7f0000000940)="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", &(0x7f0000000a40)="e69c050fd5c1a636b030ba0f44aab379d328aaf08019829eb201ca3b835669289008d055476e5216691fff865086ef55fe3d7c5f66dbf9e86f314c86cad52ed0c9220856b7c1e1b359aa50461e52152f9b2899a60714f8574c27e3a9d1bdac894d53c514f3637d6960c6880302a60a5fa7b489914f0023ce7c4996ee8f0fb7668b8e6596d072f594e0beb9ceaeb97c7553947053", 0x2}, 0x20) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000cc0)=0xe8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000d00)={@loopback, @rand_addr=0x64010102, r8}, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000d80)='westwood\x00', 0x9) [ 292.822199][T13259] FAT-fs (loop4): invalid media value (0x00) [ 292.829606][T13256] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 292.848101][T13259] FAT-fs (loop4): Can't find a valid FAT filesystem 22:44:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/164, 0x20000118) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) fsmount(r0, 0x0, 0x73) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff80000000000, 0x7ffe}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x0, 0x0, 0x12, 0x0, "22375740b12b4a3d46843fcf50141e091a7f475f44f6ef2f79f30469412765ca2e838501525c1aa474fcd6b4c61b433fec74863216e426f3823b5b4ae180dfc1b1ca15a798381ba51f50b8bba4991adc"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00') syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac00000000006300e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7d29e) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={[], 0xffff, 0x1000, 0x81, 0x3, 0x7fff, r1}) [ 292.877927][T13256] FAT-fs (loop0): Filesystem has been set read-only [ 292.898312][T13267] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 292.914376][T13256] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x6c00000000000000, 0x0) [ 293.112818][T13285] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 293.123159][T13285] FAT-fs (loop0): Filesystem has been set read-only [ 293.134441][T13285] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 293.148750][T13285] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 293.150410][ T115] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 293.164582][T13290] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 293.173068][T13285] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 293.410359][ T115] usb 2-1: Using ep0 maxpacket: 16 [ 293.540481][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.551439][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.561326][ T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 293.570474][ T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.579020][ T115] usb 2-1: config 0 descriptor?? [ 293.830747][T13268] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 294.110381][ T115] usbhid 2-1:0.0: can't add hid device: -71 [ 294.116367][ T115] usbhid: probe of 2-1:0.0 failed with error -71 [ 294.126793][ T115] usb 2-1: USB disconnect, device number 63 22:44:53 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x7400000000000000, 0x0) 22:44:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(0x0, 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:53 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x8e, 0x5844, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x40) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0)="d2a49ef6146727498f99ec8434b99af785b0ecbd2180d2f2900072f6011e8442890b70d1fbdf2e8f96da279c75ca216ef6a9c4d9feea208999ad74d3d18b160ad0a060131fea1b3749044ea148fdbe83cf5d3d340f4a31dc8abceab8d0f4863339bc44d7e345b43e3876681002d466f0960144cad52ce3437b516d4c73a43ecdb9cc14f674213f68b8e0718ad97016c433197b4c0ca92e4dc83a502d455a64ce080130af871d187e95e9afc80b0f06c6e23e13b333d732da49174746a7e25989a38135e9", &(0x7f0000000080)}, 0x20) r1 = dup(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000180)}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast1, @in=@remote}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180)}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000240)={0xff, "f212037f917f103f7612b07f3b2db4b5f083175c45d855852b2cc9ab4408f706df0ec598129073c1fa0a35f80ba94a4603cb1ec012f154b2436563837d8b14c6"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r4, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x20) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:44:53 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109028d0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000042402011524120400a317a88b045e4f01a607c0ffcb7e392a0a24072003004d00090007240aff81017f0724140080ff01090581030000fc00000904010000020d0000090401fe", @ANYRES16], 0x0) 22:44:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(0x0, 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/164, 0x20000118) write$P9_RMKDIR(r0, &(0x7f00000001c0)={0x14, 0x49, 0x2, {0x20, 0x4, 0x1}}, 0x14) chdir(0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x121203, 0x0) getdents(r1, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000002c0)=""/212, 0xd4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) clock_getres(0x5, &(0x7f0000000280)) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0xa, r5}, 0x10) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x319, 0x7, 0x400, 0x11, 0x20000, r5}) [ 294.609424][T13311] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 294.627265][T13311] FAT-fs (loop0): Filesystem has been set read-only 22:44:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x7a00000000000000, 0x0) [ 294.659284][T13322] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 294.690416][T13311] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 294.700568][T13327] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(0x0, 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 294.840270][ T115] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 294.860346][ T4996] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 294.861837][T13334] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 294.882712][T13334] FAT-fs (loop0): Filesystem has been set read-only [ 294.891088][T13334] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 294.964709][T13334] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 294.986150][T13343] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 295.110283][ T115] usb 4-1: Using ep0 maxpacket: 32 [ 295.110430][ T4996] usb 2-1: Using ep0 maxpacket: 16 [ 295.240284][ T115] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.240306][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.250655][ T115] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 295.261418][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.272541][ T115] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.283987][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 295.292292][ T115] usb 4-1: too many endpoints for config 1 interface 1 altsetting 254: 255, using maximum allowed: 30 [ 295.301866][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.312254][ T115] usb 4-1: config 1 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 295.323554][ T4996] usb 2-1: config 0 descriptor?? [ 295.339550][ T115] usb 4-1: config 1 interface 1 has no altsetting 1 [ 295.500295][ T115] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.509357][ T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.517888][ T115] usb 4-1: Product: syz [ 295.522083][ T115] usb 4-1: Manufacturer: syz [ 295.526674][ T115] usb 4-1: SerialNumber: syz [ 295.570728][ T115] usb 4-1: selecting invalid altsetting 1 [ 295.580991][T13319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 295.790257][ T115] cdc_ncm 4-1:1.0: bind() failure [ 295.795990][ T115] cdc_ncm 4-1:1.1: bind() failure [ 295.804470][ T115] usb 4-1: USB disconnect, device number 27 [ 295.860335][ T4996] usbhid 2-1:0.0: can't add hid device: -71 [ 295.866327][ T4996] usbhid: probe of 2-1:0.0 failed with error -71 [ 295.874003][ T4996] usb 2-1: USB disconnect, device number 64 22:44:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xc006000000000000, 0x0) [ 296.352666][T13365] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 296.400146][T13365] FAT-fs (loop0): Filesystem has been set read-only [ 296.419020][T13376] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 296.464677][T13365] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 296.473322][T13377] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 296.540132][ T4996] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 296.600208][ T5] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 296.780105][ T4996] usb 4-1: Using ep0 maxpacket: 32 [ 296.840168][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 296.900219][ T4996] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.910499][ T4996] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 296.922294][ T4996] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.932516][ T4996] usb 4-1: too many endpoints for config 1 interface 1 altsetting 254: 255, using maximum allowed: 30 [ 296.943899][ T4996] usb 4-1: config 1 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 296.957533][ T4996] usb 4-1: config 1 interface 1 has no altsetting 1 [ 296.964742][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.975715][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.986055][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 296.995502][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.004439][ T5] usb 2-1: config 0 descriptor?? [ 297.130165][ T4996] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.139263][ T4996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.147768][ T4996] usb 4-1: Product: syz [ 297.152409][ T4996] usb 4-1: Manufacturer: syz [ 297.157007][ T4996] usb 4-1: SerialNumber: syz [ 297.200515][ T4996] usb 4-1: selecting invalid altsetting 1 [ 297.240758][T13370] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 22:44:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:56 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2e2fd78908006c6530"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/164, 0x20000118) faccessat(r0, &(0x7f0000000080)='./file1\x00', 0x25, 0x200) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0xffff}) 22:44:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000440)={@broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100}, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a0000000d0694d6b53995e13d67261a2190b5201ae780301e13e447979e182", @ANYRES16=r1, @ANYBLOB="000328830000000000000000000008000500ac141437050001000031bf476469d7166629e9efef4bf12a010000001400060076657468315f746f5f627269646765002b00070073797374656d6e753a6f626a6563745f723a7761746368646f675f6465766963655f743a7330000014000200ff02000000000000000000008000000114000200fc01000000000000000000000000000014000300"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x488) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a6800, 0x103}}], 0x1, 0x100, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0xb}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000000)=r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000180)=""/50, &(0x7f00000001c0)=0x32) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 22:44:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xf6ffffff00000000, 0x0) 22:44:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 297.420100][ T4996] cdc_ncm 4-1:1.0: bind() failure [ 297.428383][ T4996] cdc_ncm 4-1:1.1: bind() failure [ 297.445594][ T4996] usb 4-1: USB disconnect, device number 28 22:44:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 297.548591][T13393] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 297.582384][T13393] FAT-fs (loop0): Filesystem has been set read-only [ 297.632712][T13407] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 297.716245][T13393] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 297.730070][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 297.735745][T13414] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 297.746430][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 297.755962][ T5] usb 2-1: USB disconnect, device number 65 22:44:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x2, 0x1, 0x3, 0x1, 0x3, 0x6d}, &(0x7f0000000100)=0x20) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x78) 22:44:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xfeffffff00000000, 0x0) 22:44:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000440)={@broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100}, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a0000000d0694d6b53995e13d67261a2190b5201ae780301e13e447979e182", @ANYRES16=r1, @ANYBLOB="000328830000000000000000000008000500ac141437050001000031bf476469d7166629e9efef4bf12a010000001400060076657468315f746f5f627269646765002b00070073797374656d6e753a6f626a6563745f723a7761746368646f675f6465766963655f743a7330000014000200ff02000000000000000000008000000114000200fc01000000000000000000000000000014000300"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x488) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a6800, 0x103}}], 0x1, 0x100, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0xb}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000000)=r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000180)=""/50, &(0x7f00000001c0)=0x32) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 22:44:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba0000000000000001000000002a6a956b8537939980e348143eae51152e94d55eade2422312d668043445852128552d5a1293c191a70e4d4799020000000000000086b7504013e040276dd87a025cbb9c1b51745b114fd30d2fb81c79a1316c9d482a64e7a3b98eff3029e1d70566beed861d98261762022c181f2b87a1e3e167b4ec0f7e3b1fd6f995a65b0f6ebf3a09c3a2fe1de9ec813079", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000002000000000c001080200000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000004001b0002726f732530000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6fd85584f2e9f3e624e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003ed2ffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000457000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/908], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0xe5) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r4, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x10000, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x6, 0xfffffffc}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) [ 298.232090][T13427] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 298.288530][T13427] FAT-fs (loop0): Filesystem has been set read-only [ 298.298810][T13442] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 298.326112][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 22:44:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 298.354369][T13427] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xffff1f0000000000, 0x0) 22:44:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 298.395386][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 22:44:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 298.471015][ T115] usb 2-1: new high-speed USB device number 66 using dummy_hcd 22:44:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 298.560655][T13459] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 298.580024][T13459] FAT-fs (loop0): Filesystem has been set read-only [ 298.605154][T13459] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 298.686752][T13459] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 298.698021][T13470] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 298.739938][ T115] usb 2-1: Using ep0 maxpacket: 16 [ 298.860146][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.878078][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.901089][ T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 22:44:57 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xbb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}}}]}}]}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x40, 0x2, 0x1}}, 0x14) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "aa7a032b"}, @global=@item_4={0x3, 0x1, 0x4, "9b72eee9"}]}}, 0x0}, 0x0) [ 298.929929][ T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.940173][ T115] usb 2-1: config 0 descriptor?? [ 299.180848][T13429] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 299.269906][ T140] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 299.640035][ T140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.651169][ T140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.661082][ T140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 299.673907][ T140] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.40 [ 299.683018][ T115] usbhid 2-1:0.0: can't add hid device: -71 [ 299.689537][ T115] usbhid: probe of 2-1:0.0 failed with error -71 [ 299.695968][ T140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.704833][ T115] usb 2-1: USB disconnect, device number 66 [ 299.711858][ T140] usb 4-1: config 0 descriptor?? 22:44:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xffffff0f00000000, 0x0) 22:44:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:44:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_DUMPABLE(0x4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r3 = accept4(r2, 0x0, &(0x7f0000000080), 0x80800) r4 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f00000028c0), 0xc, &(0x7f0000002b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0400135d2f88000300000000000000000000000000000000000097742af5543af6d338cb7c9ee0a0c9b893764e21b5d50e4fe34dc09c769f72840363d21c73fef4f210cb6327c1c232e47b6fb93e11f7e6e7665a37af3e617b2a022afd316a70caf7c275930f584d708ed1c456171b1bdf7b8aed914c"], 0x20}}, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x20a042, 0x43) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r1}, {0x8, 0x1, r6}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa7b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24020000) rt_sigtimedwait(&(0x7f0000000200)={[0x7]}, &(0x7f0000000380), 0x0, 0x8) r7 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r7, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000240)='sched\x00') [ 300.170808][T13488] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 300.184848][T13488] FAT-fs (loop0): Filesystem has been set read-only [ 300.193600][ T140] wacom 0003:056A:00BB.0016: unknown main item tag 0x0 22:44:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:44:59 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd5', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r0]) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd, 0x0, 0x948200}}, 0x50) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r2) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x7}, [], {}, [{0x8, 0x2, r2}]}, 0x2c, 0x0) [ 300.220156][ T140] wacom 0003:056A:00BB.0016: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 300.258603][T13502] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 300.275063][ T140] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BB.0016/input/input21 [ 300.292809][T13488] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:44:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 300.327580][T13508] fuse: Unknown parameter 'fd50x0000000000000003' [ 300.345047][T13510] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 300.363659][ T140] wacom 0003:056A:00BB.0016: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.3-1/input0 22:44:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xffffffff00000000, 0x0) [ 300.409679][T13513] fuse: Unknown parameter 'fd50x0000000000000003' [ 300.416847][ T140] usb 4-1: USB disconnect, device number 29 [ 300.523879][T13518] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 300.544597][T13518] FAT-fs (loop0): Filesystem has been set read-only [ 300.559304][T13518] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 300.579801][ T115] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 300.590154][T13518] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 300.605215][T13522] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 300.849788][ T115] usb 2-1: Using ep0 maxpacket: 16 [ 300.969844][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.980908][ T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.990696][ T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 300.999771][ T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.008467][ T115] usb 2-1: config 0 descriptor?? [ 301.159809][ T5] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 301.260399][T13492] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 301.519804][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.530845][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.540686][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 301.553501][ T5] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.40 [ 301.562548][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.571244][ T5] usb 4-1: config 0 descriptor?? [ 301.759867][ T115] usbhid 2-1:0.0: can't add hid device: -71 [ 301.765852][ T115] usbhid: probe of 2-1:0.0 failed with error -71 [ 301.773250][ T115] usb 2-1: USB disconnect, device number 67 22:45:00 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) syz_read_part_table(0x156be, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005020314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}]) 22:45:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "98cc8ffac2d9798000"}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') fsetxattr$security_ima(r0, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "66f063f08b7333df2b9047dfcbac3af8368a5aff"}, 0x15, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000200)={{0x3, 0x0, @identifier="bdf61479bf48c0d874524a04029f9d5f"}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2802000000002202, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000002000000020000000d4000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4810, 0x0) [ 302.039747][ T5] usbhid 4-1:0.0: can't add hid device: -71 [ 302.049514][ T5] usbhid: probe of 4-1:0.0 failed with error -71 [ 302.073963][ T5] usb 4-1: USB disconnect, device number 30 [ 302.075500][T13541] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 302.089617][T13541] EXT4-fs (loop5): filesystem is read-only [ 302.100681][T13541] EXT4-fs (loop5): bad geometry: block count 309150182597985336 exceeds size of device (33024 blocks) 22:45:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 22:45:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{0x0, 0xffffffffffffffe2, 0x0}}, {{&(0x7f0000002dc0)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}}], 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x44004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/hci\x00') fchdir(r4) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x1f, 0x5, 0x8, 0xcd, 0x0, 0x800, 0x14, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x80, 0x1, 0x1, 0x7, 0x4, 0x1ff, 0x40}, r4, 0xf, r0, 0x2) fchdir(0xffffffffffffffff) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000400)={0x52, "348654b63058485a0a6d17b6ff3a8ff9e3e4f6775a5d3014725ad67f9c28e900019b689b1d7b6167631111351b99ed8fbe153ad58803449deb90bd7b4a23f4f9"}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc02c8d1}, 0x880) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="db80833c000000002000128008000100767469001400028008000400ac1e000108000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="6e5ae6e2735c9ad6644e8c49d88781cece1c1f5221804f48552596d068d551d5adb0e9af1f00fd668232eb534caedd1ae405410a3e65438478fa9200000000db68a1437d693fe76a06b7dd61c7fd7c7b57f7e74f71d23bcc555b4ddb02655270e72420df097a8f289a711882125b9d29f8710965bca79129ac6be7e7b9fb469cc0e07d2f614e0ffe1ef80000000000000000"], 0x48}}, 0x40) 22:45:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) ioctl$KDDISABIO(r5, 0x4b37) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x121000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x74, 0x2, 0x9, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 22:45:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2) 22:45:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 302.499764][ T4996] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 302.585968][T13580] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 302.593912][T13580] FAT-fs (loop0): Filesystem has been set read-only [ 302.601711][T13580] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 302.638177][T13580] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 302.647611][T13593] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 302.656470][T13580] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 302.759719][ T4996] usb 2-1: Using ep0 maxpacket: 16 [ 302.919738][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.930791][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.940552][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 302.949645][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.958204][ T4996] usb 2-1: config 0 descriptor?? [ 303.200295][T13560] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 303.699652][ T4996] usbhid 2-1:0.0: can't add hid device: -71 [ 303.705636][ T4996] usbhid: probe of 2-1:0.0 failed with error -71 [ 303.713649][ T4996] usb 2-1: USB disconnect, device number 68 22:45:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:02 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0x8, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_tid_address(&(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000100)=0x80000003) io_pgetevents(r1, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) unshare(0x40000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000001780)=ANY=[@ANYBLOB="fef931da", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf2513000000d800be005ae8dc242acfcead2497c0c3096be4dcadeabf3b5281471524e435639438d77057d86392ac5c2cb092513687f8ebff9b5b5605f3b6892d7339bb820cd4df4ec3f49ffc3948f32d37a2cb0da6ebed5294a6a1a3b5025c67886ffea691a3146d46eb2bcac4bfe3554b5c57e7ea9eb4f46d20cf79fd465e8b5241f9bf946b3b08202989e6dda8038e4cda37c8f74db9e290fcc30a3b91bbd3813d38aaf3b8a5eeaa3ac1fca7f6e85e56489da6594329ad6fba462072b0d1682c711314a22ea47577153b35574b9996fef06ff7f6750fa5ceb0e23e150500"], 0x3}, 0x1, 0x0, 0x0, 0x20000880}, 0x8010) 22:45:02 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000000000000c924800700000005810319020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) fsync(r1) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x80, 0x1c, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={r3, 0x5, 0x10000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000040)={r3, 0x0, 0x7}) 22:45:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x3) 22:45:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 304.205750][T13612] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 304.229231][T13612] FAT-fs (loop0): Filesystem has been set read-only [ 304.244137][T13612] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4) [ 304.264237][T13612] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 304.390423][T13628] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 304.400040][T13628] FAT-fs (loop0): Filesystem has been set read-only [ 304.407862][T13628] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 304.429509][ T115] usb 4-1: new high-speed USB device number 31 using dummy_hcd 22:45:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x5) [ 304.431386][T13628] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 304.437166][ T140] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 304.445379][T13634] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 304.583543][T13638] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 304.591607][T13638] FAT-fs (loop0): Filesystem has been set read-only [ 304.598688][T13638] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 304.614361][T13638] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 304.709581][ T140] usb 2-1: Using ep0 maxpacket: 16 [ 304.819577][ T115] usb 4-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 304.829878][ T115] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 304.838732][ T115] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.851744][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.862822][ T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.872600][ T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 304.881688][ T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.890388][ T140] usb 2-1: config 0 descriptor?? [ 305.019566][ T115] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.028747][ T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.036773][ T115] usb 4-1: Product: syz [ 305.040958][ T115] usb 4-1: Manufacturer: syz [ 305.045530][ T115] usb 4-1: SerialNumber: syz [ 305.091931][ T115] cdc_ncm 4-1:1.0: bind() failure [ 305.130007][T13604] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 305.639514][ T140] usbhid 2-1:0.0: can't add hid device: -71 [ 305.645876][ T140] usbhid: probe of 2-1:0.0 failed with error -71 [ 305.653606][ T140] usb 2-1: USB disconnect, device number 69 22:45:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:04 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)) unshare(0x20000400) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0x8, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_tid_address(&(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000100)=0x80000003) io_pgetevents(r1, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) unshare(0x40000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000001780)=ANY=[@ANYBLOB="fef931da", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf2513000000d800be005ae8dc242acfcead2497c0c3096be4dcadeabf3b5281471524e435639438d77057d86392ac5c2cb092513687f8ebff9b5b5605f3b6892d7339bb820cd4df4ec3f49ffc3948f32d37a2cb0da6ebed5294a6a1a3b5025c67886ffea691a3146d46eb2bcac4bfe3554b5c57e7ea9eb4f46d20cf79fd465e8b5241f9bf946b3b08202989e6dda8038e4cda37c8f74db9e290fcc30a3b91bbd3813d38aaf3b8a5eeaa3ac1fca7f6e85e56489da6594329ad6fba462072b0d1682c711314a22ea47577153b35574b9996fef06ff7f6750fa5ceb0e23e150500"], 0x3}, 0x1, 0x0, 0x0, 0x20000880}, 0x8010) 22:45:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2) 22:45:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:06 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6) 22:45:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 307.719687][ T140] usb 4-1: USB disconnect, device number 31 22:45:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)) 22:45:06 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x9, 0x2880000000000000, 0x0, 0x2, 0x10, 0x0, "8198f217501feb368961457b9c53a9eb13b5b7b422f7c4b8c2285ed6ef938f1742177f3e1d32006e47c196e2b372a765c985436c7a83b615b9d1b8295d9b972f", "386051ae0e1b83c10d86ef4ce29d81902474551715764f2b40d58eaef6eb9ba0bf6f8a5bb660b3442295dca5bf9328f05656619e5f3d31dc0a3649142d30c3ea", "97cc12a20ac94c38a703372c58d6f6582203d05c1e7462a3c5d260bd548f638e", [0x1, 0x8]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000010301010009210000000122050009058103"], 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, &(0x7f0000000280)={0x40, 0x8, 0x2, {0x2, 0xe}}, 0x0, 0x0, 0x0}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x4, "eda89a62"}, 0x0, 0x0, 0x0, 0x0}) [ 307.770384][T13674] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 307.778232][T13674] FAT-fs (loop0): Filesystem has been set read-only [ 307.826230][T13682] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x7) [ 307.900775][T13674] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 308.019250][ T4996] usb 2-1: new high-speed USB device number 70 using dummy_hcd 22:45:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 308.169671][T13707] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 308.186952][T13707] FAT-fs (loop0): Filesystem has been set read-only [ 308.195036][T13707] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 308.219294][ T115] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 308.230228][T13707] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 308.238164][T13711] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 308.246422][T13707] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 308.289262][ T4996] usb 2-1: Using ep0 maxpacket: 16 [ 308.419281][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.430187][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.440557][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 308.449988][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.458643][ T4996] usb 2-1: config 0 descriptor?? [ 308.469324][ T115] usb 6-1: Using ep0 maxpacket: 32 [ 308.609307][ T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.620688][ T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.630456][ T115] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 308.639505][ T115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.648037][ T115] usb 6-1: config 0 descriptor?? [ 308.689549][ T115] hub 6-1:0.0: USB hub found [ 308.699818][T13677] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 308.909280][ T115] hub 6-1:0.0: 7 ports detected [ 308.929271][ T115] hub 6-1:0.0: insufficient power available to use all downstream ports [ 309.179239][ T4996] usbhid 2-1:0.0: can't add hid device: -71 [ 309.185255][ T4996] usbhid: probe of 2-1:0.0 failed with error -71 [ 309.195503][ T4996] usb 2-1: USB disconnect, device number 70 22:45:08 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x8) 22:45:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8000}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001b40)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010100}, 0x3, 0x4, 0x1, 0x4}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="abeb1c46fe4b5ada7ec0b998992c9c476ab0213b02985819b80809621f764bcc9488067d7ccefd3657287a3fbc50e3eccb057adb0a36f5af02ca0ae026e35e1a6026ee4689b2438a886525307689df1b9fb69eb44e73eb81cfab12bb5c0e55c85f2796aed81394acd096cf30dcffb5fcaa90b792f5d960334efd89b53c8044bb56cbefb64b133ac6156660ea41a159badb6f854358f2f0fb16bb83189117b20c5fe37de0c1a48d03c843ff80c62556e23e8803452d5a9c3e0b1f1baecfc66b9ada9d1e74b102abc4d8c57049a947f0e21da949610e216381ceec", 0xda}], 0x1, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xa92}}, @timestamping={{0x14, 0x1, 0x25, 0xee70}}, @mark={{0x14, 0x1, 0x24, 0x75}}], 0x78}}, {{&(0x7f0000000640)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="853ba6921547d6912dd8136740525e08e062ab0b0a9e32de6cfa309de4669bf513bf48f370d2530d6244c7e147b84de7e4c78df0342af72ea20f554bb06be5ef39a61040266267041b073e930e3ec4d3e4fc8673f1d19d747bd27cacda243c7ef22cea", 0x63}, {&(0x7f0000000740)="82c9b6f393147538606cd6f04bcce0d8d7977b65fcf91d738874d3b0bdf89c89986ba4bbb1ea0c537e593081b3b59ce2937cca96248762b4e8d60ba3a54f0ba43d9d479c5feba12b8d9925de60898d8988aaa25108d66e84933ba30fe976b1a243b88ac87e04775952a0c043bf8eef418eadba8642cf54df35bee3ae387cb97bdeeb01d7316403dada5c8b26bfc5a0b9b0d435a632791eec3b38ee037080dc2842c46c1596a569d50d0d31dc5eca1e57cb5817e6edc25de8f079b783d69f8ff136d12513e88d71e1093af63c5d4bf3", 0xcf}, {&(0x7f0000000840)="8be5f8905e82d8ef07a5a69aee711310c0dc2ef9ca393f6123ac9f326f010d5320620589eee9bd848d7d95b30f383c4d95b6d41404f4dd4587554c613efa640acf33706211ac8f89e716ad9cafcda4dc11566f33eecc75527eb4d6a056b7eabf5aeb44632d97dce37f60f83d95b7814a1b7ee59773e48394e8c6ff", 0x7b}, {&(0x7f00000008c0)="046534f57572804efc236855bb603f8a3318623546e237a2d290c4584c6aba6cf80ea84013913e3e6eb900ab8561e8aa1dfd32fedf35bf4ff6f042fc404f2fc6dbc268e299d6f106a21d5c0bede41c83f739d77ad48c165cf85a549dd337ec7702e0e3e0c699502eaed37e7a86a6ba017475a179f40f25deb6dd8e0ab3b24726e52282cc70b5f80ffde57501100c1cf230ffd3e5a24fc2d44c91925fd55068409cf9a6a25fb38c159dc59dc93fb57946933b2b33ca46dc4df19ee638899f514117a847c654b97b9fe9f004d048bd339207c64f97", 0xd4}, {&(0x7f00000009c0)="5f9374517406e2c6a6fb46ec67a21f9ed3bcaff98ff5fd03bdbb", 0x1a}, {&(0x7f0000000a00)="7f53a2f16bc0e006d3e90e322cfc1c982bbfbcb06275c1d3b92d83269dba58c70aeaabe1bad213b4219c381621ae7e5f2e6355bf16a5418150e9f353d89dca592b20e5bd989e3bb46121437c27e793578641e9a8250193e74b4cf46d64225ec7ce3a017ea0c7fbbc947a6ea42d9a8ae0504211a9979c6a3d1384da2f308da961e43ef2a3ce6f163e0976e849ae2ffce34849ef5a9d998cc786", 0x99}], 0x6, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x20}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x139a}}], 0xa8}}, {{&(0x7f0000000c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x3, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c80)="59de35df5c98c165fe1110db68cd226d3c6075f83e76b9e3224a7fc2b3f1ad2fb399f5eaca0e34f727e8316deec8291c973a6aa1e8c050d169dcf23305ee921c30cb12955a1722a7a0dd1233890fbd58b8c1a117ff33f1f6d9c4c6426678eef9256c3c0ec7939af020f8d29818", 0x6d}], 0x1, &(0x7f0000000d40)=[@timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000dc0)="d23ed8cebdf3237d615dcf1a9b9ff1200546e12ddb180798e54bdf95cc17b63309e779c9928b227a32f0c894f919e334be069fe07a93761d345761d8693bcb2a7c8be8e9d6d798f8376da14a27a34f5f81bb3f2417281c06e4a954b3d5701f3e76aa950a2be64cd498694fe23d6e372efefde0794f96ea488685e1faef487735efd25e5e82cdec82f7a3d3a99b4e3bab914c3c0f3313ffbb2efe5c30c7150b243af3c68807aa28cf9d8af9ba13cb678a2faf81050481447b2aafbb16eea216786523de9aa80e31f0ec7b0b244f1525645be4d9cc09635f492382811dd31d002805c1e2db9138aaa988e2fee181c11e16be", 0xf1}, {&(0x7f0000000ec0)="23bee53043d0b6bd3e5355ea27503beffd351847fb897bdd45a09b21c9700931f9ded8e1150098837bbce36d47ecda39b31c02afbee6dec7e1190b23972c464197cd8da11af9eb85297487876258917f31bca41fb4d0c19eebed15fb5a0935", 0x5f}], 0x2, &(0x7f0000000f80)=[@timestamping={{0x14, 0x1, 0x25, 0x755}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x2964ce5e0}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xffff1bd4}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001040)}, {&(0x7f0000001080)="223bf7e29ca64c5786a6c645cf3efa5a804a3c6e56065a41cb81d8201908e0a7933777aef6dccc45ada97eb65bd54f986597c25bc82e77bb37c9c6c9b325e3f6ef2f2146f9fb15680f26ccd7a3e6b4133675374da7ef77a0bfbf1cc1f7d6b6404aa7c775d489c0ec449e73ad0c1579e906482ca1f4893f55209ae5b8770d0fbc32dd5a562a821a65e35991e39300ed407933fcfa18ee51969a822cffcc757195a83389525327ad426fecccae7162d13a04f530451a7ce6558b442315a2a3fc792a44", 0xc2}, {&(0x7f0000001180)="42b9a1885910c57846b9dee83932d7f23cf1922b9996c11e7e44bd90dff0de923c74f8fdc283140233f076a82cca2637d65e19a70f0ab56e9d8c22f20b94451d7b4f2d083fb79a8420a5cd3eae24e1b8733f448ef347106d738d5adb3b8a61857f2260", 0x63}, {&(0x7f0000001200)="8bf589271e1d3dcd82dadd28a1dd17f860f4ca0d7d9762783caa5f18c042bcabc0b8fc9c19e5c28d80c9c6e8985fb3f97573f22160a583b14780baee32cfbe1c4c890de2db7a3e6e507d7fb18f8ace982dc0d77d0318b5c932a575cdba80d056fba61a24872156bbf5ff38b30a525f64b533a825519c5d0dc8037c4e9bba1d0449d3e9769a9b691665e48cd256cb51eaae2f3380e8f8b7208f68d96116995bfae153f6f8e7a07a80e226985a009d11d5ee0b18e2daa8584264d0d015d3a72b321a3ddb62b1057dba2992af3f24b6e3a14bf51b3e140e", 0xd6}, {&(0x7f0000001300)="be04630034a1fb90dee225", 0xb}, {&(0x7f0000001340)}, {&(0x7f0000001380)="d91f6ee1d80156857135a12747e36eafcd3d7b0b357726640bfe26688cf2aecee5979a04a5abf2c638286c6f7be218bd7a5247e3ff8c7d09e2fe1273fc055f15ba32011604d8909b5bbebf54dda52926151d6f3e26f9c9b36d4ca1aae2f1074ddafcbab3a7df355569b47513f2ec652d4ac45f380885", 0x76}], 0x7, &(0x7f0000001480)=[@txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x615}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x90}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001540)="fc208a2ac14263dfeaeea47816f53efff6c4a81c873025591519a72e82b17f1471ee63b22bc4fbd1aa6440fe3e592ef568eef8595b0ea4535b532266af56d42bfe90af700ae58ed00e513ff1ae10839213adc75543093e1a8d87a559ef4458b79d33db5b4f5977730056307ba8c8f29e799c3e501dda5a1fd6aaa1606815a1f795a5a8c98f05596a85ea43de945d88b9ae25b7afd09839a119ef1b94fa57edb4fa1a9605f11d084122da64e73b40cd9e5cb04128fc6d79be5d9d665aac628637663c41c728dd34437786703b22308932d4bf7d88d2b3e174c74255eba276", 0xde}, {&(0x7f0000001640)="be108e07451217bbf179de73c22f075206bda3f5d744c3667bd9ad00762a94aafabc4861df791b2a6fa6adebcc7723670a0266a4ffb0b45c69a03402e58d6cc0ce41ab343dfa57ff8ae662af52087aba8b13ead48280f0d0e3174a519dbde42911144af5b91b6d56d7a1be21cd5b1efee806490c73fbf4b49a", 0x79}], 0x2, &(0x7f0000001700)=[@txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x22}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0xf0}}, {{&(0x7f0000001800)=@rc={0x1f, @any, 0x3f}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001880)="a60b45601d531cc89c527e93dd40aa8a3dbb1cb8fcfad2c914412424cee6e2504451e76d2bdae265e2daad9b713b6730b4d0e2125d1e0b40c8db7cf90de7e9f74d95fa3241959dcea102ae725cbd2301034a722c76247af4789ac0a2adc47cf8d27c6eea7c9949ec266ff44818475ef343d18169056b606092abad78d1bf787a96ec15e1a62eff6d0a6b816fd03e23460f4e8cb71dbbebe6f5ec119b459b27a1181f35e2e583da7b70d4c67f11cd7011c963d025d1f3af19f7ac573e89", 0xbd}, {&(0x7f0000001940)="6f53e6e358123a8bfbfff2f56a62b5e0735440e72b956c6d725fb0286e465887f79c84bdda97ef8a47af06cfa2ebda279dc97812130d70cbdbbf464ce3e211405ddccdd53b26d878180a11807620a7d5fcc098cd057742602153f0b16f39900302b1bb73e877a29bbcb2bbc0631e04bcab6427910f8b42f707d96f52443aca6d8a1f56cd553bb268c8818a", 0x8b}, {&(0x7f0000001a00)="b88231efaee94dd690f4bc56fdc90862ae400a456d4d915e5fbac217f671e3d6c0e97190da0b50d646ac725dd53089e06f3c27874908da418e91eac5806cf659912b5b0bb3583792d0769e73e43f805f466958270a7e30fb2fae16fd3e1758e890fee6dc85b1bc938350a5047ec03c5a2f508ae58e3fcc7edf7b911a146141efb7c63c23af4f838c15201968bfc0371696f2daca53cace8d44be75ed1a3b3c581bda07e86c67d524e98c482bd918e3ece093430a2050b4d12e3d26fabe", 0xbd}, {&(0x7f0000001ac0)="ee853b519168f9d1e3d8734acc57ae266ea2ffca44ffb6c16a8e9f5b5e84de32355add5c4b542419905c389d", 0x2c}], 0x4}}], 0x7, 0x40000) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) close(r4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0xa, r6}, 0x10) sendmsg$inet(r2, &(0x7f0000002d80)={&(0x7f0000001040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001d00)="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", 0x1000}], 0x1, &(0x7f0000002d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0x7, [{@multicast2}, {@empty, 0x8}]}, @generic={0x83, 0x4, "c31b"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x60}, 0x20000801) 22:45:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 309.693721][T13732] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 309.727794][T13732] FAT-fs (loop0): Filesystem has been set read-only [ 309.738453][T13732] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 309.756638][T13732] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 309.776257][T13743] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 309.919226][ T4996] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 310.050075][ T115] usb 6-1: USB disconnect, device number 18 [ 310.159127][ T4996] usb 2-1: Using ep0 maxpacket: 16 [ 310.279153][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.290154][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.300568][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 310.309967][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.318519][ T4996] usb 2-1: config 0 descriptor?? [ 310.559554][T13725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 310.739083][ T115] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 310.979091][ T115] usb 6-1: Using ep0 maxpacket: 32 [ 311.049136][ T4996] usbhid 2-1:0.0: can't add hid device: -71 [ 311.055211][ T4996] usbhid: probe of 2-1:0.0 failed with error -71 [ 311.063229][ T4996] usb 2-1: USB disconnect, device number 71 22:45:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) ioctl$TIOCMGET(r5, 0x5415, &(0x7f00000000c0)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe) 22:45:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x9) 22:45:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:10 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x8000}) r1 = socket$inet(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) r3 = gettid() ptrace$setopts(0x4200, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x800}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 22:45:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 311.299683][ T115] usb 6-1: unable to read config index 0 descriptor/all [ 311.310741][ T115] usb 6-1: can't read configurations, error -71 [ 311.322622][T13764] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 311.347766][T13764] FAT-fs (loop0): Filesystem has been set read-only [ 311.378928][T13775] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 311.432821][T13764] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:10 executing program 3: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0xed178ced64577ce) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 22:45:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 311.477503][T13779] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 311.503234][T13764] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xa) 22:45:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:10 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0xa0ffff, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowergir=./bus,workdir=./file1,up\x00erdir=./file0']) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 311.662464][T13796] overlayfs: unrecognized mount option "lowergir=./bus" or missing value [ 311.674374][T13796] overlayfs: conflicting lowerdir path [ 311.683344][T13796] overlayfs: unrecognized mount option "lowergir=./bus" or missing value [ 311.710941][T13795] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 311.721412][T13795] FAT-fs (loop0): Filesystem has been set read-only [ 311.728771][T13795] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 311.738192][T13799] overlayfs: conflicting lowerdir path [ 311.772316][T13795] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 311.781359][T13800] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 311.879001][ T4996] usb 2-1: new high-speed USB device number 72 using dummy_hcd 22:45:10 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000105e04da07000000001e0109022400010000000009040000090300000009210000000122220009058103", @ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX=r2, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r0], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be00839e75414a64"], 0x0}, 0x0) 22:45:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 312.118966][ T4996] usb 2-1: Using ep0 maxpacket: 16 22:45:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xb) 22:45:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 312.224278][T13812] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 312.238992][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 22:45:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, 0x0) getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 312.265441][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.287942][T13812] FAT-fs (loop0): Filesystem has been set read-only [ 312.291628][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 312.338121][T13818] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 312.351939][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.372382][T13812] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 312.404104][T13825] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 312.412075][ T4996] usb 2-1: config 0 descriptor?? [ 312.659403][T13789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 313.158980][ T4996] usbhid 2-1:0.0: can't add hid device: -71 [ 313.164955][ T4996] usbhid: probe of 2-1:0.0 failed with error -71 [ 313.173090][ T4996] usb 2-1: USB disconnect, device number 72 22:45:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, 0x0) getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xc) 22:45:12 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = dup(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x78) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000280)='.\x00', 0x2a4) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r4, r6) inotify_rm_watch(r3, r6) 22:45:12 executing program 3: syz_read_part_table(0x7, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') clock_gettime(0x2, &(0x7f00000001c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000200)={r1, r2+10000000}) getdents(r0, &(0x7f0000000100)=""/164, 0x20000118) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0xc, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200c0055) 22:45:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, 0x0) getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 313.642061][T13840] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 313.675373][T13840] FAT-fs (loop0): Filesystem has been set read-only 22:45:12 executing program 3: syz_read_part_table(0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:45:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 313.700959][T13852] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 313.735892][T13840] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:12 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x20) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'vcan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x0, 0x4, 0x7}}, 0x14) ftruncate(r1, 0x2008001) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000180)={0x5, {{0xa, 0x4e20, 0x1ff, @loopback, 0x1ff}}, {{0xa, 0x4e22, 0x29, @empty, 0xfffffed4}}}, 0x108) 22:45:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xd) [ 313.762057][T13857] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(0x0, 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 313.898848][ T4996] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 313.928470][T13867] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 313.939588][T13867] FAT-fs (loop0): Filesystem has been set read-only [ 313.947271][T13867] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 313.979717][T13867] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 313.991240][T13875] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 314.148827][ T4996] usb 2-1: Using ep0 maxpacket: 16 [ 314.268953][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.279941][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.290314][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 314.299744][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.308301][ T4996] usb 2-1: config 0 descriptor?? [ 314.549491][T13844] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 315.048893][ T4996] usbhid 2-1:0.0: can't add hid device: -71 [ 315.058421][ T4996] usbhid: probe of 2-1:0.0 failed with error -71 [ 315.066634][ T4996] usb 2-1: USB disconnect, device number 73 22:45:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:14 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xaef}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x8800) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x4a80, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000440)=0x8, 0x4) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x5c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200ffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:45:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xe) 22:45:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x8810, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x65e2f000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x0) 22:45:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 315.543250][T13896] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 315.550590][T13893] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 22:45:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 315.585013][T13893] FAT-fs (loop5): Filesystem has been set read-only [ 315.589013][T13896] FAT-fs (loop0): Filesystem has been set read-only [ 315.610069][T13906] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 315.649193][T13896] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 315.669163][T13910] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xf) 22:45:14 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44c02) io_setup(0x100000000000c333, &(0x7f0000000200)) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000009e40)=[{{&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000000640)=""/245, 0xf5}, {&(0x7f0000000740)=""/194, 0xc2}], 0x7, &(0x7f0000001fc0)=""/4096, 0x1000}, 0xb3}, {{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/80, 0x50}, {&(0x7f0000000940)=""/17, 0x11}, {&(0x7f0000000a00)=""/153, 0x99}, {&(0x7f0000000ac0)=""/247, 0xf7}, {&(0x7f0000000980)=""/31, 0x1f}], 0x5, &(0x7f0000000c40)=""/225, 0xe1}, 0xdaf5}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f0000000dc0)}], 0x3, &(0x7f0000000e40)=""/134, 0x86}, 0x368}, {{&(0x7f0000000f00)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f0000001040)=""/134, 0x86}], 0x2, &(0x7f0000001140)=""/58, 0x3a}, 0x1}, {{&(0x7f0000001180)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)=""/87, 0x57}, {&(0x7f0000001280)=""/70, 0x46}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000001300)=""/240, 0xf0}], 0x4, &(0x7f0000001440)=""/162, 0xa2}, 0x2}, {{&(0x7f0000001500)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001580)=""/135, 0x87}, {&(0x7f0000001640)=""/27, 0x1b}, {&(0x7f0000001680)=""/119, 0x77}], 0x3, &(0x7f0000001740)=""/126, 0x7e}, 0xc973}, {{&(0x7f0000004fc0), 0x80, &(0x7f00000072c0)=[{&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/80, 0x50}, {&(0x7f00000060c0)=""/24, 0x18}, {&(0x7f0000006100)=""/219, 0xdb}, {&(0x7f0000006200)=""/146, 0x92}, {&(0x7f00000062c0)=""/4096, 0x1000}], 0x6, &(0x7f0000007340)=""/231, 0xe7}, 0x800}, {{&(0x7f0000007440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000007a00)=[{&(0x7f00000074c0)=""/167, 0xa7}, {&(0x7f0000007580)=""/11, 0xb}, {&(0x7f00000075c0)=""/205, 0xcd}, {&(0x7f00000076c0)=""/233, 0xe9}, {&(0x7f00000077c0)=""/80, 0x50}, {&(0x7f0000007840)=""/86, 0x56}, {&(0x7f00000078c0)=""/90, 0x5a}, {&(0x7f0000007940)=""/187, 0xbb}], 0x8, &(0x7f0000007a80)=""/178, 0xb2}, 0x80000}, {{&(0x7f0000007b40)=@vsock, 0x80, &(0x7f0000009d00)=[{&(0x7f0000007bc0)=""/70, 0x46}, {&(0x7f0000007c40)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/92, 0x5c}, {&(0x7f0000008cc0)=""/4, 0x4}, {&(0x7f0000008d00)=""/4096, 0x1000}], 0x5, &(0x7f0000009d80)=""/172, 0xac}, 0x9}], 0x9, 0x40000020, &(0x7f000000a080)={0x77359400}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f000000a580)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000a540)={&(0x7f000000a0c0)={0x46c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SSID={0x13, 0x34, "26a200805d497fda9c8323317a8a60"}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IE_ASSOC_RESP={0x29d, 0x80, "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"}, @NL80211_ATTR_TX_RATES={0x19c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xec, 0x0, [@NL80211_TXRATE_LEGACY={0x10, 0x1, "5b0ca88cc0b6c013e1dec801"}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "9a45330905958a16fc934679de847d52e8fcfdabe75d7efc3c59f356"}, @NL80211_TXRATE_LEGACY={0xc, 0x1, "278987f31069e3d3"}, @NL80211_TXRATE_HT={0x24, 0x2, "3ba65d1a3b27d0aac534a94d4f30e555ef51d2f768d3c2e02ba4ed6765350962"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x2, 0x1, 0x4ae, 0x1, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, "562c2ea3548ddbfa9d92e531e565c54a384f8ebdfab8fdae167a22"}, @NL80211_TXRATE_HT={0x49, 0x2, "0914e5ac8600b75ca0df27b0123b1b342262bb8acfb5924b4572cdd877c9dd1b60db0f5f298ca916e16dd46b999b12ae0652ca53de9fc505213b59e63a790c521ddf5483c4"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_LEGACY={0xf, 0x1, "9dd09c54839bc377ab6dc3"}, @NL80211_TXRATE_HT={0x3d, 0x2, "d5665508be3d2c6873fad24ae94a17027f390b222b680f47e82cce35552a76cd6ba29ad5dc2231605a6c16f4e575b507b0387686f53242e197"}, @NL80211_TXRATE_HT={0x25, 0x2, "8001ec949649d3cc5aa5964c8e183eb65ad2b6d9dd3760585ad5504a691f0b1ce6"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0xfe01, 0xff, 0x8001, 0x4, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x59, 0x6, 0x7fff, 0x9, 0x0, 0x9, 0x8, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x46c}, 0x1, 0x0, 0x0, 0x80}, 0x4000801) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000017c0)={0x0, 0xfb, 0x7f5, 0x0, 0xfe, "d1acae3576bb63f55bc9dff22c4f011b", "027ca7b5b3ae52881f7f5786c3a3bca606d5101a164316234b6160029a7d1c8d4ef3afad7b26fcd96871620ea0076f91259e53ff455257ac9c26297492e48e4174fd116c7aa71c757e0bbe812471f75ed55479346e9032f2a43ec2fe6c7aa55e03ea1c52cbbcc404a05293f56e72f11e0b57e3204c0f4b1022ffec0aebb62f9d8ccafb79d750934f05d1e5672c1d496483171b990fb1e8bc3649c509f841343b2c8dba9c17a3f522314d87041f3ede68cfd32f70c8c8986ef5f0d6ba8663160ea10d5ccee25ff362479e968b536af6fa1bbca81b0c00e26c7894c37bd77059d5a113c1d3290ffd5df728adece3511cdec2e537154d5ed47104b13ef5fee220279ac6dca0111726755aeb4538f162a9845c2f317f67e776d27fbeaecda7d8404ca2537869b5073ac30616d955cd1c3edfffcfd84ccbd25086d829239f1883560c3c6ba83c392ef1223b941465b7845993e552c442cd4a16e0fcfa2d1bf0ffd1ffd5adcd3b3634f3b649a3c33353c5095f0584bbaabf26ecb338ace09670f7f99521e004b64fec88de0f8c68ac05f6e03fa1a2df78ed4d09baa4d3c4d89179f64e9bfe6248f4627e337a97dd460b007be1d99346242100e3e4d49186cac60a439f7955f36acd3fcf1a0186b05232b33e3587699b53b62d52897c38357bd443846b2c5d3b57515468bcf99afb600837dd4358a56384beee4a0e45172c096ed88bdfcde99f68e7506b4821e7cec7a503961b5569a3b4bd7c99a509701162f719fa081b0f38c1cd0a65c823c9ba4a219f2e8c642a665f1f25c4d9cd6a728d89529fa8e11cd54f2dc64881ee23304cdfea2f0541b3270c3195f7d11568e41681cd925c108c0878f120d235605381f0bfaca5d8d5e6c7e47f4d573e18a9a65eb16f525752b53237d0bb0055259bbb819de0891f3375e04a08a79824053800fb919438553cb20f591f0ac287c66255e94a88d8cca31532d0d9275422713d9649c0b15e7fccf6e611e0e50584376786f53db7294ff75c763f791850f21aed909c096150cbff82e273a44a7d575b61a061981da7078248f64b0839119e05bea3f3a13d720ad113417b28b3117c5ccc1c4b484c405ab3fc59673180be6038f8a2542bbc113728b1378614b0dfe1439ffb64ccee1415c4c32a44c2b076de5ce64491bb7a74d09f25fd8f6f1c83bb017a5656dfa531628e183222ae01374c322c192e2f0011cacb1d533823580a51bc5aa1d6782a51ee8b410c6f5f67f352f30f2029c9fff9482b4d4f7debb9105e54f2fe747aef4f51262b01fd0a2042d87e483ad404f4ecc58bdbb21978fac9d4b91a9eb880eb281da801f4dda435ebbe82f37e45e81b88ad7971516804ccde9dc63471ea0eca10640388a1a538cd993e3018fdf7ec374c4b2ffb12c52c02f6607e829a9592e9a0f16ddffad0c0ae04212b1f3932db8f6c4306e491eaad876c8c36e205aff31d1e4c9e1738627b0b98e50de297e2568becb9afa66727a7009abfe7e94ad4086af299a1c405eeb3663a5b1a791ad0a850594173001b7c992a6c707858464dc999bdcd7503aabb7eb92bc8d32d83c42e6a85fe4b2d811a731a4a593300f4bf32c51b66336fd211b4bdfe13c2cdbc98ef73336dfec303d979c530171bae5941c8f78b5d7292ad6fa3af92dec8c67f87c71a98306efc7b2fc352a130fcae951abe33f92e78b2e7e4ae70cbdf3c9e301f85124738aab07ae5fd776b4b1103e43ef28df45d934155d0b55c0af6476d92225a6121631935bf72613922bed9ec999bd7765680c00f461b6cc426fc987f7d2b2acb3fdda37c381adb8235ca84810883bbb35b0f5838b56a1101aaddc9cd2cc560529dea4384291948818fd04d93d7d59a80dbe31625e6e03ff7f3b5ad778553365835f11c8337aa3831be95bcbbdbb3ed4f58db89694b24b5aac9712f1c4be88a3ba38ee1b67ed26f90358795ef79cc116ec438fba595b29a317b8351d6541f7c43fd44186bf5e6c1939f42b3bd3288860489f7312808c58af0a38cfd604015bc3dc82b8370221c8c266a93591f1d5e2df87c2649a01e2a30fb9ed45d16ddc41acffdc44bccea0b3cb9c1883add74a94ad701d37ab71fda4df0c95f5b322dad3eebd520abe2bf4089c6bb5fe846e10d11a9b3488f1b32ca93a412a00713c09d90c43be25c7329bf163699e0163737fe1753e8e7df9859dc50c640b7be03c7f19f4461d480a9a1ba37f09f70123bb83b8f71b6a173e42a61e6e1bfc0e94b8ac40ce7cb0bdf29ea12e236577137480d183dd74aa2d11754f8583d52e9b4f6edb6425a925ec01b54f8ab2137005434cb3f05a98841a61919fade0875436a2cd1d057fe2873de62cc3cb335f1626c9caa5c8a6edc9e091e5aa94dfceeb9bbce8edad9e046fcf74ca5a2f0f6611ce544ad09ae7a0a3d2e2e2ca1d6b7ef3dc1dde34bc9b2f7c854caba91447a54d2d451d60f8a363631341dde9fc93acd8456f676641c7d44ff977e90999f7d07e40db574f5a5c94948b2595262ef1ba4832668cea827aad921450a4af61c35d40f4f9d2e7ed189f2b4944457d82fe215d67e4756bd105f8b9398597e5753bb1252bba241b97e93a2f415d679571641e6e7dea55d129cb1d4cfd733568b9b08a099ad82e6623a63678b1b264557d70932f0f1b57337e37cb4ee1f09312f7a8e07d76bbd79a96a9d69ea97758566fa55ff01cd80fa2c91a394cbc6cf32627b6ed9c3d641026c5032e23f99c5430c34a6ea9fd9f2f0e1b5bf60f82240c993da0b91ab7497817b2a31bcd06543705a4cb9689138302c38455109ecf4ac019b310c3e842d3ba9f5ba8debf26ee97c54c3c0fda6a829715253887b4f"}, 0x7f5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_bridge\x00', {}, 0x7ff}) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x98428d57a99b5f44) io_setup(0xd, &(0x7f0000000100)=0x0) io_submit(r3, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) [ 315.693093][T13896] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 315.788785][ T5] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 315.796450][ T4996] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 315.831760][T13920] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 315.845653][T13920] FAT-fs (loop0): Filesystem has been set read-only [ 315.853068][T13920] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 315.893650][T13920] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 316.048787][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 316.098880][ T4996] usb 4-1: device descriptor read/64, error 18 [ 316.178833][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.189725][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.200101][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 316.209493][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.219760][ T5] usb 2-1: config 0 descriptor?? [ 316.459349][T13897] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 316.488768][ T4996] usb 4-1: device descriptor read/64, error 18 [ 316.758762][ T4996] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 316.978816][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 316.984803][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 316.993089][ T5] usb 2-1: USB disconnect, device number 74 [ 317.028819][ T4996] usb 4-1: device descriptor read/64, error 18 22:45:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 317.418753][ T4996] usb 4-1: device descriptor read/64, error 18 [ 317.548815][ T4996] usb usb4-port1: attempt power cycle [ 317.678734][ T5] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 317.918721][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 318.048765][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.059772][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.069529][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 318.078776][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.087429][ T5] usb 2-1: config 0 descriptor?? [ 318.258710][ T4996] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 318.329232][T13936] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 318.358847][ T4996] usb 4-1: Invalid ep0 maxpacket: 210 22:45:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) 22:45:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) alarm(0x4) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) unshare(0x44020600) ioctl$EVIOCGMASK(r0, 0x40044581, 0x0) 22:45:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, "bf564a3ff89be675"}}}}, 0x42) 22:45:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 318.508676][ T4996] usb 4-1: new high-speed USB device number 35 using dummy_hcd 22:45:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 318.567988][T13952] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 318.610226][T13952] FAT-fs (loop0): Filesystem has been set read-only [ 318.633706][T13961] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:17 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x10a000, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000240)={0x7, 'veth1\x00', {0x1}, 0x8}) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) clone(0xc52ca700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendfile(r1, r1, &(0x7f0000000200), 0xa198) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@routing={0x0, 0x6, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, [], 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}, 0x38) 22:45:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x11) [ 318.671590][T13952] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 318.694045][T13963] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 318.808553][T13976] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 318.818653][T13976] FAT-fs (loop0): Filesystem has been set read-only [ 318.835244][T13976] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 318.848744][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 318.858587][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 318.871539][T13976] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 318.883525][ T5] usb 2-1: USB disconnect, device number 75 [ 318.895137][T13984] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 318.904693][T13976] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 318.988724][ T4996] usb 4-1: device not accepting address 35, error -71 [ 318.995701][ T4996] usb usb4-port1: unable to enumerate USB device 22:45:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000001c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000100)=0x4) 22:45:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x813}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x1e, 0x1, 0x0) keyctl$revoke(0x3, 0x0) sendmsg(r5, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$P9_RWALK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="710000006f010500000000000000010000000000000004010000000100000000000000100300000008000000000000004000000000050000000000000008040000000500000000000000040300000002000000000000000801000000060000000000000080020000000300000000000000"], 0x71) r6 = open(&(0x7f0000000140)='./bus\x00', 0x40342, 0x0) ftruncate(r6, 0x2008002) sendfile(r4, r6, 0x0, 0x200fff) 22:45:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x12) 22:45:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 319.339692][T13996] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 319.356464][T13996] FAT-fs (loop0): Filesystem has been set read-only [ 319.364285][T13996] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x13) [ 319.389271][T13996] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 319.598641][ T5] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 319.632887][T14019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 319.682249][T14019] FAT-fs (loop0): Filesystem has been set read-only [ 319.723972][T14027] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 319.770145][T14019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 319.785566][T14028] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 319.793769][T14019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 319.868640][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 319.988703][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.999615][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.012099][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 320.021183][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.029816][ T5] usb 2-1: config 0 descriptor?? [ 320.269037][T14000] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 320.768695][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 320.774651][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 320.782734][ T5] usb 2-1: USB disconnect, device number 76 22:45:19 executing program 4 (fault-call:9 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x25) 22:45:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x813}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x1e, 0x1, 0x0) keyctl$revoke(0x3, 0x0) sendmsg(r5, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$P9_RWALK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="710000006f010500000000000000010000000000000004010000000100000000000000100300000008000000000000004000000000050000000000000008040000000500000000000000040300000002000000000000000801000000060000000000000080020000000300000000000000"], 0x71) r6 = open(&(0x7f0000000140)='./bus\x00', 0x40342, 0x0) ftruncate(r6, 0x2008002) sendfile(r4, r6, 0x0, 0x200fff) 22:45:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x813}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x1e, 0x1, 0x0) keyctl$revoke(0x3, 0x0) sendmsg(r5, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$P9_RWALK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="710000006f010500000000000000010000000000000004010000000100000000000000100300000008000000000000004000000000050000000000000008040000000500000000000000040300000002000000000000000801000000060000000000000080020000000300000000000000"], 0x71) r6 = open(&(0x7f0000000140)='./bus\x00', 0x40342, 0x0) ftruncate(r6, 0x2008002) sendfile(r4, r6, 0x0, 0x200fff) 22:45:20 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c5d0e00050500010d8390102036be43d0109022400010000000009040000028aaa8f00090500000000000000090500000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 321.286486][T14043] FAULT_INJECTION: forcing a failure. [ 321.286486][T14043] name failslab, interval 1, probability 0, space 0, times 0 [ 321.300314][T14048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 321.326109][T14043] CPU: 0 PID: 14043 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 321.331794][T14048] FAT-fs (loop0): Filesystem has been set read-only [ 321.336299][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.336303][T14043] Call Trace: [ 321.336324][T14043] dump_stack+0x14a/0x1ce [ 321.336340][T14043] ? devkmsg_release+0x11c/0x11c [ 321.365465][T14043] ? show_regs_print_info+0x12/0x12 [ 321.370645][T14043] ? is_bpf_text_address+0x290/0x2b0 [ 321.375905][T14043] should_fail+0x6fb/0x860 [ 321.380302][T14043] ? setup_fault_attr+0x3d0/0x3d0 [ 321.385297][T14043] ? fat_get_entry+0x979/0xaa0 [ 321.390034][T14043] ? fat_parse_long+0x8d/0x9d0 [ 321.394769][T14043] should_failslab+0x5/0x20 [ 321.399384][T14043] kmem_cache_alloc+0x36/0x260 [ 321.404290][T14043] fat_parse_long+0x8d/0x9d0 [ 321.408867][T14043] __fat_readdir+0x874/0x1a10 [ 321.413552][T14043] ? __rcu_read_lock+0x50/0x50 [ 321.418326][T14043] ? perf_trace_ext4_da_reserve_space+0x4fa/0x540 [ 321.424816][T14043] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 321.430877][T14043] ? get_pid_task+0x86/0x90 [ 321.435444][T14043] ? fat_shortname2uni+0x8e0/0x8e0 [ 321.440685][T14043] ? fsnotify+0x13a0/0x1460 [ 321.445261][T14043] ? __rcu_read_lock+0x50/0x50 [ 321.450013][T14043] ? __fsnotify_parent+0xeb/0x310 [ 321.455014][T14043] ? down_read+0x10/0x10 [ 321.459233][T14043] ? security_file_permission+0x1e9/0x300 [ 321.465146][T14043] iterate_dir+0x2a0/0x510 [ 321.469554][T14043] __se_sys_getdents+0x24b/0x540 [ 321.474912][T14043] ? __x64_sys_getdents+0x80/0x80 [ 321.479924][T14043] ? fillonedir+0x260/0x260 [ 321.484401][T14043] ? __ia32_sys_read+0x80/0x80 [ 321.489138][T14043] do_syscall_64+0xcb/0x150 [ 321.493618][T14043] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 321.499576][T14043] RIP: 0033:0x45ca69 [ 321.503464][T14043] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.524609][T14043] RSP: 002b:00007f3b26e23c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 321.532996][T14043] RAX: ffffffffffffffda RBX: 00000000004dce80 RCX: 000000000045ca69 [ 321.541047][T14043] RDX: 0000000020000118 RSI: 0000000020000100 RDI: 0000000000000007 [ 321.548994][T14043] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 321.557218][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 321.565191][T14043] R13: 00000000000000f6 R14: 00000000004c3a13 R15: 00007f3b26e246d4 22:45:20 executing program 4 (fault-call:9 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 321.737004][T14059] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 321.771866][T14048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x48) [ 321.781917][T14069] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 321.987695][T14083] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 321.995750][T14083] FAT-fs (loop0): Filesystem has been set read-only [ 322.011435][T14076] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:20 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x3e, 0x0, 0x0, 0x80000001}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/164, 0x20000118) ioctl$TCSBRKP(r0, 0x5425, 0x7ff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) fcntl$setlease(r2, 0x400, 0x0) getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) syz_usb_connect(0x0, 0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="f8ffffffd41530408d2e2933bf48010203010300000000000000080904e6"], 0x0) 22:45:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x813}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = socket(0x1e, 0x1, 0x0) keyctl$revoke(0x3, 0x0) sendmsg(r5, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$P9_RWALK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="710000006f010500000000000000010000000000000004010000000100000000000000100300000008000000000000004000000000050000000000000008040000000500000000000000040300000002000000000000000801000000060000000000000080020000000300000000000000"], 0x71) r6 = open(&(0x7f0000000140)='./bus\x00', 0x40342, 0x0) ftruncate(r6, 0x2008002) sendfile(r4, r6, 0x0, 0x200fff) 22:45:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x18) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) [ 322.078553][ T140] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 322.086531][T14076] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4c) 22:45:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 322.338626][ T140] usb 6-1: Using ep0 maxpacket: 16 [ 322.399460][ T5] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 322.498631][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.510347][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.520468][ T140] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 322.529993][ T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.544926][ T140] usb 6-1: config 0 descriptor?? [ 322.678545][ T5] usb 2-1: device descriptor read/64, error 18 [ 322.789568][T14073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 323.032419][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.039388][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.046345][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.055264][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.062936][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.070753][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.077651][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.078524][ T5] usb 2-1: device descriptor read/64, error 18 [ 323.086718][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.097685][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.104702][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.111692][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.118601][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.125447][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.132339][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.139236][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.146645][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.153550][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.160461][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.167389][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.174285][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.181189][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.188040][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.194936][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.202154][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.209035][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.215902][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.222806][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.229728][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.236646][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.243673][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.250704][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.257583][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.264466][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.271378][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.278237][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.285111][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.292166][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.299095][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.305953][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.312869][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.319797][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.326662][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.333571][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.340546][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.347419][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.354479][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.361392][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.368255][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.368565][ T5] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 323.375251][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.389791][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.396970][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.403869][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.410877][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.417741][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.424688][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.431689][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.438589][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.445625][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.452583][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.459494][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.466357][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.473274][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.480185][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.487983][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.494892][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.501812][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.508716][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.515598][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.522504][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.529535][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.536394][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.543276][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.550189][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.557048][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.563945][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.570941][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.578951][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.585994][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.593413][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.600433][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.607296][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.614382][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.621476][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.628350][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.635257][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.642167][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.649101][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.655974][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.662892][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.668503][ T5] usb 2-1: device descriptor read/64, error 18 [ 323.670094][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.683112][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.689991][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.696871][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.703843][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.710871][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.717823][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.724719][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.731640][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.738629][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.745681][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.752591][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.759490][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.766338][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.773335][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.780229][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.787073][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.794083][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.801270][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.808121][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.815040][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.821955][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.828838][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.835708][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.842588][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.850525][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.857822][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.864741][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.871659][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.878559][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.885419][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.892311][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.899216][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.906060][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.912965][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.919868][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.926712][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.933776][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.940852][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.948005][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.954921][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.961821][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.968741][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.975740][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.982725][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.989753][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 323.996716][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.003620][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.011522][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.018529][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.025413][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.032310][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.039229][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.046716][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.054135][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.061041][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.068002][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.074906][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.078472][ T5] usb 2-1: device descriptor read/64, error 18 [ 324.081796][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.094786][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.101681][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.109498][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.116342][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.123234][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.130252][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.137364][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.144265][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.151169][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.158053][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.165050][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.172128][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.179019][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.185880][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.192787][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.199775][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.206636][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.208577][ T5] usb usb2-port1: attempt power cycle [ 324.213521][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.225733][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.232864][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.239761][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.246619][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.253549][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.260470][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.267324][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.274203][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.281126][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.287968][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.294869][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.301796][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.308676][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.315548][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.322448][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.329342][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.336229][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.343142][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.350098][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.357011][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.364005][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.370911][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.377783][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.384766][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.391763][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.398691][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.405659][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.412559][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.419601][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.426899][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.433798][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.440792][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.447655][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.454537][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.461466][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.468339][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.475218][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.482127][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.489132][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.496007][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.502919][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.509829][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.516740][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.523746][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.530667][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.537514][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.544391][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.552338][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.559223][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.566081][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.572966][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.579886][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.589047][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.595921][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.603018][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.610083][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.616970][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.623870][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.630857][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.637805][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.644910][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.651810][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.659386][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.666245][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.673159][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.680210][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.687169][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.694072][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.700970][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.707828][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.714723][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.721618][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.728504][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 22:45:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000c5d0e00050500010d83901e9020109022b00010000000009040000028aaa8f0009050000000000000009050000000000edff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0) 22:45:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x40000218) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x60) 22:45:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x18) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) [ 324.735367][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.742430][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.749318][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.756180][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.763061][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.769952][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.776880][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.783789][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.797291][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.815906][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.829190][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 22:45:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0) [ 324.856076][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.882959][T14125] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 324.894111][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 22:45:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x7ffffffff000) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) [ 324.921643][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.930404][T14125] FAT-fs (loop0): Filesystem has been set read-only [ 324.938500][ T5] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 324.940584][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.954546][T14134] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 324.970771][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.977677][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.985085][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 324.992518][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.001044][T14125] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 325.014650][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.024748][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.032914][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.042205][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.050699][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.057581][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 22:45:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x68) 22:45:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0) 22:45:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getpeername(r1, &(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, &(0x7f0000000000)=0x80) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000000cc0)=0x8000, 0x4) [ 325.079851][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.102673][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.118493][ T5] usb 2-1: device descriptor read/8, error -71 [ 325.121855][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 22:45:23 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0x1e, 0x4, @thr={&(0x7f0000000140)="68e7a639ab0136309bd8a36b4c11e04f82c8b9c2159e16be9f21effedfdd4dbd32cb554bad78fa2c5a8d67dc3c91515802e3af94c3433f02039376612b29d878a14b29794d6f7af72f0ba43f799a79eadd9730680368af4c314db222d7a192111d8cd298fe52ce8d195c1ddbc29af06815e1d1985ac9fbc4ff3767e621c8390d54c7217ae1553904df5c76f847c27e49f9f2527f77f7934bc3cd079b5badb6b305e3f7ddc3038df1de2180", &(0x7f00000002c0)="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"}}, &(0x7f0000000200)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) pipe(&(0x7f0000000040)) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000014c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040080}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_DIRENTPLUS(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="21807d0eb4bbe66e42633929a01d7a7fe711acda935ac2feb57f228c545c7e6787db11888340c1f68543626116459e6d990b3b8857c7be1fcb4305f711e7dfa80bb02b950952ea65cfa4f6de51a8a4d917b9e4d2d25f864a11214a09716d64"], 0x5) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 325.154222][T14144] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 325.162741][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.176785][T14144] FAT-fs (loop0): Filesystem has been set read-only [ 325.185008][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 22:45:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/164, 0x20000118) connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x9c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="9353310000000000000001"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040085}, 0x40000) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r2, &(0x7f0000000780)=[{&(0x7f00000002c0)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b3e2a5c0a730363ef31008ea4f161cf0f1d187f8e87d1294d6cbd61c70666fd430ddedf6e70257171251f503c968715e1b1511614264f9f52afed76d5d9aa638cd3503ab8f7cac090bc7705af55", 0xd8}, {&(0x7f0000000000)="96431fb16da29741590ad657dcde5ce3e5fe9f4eb306f34cf2429c62c0fdefbae36740a7fe962142171420d7f14b6cae8af86507ff78a1dda991aea5952e43e7e0146a3c035f0113d617240e8940c60cdf340002ceb3a2c52ce34a2bf285f200000013475210defa4dac9d784e0c8913ba007a5d00200000319f9400000000000000", 0x82}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x228, 0x11, 0x0, 0x27) [ 325.198778][T14144] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 325.206927][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.217045][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.233555][T14144] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 325.267063][T14157] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 325.270689][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.314848][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.331327][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.339400][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.346292][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.355202][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.362075][ T5] usb 2-1: device descriptor read/8, error -71 [ 325.369887][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.376777][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.385271][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.393192][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.401103][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.407994][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.416949][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.425079][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.432908][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.441009][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.447981][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.456876][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.464805][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.473038][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.480925][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.487888][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.496119][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.503750][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.511438][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.520396][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.527269][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.535998][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.543750][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.551777][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.559834][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.566712][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.574903][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.582779][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.590445][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.597318][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.605418][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.613102][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.620663][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.627538][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.638197][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.645757][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.653582][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.662572][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.670331][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.677270][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.685479][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.693294][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.700999][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.708314][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.716537][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.724320][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.732092][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.739810][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.746762][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.755303][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.763093][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.770836][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.777697][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.785904][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.793735][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.801503][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.808362][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.816716][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.824342][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.832141][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.839846][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.846713][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.855074][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.862850][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.870572][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.877490][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.885652][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.893396][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.901046][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.907899][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.916356][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.923978][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.931671][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.939359][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.946214][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.954561][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.962293][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.970093][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.976953][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.985075][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 325.992720][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.000545][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.007431][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.015710][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.023444][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.031113][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.037973][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.046213][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.053893][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.061501][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.069276][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.076145][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.084678][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.092415][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.100194][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.107055][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.115373][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.123018][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.130872][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.137745][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.145941][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.153615][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.161228][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.168090][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.176413][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.184234][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.191927][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.199621][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.206519][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.214805][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.222536][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.230258][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.237128][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.245682][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.253321][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.260928][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.267983][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.276246][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.283882][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.291594][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.299405][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.306257][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.314393][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.321976][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.329678][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.336549][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.344837][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.352547][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.360185][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.367111][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.375423][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.383174][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.390950][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.397845][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.406218][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.413840][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.421454][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.428321][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.436527][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.444100][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.451755][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.459350][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.466214][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.474416][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.482070][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.489642][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.496490][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.504728][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.512309][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.519877][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.526815][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.537186][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.544803][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.552414][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.560190][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.567134][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.575395][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.582958][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.590614][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.597489][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.606441][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.614272][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.621896][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.629588][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.636442][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.644919][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.652795][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.660500][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.667360][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.675908][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.683623][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.691543][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.699211][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.706070][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.714302][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.722057][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.729632][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.736485][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.744681][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.752281][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.759881][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.766744][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.775571][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.783200][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.790735][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.798034][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.806307][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.813953][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.821560][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.829437][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.836308][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.844451][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.852183][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.859808][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.866671][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.874868][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.882742][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.890343][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.897204][ T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0 [ 326.905516][ T140] wacom 0003:056A:0023.0017: Unknown device_type for 'HID 056a:0023'. Assuming pen. [ 326.916137][ T140] input: Wacom Intuos 12x12 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0023.0017/input/input24 [ 326.929997][ T140] wacom 0003:056A:0023.0017: hidraw0: USB HID v0.00 Device [HID 056a:0023] on usb-dummy_hcd.5-1/input0 [ 326.943651][ T140] usb 6-1: USB disconnect, device number 21 [ 327.348399][ T140] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 327.598387][ T140] usb 6-1: Using ep0 maxpacket: 16 [ 327.718457][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.729358][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.739110][ T140] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 327.748119][ T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.756796][ T140] usb 6-1: config 0 descriptor?? 22:45:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r2) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x54) r6 = socket$inet(0x10, 0x3, 0x0) fcntl$notify(r3, 0x402, 0x1) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000300)="e93be1628c1338b2871a84abc57819c8ec863595593d03652d3e36ce4749a3339bc6e0938a732e3e62ba62ef884787e9384dd104184305d32e4f629c54f0a9d9c91d3b3f93a65bb72390d2a843d5df6871ef4a36ad81735f03ce6e0f68bcd656be80790664d41362fe2f749ca3d3a32cf062d3bf6739e07a93143c65abb36ea51bd3f0decdd65fe5b84ddc757ed3809181f18bc5c15825d4b4cb9b55dd497517973f00a7490b37c29feb2019b863a241b4cfa4c6eca7a31fa29eee94179c102915cca90bab56d0f4559a45f811e4e7bd1cdc3d9f17eff982dd4c633522ca6d9c89cfd3cb6e01e4938a679d244fefe4b2af3441471d2b36586a85541eb85cb1b8") ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000000)=0xfa) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r7, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f00000001c0)="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") 22:45:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 22:45:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f00000001c0)="25bcc574769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d270146d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='journal_path=.']) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x6c, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0x40, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x18, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0xb4d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xf9, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xd6, 0x0, 0x6a}}]}}}]}}]}}, &(0x7f0000000240)={0xffffffffffffff0c, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x2, 0x1, 0xff, 0x9e}, 0xffffffe4, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x6, 0x1c, 0x7f}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) syz_mount_image$tmpfs(&(0x7f0000000280)='tmpfs\x00', &(0x7f00000002c0)='./file0\x00', 0xc7, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000480)="e97cd8a69d891fe487b7a1de1f8b9e67d7ba8533db753ef4ed38da81be51b1bb309830d7a340723a8863d02ae4619de8ac71006b95c3fb97cf323508d31c242c4492172bceb0dd94b8e9e0b94d95601c30199eeab68a4bf3ca3beb17ff7ab161a9b6918c88487de00eeaa01db045e72d43bbdcc79c99ba06161bb37e5e54cfba821443849b16a5da5cd033d3422aae32721e6cd985ff25bd4db6866159c1f6bad3f63db5ce70048a6e84d12807f0ebb6fdd19b43b4a6dea226f7b77c3e27abcc5e31b2059f4281ee166d05ed3909313991d8cc115dcfd3a538b1db7aec3bce60958039eff03564e75d541854e57dcfa0a6216540d225154940089803c99d35b0c2d317e6fbb12b8802ec5067362214370e9635deff41b273fa76d6785aee02969e4cdff2198bdd500f9385d9882ff2895ec508fbb635ab05c33a975082818b769b1bb50b129bf4838f7d5968b89074979cd162deb78f2c7490f77795ba5ea0dc761743369fecc35c922cc508e965c8222d463b7e9e9b145000463bae386de3dc8a943162eba226d321aac261fd72b2ab7956274479eb48d4b430bd17acc79c0d06c4387d728ea5f52b0163b2a1eb1fc8003d87cd672c8af7f94f26515e7ca9030531118f7d01fee05824d951644c3c4f3fd1a7ac0491b2b978e4792c1f8661ce0250d37233f5fe8e1a9ff92e42cb34be331b9c476c461d5a19248e48388f773d602ba5613b6dbffff9387a543b90f786e3c0cb67a31afd5b7a4ca45fe50d2b99ac2ab1f2c9e84d2649c52d352c188ce9bf850181503488c6596e1341fcbc32e8b1356db7c4a82c15a549d5d352116182360d6b6ca0c6497b4cfb207be7974c5e137578ff68d673b42b32d5972058c57796fb4b1facdee1b1946dad84599b20f9ba5e1edfbf11d69cb3d070200fd5568f4e8affc725e73af60556b3957d229ff73e9181f6f5567f00bd94ea0bad0ce4cd26a4afef07be826f311618622c524dc87e92c91016e40c99e1996cd69646aaecbfe2f8ae28370814fb0ba337a53306bf63825543c3a96c0e89abb8bc57ceb9d3ed6e29587158b34b45a00053ef398508b570d06bb870d08bdfea4d96392346740efc6f5908190fe5f7b1b5b87be75d56b795c55ba9240814c97f3ade681747bc71783c0ec29c8d86d725401970fa792269f974f1b7b51ce61a71c3f9bfcb5cd90a17763fdcd9f16c1e3d4d9f7188c123564df3661dcb4e4c689d63579dfcce5bf4485477411a496e2a02ab308523ef63c476ee64aa8a2ef1451a4736b44c247ebec359d4146b1699d74b20f2a29a4cf2ab039611631a6ac9745fbf6c25f2b93cc9a070388622ca10f73429a4694de95be46adb4fdbcb1a159bf71f02c8f5747a0fba1168ac2a340ddf1d47a54479223481f044e4514f0b29bfbd6da0a958df80158ac7cf2e0b7e213f47c36584f3dbbf9825ec9ce7164ede4da853a23f0e0185453d3e37984368cada053cac13e2264ba5208bec5b06f9680ad0021904b8369d275f42c9ed5cde80f943ac5964c9e54a0c45eb6f04c02ba725d15382e4a5b9ac3d0641e137d410350ba9bafb883708bc04af79b1ad9cd9eaa59892882f680ea4e412b497801b27c8990dfc4865c9957a86a63b1d608f4093335737d849120cafe9c5f83f993350885f585c43f2e634d6b42b7b1d7c4181bbe2ad1f7303031d82ff167036d7ac95b7c594daa7037250cdb141a0d80ef9d6f643cdcc4afd2fc580563089872dbd7dae82497c799de9ee2fd82d9ad07982c7e8dd503e577b9a0971bf80bc6acb8b4610807353eac2494f1e129681bc25ae0c3cb52952707269c002634815f45a6a8580f5650b7ff48cd780180f4d541ca4dc496347dcd2f2bdcfe62d9eceb424631bf573ad07a74d0b77991f7da205735a6b682cb10004271e9dd2b8369e5cc8b70c7048262542bc69ad6f1c0d72f9520860ef1f593ff31fceab17b9740881cbbd81d09b5b510e6f8dbec63aaa6d5dbc892ff048d3ec6560ac8507f3c2b4fdbaed1518b87471a8d2c23476a85db6aff4b51a6afa22511c0e4ebf3fed2a6b57f66eae9ff9304c90fbc52773d0f37d8d0226f8fe5429ec78a3d2ce451505b8e2f3586800f8effe516eec9389f7459433115caec2c8c97f30c5c267adf33201af3c901b9f33fd43e0f1c88db47456921b843555ba6f3fdf79dd7b8518be82ce07def0bf0471dfcebcbe5bc4a56c3f97f1c0747f21771468d4756907e63b2977f97f51b1bc67abed204c15f250d672821f032f8cdbb3e04eb1ff2d8c8c24e64cd011f27baaaff01785f703dd36f8a5d28573169659199cc86450bdeff3ac5a450a3dbad23af55c0552d5461a503744606488c4258ca19e7555c6a62ae6257c735bba9a0a2834f52d502f45f6924cde32b9bee5953ae90bf7554d8c6e727cea3fee8404ea2514b41eda53170bc4ee67db18f4d05854388bb87cf90a6a0b85848bfea829ee910b51715141384d54eb5123197134eb9c582fc747637a9b7c4eef842e6661e40e1b250d7216fa991bd96e4f7ef0bd4bfe4d527047e30f4a8ccbe58d6ac81aec1b4f4ae7e3eb2e4836595f5bdd01b5e602d13d2acbeb83db1bd5f6c6c5ae3d22026bf38d06bd6499e014d5f9f17b47398f0ca50268bb5686b1d18fdc4dab49400c4e06cb10fa4f4b9e23a5a3727f1d2e31d3016189eeb805417e0d9a2ceff9968bbe241cbcf0273e0702faaf61af19033682d12ff70fa52c47ee06f885c7a3ba9939a845c3613e3f4a63c881e7b6250236da35f9556ecd17afc8ea3bfb70ca55de600e4eb3bffbfb8b7feee391f6e4f40a7f53a73da9fe2ec438f7e9a6d675a0f4af8999280ab8d0a4b5f3e24787d81a3665f7b6d2fec73f4017a04fdd07864ca410c9d89a0998f044da059f79e381ccde316d411bc0d639874645c646ec9f5d452e99e36c0c0a821b8049728f90c11841443bc28ab5ba735e3c12414e3569b5def2cf8f98b87e0dd2606a2ad8215d00ebcceb2353c925118c121584358197e66c8d4f85f430480bfb0864ab60830104b04c2e80a88c7f670a20f1ad82633e219f11a2be1fe4b35e728016fe5aa06f1b0e9f27f99126f80e793179f32eb261d66ae26ff17c0d01f503ba7126fcb5547e6e79875a45f0edcb6431af9992d931cfb227f1baf1584c0310559b70ae1106236f7a29739e71afeea8e6c4f8204bc91fe96684a67d83c44f6508995b716bfb02419225df60cf359ef620294f9ce291014e2b9248e617f5598c1f4a590dc39cc036af071e2526780a6d2e19f3237dcda6e0924f479433cc9b28ee225eba1645f395d1e716dc767715089f0b471ab87f522392b68d03c3020e5fb05f2bb28321050d0eb916f31354fb5bc1e5989039066b1c11d95d3a4e6240ebfb629475f3cd9533bffd9669037bd4d7e095ce737a6f1c53fa33116bd7d5b6c1697ccfae374941f3dd3c6da9a3bfce346846dcad98c37186012d2db6f5bfd8224e2a6a6f75ebf0e210e5d8acd293b3c79296bed246f561cd75459855943c8cee0ad42218b00863a3b3887ba9a95e8d821df0c760a8a892e29397e663c6afb7f0a29626a73a4f00a1ba957cb622b00b3e6c011e231526943bead8e8419e0e7f02bea21105c1e4c8dc8325e7b7b32fa522775a45cad8187b2145fdbade2122048a5b12aae90771d826343a8df1926190d420d7c83430b73aa31f6a102194471bcbfb8252cff3d3b6b71a49888cca03432600ff3d3239d0c515d6e753208b0498d560615e7c1206e59d8952f51e1188e98730c1a881145012c4cda26aa3738696552052245f3492b1608fbdbec7264a34f3d4abcb0417ec2833c36cd42528b1922f9e921ffe0a99af3d712581f7db074ceb38d360ec065c587d3296da09f5dd8ebb2b3df642d34aa6adfcf5ee25d5fc46ade0b7568556d2a8754572a85f5c07d10d981c4a68cfc3b6320a8c280c5cd528e86996c4d80811bae211ac1189b818b3c5af92fed47893940ec3451dd82f6973b0b25735eb379196efcd3e163f03b63ffbbde80957d1fb87f64ab89c2c8d0fcbea4f5433f6b3265b3eaadab811b5e1c7996e7c48342f32f8ccc9fecbdf56333d3cf44a1e3560f421e249622f9f8224906270590d00cffa06751df50d7a989671c7ef5384dc49b8e778edd1e628eaacb1d7a98e7cbec708e5e3ace37ee01a898e3660676dddde87b643161cc082c935aae453ff5d4e261cfa37ecda5fe779240c54143723580476b6c016ce5fd0591cf2474dcc4853b99c8f187bc9ffdd84cab46e51fab071b1ef9ea0e10d61c5fa8bbdb029af658dcf97c685b1b31c4c1f2a3b395474cae32c4049b85f37431ecc35f77713d4053ac4f9f4cac8e959e41c6be0455c6e6444c9d9610a545c9ab214bb577d85d470e6f39a354a7748e7bf9e90385deb8548b2ff63de1b8d301c63db44006e8075fb6e45b3c815d42791dac1c11f339b8d9f5d5bc46ee3a5b14069eed535fcde0550e01a28d0a5073119e2cf274607bdb524e5194b1b4c73d8d32e9d9d20ccd99a3d8c4d21de1bb27ac379897b81d1ae72c2ad7501ac054ebc05132735558ab8b33660b0953fd08d9fa98b860c5baae49032961eec32d11e40faebec12fa6db573b3355fe9133f130ced705842a32309f64e5da4cc615cbae56c73631b1fd5c17559e50363502d5da0d487102e7f915bf4b37d7af7ca89f286d844fdb15adacc7372d57ddc7ebbdde02e1e2618202f4a73c00c971c762661a2f24ec2ab270b8352b0388f6f875eff42816fae5b693734dc59c7b89c107bbc20a843c76f9dd17a36ee1875b695e8a8b63d7838042d6a04454d047f0096d9c2e6b049f37587cfc6996118f1efd23229c38a6fd36186e75414f08772b0189ee31d701d990e2204efc70df5e1a14166041004613e68876f210d90f0b3a96089f66a8c785a5015ef4df7a6f1df6ece7504199c5b47657249d4d7e89755d2778833bc3f2baf166fcb04f191029025614fc62bba93815dd9e9c13a4ffdee46610011f934d81d091a4cb186b415658aaf0d4039c686fdf2517f3c2f53386cb9a6674a1e239ebcba13d291b943da9a742fb763526e52690a066f12f0cc774b339d958a3cb1883b18606efc93c779a92634f2ef607f7718771a790533c362282d10696b60087cfb6c0c92e69a69285f7e21c12ed86cc86e03a8f24644191a58bf6ef520ecd409ae2f7b403e0a8011fd73ca5ec21bcacdb5d3bae33d2bde2bf153fa268fc4759f2b2ade0bbcc4fae422a7fb90e7cbdd0eadd26c0e8938790d59bfbdcf972173dfa63ed708e41d7bd6a37bbf34b087454e3a7a84b07ded5501b54e52732644838a307c61504f25b802c025787eb94d9f0e53f61e2c8128d7aa4dac72d5279a5a5830a22ab383ffc69d1fcd61147bd473be539fdac8be73332a17118ffeca464dedbc527c0a33739004cdab8a3306f3aaa9ab1765f762c45062c6cc454df75e3d5a646378bbe2c6262b615f73b0a177ad09cade3c6a644bf06c460a83efd75cd4e392374cdbef5f18c7c5785b6e0940e819aa7bfe67879a17e4202a081447071d6a79c8de7565b91997f7d77b4cd64f0afa22cf5fc6b4ff16182e749a2b00b5698c78dddf3d36ed636d9b78b1f969103324fa946213e7158cb2803222b8b08f0ea57d4ba3e6447750efc3efa86685d49aace3d3a8db4e3221fad63a55811b61d039c3c1494a4ade0546f188817b36b0b356ecb764b56540ac2ab3d8c45c9c2a6a381d75fa0df38f1eb84c8f1277e62bfc98c1b8124bc014ef7a467f57577f074dce0e688f28", 0x1000, 0x6}, {&(0x7f0000000300)="931866a194532e9c51e11c0be5d64434bef0451f5ac01ae369e9f4c7e187281c0c79b2f2bfb73e4d39f631c31571c26084aad54fca13e42bedf0196056f6f518c4299de2d1d6e4b7890b429885816ce0a58c2ddfa4d4be4d9021ca74b1594fe16b66b55987748037f066313165ca946c058887d74513823d5c597b79bf3f6366898c802c8203", 0x86, 0x2}, {&(0x7f00000015c0)="9babe21d5a728c2f90062649ad513eeb31a2f451911d577da8263dea2b5e92a9af32e4c8525ade48dc5f14e7e5cf431f6ea198189ce62e860c7da58776280af699ebaf103fac4fdf81cac2207a5f24cfd2af68ab277939180a898484456c9c7878095faa985a0ba2d698c1f7683bea93f605b407dfc555884893190c1515671b62eb59add89bf1d211b47f", 0x8b, 0xff}], 0x30000c0, &(0x7f0000001540)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x74, 0x70, 0x34, 0x37, 0x6b, 0x31]}}, {@size={'size', 0x3d, [0x25, 0x39]}}], [{@euid_lt={'euid<', r1}}, {@uid_gt={'uid>', r3}}]}) 22:45:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6c) 22:45:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x60002014}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}, {}], 0x2, 0xffffae86) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r2, &(0x7f0000000100)=""/164, 0x20000118) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 22:45:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) [ 327.873240][ T22] audit: type=1400 audit(1591915526.595:16): avc: denied { block_suspend } for pid=14176 comm="syz-executor.1" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 327.908408][ T140] usbhid 6-1:0.0: can't add hid device: -71 [ 327.914471][ T140] usbhid: probe of 6-1:0.0 failed with error -71 22:45:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) utimensat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xfff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) getdents(r5, &(0x7f0000000300)=""/153, 0xaa) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) [ 327.925100][T14182] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) [ 327.966206][ T140] usb 6-1: USB disconnect, device number 22 [ 327.978150][T14182] FAT-fs (loop0): Filesystem has been set read-only [ 327.993434][T14197] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x74) 22:45:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) getsockname$netlink(r4, &(0x7f0000000000), &(0x7f00000001c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) [ 328.031664][T14182] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x7a) 22:45:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff21d, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c00d461d2c5b809731f66617400020401edf2ff0270fff828c7dd2301f9055e55b844398e935d76cd6b789ee6cbe7f18da515385c79124bbe4456ca9e841f6d4338f6f42ba5ab9c70c87d5580e0bd6d88f36ef57a091c2808ea9928bc31fb462f91814ac5e67b0cb25ea0a126da20f84f96031cd5509be63a816ddb2f03c78b1ae5ca4389c438ab4ead72", 0x8c, 0x10003}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}}}, 0x10) getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) r5 = socket$inet(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x1, 0x400) ioctl$sock_ifreq(r6, 0x8947, &(0x7f0000000180)={'caif0\x00', @ifru_flags=0x200}) close(r5) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:27 executing program 5: r0 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010ac054c0200000000000109022d00810000000009040001010300000009210200000122040c09058103000000000009050203000404fe7f"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000c5d0f40050500010d8390102ab761481092b5b03010902240001f0ff000009040000028aaa8f000905000000000000000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="1b12b4a418b044dddb985861c49994075d00b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') r4 = socket$inet(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x30, 0x44, {0x44, 0x22, "2e2a21af4af0bba9e6e4f9fae739bb1c63e1793e6ce0f7234698e1b3b3f42f47f62f0d7879021a74bea77d51aaf845d6b0cbceb3d1fc08004cdd5224ee03ac538be9"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000380)={0x40, 0x18, 0x62, "7c636f19a947925cd0ad6bf7c23771ac6fe002608fefc5dfda22f79f0a43908b576467537ea4dcfe984a7bdc29e2bf73b1e8a886fa4827eeb1bc04351a945b090a35f946668ced690356d99d70a3baa4f3c9976bb85bb35f1209b393dcbf9368d918"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x7, 0xf240, 0x10001, 0x3, 0x101, 0x7, 0x79, 0x800, 0x5, 0x8, 0x4, 0x9}}, &(0x7f00000004c0)={0x20, 0x85, 0x4}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x1ff}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000240)=0x7) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x0, 0x70bd28, 0x0, {}, ["", ""]}, 0x14}}, 0x40) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x2000000) 22:45:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) utimensat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xfff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) getdents(r5, &(0x7f0000000300)=""/153, 0xaa) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) [ 328.408966][T14227] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 328.418000][T14227] FAT-fs (loop0): Filesystem has been set read-only [ 328.425678][T14227] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 328.436119][T14227] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 328.451002][T14233] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 328.489173][T14234] FAT-fs (loop4): bogus number of reserved sectors [ 328.496049][T14234] FAT-fs (loop4): Can't find a valid FAT filesystem [ 328.546584][T14234] FAT-fs (loop4): bogus number of reserved sectors [ 328.553217][T14234] FAT-fs (loop4): Can't find a valid FAT filesystem [ 328.578330][ T5] usb 6-1: new high-speed USB device number 23 using dummy_hcd 22:45:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x3, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x1) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mtu(r0, 0x0, 0x17, &(0x7f0000000180)=0x8, 0x4) 22:45:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x300) 22:45:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) utimensat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xfff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) getdents(r5, &(0x7f0000000300)=""/153, 0xaa) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 22:45:27 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xa040, 0x0) dup2(r0, r1) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xdffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7ff9a7c1f6661d9b350e500000013", 0x10, 0x3}], 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, 0x1, 0x5, [@private=0xa010101, @loopback, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x24) fchdir(r2) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000000)) r6 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000200)={0x9d, 0x4, &(0x7f0000000300)="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"}) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:27 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) exit(0x1f10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 328.726119][T14251] FAT-fs (loop4): bogus number of FAT structure [ 328.755535][T14252] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 22:45:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) utimensat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xfff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) getdents(r5, &(0x7f0000000300)=""/153, 0xaa) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) [ 328.786111][T14251] FAT-fs (loop4): Can't find a valid FAT filesystem [ 328.801807][T14252] FAT-fs (loop0): Filesystem has been set read-only [ 328.811384][T14264] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 328.846631][T14252] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 328.859482][ T5] usb 6-1: device descriptor read/64, error 18 22:45:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x40c02, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setparam(r0, &(0x7f0000000240)=0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) write$cgroup_type(r3, &(0x7f0000000080)='threaded\x00', 0xfffffc61) recvmsg(r2, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00) [ 328.886827][T14265] FAT-fs (loop4): bogus number of FAT structure [ 328.893297][T14270] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 328.933793][T14265] FAT-fs (loop4): Can't find a valid FAT filesystem [ 329.258308][ T5] usb 6-1: device descriptor read/64, error 18 [ 329.528309][ T5] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 329.808367][ T5] usb 6-1: device descriptor read/64, error 18 [ 330.198304][ T5] usb 6-1: device descriptor read/64, error 18 [ 330.318377][ T5] usb usb6-port1: attempt power cycle [ 331.028266][ T5] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 331.118321][ T5] usb 6-1: Invalid ep0 maxpacket: 0 22:45:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 22:45:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x500) 22:45:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ftruncate(r2, 0xd8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xb0, 0x3, 0x18, "aa8f9fd8440e4a8ff21fd5caa7565fe1", "47756589263cffb2d7f224b068373c4515537d46133dadf77158ed535caf512f1dd7e45fbbff10297d026729903575f66f4c7b9aecd592c60202f9ef891e60097d114b2e1158a03deb928c4549a06e61e0c421314b17a4a65aed3b17aa3fb42229edd0339e422c48bfa0e528e4acb0eafbd99978408ca22ce9d7363db015d7232f0f4749cea7f9b007d66831a6e962740c51a9191845f06733626c"}, 0xb0, 0xd440babd050517f8) r5 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xfffffffffffffe6a) 22:45:30 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) clone3(&(0x7f0000000380)={0x865788c6b3eb5ce9, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x9}, &(0x7f00000001c0)=""/185, 0xb9, &(0x7f0000000280)=""/150, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r0], 0x5, {r1}}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000640)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000040)=0xd1, 0x4) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x80000020}}], 0x3df, 0x86, 0x0) 22:45:30 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x24, 0x2}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="120100001f000000390102030109022400010000000009040000028aaa8f0009050000000000000009050000000000000000000000000a657130b597228d4af9290a20a73db3528a02eb35616b7eb29d0ace6f300a06beb8e2b71e"], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000500)={0x7, 0x80, [0xff81, 0x1f, 0x2, 0x5, 0x8001], 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000006000000000000b8be387c3d81dd0ce5b57efbf0f1e4c7008500000080000000c80a17b417a4684235623f6e5e509c5cd6c55d6b7c2f820cb0d0461103aff5c0ada9f417029eabf4c64979e9c708a243d8874d8df6db5afaf77c7588ff38fc131356c3bb7bc710c32f516dd122330404554a3943dbffb570f07a2b3ee07cff67892bb3c9731978f5126500000000000000001a491b590d06a9536094fc048c632b77f94c67329e41ab2ba1dca5266ccbab0b54640bace3511467c68b1fb83972ce62ce7508807aba50e324ab4906d121dd4ea6b6d842bac4e7139ad9f6c59d9ad03b4efec53024b28ca849fce6e81c15d351dfc56cda7eb2da525a4061e7f0afc073007a0521fc92acd82758a3549ac8e8c42e5ab38e6663fc90ae15"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x4f, &(0x7f0000000200)=""/79, 0x40f00, 0xb, [], r2, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x6, 0x9}, 0x10, 0xffffffffffffffff, r3}, 0x78) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x6, r3, &(0x7f0000000100)="9fcf9f57a112fe2f55e13199c430aab004acc5e37e0846b11c7436ab1eb41ff0754c5ba6f3519e760c2330d8d387ce50a5cc831b206ae961236ce1ed8e9a9ff49ed400b9c2bcb788", 0x48, 0x8001, 0x0, 0x2, r4}, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$IPVS_CMD_SET_SERVICE(r1, 0x0, 0x20040000) [ 331.268304][ T5] usb 6-1: new high-speed USB device number 26 using dummy_hcd 22:45:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57e, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="cd61700cabf48b47d622d716f223f055488d3463c33f62f2edb836287cf7a92b41708932d23aef199aa3853c75fceede06c935846b27a193", 0x38, 0x7b}, {&(0x7f00000001c0)="a04d03573c12b744b7d9a4b23e8aefeeb062cfe15a9a74d7a8b7cdede26aa58479437d878b7bbbf9cdbe35454306239c50fb864cc399ebf650ce16c8da015dcfa3fdbc9985023288", 0xfffffffffffffe8b, 0xf6}, {&(0x7f0000000300)="06327c241356087f7e36948cbdce7a1c91dff4e2ba2548bd1a9ae04023d7446e5c13672be45139c4c379eed32b777206b91d82913f44b0030fe150150136f471ef6ec900576c55acaf9cc9a345c0a0d8380f73f2ef653955affeee63d74aae16b20d8c7e1cd94c633cf3360a3e034b583dc507defb26bfdd838d0da12edcb31828b023dab10642e7fa9012e5ddd31c8e3624e5b917efbbd55f919bf40003c9643d30b4d15d8df94c3288d66a5ebe9616dac6f297e08aa9ac6574bca2255dc6c9", 0xc0, 0x959}], 0x2800000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) [ 331.348155][T14298] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 331.378278][ T5] usb 6-1: device descriptor read/8, error -71 [ 331.411741][T14298] FAT-fs (loop0): Filesystem has been set read-only [ 331.455879][T14308] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 331.478885][T14298] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:30 executing program 2 (fault-call:12 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 331.506739][T14317] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x600) [ 331.554263][T14319] FAULT_INJECTION: forcing a failure. [ 331.554263][T14319] name failslab, interval 1, probability 0, space 0, times 0 22:45:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x6, r3, &(0x7f0000000100)="9fcf9f57a112fe2f55e13199c430aab004acc5e37e0846b11c7436ab1eb41ff0754c5ba6f3519e760c2330d8d387ce50a5cc831b206ae961236ce1ed8e9a9ff49ed400b9c2bcb788", 0x48, 0x8001, 0x0, 0x2, r4}, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000}) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$IPVS_CMD_SET_SERVICE(r1, 0x0, 0x20040000) 22:45:30 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 331.600417][T14319] CPU: 0 PID: 14319 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 331.610769][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.620835][T14319] Call Trace: [ 331.624209][T14319] dump_stack+0x14a/0x1ce [ 331.628530][T14319] ? devkmsg_release+0x11c/0x11c [ 331.633464][T14319] ? xas_find_marked+0x8ec/0xa10 [ 331.638374][T14319] ? show_regs_print_info+0x12/0x12 [ 331.643544][T14319] ? xas_set_mark+0x18e/0x1e0 [ 331.648199][T14319] should_fail+0x6fb/0x860 [ 331.652590][T14319] ? setup_fault_attr+0x3d0/0x3d0 [ 331.657616][T14319] ? page_writeback_cpu_online+0x2f0/0x2f0 [ 331.663393][T14319] ? ext4_init_io_end+0x25/0xf0 [ 331.668217][T14319] should_failslab+0x5/0x20 [ 331.672719][T14319] kmem_cache_alloc+0x36/0x260 [ 331.677472][T14319] ext4_init_io_end+0x25/0xf0 [ 331.682135][T14319] ext4_writepages+0x158e/0x3f30 [ 331.687123][T14319] ? __getblk_gfp+0x3a/0x750 [ 331.691716][T14319] ? __rcu_read_lock+0x50/0x50 [ 331.696486][T14319] ? ext4_readpage+0x2b0/0x2b0 [ 331.701239][T14319] ? ext4_get_inode_loc+0x60/0x60 [ 331.706244][T14319] ? avc_has_perm+0xd5/0x280 [ 331.710808][T14319] ? avc_has_perm+0x176/0x280 [ 331.715457][T14319] ? ext4_xattr_ibody_get+0x629/0xb20 [ 331.720813][T14319] ? __up_read+0x6f/0x1b0 [ 331.725138][T14319] ? ext4_attr_store+0x840/0x840 [ 331.730047][T14319] ? ext4_readpage+0x2b0/0x2b0 [ 331.734787][T14319] do_writepages+0x13a/0x280 [ 331.739350][T14319] ? __writepage+0xc0/0xc0 [ 331.743742][T14319] ? ext4_xattr_get+0x5a9/0x810 [ 331.748577][T14319] ? memset+0x1f/0x40 [ 331.752564][T14319] filemap_write_and_wait_range+0x3b2/0x460 [ 331.758473][T14319] ? filemap_write_and_wait+0x420/0x420 [ 331.763999][T14319] ? ktime_get_coarse_real_ts64+0xd9/0xf0 [ 331.769697][T14319] generic_file_direct_write+0x18b/0x6d0 [ 331.775325][T14319] ? pagecache_write_end+0xa0/0xa0 [ 331.780420][T14319] ? file_update_time+0x2fd/0x3f0 [ 331.785424][T14319] ? file_remove_privs+0x640/0x640 [ 331.790510][T14319] ? _kstrtoull+0x38d/0x490 [ 331.794986][T14319] ? down_write_trylock+0xd8/0x150 [ 331.800086][T14319] __generic_file_write_iter+0x25f/0x440 [ 331.805711][T14319] ext4_file_write_iter+0x8d9/0x1070 [ 331.811024][T14319] ? perf_trace_ext4_da_reserve_space+0x4fa/0x540 [ 331.817420][T14319] ? ext4_file_read_iter+0x140/0x140 [ 331.822695][T14319] ? proc_fail_nth_write+0x18f/0x250 [ 331.827982][T14319] ? proc_fail_nth_read+0x1d0/0x1d0 [ 331.833185][T14319] ? iov_iter_init+0x83/0x160 [ 331.837857][T14319] __vfs_write+0x59d/0x720 [ 331.842254][T14319] ? __kernel_write+0x340/0x340 [ 331.847104][T14319] ? avc_policy_seqno+0x17/0x70 [ 331.851931][T14319] ? security_file_permission+0x128/0x300 [ 331.857626][T14319] vfs_write+0x217/0x4f0 [ 331.861851][T14319] ksys_write+0x18c/0x2c0 [ 331.866170][T14319] ? file_open_root+0x450/0x450 [ 331.870993][T14319] ? __ia32_sys_read+0x80/0x80 [ 331.877043][T14319] do_syscall_64+0xcb/0x150 [ 331.881536][T14319] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 331.887422][T14319] RIP: 0033:0x45ca69 [ 331.891299][T14319] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 331.910894][T14319] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 331.919301][T14319] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 331.927264][T14319] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000003 [ 331.935251][T14319] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 331.943198][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 22:45:30 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:30 executing program 2 (fault-call:12 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 331.951144][T14319] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 [ 331.959855][ T5] usb 6-1: device descriptor read/8, error -71 [ 331.974538][T14314] FAT-fs (loop4): invalid media value (0x9a) [ 331.980707][T14314] FAT-fs (loop4): Can't find a valid FAT filesystem [ 332.053550][T14330] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 332.069981][T14314] FAT-fs (loop4): invalid media value (0x9a) [ 332.085297][T14314] FAT-fs (loop4): Can't find a valid FAT filesystem [ 332.088314][ T5] usb usb6-port1: unable to enumerate USB device 22:45:30 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:30 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 332.102874][T14330] FAT-fs (loop0): Filesystem has been set read-only [ 332.121254][T14342] FAULT_INJECTION: forcing a failure. [ 332.121254][T14342] name failslab, interval 1, probability 0, space 0, times 0 [ 332.133928][T14346] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 332.165948][T14330] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 332.190465][T14358] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 332.201611][T14342] CPU: 0 PID: 14342 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 332.211774][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.221836][T14342] Call Trace: [ 332.225127][T14342] dump_stack+0x14a/0x1ce [ 332.229470][T14342] ? devkmsg_release+0x11c/0x11c [ 332.234408][T14342] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.240470][T14342] ? show_regs_print_info+0x12/0x12 [ 332.245669][T14342] should_fail+0x6fb/0x860 [ 332.250115][T14342] ? setup_fault_attr+0x3d0/0x3d0 [ 332.255403][T14342] ? mempool_alloc_slab+0x16/0x30 [ 332.260429][T14342] ? mempool_free+0x380/0x380 [ 332.265108][T14342] should_failslab+0x5/0x20 [ 332.269630][T14342] kmem_cache_alloc+0x36/0x260 [ 332.274389][T14342] ? mempool_free+0x380/0x380 [ 332.279063][T14342] mempool_alloc_slab+0x16/0x30 [ 332.283913][T14342] mempool_alloc+0x116/0x690 [ 332.288503][T14342] ? mempool_alloc+0x123/0x690 [ 332.293264][T14342] ? mempool_resize+0x910/0x910 [ 332.298372][T14342] ? mempool_resize+0x910/0x910 [ 332.303260][T14342] ? _raw_spin_unlock+0x5/0x20 [ 332.308023][T14342] ? page_vma_mapped_walk+0x1d5/0x700 [ 332.313785][T14342] bvec_alloc+0x149/0x190 [ 332.318118][T14342] bio_alloc_bioset+0x3dc/0x690 [ 332.322975][T14342] ? bio_chain_endio+0xf0/0xf0 [ 332.327743][T14342] ? bdev_write_page+0xd3/0x1d0 [ 332.332591][T14342] __mpage_writepage+0x1004/0x1890 [ 332.337702][T14342] ? __rcu_read_lock+0x50/0x50 [ 332.342462][T14342] ? mpage_writepages+0x2f0/0x2f0 [ 332.347485][T14342] ? percpu_counter_add_batch+0x12d/0x150 [ 332.353293][T14342] ? wait_on_page_writeback+0x200/0x200 [ 332.358841][T14342] ? stack_trace_save+0x123/0x1f0 [ 332.363864][T14342] ? __rcu_read_lock+0x50/0x50 [ 332.368629][T14342] write_cache_pages+0x912/0xdc0 [ 332.373657][T14342] ? mpage_writepages+0x2f0/0x2f0 [ 332.378689][T14342] ? tag_pages_for_writeback+0x580/0x580 [ 332.384322][T14342] ? avc_has_perm_noaudit+0x400/0x400 [ 332.389701][T14342] mpage_writepages+0x155/0x2f0 [ 332.394552][T14342] ? fat_block_truncate_page+0x50/0x50 [ 332.400008][T14342] ? clean_buffers+0x230/0x230 [ 332.404781][T14342] ? arch_stack_walk+0xb8/0x120 [ 332.409761][T14342] ? fat_block_truncate_page+0x50/0x50 [ 332.415226][T14342] ? unwind_get_return_address_ptr+0x130/0x130 [ 332.421380][T14342] ? memset+0x1f/0x40 [ 332.425534][T14342] ? fat_readpage+0x20/0x20 [ 332.430037][T14342] do_writepages+0x13a/0x280 [ 332.434633][T14342] ? __writepage+0xc0/0xc0 [ 332.439143][T14342] ? __rcu_read_lock+0x50/0x50 [ 332.443915][T14342] ? unwind_get_return_address_ptr+0x130/0x130 [ 332.450078][T14342] filemap_write_and_wait_range+0x3b2/0x460 [ 332.456072][T14342] ? filemap_write_and_wait+0x420/0x420 [ 332.461621][T14342] ? unwind_get_return_address+0x48/0x90 [ 332.467259][T14342] ? timespec64_trunc+0x67/0xa0 [ 332.472116][T14342] ? fat_truncate_time+0x402/0x520 [ 332.477231][T14342] generic_file_direct_write+0x18b/0x6d0 [ 332.482872][T14342] ? pagecache_write_end+0xa0/0xa0 [ 332.487982][T14342] ? file_update_time+0x398/0x3f0 [ 332.493007][T14342] ? file_remove_privs+0x640/0x640 [ 332.498117][T14342] ? __kasan_slab_free+0x1f2/0x230 [ 332.503230][T14342] ? down_write+0xd8/0x150 [ 332.507650][T14342] __generic_file_write_iter+0x25f/0x440 [ 332.513312][T14342] ? get_pid_task+0x86/0x90 [ 332.517815][T14342] generic_file_write_iter+0x4a6/0x650 [ 332.523281][T14342] __vfs_write+0x59d/0x720 [ 332.527706][T14342] ? __kernel_write+0x340/0x340 [ 332.532558][T14342] ? avc_policy_seqno+0x17/0x70 [ 332.537409][T14342] ? security_file_permission+0x128/0x300 [ 332.543128][T14342] vfs_write+0x217/0x4f0 [ 332.547370][T14342] ksys_write+0x18c/0x2c0 [ 332.551694][T14342] ? file_open_root+0x450/0x450 [ 332.556545][T14342] ? __ia32_sys_read+0x80/0x80 [ 332.561341][T14342] do_syscall_64+0xcb/0x150 [ 332.565842][T14342] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.571726][T14342] RIP: 0033:0x45ca69 [ 332.575611][T14342] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.597228][T14342] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.605630][T14342] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 332.613594][T14342] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 332.621647][T14342] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 332.629699][T14342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 332.637662][T14342] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 [ 332.908211][ T5] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 333.148197][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 333.268287][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.279220][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.292852][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 333.302466][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.311412][ T5] usb 6-1: config 0 descriptor?? [ 333.549642][T14301] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 333.782033][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.788947][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.795896][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.804625][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.812302][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.820148][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.827003][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.835099][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.842838][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.850552][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.857416][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.865568][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.873318][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.880895][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.889532][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.896397][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.903433][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.910415][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.917810][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.924699][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.931644][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.938651][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.945514][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.952402][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.959425][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.966297][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.973197][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.980156][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.987067][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 333.995201][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.002786][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.010395][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.017255][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.025509][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.033089][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.040738][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.047586][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.055775][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.062762][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.069679][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.076527][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.083518][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.090453][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.097305][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.104198][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.111082][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.118154][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.125063][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.131965][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.138852][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.145704][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.152577][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.159471][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.166313][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.173275][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.180278][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.187123][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.194009][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.200915][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.207758][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.214639][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.221528][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.228945][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.235816][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.243142][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.250089][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.256985][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.263866][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.270774][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.277613][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.284482][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.291365][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.298249][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.305125][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.312014][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.318904][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.325742][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.332690][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.339593][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.346438][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.353338][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.360759][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.367600][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.374556][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.381463][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.388338][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.395188][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.402062][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.408991][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.415846][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.423506][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.430416][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.437253][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.444121][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.451013][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.458146][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.464999][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.471976][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.478993][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.485932][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.492810][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.499693][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.506534][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.513529][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.520412][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.527262][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.534137][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.541038][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.547878][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.554751][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.561659][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.568540][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.575396][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.582304][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.589215][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.596057][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.603114][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.610799][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.618479][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.626288][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.633321][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.640228][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.647068][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.653954][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.661466][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.668360][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.675263][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.682177][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.689076][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.695924][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.702862][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.709777][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.716637][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.723540][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.730438][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.737290][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.744176][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.751078][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.757935][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.764813][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.771729][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.778630][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.785925][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.792807][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.799713][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.806613][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.813766][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.820670][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.827515][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.834689][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.841619][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.848545][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.855503][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.862442][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.869344][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.876797][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.883689][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.890584][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.897443][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.904376][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.911360][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.918243][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.925116][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.932025][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.939520][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.946368][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.953272][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.960977][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.967927][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.974817][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.981718][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 22:45:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="62f3796309c26d9f8805264d7e57ce64ee2ffb62640863b4e00bfeb0fb8cc3540cf6e606df92d601a85be71be1822a7631d61c952f59247a142f97e7a0b35d5c6f60c7728d6132258370e4abc13cfffe96c886d50ea0a791743cd81c45442007fd8a08f2e31c82e0774aa2b5cf18fb251f278d1e10820855a325e53f430b7c410b8de4d0424500da3c58ec0868ea6eb3d7a8ae775092b7f5e5206e8825df4389fc41d9b2559b097418b1acc938a1d57a685c6811fde93d2d9ecc2af6e454c179f54ab6a58a59078a9613f2360aff06b3a57a0f5a79770d5b92c434b6e81af191a663969821b93754a10a91d1c817de89cab325d87a151305", @ANYRES64=r2, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6c0) 22:45:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x12825, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) getresuid(&(0x7f0000004e80)=0x0, &(0x7f0000004ec0), &(0x7f0000004f00)) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r12) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005180)=[{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="6deb3dde2a5ea7e784df25cf923c03fa0bfc3ad3dc1cf03c97962f90468776cd7955229bcf9b89a6cf084649a24fe19262e44df071bf885c5c814b902e3ea24dfb46c5604bf07ea703e607e794ba3562959695942681d51d77c9e652f65b161a5f122c7af912ec934baff368ae1f751baae8a537d1a0bb22ba2fb2f61c2f6e41fb24f740bf4871a4bb7c6e5cbe3cd3ce6c4af6e917f19986cbf1cfbfdd4b882dd9fb7171dfc4798c52ff6ba845c0a9", 0xaf}, {&(0x7f0000000740)="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", 0x1000}], 0x2, &(0x7f0000001740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x20, 0x88d0}, {&(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002840)=[{&(0x7f0000001800)}, {&(0x7f0000001840)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40000}, {&(0x7f0000002880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000002900)="f62cfc5731fec7ba8eb397f00bf407142a106053935ef6a05d783a6af4d91dd242da181a4cf774974b7fd1d59e342ecf61f9df00e82e1d0cf2d2805b7cffbbe577498dfdbfd2f3c3e3de567905a412e1f433acf2da44cfd00c37978cec6a3da58cf03200b4491334492940acbc4359657d1d6fe0875c84edbcd80717738a313e45241368144c128781a600c35f47234d087628e6e9b12175d9e65be86b0ff4c1dcc0351cca5d6f40b20716547d43faf5b3eec73b592407c08674806f3738d9884a82f7269c509904fdff27784a3eb28ab15a213dae", 0xd5}, {&(0x7f0000002a00)="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", 0xfc}, {&(0x7f0000002b00)="5d336f58bc2cbe2c11bd949911bb68fd4dcf894b8f", 0x15}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="401b8b6a7d72788867c54087efd92a2ca0f88a9eb9ffd56ead883374a6027a08fcf3952800c2e42614bede2c175f47f29d5efc77c21b020a6e8869c79e1ac20607968068d06dccb7ed3969305fe6d5032e1900108a547563afacacc48b468fd9e46f06329e9dec890a481c4f3f22c0a7e132ebf5b84da8988db162f2256dddb8ba61ba63e7c1a06d73cb5824e4513fed613bb0973ffdcff4ec71180e76b0c54a50cd93ae0d44321da058f7236ad15653313e421693ee30a44a4575687748d5742b4b711a0afdcd1e4fcb71bd6281ab81ba076b18e74dca853e9b9f593ba08db7e4bd", 0xe2}, {&(0x7f0000003c40)="bb5c386e6a723c7130969ec369249b8ccf1aed22719c9b3519a4c3126e16900c338f08064d59631ee5d7ae8bd60fef2e07749a14eb946c8a857ba86d82eb40601999418646f9892a9e6e30db8e70f17f01994eb953c805dc003c13aaa495a1c2386794eee5bffd33b8250232783c76bb9c0d3ee825c0017779682d43c9e837d4d65ef4c35045acf0c13004", 0x8b}, {&(0x7f0000003d00)="0937b001aada622a15dff1d85551d8eb5da6ac93a2d28c520391bf6c426c8c9e38abc944d3317dc57fdb003ae28cb2e12480491423f9666b85c1270a38bd9796247b1881e43fa28b5ebfbf434c08a56f592db3647a4ca8f47a1879d4312d47436852d47d84792b568de9c7bfd50d79", 0x6f}, {&(0x7f0000003d80)="d4330d11e17c0bb5b302e121a11a7b9c89bd73fa51f7288c8a03b50aee20288bd012582ecceea640fee26158303d1ab0ee1a3e9a185db3efcbae1447f0fd782f078bf4528a166f7fd0c5de33b56d0d9c994c459a0ee79fd3d588e943d0d207a0dc07f9b407e6af3c46", 0x69}], 0x8, &(0x7f0000003f40)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x20004000}, {&(0x7f0000003f80)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000004000)="8f3755bd24440a7f5897ced42721de2f2743bc62c0c7be274c3e687eb2d72208c4de76629fec08f776df22a97414cd1e0200d00e92e71cf14f53d15583460147cc9a980a219c13416de94f75445183e184217717299f5b4321a7af960b4cb977bc54d30ac07bb58d40bfc4b10f5df632c6046c19e6e394172274b948cb85c175eb70b7687b3513", 0x87}, {&(0x7f00000040c0)}, {&(0x7f0000004100)="c5d856e12444644bed8ec4c225402c2bd488f21d6834b7d8fb8091f7b75db8b3b879709030e969941905da31295936b32d6ba2435b8dc282d17719ec1022245b0558d1ac6a970813f7866b91177c439fa2af10a3b155c61e674c73ff4f87bc11dfda77d9eb58e52f04078c93a3", 0x6d}], 0x3, &(0x7f00000041c0)=[@rights={{0x18, 0x1, 0x1, [r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x38, 0x20040014}, {0xfffffffffffffffe, 0x0, &(0x7f0000004580)=[{&(0x7f0000004200)="957b3006130068ff231352899531c1db2f95780050a5ee1fce1ecd0f27ea6042a15281558d9ede70c6ffb4b596ab04b9c506e8a6fa3de1758f7d90a6b387ae5ff79aff075f72a147f62d3404be2f774e98195e667a2c5d4551821e7a13a83fe2a03f25cb529cf72d34d3020df03c49881ebae60c372874", 0x77}, {&(0x7f0000004280)="a27b8da40134b346c9cd2dfa83687fad8cafb3c32f029699", 0x18}, {&(0x7f00000042c0)="233196ad220ee6522705a5b2fde4a173077b419aae58e6b27749d19c69afd1f88c80f3e0fd79d391309fbb49a543ff0c42137835770552be3b451969e19209b984b4efec9f681a437db6bc4fc12179696b5a41c6bc7fc68b2f6408396cc36b91d400bf5fbf4fbd572a6fefc628b584ef08b9bdd9be07a75204fcb9df9c8bd754e3a0780b67eaf1d55df53d259eed57beeae97534ad76abf52c52d85718c9b2f39b938871fde615ef31259ae2b93d869981f5a3a223a8ca444f883f961f4a6ea03ed0a6cf89ef60044933509f261c6c1e280904f6e4cfd1446f86f32151528f2ccb4c2182ad8d47", 0xe7}, {&(0x7f00000043c0)="94becff1882f0d8e7ea151652c556e34f4983f997781c2fb0670a89ee7c63c2f822d90e3ec7972fe9c65748696c576add32ca8cbe9b9e421fe295cb55ed1c56b3315147a57d84fd091783400ee37edc3d2cb83da59f9fa5a329d66c6288401d4b0914210c08d2a2865eaa0", 0x6b}, {&(0x7f0000004440)="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", 0xff}, {&(0x7f0000004540)="6a49fa", 0x3}], 0x6, 0x0, 0x0, 0x20000014}, {&(0x7f0000004600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004940)=[{&(0x7f0000004680)="48ad3fba2fa6d7a69a24453d024beeb8d11587da6bf73c765d249b52ba77db0e6725641bf6c6b9fbcb70193a9d1050acf5528c4d433d7272a0f6667ff5dcbfe4924aaf4ac48d77111de47fa9c443a77b77b74c82abe0591253a400ca", 0x5c}, {&(0x7f0000004700)="a8de7fa5b9459e79401082495aa512e9e286044b01d26fe557fb827c85996fea230f7c09400f54997ac093ad10084c5255184e27ead82d0f6dbab42542a4fb3c673c43634ada06e838bac9da7c2205b1a64a8e2beeb8f8158522dcae34ef563308c5f87a9f64e19fe9d2d294035f72193006ae0b59e08350bf0ecb0e1f0f4705fcc72ebab6b30cd2ca4f", 0x8a}, {&(0x7f00000047c0)="7f12ddb61a3631fa2ce69c69e15b274a0e8e4d3930d7d3ae6869be6164b6cf63c0e6a957c77bc25434877f27772b9c7a3ef183dc7ca4e00bb5c4f137d08fc20218e2fbdce218b7a62cb653e424305abaabf90f530094eef0577e79d6defd25585fdadb9b87e3ca8529dea6a8765d6df8074c7601b9acdf44b3de2a05792e5925e706", 0x82}, {&(0x7f0000004880)="19e262b9bcb4f96daab73e68d452801f12250e0bd9b699f6bef892b94e9d2c9aed7d2a264c70bf9aab08336059531bda72448354e2c6f694c7e03a7a48de022e59fe2a6f3775f276ad84fb8fa79677ccae734314260a23cdfaff7229e613d7baec3e1d45440eaa25e5f4ca668265cd753749b2cfcd4961432dc7401727fb09c9f3be52feacf6f5d541b7782fdc2a1b42e2d2bdf189ff7322317aab39a8cc51937eea25", 0xa3}], 0x4, &(0x7f0000004b40)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r6, r3, r0]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}], 0xb0, 0x800}, {&(0x7f0000004c00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000004c80)="d5e948697526be4e1787d8df511e12d89d650925977015061b9fb7ece7a22fde02d07d38f0ae93ef61acd7770961e3e0ba076e21a7d3391f8a28f195e755a810f3b3defb60f92248c78ee38e77b7baaa8bc36b9da887a0353011526edc19853db718cfc75621ca3642924de58b0def1ba20e27664ab0816499", 0x79}, {&(0x7f0000004d00)="6b6d79a9decc5c800bd4926664095d9e832d68ce49736c2777be62b0f41826b48ed26aba9279c13391bbd13ca24dc3305315106737937af4e0efb21e937e40d942d69f8b1ef06833f7fda94ffea4530e5da82832b9db0d1b300d83dfe4347ee7ce42e0f21e14ea8fe8dab8f0e3d6502de0a601b74d8f97785f342a5b0f54acc3864c05624b27414073af375ddfd9a21aa0da515b0c1272689d89", 0x9a}], 0x2, &(0x7f0000004f40)=[@rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r12}}}], 0x60, 0x4000801}, {&(0x7f0000004fc0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000005140)=[{&(0x7f0000005040)="4fead349383822bd428a0a26210cfc4962363ee37dd845e548214faa45609906bbdfd11e599acd8dd1ea39fbd2bf3b00e5b46b315b143795996e48005d028f9650054b2c7b8fae633ee039b7", 0x4c}, {&(0x7f00000050c0)="3381b4e61a3af77a642ad378c30a5a58b358bc2025831cf3f14aa4e4877081c8fb97918825107f86b3d6471f50c62207fea6600fbae6a2a12681524f39a1462b0c08ca12fae0fa481681d4b1989e8aa40642673ed957d05c9483ed55eeaeb5116a5afdf3c9ccb8456edbb475f3", 0x6d}], 0x2, 0x0, 0x0, 0x800}], 0x8, 0x4008850) setuid(r8) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@allocspi={0x118, 0x16, 0x8, 0x70bd29, 0x25dfdbfe, {{{@in6=@empty, @in6=@remote, 0x4e21, 0x8, 0x4e21, 0x2, 0x2, 0x0, 0xa0, 0x3b, 0x0, r8}, {@in6=@private1, 0x4d4, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x200, 0xfff, 0x0, 0x4, 0xd61, 0x6, 0x4, 0x7}, {0x1f, 0x80000000, 0x9, 0xfffffffffffffff7}, {0x41e13e2f, 0x4, 0x7fff}, 0x70bd2a, 0x0, 0xa, 0x2, 0x0, 0x80}, 0xc249, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x3}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @lastused={0xc, 0xf, 0x7}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x40) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:33 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) 22:45:33 executing program 3: ioperm(0x0, 0x1ff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r1 = accept$inet(r0, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x80000001, 0x7, 0xfffff000, 0x40, 0x10001}) 22:45:33 executing program 2 (fault-call:12 fault-nth:2): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:33 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) [ 334.988613][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 334.995491][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.008631][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.024086][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 22:45:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0xfffffffc, 0x1, 0x6, 0x7ff, 0x20}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x5, 0x2, 0x0, 0x20, 0x0, 0x1, 0x2b42f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff80000000000, 0x2}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x84) sendfile(r2, r0, &(0x7f0000000140)=0x7, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10002, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0xfff, 0x3}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000180)=""/82) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0xd990) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x80000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb) preadv(r5, &(0x7f00000017c0), 0x1a1, 0x0) syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac00000000006300e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 335.036431][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.043759][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.050702][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.057560][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.064573][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.071777][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.078816][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.086130][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.112499][T14385] FAULT_INJECTION: forcing a failure. [ 335.112499][T14385] name failslab, interval 1, probability 0, space 0, times 0 [ 335.137187][T14381] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 335.140608][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.148910][T14381] FAT-fs (loop0): Filesystem has been set read-only 22:45:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "1e7e32db", {0x3, 0x105, 0x0, 0x77, 0x8, 0x7, 0x48}}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) [ 335.158559][T14385] CPU: 0 PID: 14385 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 335.169851][T14385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.174824][T14381] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 335.181554][T14385] Call Trace: [ 335.181572][T14385] dump_stack+0x14a/0x1ce [ 335.181580][T14385] ? devkmsg_release+0x11c/0x11c [ 335.181588][T14385] ? init_wait_entry+0xd0/0xd0 [ 335.181595][T14385] ? show_regs_print_info+0x12/0x12 [ 335.181601][T14385] ? percpu_ref_tryget_live+0xd7/0x280 [ 335.181614][T14385] should_fail+0x6fb/0x860 [ 335.222728][T14385] ? setup_fault_attr+0x3d0/0x3d0 [ 335.227760][T14385] ? blk_account_io_start+0x3ee/0x4a0 [ 335.233177][T14385] ? mempool_alloc_slab+0x16/0x30 [ 335.238199][T14385] ? mempool_free+0x380/0x380 [ 335.242875][T14385] should_failslab+0x5/0x20 [ 335.247374][T14385] kmem_cache_alloc+0x36/0x260 [ 335.252269][T14385] ? mempool_free+0x380/0x380 [ 335.256946][T14385] mempool_alloc_slab+0x16/0x30 [ 335.261881][T14385] mempool_alloc+0x116/0x690 [ 335.266472][T14385] ? mempool_resize+0x910/0x910 [ 335.271318][T14385] ? _raw_spin_lock+0x170/0x170 [ 335.276255][T14385] ? __rcu_read_lock+0x50/0x50 [ 335.281014][T14385] ? generic_make_request+0xd0f/0xdb0 [ 335.286393][T14385] bio_alloc_bioset+0x209/0x690 [ 335.291255][T14385] ? __test_set_page_writeback+0x848/0x9a0 [ 335.297068][T14385] ? bio_chain_endio+0xf0/0xf0 [ 335.301828][T14385] ? test_clear_page_writeback+0x790/0x790 [ 335.307719][T14385] submit_bh_wbc+0x1ba/0x790 [ 335.312308][T14385] ? create_page_buffers+0x173/0x1d0 [ 335.317589][T14385] __block_write_full_page+0x862/0xe30 [ 335.323134][T14385] ? mark_buffer_write_io_error+0x150/0x150 [ 335.329017][T14385] ? fat_block_truncate_page+0x50/0x50 [ 335.334468][T14385] __mpage_writepage+0x141f/0x1890 [ 335.339575][T14385] ? rmap_walk+0xd0/0xd0 [ 335.343814][T14385] ? mpage_writepages+0x2f0/0x2f0 [ 335.348826][T14385] ? page_mkclean+0x330/0x330 [ 335.353518][T14385] ? percpu_counter_add_batch+0x12d/0x150 22:45:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x700) [ 335.359232][T14385] ? wait_on_page_writeback+0x200/0x200 [ 335.364766][T14385] ? stack_trace_save+0x123/0x1f0 [ 335.369814][T14385] ? __rcu_read_lock+0x50/0x50 [ 335.374689][T14385] write_cache_pages+0x912/0xdc0 [ 335.379624][T14385] ? mpage_writepages+0x2f0/0x2f0 [ 335.384736][T14385] ? tag_pages_for_writeback+0x580/0x580 [ 335.390343][T14385] ? avc_has_perm_noaudit+0x400/0x400 [ 335.395690][T14385] mpage_writepages+0x155/0x2f0 [ 335.400535][T14385] ? fat_block_truncate_page+0x50/0x50 [ 335.405982][T14385] ? clean_buffers+0x230/0x230 [ 335.410755][T14385] ? arch_stack_walk+0xb8/0x120 [ 335.415675][T14385] ? fat_block_truncate_page+0x50/0x50 [ 335.421146][T14385] ? unwind_get_return_address_ptr+0x130/0x130 [ 335.427368][T14385] ? memset+0x1f/0x40 [ 335.431372][T14385] ? fat_readpage+0x20/0x20 [ 335.436037][T14385] do_writepages+0x13a/0x280 [ 335.440638][T14385] ? __writepage+0xc0/0xc0 [ 335.445080][T14385] ? __rcu_read_lock+0x50/0x50 [ 335.449825][T14385] ? unwind_get_return_address_ptr+0x130/0x130 [ 335.455958][T14385] filemap_write_and_wait_range+0x3b2/0x460 [ 335.461853][T14385] ? filemap_write_and_wait+0x420/0x420 [ 335.468586][T14385] ? unwind_get_return_address+0x48/0x90 [ 335.474201][T14385] ? timespec64_trunc+0x67/0xa0 [ 335.479112][T14385] ? fat_truncate_time+0x402/0x520 [ 335.484216][T14385] generic_file_direct_write+0x18b/0x6d0 [ 335.490233][T14385] ? pagecache_write_end+0xa0/0xa0 [ 335.495319][T14385] ? file_update_time+0x398/0x3f0 [ 335.500340][T14385] ? file_remove_privs+0x640/0x640 [ 335.505496][T14385] ? __kasan_slab_free+0x1f2/0x230 [ 335.511050][T14385] ? down_write+0xd8/0x150 [ 335.515478][T14385] __generic_file_write_iter+0x25f/0x440 [ 335.521091][T14385] ? get_pid_task+0x86/0x90 [ 335.525580][T14385] generic_file_write_iter+0x4a6/0x650 [ 335.531014][T14385] __vfs_write+0x59d/0x720 [ 335.535404][T14385] ? __kernel_write+0x340/0x340 [ 335.540316][T14385] ? avc_policy_seqno+0x17/0x70 [ 335.545148][T14385] ? security_file_permission+0x128/0x300 [ 335.550839][T14385] vfs_write+0x217/0x4f0 [ 335.555065][T14385] ksys_write+0x18c/0x2c0 [ 335.559388][T14385] ? file_open_root+0x450/0x450 [ 335.564217][T14385] ? __ia32_sys_read+0x80/0x80 [ 335.568971][T14385] do_syscall_64+0xcb/0x150 [ 335.573549][T14385] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 335.579416][T14385] RIP: 0033:0x45ca69 [ 335.583281][T14385] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 335.602887][T14385] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.611298][T14385] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 335.619253][T14385] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 335.627200][T14385] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 335.635155][T14385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 335.643490][T14385] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 [ 335.652062][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 22:45:34 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) [ 335.659512][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.666436][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.673359][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.680287][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.687181][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.694116][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.701043][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.707935][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 22:45:34 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 335.718610][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.725611][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.734576][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.750077][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.764667][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.775076][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.783393][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.791909][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.799906][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.810075][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.817851][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.827431][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.835594][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.846863][T14436] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 335.849237][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.863798][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.865616][T14436] FAT-fs (loop0): Filesystem has been set read-only [ 335.871408][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.881541][T14436] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 335.884544][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.900322][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.907255][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.910367][T14436] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 335.916423][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.930111][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.930489][T14440] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 335.937038][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.951706][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.958787][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.965685][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.972566][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.979454][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.986323][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 335.993223][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.000126][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.006974][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.013848][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.020739][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.027599][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.034475][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.041366][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.048265][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.055121][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.058080][ T140] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 336.062011][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.076296][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.083178][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.090080][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.096941][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.103818][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.110722][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.117681][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.124561][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.131478][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.138361][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.145250][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.152142][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.159030][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.165867][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.172748][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.179733][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.186579][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.193466][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.200370][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.207218][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.214120][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.221014][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.227912][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.234843][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.241789][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.248709][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.255563][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.262474][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.269375][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.276219][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.283178][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.290102][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.296941][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.303833][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.310735][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.317592][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.324498][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.331393][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.338372][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.345236][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.352143][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.359043][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.365905][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.372792][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.379679][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.386643][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.393518][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.400420][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.407287][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.414197][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.421104][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.427965][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.434896][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.441801][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.448695][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.455574][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.462454][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.469368][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.476260][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.483304][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.490239][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.497091][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.503991][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.512113][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.519001][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.525864][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.532769][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.539661][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.546507][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.554352][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.561253][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.568145][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.575015][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.581912][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.588818][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.595660][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.598145][ T140] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 336.602554][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.614681][ T140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.618464][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.627838][ T140] usb 5-1: Product: syz [ 336.633432][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.638810][ T140] usb 5-1: Manufacturer: syz [ 336.644509][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.650605][ T140] usb 5-1: SerialNumber: syz [ 336.655926][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.667359][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.674400][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.681312][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.688221][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.695097][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.702014][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.708912][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.715805][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.722725][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.729631][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.736486][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.743376][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.750317][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.757197][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.764308][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.771206][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.778082][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.784934][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.791814][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.798707][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.805568][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.812543][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.819447][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.826294][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.833233][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.840139][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.847371][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.854369][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.861280][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.868171][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.875041][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.882296][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.889219][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.896079][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.902954][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.909840][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.916684][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.923557][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.930444][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.937506][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.944394][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.952470][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.959367][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.966224][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.973134][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.980023][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.986865][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 336.993784][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.000680][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.007536][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.014431][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.021326][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.028209][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.035061][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.042054][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.049022][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.055879][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.062871][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.069791][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.076636][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.083518][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.090503][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.097739][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.104662][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.111551][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.118428][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.125283][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.132203][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.139090][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.145942][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.152831][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.159922][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.166790][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.173673][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.180567][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.187411][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.194285][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.201176][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.208048][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.214921][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.221802][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.228693][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.235535][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.242418][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.249322][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.256300][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.263200][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.270130][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.276988][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.283889][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.291424][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.298341][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.305194][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.312076][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.318968][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.325911][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.332804][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.339697][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.346536][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.353606][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.360549][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.367875][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.374820][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.381895][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.388809][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.395664][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.402756][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.409665][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.416525][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.423405][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.430312][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.437168][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.444134][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.451179][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.458067][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.464942][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.472008][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.478904][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.485774][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.492670][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.499594][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.506452][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.513325][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.520224][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.527152][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.534030][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.540920][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.547760][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.554657][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.561546][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.568436][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.575310][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.582215][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.589102][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.595964][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.602864][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.609762][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.616611][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.623599][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.630511][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.637382][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.644268][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.651211][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.658114][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.664976][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.671874][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.678786][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.685642][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.692540][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.699436][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.706281][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.713189][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.720084][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.726940][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.733842][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.741202][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.748091][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.754963][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.761850][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.768741][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.775597][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.782483][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.789394][ T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0 [ 337.796391][ T5] wacom 0003:056A:0023.0018: Unknown device_type for 'HID 056a:0023'. Assuming pen. [ 337.806573][ T5] input: Wacom Intuos 12x12 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0023.0018/input/input27 [ 337.826844][ T5] wacom 0003:056A:0023.0018: hidraw0: USB HID v0.00 Device [HID 056a:0023] on usb-dummy_hcd.5-1/input0 [ 337.844521][ T5] usb 6-1: USB disconnect, device number 27 22:45:36 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:36 executing program 2 (fault-call:12 fault-nth:3): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:36 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:36 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') chroot(&(0x7f0000000040)='./file0/file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) statx(r1, &(0x7f0000000000)='./file0/file0/file0\x00', 0x4000, 0x20, &(0x7f0000000340)) geteuid() fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 22:45:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x900) 22:45:36 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 338.039279][T14457] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 338.072018][T14466] FAULT_INJECTION: forcing a failure. [ 338.072018][T14466] name failslab, interval 1, probability 0, space 0, times 0 [ 338.081127][T14457] FAT-fs (loop0): Filesystem has been set read-only [ 338.088334][T14466] CPU: 0 PID: 14466 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 338.101431][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.102485][T14475] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 338.111485][T14466] Call Trace: [ 338.111502][T14466] dump_stack+0x14a/0x1ce [ 338.111512][T14466] ? devkmsg_release+0x11c/0x11c [ 338.111519][T14466] ? show_regs_print_info+0x12/0x12 [ 338.111528][T14466] ? __rcu_read_lock+0x50/0x50 [ 338.111536][T14466] ? update_io_ticks+0x1aa/0x1c0 [ 338.111543][T14466] should_fail+0x6fb/0x860 [ 338.111550][T14466] ? setup_fault_attr+0x3d0/0x3d0 [ 338.111560][T14466] ? mempool_alloc_slab+0x16/0x30 [ 338.111574][T14466] ? mempool_free+0x380/0x380 [ 338.166641][T14466] should_failslab+0x5/0x20 [ 338.168449][T14457] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 338.171226][T14466] kmem_cache_alloc+0x36/0x260 [ 338.171240][T14466] ? mempool_free+0x380/0x380 [ 338.188449][T14466] mempool_alloc_slab+0x16/0x30 [ 338.193302][T14466] mempool_alloc+0x116/0x690 [ 338.196036][T14479] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 338.197888][T14466] ? blk_mq_requeue_work+0x9d0/0x9d0 [ 338.197903][T14466] ? mempool_resize+0x910/0x910 [ 338.215817][T14466] ? generic_make_request+0xd0f/0xdb0 [ 338.221187][T14466] ? blk_attempt_plug_merge+0x310/0x310 [ 338.226732][T14466] ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570 [ 338.232538][T14466] bio_alloc_bioset+0x209/0x690 22:45:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xa00) [ 338.237390][T14466] ? __bio_add_page+0x274/0x430 [ 338.242353][T14466] ? bio_chain_endio+0xf0/0xf0 [ 338.247117][T14466] ? submit_bio+0x14b/0x570 [ 338.251648][T14466] submit_bh_wbc+0x1ba/0x790 [ 338.256244][T14466] __block_write_full_page+0x862/0xe30 [ 338.261700][T14466] ? mark_buffer_write_io_error+0x150/0x150 [ 338.267591][T14466] ? fat_block_truncate_page+0x50/0x50 [ 338.273097][T14466] __mpage_writepage+0x141f/0x1890 [ 338.278370][T14466] ? rmap_walk+0xd0/0xd0 [ 338.282719][T14466] ? mpage_writepages+0x2f0/0x2f0 [ 338.287725][T14466] ? page_mkclean+0x330/0x330 [ 338.292404][T14466] ? percpu_counter_add_batch+0x12d/0x150 [ 338.298107][T14466] ? wait_on_page_writeback+0x200/0x200 [ 338.303647][T14466] ? stack_trace_save+0x123/0x1f0 [ 338.308643][T14466] ? __rcu_read_lock+0x50/0x50 [ 338.313381][T14466] write_cache_pages+0x912/0xdc0 [ 338.318306][T14466] ? mpage_writepages+0x2f0/0x2f0 [ 338.323301][T14466] ? tag_pages_for_writeback+0x580/0x580 [ 338.328911][T14466] ? avc_has_perm_noaudit+0x400/0x400 [ 338.334267][T14466] mpage_writepages+0x155/0x2f0 [ 338.339099][T14466] ? fat_block_truncate_page+0x50/0x50 [ 338.344527][T14466] ? clean_buffers+0x230/0x230 [ 338.349260][T14466] ? arch_stack_walk+0xb8/0x120 [ 338.354101][T14466] ? fat_block_truncate_page+0x50/0x50 [ 338.359563][T14466] ? unwind_get_return_address_ptr+0x130/0x130 [ 338.365698][T14466] ? memset+0x1f/0x40 [ 338.369717][T14466] ? fat_readpage+0x20/0x20 [ 338.374203][T14466] do_writepages+0x13a/0x280 [ 338.378770][T14466] ? __writepage+0xc0/0xc0 [ 338.383178][T14466] ? __rcu_read_lock+0x50/0x50 [ 338.387913][T14466] ? unwind_get_return_address_ptr+0x130/0x130 [ 338.394037][T14466] filemap_write_and_wait_range+0x3b2/0x460 [ 338.399907][T14466] ? filemap_write_and_wait+0x420/0x420 [ 338.405540][T14466] ? unwind_get_return_address+0x48/0x90 [ 338.411191][T14466] ? timespec64_trunc+0x67/0xa0 [ 338.416129][T14466] ? fat_truncate_time+0x402/0x520 [ 338.421219][T14466] generic_file_direct_write+0x18b/0x6d0 [ 338.426861][T14466] ? pagecache_write_end+0xa0/0xa0 [ 338.431964][T14466] ? file_update_time+0x398/0x3f0 [ 338.436990][T14466] ? file_remove_privs+0x640/0x640 [ 338.442078][T14466] ? __kasan_slab_free+0x1f2/0x230 [ 338.447184][T14466] ? down_write+0xd8/0x150 [ 338.451599][T14466] __generic_file_write_iter+0x25f/0x440 [ 338.457204][T14466] ? get_pid_task+0x86/0x90 [ 338.461681][T14466] generic_file_write_iter+0x4a6/0x650 [ 338.467113][T14466] __vfs_write+0x59d/0x720 [ 338.471521][T14466] ? __kernel_write+0x340/0x340 [ 338.476356][T14466] ? avc_policy_seqno+0x17/0x70 [ 338.481195][T14466] ? security_file_permission+0x128/0x300 [ 338.486913][T14466] vfs_write+0x217/0x4f0 [ 338.491152][T14466] ksys_write+0x18c/0x2c0 [ 338.495477][T14466] ? file_open_root+0x450/0x450 [ 338.500311][T14466] ? __ia32_sys_read+0x80/0x80 [ 338.505051][T14466] do_syscall_64+0xcb/0x150 [ 338.509562][T14466] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 338.515426][T14466] RIP: 0033:0x45ca69 [ 338.519292][T14466] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:45:37 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904070000020d0000050d240f0100000000000000000006241a0000000905810340000000000904011267478b70b2f2c6b07e539b1eff9b38ce9c4f0992570da2b7ac0ce81e84f63e35e0d2000000000000000000bb39375789e80d3c3665ce3a8b7c9581a7c79db31c8ecdfe6e0222138c0eac35ced0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 338.538876][T14466] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.547265][T14466] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 338.555213][T14466] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 338.563173][T14466] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 338.571123][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 338.579081][T14466] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 22:45:37 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:37 executing program 2 (fault-call:12 fault-nth:4): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}]}, 0x28}}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x28, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x1) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r5, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r8, &(0x7f0000000100)=""/164, 0x20000118) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x40240, 0x0) 22:45:37 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) prctl$PR_SET_DUMPABLE(0x4, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 338.706141][T14486] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 338.716602][T14486] FAT-fs (loop0): Filesystem has been set read-only [ 338.720759][T10034] usb 5-1: USB disconnect, device number 5 [ 338.731982][T14486] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 338.779471][T14486] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 338.809502][T14494] FAULT_INJECTION: forcing a failure. [ 338.809502][T14494] name failslab, interval 1, probability 0, space 0, times 0 [ 338.833135][T14505] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 338.836496][ T22] audit: type=1400 audit(1591915537.555:17): avc: denied { write } for pid=14500 comm="syz-executor.4" name="net" dev="proc" ino=63611 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 338.846286][T14494] CPU: 0 PID: 14494 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 338.869646][ T22] audit: type=1400 audit(1591915537.555:18): avc: denied { add_name } for pid=14500 comm="syz-executor.4" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 338.874058][T14494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.874061][T14494] Call Trace: [ 338.874076][T14494] dump_stack+0x14a/0x1ce [ 338.874090][T14494] ? devkmsg_release+0x11c/0x11c [ 338.896860][ T22] audit: type=1400 audit(1591915537.555:19): avc: denied { create } for pid=14500 comm="syz-executor.4" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 [ 338.906605][T14494] ? show_regs_print_info+0x12/0x12 [ 338.906615][T14494] ? __rcu_read_lock+0x50/0x50 [ 338.906624][T14494] ? update_io_ticks+0x1aa/0x1c0 [ 338.906631][T14494] should_fail+0x6fb/0x860 [ 338.906642][T14494] ? setup_fault_attr+0x3d0/0x3d0 [ 338.927998][ T140] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 338.940657][T14494] ? mempool_alloc_slab+0x16/0x30 [ 338.940665][T14494] ? mempool_free+0x380/0x380 [ 338.940672][T14494] should_failslab+0x5/0x20 [ 338.940682][T14494] kmem_cache_alloc+0x36/0x260 [ 338.940689][T14494] ? mempool_free+0x380/0x380 [ 338.940695][T14494] mempool_alloc_slab+0x16/0x30 [ 338.940702][T14494] mempool_alloc+0x116/0x690 [ 338.940711][T14494] ? blk_mq_requeue_work+0x9d0/0x9d0 [ 338.940717][T14494] ? mempool_resize+0x910/0x910 [ 338.940733][T14494] ? generic_make_request+0xd0f/0xdb0 [ 339.021080][T14494] ? blk_attempt_plug_merge+0x310/0x310 [ 339.026659][T14494] ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570 [ 339.032467][T14494] bio_alloc_bioset+0x209/0x690 [ 339.037685][T14494] ? __bio_add_page+0x274/0x430 [ 339.042741][T14494] ? bio_chain_endio+0xf0/0xf0 [ 339.047524][T14494] ? submit_bio+0x14b/0x570 [ 339.052475][T14494] submit_bh_wbc+0x1ba/0x790 [ 339.057064][T14494] __block_write_full_page+0x862/0xe30 [ 339.062517][T14494] ? mark_buffer_write_io_error+0x150/0x150 [ 339.071102][T14494] ? fat_block_truncate_page+0x50/0x50 [ 339.076563][T14494] __mpage_writepage+0x141f/0x1890 [ 339.081676][T14494] ? rmap_walk+0xd0/0xd0 [ 339.085920][T14494] ? mpage_writepages+0x2f0/0x2f0 [ 339.091710][T14494] ? page_mkclean+0x330/0x330 [ 339.096467][T14494] ? percpu_counter_add_batch+0x12d/0x150 [ 339.102266][T14494] ? wait_on_page_writeback+0x200/0x200 [ 339.108952][T14494] ? stack_trace_save+0x123/0x1f0 [ 339.113961][T14494] ? __rcu_read_lock+0x50/0x50 [ 339.118703][T14494] write_cache_pages+0x912/0xdc0 [ 339.123631][T14494] ? mpage_writepages+0x2f0/0x2f0 [ 339.128628][T14494] ? tag_pages_for_writeback+0x580/0x580 [ 339.134248][T14494] ? avc_has_perm_noaudit+0x400/0x400 [ 339.139591][T14494] mpage_writepages+0x155/0x2f0 [ 339.144429][T14494] ? fat_block_truncate_page+0x50/0x50 [ 339.149871][T14494] ? clean_buffers+0x230/0x230 [ 339.154608][T14494] ? arch_stack_walk+0xb8/0x120 [ 339.159446][T14494] ? fat_block_truncate_page+0x50/0x50 [ 339.164880][T14494] ? unwind_get_return_address_ptr+0x130/0x130 [ 339.171006][T14494] ? memset+0x1f/0x40 [ 339.174982][T14494] ? fat_readpage+0x20/0x20 [ 339.179528][T14494] do_writepages+0x13a/0x280 [ 339.185416][T14494] ? __writepage+0xc0/0xc0 [ 339.189829][T14494] ? __rcu_read_lock+0x50/0x50 [ 339.194583][T14494] ? unwind_get_return_address_ptr+0x130/0x130 [ 339.201167][T14494] filemap_write_and_wait_range+0x3b2/0x460 [ 339.207044][T14494] ? filemap_write_and_wait+0x420/0x420 [ 339.212615][T14494] ? unwind_get_return_address+0x48/0x90 [ 339.218227][T14494] ? timespec64_trunc+0x67/0xa0 [ 339.223058][T14494] ? fat_truncate_time+0x402/0x520 [ 339.228162][T14494] generic_file_direct_write+0x18b/0x6d0 [ 339.233771][T14494] ? pagecache_write_end+0xa0/0xa0 [ 339.238853][T14494] ? file_update_time+0x398/0x3f0 [ 339.243850][T14494] ? file_remove_privs+0x640/0x640 [ 339.248931][T14494] ? __kasan_slab_free+0x1f2/0x230 [ 339.254048][T14494] ? down_write+0xd8/0x150 [ 339.258443][T14494] __generic_file_write_iter+0x25f/0x440 [ 339.264067][T14494] ? get_pid_task+0x86/0x90 [ 339.268559][T14494] generic_file_write_iter+0x4a6/0x650 [ 339.273993][T14494] __vfs_write+0x59d/0x720 [ 339.278411][T14494] ? __kernel_write+0x340/0x340 [ 339.283253][T14494] ? avc_policy_seqno+0x17/0x70 [ 339.288102][T14494] ? security_file_permission+0x128/0x300 [ 339.293795][T14494] vfs_write+0x217/0x4f0 [ 339.298028][T14494] ksys_write+0x18c/0x2c0 [ 339.302331][T14494] ? file_open_root+0x450/0x450 [ 339.307153][T14494] ? __ia32_sys_read+0x80/0x80 [ 339.311889][T14494] do_syscall_64+0xcb/0x150 [ 339.316383][T14494] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 339.322265][T14494] RIP: 0033:0x45ca69 [ 339.326147][T14494] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 339.345740][T14494] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.354611][T14494] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 339.358031][ T140] usb 4-1: config 1 has an invalid interface number: 7 but max is 1 [ 339.362567][T14494] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 339.362572][T14494] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 339.362576][T14494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 339.362581][T14494] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 [ 339.362778][ T5] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 339.383568][ T140] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.420518][ T140] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 339.430737][ T140] usb 4-1: config 1 has no interface number 0 [ 339.588015][ T140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.597109][ T140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.605143][ T140] usb 4-1: Product: syz [ 339.609343][ T140] usb 4-1: Manufacturer: syz [ 339.613936][ T140] usb 4-1: SerialNumber: syz [ 339.647968][ T5] usb 6-1: device descriptor read/64, error 18 [ 339.658886][ T140] cdc_ncm 4-1:1.7: skipping garbage [ 339.664119][ T140] cdc_ncm 4-1:1.7: bind() failure [ 340.037961][ T5] usb 6-1: device descriptor read/64, error 18 [ 340.307930][ T5] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 340.577943][ T5] usb 6-1: device descriptor read/64, error 18 22:45:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xb00) 22:45:39 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x3, 'netpci0\x00', {0x7f}, 0x1ff}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000000)) setuid(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100281c0000000002000000", @ANYRES16, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="0200bea4b6ad26fad6b02d0000cc6bad497ccd9fa8b7c5eeef3351efb8dded127dae09cb9b0ee664320e6fe35e990e716b3e12072807c6cb9453ddc328546896997bb7e5cd59aa7a32b4e033ea041e00a9a71f371bb0878de633f351d024530d38f0e562eb94d076", @ANYRES32=r4, @ANYBLOB="040001000000000008000300", @ANYRES32=r6, @ANYBLOB="10000500000000002000000000000000"], 0x64, 0x6) r7 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r8, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:39 executing program 2 (fault-call:12 fault-nth:5): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 340.967956][ T5] usb 6-1: device descriptor read/64, error 18 [ 341.054483][T14528] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 341.078233][T14534] FAULT_INJECTION: forcing a failure. [ 341.078233][T14534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 341.081995][T14528] FAT-fs (loop0): Filesystem has been set read-only 22:45:39 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 341.091501][T14534] CPU: 1 PID: 14534 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 341.091506][T14534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.091509][T14534] Call Trace: [ 341.091528][T14534] dump_stack+0x14a/0x1ce [ 341.091536][T14534] ? devkmsg_release+0x11c/0x11c [ 341.091544][T14534] ? show_regs_print_info+0x12/0x12 [ 341.091553][T14534] ? find_next_zero_bit+0xfb/0x120 [ 341.091561][T14534] ? sbitmap_get+0x464/0x510 [ 341.091567][T14534] should_fail+0x6fb/0x860 [ 341.091573][T14534] ? setup_fault_attr+0x3d0/0x3d0 [ 341.091579][T14534] ? __sbitmap_queue_get+0x16f/0x230 [ 341.091589][T14534] __alloc_pages_nodemask+0x1ee/0x7c0 [ 341.091597][T14534] ? __blk_mq_tag_idle+0x90/0x90 [ 341.091610][T14534] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 341.101845][ T5] usb usb6-port1: attempt power cycle [ 341.108342][T14534] ? init_wait_entry+0xd0/0xd0 [ 341.108354][T14534] ? percpu_ref_tryget_live+0xd7/0x280 [ 341.108366][T14534] ? blk_queue_enter+0x730/0x730 [ 341.108373][T14534] ? disk_map_sector_rcu+0x249/0x2c0 [ 341.108388][T14534] alloc_slab_page+0x3a/0x3a0 [ 341.131053][T14544] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 341.131134][T14534] new_slab+0x97/0x450 [ 341.159516][T14528] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 341.160849][T14534] ___slab_alloc+0x2e0/0x450 [ 341.160861][T14534] ? mempool_alloc_slab+0x16/0x30 [ 341.160873][T14534] ? mempool_alloc_slab+0x16/0x30 [ 341.242940][T14534] kmem_cache_alloc+0x23f/0x260 [ 341.247796][T14534] ? mempool_free+0x380/0x380 [ 341.252481][T14534] mempool_alloc_slab+0x16/0x30 [ 341.257506][T14534] mempool_alloc+0x116/0x690 [ 341.262209][T14534] ? blk_mq_requeue_work+0x9d0/0x9d0 [ 341.267496][T14534] ? mempool_resize+0x910/0x910 [ 341.272346][T14534] ? generic_make_request+0xd0f/0xdb0 [ 341.277735][T14534] ? blk_attempt_plug_merge+0x310/0x310 [ 341.283284][T14534] ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570 [ 341.289183][T14534] bio_alloc_bioset+0x209/0x690 [ 341.294039][T14534] ? __bio_add_page+0x274/0x430 [ 341.298904][T14534] ? bio_chain_endio+0xf0/0xf0 22:45:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xc00) [ 341.303665][T14534] ? submit_bio+0x14b/0x570 [ 341.308167][T14534] submit_bh_wbc+0x1ba/0x790 [ 341.312758][T14534] __block_write_full_page+0x862/0xe30 [ 341.318214][T14534] ? mark_buffer_write_io_error+0x150/0x150 [ 341.324109][T14534] ? fat_block_truncate_page+0x50/0x50 [ 341.329661][T14534] __mpage_writepage+0x141f/0x1890 [ 341.334777][T14534] ? rmap_walk+0xd0/0xd0 [ 341.339033][T14534] ? mpage_writepages+0x2f0/0x2f0 [ 341.344052][T14534] ? page_mkclean+0x330/0x330 [ 341.348829][T14534] ? percpu_counter_add_batch+0x12d/0x150 [ 341.354656][T14534] ? wait_on_page_writeback+0x200/0x200 [ 341.360362][T14534] ? stack_trace_save+0x123/0x1f0 [ 341.365370][T14534] ? __rcu_read_lock+0x50/0x50 [ 341.370122][T14534] write_cache_pages+0x912/0xdc0 [ 341.375232][T14534] ? mpage_writepages+0x2f0/0x2f0 [ 341.380423][T14534] ? tag_pages_for_writeback+0x580/0x580 [ 341.386123][T14534] ? avc_has_perm_noaudit+0x400/0x400 [ 341.391493][T14534] mpage_writepages+0x155/0x2f0 [ 341.396325][T14534] ? fat_block_truncate_page+0x50/0x50 [ 341.401788][T14534] ? clean_buffers+0x230/0x230 [ 341.406545][T14534] ? arch_stack_walk+0xb8/0x120 [ 341.411509][T14534] ? fat_block_truncate_page+0x50/0x50 [ 341.416944][T14534] ? unwind_get_return_address_ptr+0x130/0x130 [ 341.423072][T14534] ? memset+0x1f/0x40 [ 341.427028][T14534] ? fat_readpage+0x20/0x20 [ 341.431503][T14534] do_writepages+0x13a/0x280 [ 341.436067][T14534] ? __writepage+0xc0/0xc0 [ 341.440470][T14534] ? __rcu_read_lock+0x50/0x50 [ 341.445224][T14534] ? unwind_get_return_address_ptr+0x130/0x130 [ 341.451359][T14534] filemap_write_and_wait_range+0x3b2/0x460 [ 341.457226][T14534] ? filemap_write_and_wait+0x420/0x420 [ 341.462748][T14534] ? unwind_get_return_address+0x48/0x90 [ 341.468371][T14534] ? timespec64_trunc+0x67/0xa0 [ 341.473219][T14534] ? fat_truncate_time+0x402/0x520 [ 341.478327][T14534] generic_file_direct_write+0x18b/0x6d0 [ 341.484195][T14534] ? pagecache_write_end+0xa0/0xa0 [ 341.489462][T14534] ? file_update_time+0x398/0x3f0 [ 341.494486][T14534] ? file_remove_privs+0x640/0x640 [ 341.499597][T14534] ? __kasan_slab_free+0x1f2/0x230 [ 341.504685][T14534] ? down_write+0xd8/0x150 [ 341.509093][T14534] __generic_file_write_iter+0x25f/0x440 [ 341.514724][T14534] ? get_pid_task+0x86/0x90 [ 341.519232][T14534] generic_file_write_iter+0x4a6/0x650 [ 341.524665][T14534] __vfs_write+0x59d/0x720 [ 341.529316][T14534] ? __kernel_write+0x340/0x340 [ 341.534140][T14534] ? avc_policy_seqno+0x17/0x70 [ 341.538966][T14534] ? security_file_permission+0x128/0x300 [ 341.544659][T14534] vfs_write+0x217/0x4f0 [ 341.548875][T14534] ksys_write+0x18c/0x2c0 [ 341.553212][T14534] ? file_open_root+0x450/0x450 [ 341.558034][T14534] ? __ia32_sys_read+0x80/0x80 [ 341.562789][T14534] do_syscall_64+0xcb/0x150 [ 341.567284][T14534] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 341.573236][T14534] RIP: 0033:0x45ca69 [ 341.577119][T14534] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 341.596958][T14534] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.605455][T14534] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 341.613423][T14534] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 341.621547][T14534] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 341.629588][T14534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 341.637542][T14534] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 22:45:40 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = getuid() syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./bus\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000300)="2347ace1a9e651d620b5abde96420b67f0d8f125df70abdcd22c5c5a59d70efda6f1db395003db1ed32239d4bb3de7914c4d39d6b7b33f41cc65e867e31ba9d7fbf98af26cfda6cd6c2bda57ad04a02c03fd3b7574", 0x55, 0xfffffffffffffff8}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp857,fowner=', @ANYRESDEC=r2, @ANYBLOB=',uid<', @ANYRESDEC=r4, @ANYBLOB="2c6673636f6e746578743d757365725f752c6673757569643d66666239383732372d333301382d383831562d623230632d66346437316b37352c726f6f74636f6e746578743d73746166665f752c736d61636b6673726f6f743d2b2c293a2c7569643e", @ANYRESDEC=r5, @ANYBLOB="00100000000000007872616973652c666f776e65723e", @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$RNDCLEARPOOL(r9, 0x5206, &(0x7f00000001c0)=0x80000001) getdents(r8, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:40 executing program 3: unshare(0x44000600) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r0, &(0x7f0000000100)=""/164, 0x20000118) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40802) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) 22:45:40 executing program 2 (fault-call:12 fault-nth:6): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:40 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 341.656695][ T4997] usb 4-1: USB disconnect, device number 36 22:45:40 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:40 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 341.794411][T14568] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 341.795190][T14599] FAULT_INJECTION: forcing a failure. [ 341.795190][T14599] name failslab, interval 1, probability 0, space 0, times 0 [ 341.810088][T14568] FAT-fs (loop0): Filesystem has been set read-only [ 341.828436][ T5] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 341.829069][T14568] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 341.867600][T14599] CPU: 0 PID: 14599 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 341.877782][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.887959][T14599] Call Trace: [ 341.891250][T14599] dump_stack+0x14a/0x1ce [ 341.895604][T14599] ? devkmsg_release+0x11c/0x11c [ 341.900536][T14599] ? show_regs_print_info+0x12/0x12 [ 341.906343][T14599] ? __rcu_read_lock+0x50/0x50 [ 341.911135][T14599] ? update_io_ticks+0x1aa/0x1c0 [ 341.916586][T14599] should_fail+0x6fb/0x860 [ 341.921095][T14599] ? setup_fault_attr+0x3d0/0x3d0 [ 341.926120][T14599] ? mempool_alloc_slab+0x16/0x30 [ 341.931224][T14599] ? mempool_free+0x380/0x380 [ 341.935892][T14599] should_failslab+0x5/0x20 [ 341.940433][T14599] kmem_cache_alloc+0x36/0x260 [ 341.945198][T14599] ? mempool_free+0x380/0x380 [ 341.949899][T14599] mempool_alloc_slab+0x16/0x30 [ 341.954793][T14599] mempool_alloc+0x116/0x690 [ 341.959385][T14599] ? blk_mq_requeue_work+0x9d0/0x9d0 [ 341.964670][T14599] ? mempool_resize+0x910/0x910 [ 341.966168][T14568] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 341.969516][T14599] ? generic_make_request+0xd0f/0xdb0 [ 341.969526][T14599] ? blk_attempt_plug_merge+0x310/0x310 [ 341.969536][T14599] ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570 [ 341.969551][T14599] bio_alloc_bioset+0x209/0x690 [ 341.998844][T14599] ? __bio_add_page+0x274/0x430 [ 342.003666][T14599] ? bio_chain_endio+0xf0/0xf0 [ 342.008400][T14599] ? submit_bio+0x14b/0x570 [ 342.013310][T14599] submit_bh_wbc+0x1ba/0x790 [ 342.017906][T14599] __block_write_full_page+0x862/0xe30 [ 342.023782][T14599] ? mark_buffer_write_io_error+0x150/0x150 [ 342.029683][T14599] ? fat_block_truncate_page+0x50/0x50 [ 342.035141][T14599] __mpage_writepage+0x141f/0x1890 [ 342.040245][T14599] ? rmap_walk+0xd0/0xd0 [ 342.044458][T14599] ? mpage_writepages+0x2f0/0x2f0 [ 342.049471][T14599] ? page_mkclean+0x330/0x330 [ 342.054150][T14599] ? percpu_counter_add_batch+0x12d/0x150 [ 342.059851][T14599] ? wait_on_page_writeback+0x200/0x200 [ 342.065377][T14599] ? stack_trace_save+0x123/0x1f0 [ 342.070382][T14599] ? __rcu_read_lock+0x50/0x50 [ 342.075148][T14599] write_cache_pages+0x912/0xdc0 [ 342.080063][T14599] ? mpage_writepages+0x2f0/0x2f0 [ 342.085061][T14599] ? tag_pages_for_writeback+0x580/0x580 [ 342.090669][T14599] ? avc_has_perm_noaudit+0x400/0x400 [ 342.096275][T14599] mpage_writepages+0x155/0x2f0 [ 342.101099][T14599] ? fat_block_truncate_page+0x50/0x50 [ 342.106528][T14599] ? clean_buffers+0x230/0x230 [ 342.112326][T14599] ? arch_stack_walk+0xb8/0x120 [ 342.117174][T14599] ? fat_block_truncate_page+0x50/0x50 [ 342.122623][T14599] ? unwind_get_return_address_ptr+0x130/0x130 [ 342.128767][T14599] ? memset+0x1f/0x40 [ 342.132733][T14599] ? fat_readpage+0x20/0x20 [ 342.137209][T14599] do_writepages+0x13a/0x280 [ 342.141800][T14599] ? __writepage+0xc0/0xc0 [ 342.146265][T14599] ? __rcu_read_lock+0x50/0x50 [ 342.151282][T14599] ? unwind_get_return_address_ptr+0x130/0x130 [ 342.157425][T14599] filemap_write_and_wait_range+0x3b2/0x460 [ 342.163293][T14599] ? filemap_write_and_wait+0x420/0x420 [ 342.168826][T14599] ? unwind_get_return_address+0x48/0x90 [ 342.174435][T14599] ? timespec64_trunc+0x67/0xa0 [ 342.179263][T14599] ? fat_truncate_time+0x402/0x520 [ 342.184349][T14599] generic_file_direct_write+0x18b/0x6d0 [ 342.189957][T14599] ? pagecache_write_end+0xa0/0xa0 [ 342.195053][T14599] ? file_update_time+0x398/0x3f0 [ 342.200095][T14599] ? file_remove_privs+0x640/0x640 [ 342.205184][T14599] ? __kasan_slab_free+0x1f2/0x230 [ 342.210288][T14599] ? down_write+0xd8/0x150 [ 342.214694][T14599] __generic_file_write_iter+0x25f/0x440 [ 342.220349][T14599] ? get_pid_task+0x86/0x90 [ 342.224834][T14599] generic_file_write_iter+0x4a6/0x650 [ 342.230372][T14599] __vfs_write+0x59d/0x720 [ 342.234764][T14599] ? __kernel_write+0x340/0x340 [ 342.239633][T14599] ? avc_policy_seqno+0x17/0x70 [ 342.244557][T14599] ? security_file_permission+0x128/0x300 [ 342.250369][T14599] vfs_write+0x217/0x4f0 [ 342.254610][T14599] ksys_write+0x18c/0x2c0 [ 342.259349][T14599] ? file_open_root+0x450/0x450 [ 342.264187][T14599] ? __ia32_sys_read+0x80/0x80 [ 342.268938][T14599] do_syscall_64+0xcb/0x150 [ 342.273459][T14599] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 342.279338][T14599] RIP: 0033:0x45ca69 [ 342.283205][T14599] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 342.302890][T14599] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.311288][T14599] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 342.319244][T14599] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 342.327209][T14599] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 342.335183][T14599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 342.343322][T14599] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 [ 342.387926][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 342.507966][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.519395][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.530313][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 342.539811][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.548700][ T5] usb 6-1: config 0 descriptor?? [ 342.788293][T14538] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 343.028395][ T5] hid (null): unknown global tag 0xc [ 343.037014][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.045199][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.052872][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.060525][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.067396][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.075495][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.082623][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.089615][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.096461][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.103468][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.111533][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.118935][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.125818][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.133262][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.140184][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.147030][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.153905][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.160967][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.167869][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.174748][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.181784][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.188698][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.195566][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.202451][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.209449][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.216315][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.223283][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.230212][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.237074][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.245484][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.253443][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.261061][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.268656][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.275522][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.283661][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.291125][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.298270][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.305386][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.312267][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.319932][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.326781][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.333674][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.340674][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.347526][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.354524][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.361782][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.368712][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.375861][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.382790][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.389875][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.397607][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.404508][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.411401][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.418582][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.425823][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.432887][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.439876][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.448587][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.455452][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x1 [ 343.463193][ T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0 [ 343.470092][ T5] wacom 0003:056A:0023.0019: unknown global tag 0xc [ 343.476660][ T5] wacom 0003:056A:0023.0019: item 0 1 1 12 parsing failed [ 343.483936][ T5] wacom 0003:056A:0023.0019: parse failed [ 343.489724][ T5] wacom: probe of 0003:056A:0023.0019 failed with error -22 [ 343.498346][ T5] usb 6-1: USB disconnect, device number 30 [ 344.007824][ T5] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 344.247817][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 344.367902][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.378784][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.388889][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 344.397946][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.406530][ T5] usb 6-1: config 0 descriptor?? [ 344.648195][T14538] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 22:45:43 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:43 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000006100000054ddffffff0000020000000000000000b7f0cf73cb1a2606a3cdf375b701982796f5"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xcc0, 0x0, &(0x7f00000000c0)="5c710957ca9f13550b2ac06c05dd", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 22:45:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xd00) 22:45:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="0400000000000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='flush']) r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:43 executing program 2 (fault-call:12 fault-nth:7): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:43 executing program 5: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000c5d0e00050500010d8390102030109022400010000000009040000028aaa8f00090500"/54], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @link_local}, 0x1a, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'netdevsim0\x00'}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:43 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f00000000c0)=""/9, 0x9}, 0x3a12}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000240)='./file0\x00', 0x232781, 0x162) fchdir(r4) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r5, 0x84) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 22:45:43 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 344.797874][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 344.798291][T14628] FAULT_INJECTION: forcing a failure. [ 344.798291][T14628] name failslab, interval 1, probability 0, space 0, times 0 [ 344.814598][T14630] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 344.838204][ T5] usbhid: probe of 6-1:0.0 failed with error -71 22:45:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) [ 344.885414][T14630] FAT-fs (loop0): Filesystem has been set read-only [ 344.892553][ T5] usb 6-1: USB disconnect, device number 31 [ 344.903632][T14628] CPU: 0 PID: 14628 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 344.913794][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.923844][T14628] Call Trace: [ 344.927655][T14628] dump_stack+0x14a/0x1ce [ 344.931983][T14628] ? devkmsg_release+0x11c/0x11c [ 344.937261][T14628] ? show_regs_print_info+0x12/0x12 [ 344.942461][T14628] ? __rcu_read_lock+0x50/0x50 [ 344.947228][T14628] ? update_io_ticks+0x1aa/0x1c0 [ 344.952193][T14628] should_fail+0x6fb/0x860 [ 344.952852][T14654] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 344.956640][T14628] ? setup_fault_attr+0x3d0/0x3d0 [ 344.956651][T14628] ? mempool_alloc_slab+0x16/0x30 [ 344.956663][T14628] ? mempool_free+0x380/0x380 22:45:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xe00) [ 344.972330][T14630] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 344.974603][T14628] should_failslab+0x5/0x20 [ 344.974612][T14628] kmem_cache_alloc+0x36/0x260 [ 344.974626][T14628] ? mempool_free+0x380/0x380 [ 344.983396][T14661] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 344.987072][T14628] mempool_alloc_slab+0x16/0x30 [ 344.987086][T14628] mempool_alloc+0x116/0x690 [ 345.018550][T14628] ? blk_mq_requeue_work+0x9d0/0x9d0 [ 345.023975][T14628] ? mempool_resize+0x910/0x910 [ 345.028801][T14628] ? generic_make_request+0xd0f/0xdb0 [ 345.034146][T14628] ? blk_attempt_plug_merge+0x310/0x310 [ 345.039661][T14628] ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570 [ 345.045438][T14628] bio_alloc_bioset+0x209/0x690 [ 345.050285][T14628] ? __bio_add_page+0x274/0x430 [ 345.055104][T14628] ? bio_chain_endio+0xf0/0xf0 [ 345.059840][T14628] ? submit_bio+0x14b/0x570 [ 345.064325][T14628] submit_bh_wbc+0x1ba/0x790 [ 345.068899][T14628] __block_write_full_page+0x862/0xe30 [ 345.074984][T14628] ? mark_buffer_write_io_error+0x150/0x150 [ 345.080881][T14628] ? fat_block_truncate_page+0x50/0x50 [ 345.086584][T14628] __mpage_writepage+0x141f/0x1890 [ 345.091683][T14628] ? rmap_walk+0xd0/0xd0 [ 345.096335][T14628] ? mpage_writepages+0x2f0/0x2f0 [ 345.101351][T14628] ? page_mkclean+0x330/0x330 [ 345.106015][T14628] ? percpu_counter_add_batch+0x12d/0x150 [ 345.111714][T14628] ? wait_on_page_writeback+0x200/0x200 [ 345.117243][T14628] ? stack_trace_save+0x123/0x1f0 [ 345.122259][T14628] ? __rcu_read_lock+0x50/0x50 [ 345.127019][T14628] write_cache_pages+0x912/0xdc0 [ 345.131933][T14628] ? mpage_writepages+0x2f0/0x2f0 [ 345.136952][T14628] ? tag_pages_for_writeback+0x580/0x580 [ 345.142759][T14628] ? avc_has_perm_noaudit+0x400/0x400 [ 345.148144][T14628] mpage_writepages+0x155/0x2f0 [ 345.153061][T14628] ? fat_block_truncate_page+0x50/0x50 [ 345.158524][T14628] ? clean_buffers+0x230/0x230 [ 345.163297][T14628] ? arch_stack_walk+0xb8/0x120 [ 345.168125][T14628] ? fat_block_truncate_page+0x50/0x50 [ 345.173563][T14628] ? unwind_get_return_address_ptr+0x130/0x130 [ 345.179688][T14628] ? memset+0x1f/0x40 [ 345.183734][T14628] ? fat_readpage+0x20/0x20 [ 345.188287][T14628] do_writepages+0x13a/0x280 [ 345.192866][T14628] ? __writepage+0xc0/0xc0 [ 345.197327][T14628] ? __rcu_read_lock+0x50/0x50 [ 345.202272][T14628] ? unwind_get_return_address_ptr+0x130/0x130 [ 345.209030][T14628] filemap_write_and_wait_range+0x3b2/0x460 [ 345.214923][T14628] ? filemap_write_and_wait+0x420/0x420 [ 345.220465][T14628] ? unwind_get_return_address+0x48/0x90 [ 345.226102][T14628] ? timespec64_trunc+0x67/0xa0 [ 345.231892][T14628] ? fat_truncate_time+0x402/0x520 [ 345.236985][T14628] generic_file_direct_write+0x18b/0x6d0 [ 345.242688][T14628] ? pagecache_write_end+0xa0/0xa0 [ 345.247780][T14628] ? file_update_time+0x398/0x3f0 [ 345.252801][T14628] ? file_remove_privs+0x640/0x640 [ 345.258072][T14628] ? __kasan_slab_free+0x1f2/0x230 [ 345.263156][T14628] ? down_write+0xd8/0x150 [ 345.267551][T14628] __generic_file_write_iter+0x25f/0x440 [ 345.273334][T14628] ? get_pid_task+0x86/0x90 [ 345.277821][T14628] generic_file_write_iter+0x4a6/0x650 [ 345.283262][T14628] __vfs_write+0x59d/0x720 [ 345.287654][T14628] ? __kernel_write+0x340/0x340 [ 345.292496][T14628] ? avc_policy_seqno+0x17/0x70 [ 345.297326][T14628] ? security_file_permission+0x128/0x300 [ 345.303015][T14628] vfs_write+0x217/0x4f0 [ 345.307287][T14628] ksys_write+0x18c/0x2c0 [ 345.311590][T14628] ? file_open_root+0x450/0x450 [ 345.316469][T14628] ? __ia32_sys_read+0x80/0x80 [ 345.321231][T14628] do_syscall_64+0xcb/0x150 [ 345.325781][T14628] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 345.331742][T14628] RIP: 0033:0x45ca69 [ 345.335613][T14628] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.355546][T14628] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.364060][T14628] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 345.372031][T14628] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 345.379989][T14628] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 22:45:44 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:44 executing program 2 (fault-call:12 fault-nth:8): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:44 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 345.388059][T14628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 345.396026][T14628] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 22:45:44 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f00000000c0)=""/9, 0x9}, 0x3a12}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000240)='./file0\x00', 0x232781, 0x162) fchdir(r4) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r5, 0x84) lseek(r5, 0x0, 0x2) r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 22:45:44 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 345.733650][T14692] FAULT_INJECTION: forcing a failure. [ 345.733650][T14692] name failslab, interval 1, probability 0, space 0, times 0 [ 345.757870][ T5] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 345.806800][T14696] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 345.826238][T14692] CPU: 1 PID: 14692 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 345.829690][T14696] FAT-fs (loop0): Filesystem has been set read-only [ 345.836578][T14692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.836582][T14692] Call Trace: [ 345.836601][T14692] dump_stack+0x14a/0x1ce [ 345.836612][T14692] ? devkmsg_release+0x11c/0x11c [ 345.836625][T14692] ? show_regs_print_info+0x12/0x12 [ 345.852395][T14696] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 345.853282][T14692] ? __rcu_read_lock+0x50/0x50 [ 345.853296][T14692] ? update_io_ticks+0x1aa/0x1c0 [ 345.872806][T14696] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 345.879000][T14692] should_fail+0x6fb/0x860 [ 345.879010][T14692] ? setup_fault_attr+0x3d0/0x3d0 [ 345.879022][T14692] ? mempool_alloc_slab+0x16/0x30 [ 345.879028][T14692] ? mempool_free+0x380/0x380 [ 345.879035][T14692] should_failslab+0x5/0x20 [ 345.879044][T14692] kmem_cache_alloc+0x36/0x260 [ 345.879051][T14692] ? mempool_free+0x380/0x380 [ 345.879065][T14692] mempool_alloc_slab+0x16/0x30 [ 345.884985][T14711] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 345.889210][T14692] mempool_alloc+0x116/0x690 [ 345.889221][T14692] ? blk_mq_requeue_work+0x9d0/0x9d0 [ 345.889228][T14692] ? mempool_resize+0x910/0x910 [ 345.889235][T14692] ? generic_make_request+0xd0f/0xdb0 [ 345.889243][T14692] ? blk_attempt_plug_merge+0x310/0x310 [ 345.889251][T14692] ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570 [ 345.889265][T14692] bio_alloc_bioset+0x209/0x690 [ 345.979886][T14692] ? __bio_add_page+0x274/0x430 [ 345.984814][T14692] ? bio_chain_endio+0xf0/0xf0 [ 345.989565][T14692] ? submit_bio+0x14b/0x570 [ 345.994100][T14692] submit_bh_wbc+0x1ba/0x790 [ 345.997828][ T5] usb 6-1: Invalid ep0 maxpacket: 16 [ 345.998808][T14692] __block_write_full_page+0x862/0xe30 [ 346.010546][T14692] ? mark_buffer_write_io_error+0x150/0x150 [ 346.016944][T14692] ? fat_block_truncate_page+0x50/0x50 [ 346.022501][T14692] __mpage_writepage+0x141f/0x1890 [ 346.027610][T14692] ? rmap_walk+0xd0/0xd0 [ 346.031830][T14692] ? mpage_writepages+0x2f0/0x2f0 [ 346.037007][T14692] ? page_mkclean+0x330/0x330 [ 346.042530][T14692] ? percpu_counter_add_batch+0x12d/0x150 [ 346.048227][T14692] ? wait_on_page_writeback+0x200/0x200 [ 346.053754][T14692] ? stack_trace_save+0x123/0x1f0 [ 346.058748][T14692] ? __rcu_read_lock+0x50/0x50 [ 346.063511][T14692] write_cache_pages+0x912/0xdc0 [ 346.068601][T14692] ? mpage_writepages+0x2f0/0x2f0 [ 346.074294][T14692] ? tag_pages_for_writeback+0x580/0x580 [ 346.079899][T14692] ? avc_has_perm_noaudit+0x400/0x400 [ 346.085264][T14692] mpage_writepages+0x155/0x2f0 [ 346.090095][T14692] ? fat_block_truncate_page+0x50/0x50 [ 346.095558][T14692] ? clean_buffers+0x230/0x230 [ 346.100312][T14692] ? arch_stack_walk+0xb8/0x120 [ 346.105163][T14692] ? fat_block_truncate_page+0x50/0x50 [ 346.111478][T14692] ? unwind_get_return_address_ptr+0x130/0x130 [ 346.118071][T14692] ? memset+0x1f/0x40 [ 346.122157][T14692] ? fat_readpage+0x20/0x20 [ 346.126750][T14692] do_writepages+0x13a/0x280 [ 346.131334][T14692] ? __writepage+0xc0/0xc0 [ 346.135748][T14692] ? __rcu_read_lock+0x50/0x50 [ 346.140488][T14692] ? unwind_get_return_address_ptr+0x130/0x130 [ 346.146630][T14692] filemap_write_and_wait_range+0x3b2/0x460 [ 346.147745][ T5] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 346.152514][T14692] ? filemap_write_and_wait+0x420/0x420 [ 346.152524][T14692] ? unwind_get_return_address+0x48/0x90 [ 346.152539][T14692] ? timespec64_trunc+0x67/0xa0 [ 346.176128][T14692] ? fat_truncate_time+0x402/0x520 [ 346.181345][T14692] generic_file_direct_write+0x18b/0x6d0 [ 346.186962][T14692] ? pagecache_write_end+0xa0/0xa0 [ 346.192081][T14692] ? file_update_time+0x398/0x3f0 [ 346.199088][T14692] ? file_remove_privs+0x640/0x640 [ 346.205723][T14692] ? __kasan_slab_free+0x1f2/0x230 [ 346.210870][T14692] ? down_write+0xd8/0x150 [ 346.215462][T14692] __generic_file_write_iter+0x25f/0x440 [ 346.221100][T14692] ? get_pid_task+0x86/0x90 [ 346.225848][T14692] generic_file_write_iter+0x4a6/0x650 [ 346.231526][T14692] __vfs_write+0x59d/0x720 [ 346.236046][T14692] ? __kernel_write+0x340/0x340 [ 346.240946][T14692] ? avc_policy_seqno+0x17/0x70 [ 346.245988][T14692] ? security_file_permission+0x128/0x300 [ 346.252480][T14692] vfs_write+0x217/0x4f0 [ 346.256699][T14692] ksys_write+0x18c/0x2c0 [ 346.261010][T14692] ? file_open_root+0x450/0x450 [ 346.265830][T14692] ? __ia32_sys_read+0x80/0x80 [ 346.270578][T14692] do_syscall_64+0xcb/0x150 [ 346.275237][T14692] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 346.281196][T14692] RIP: 0033:0x45ca69 [ 346.285088][T14692] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.304763][T14692] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.315024][T14692] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 346.322975][T14692] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 346.330945][T14692] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 346.338928][T14692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 346.347859][T14692] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 [ 346.397748][ T5] usb 6-1: Invalid ep0 maxpacket: 16 [ 346.403679][ T5] usb usb6-port1: attempt power cycle [ 347.137732][ T5] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 347.227804][ T5] usb 6-1: Invalid ep0 maxpacket: 16 [ 347.377734][ T5] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 347.467808][ T5] usb 6-1: Invalid ep0 maxpacket: 16 [ 347.473323][ T5] usb usb6-port1: unable to enumerate USB device 22:45:46 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc539, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7f, 0x20, 0x9}}]}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0xa0382) ioctl$USBDEVFS_SETINTERFACE(r1, 0xc0105502, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000080)=0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_GET_DUMPABLE(0x3) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 22:45:46 executing program 3: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x42) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x0, &(0x7f0000000200), 0x100080, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC=r6, @ANYBLOB=',smackfstransmute=fd/3\x00,\x00']) 22:45:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xf00) 22:45:46 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:46 executing program 2 (fault-call:12 fault-nth:9): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:46 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:46 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4c042, 0x43) ftruncate(r2, 0x200004) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x149042, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) ftruncate(r0, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000002c0)={0x0, r0}) [ 347.812102][T14734] FAULT_INJECTION: forcing a failure. [ 347.812102][T14734] name failslab, interval 1, probability 0, space 0, times 0 [ 347.825817][T14734] CPU: 1 PID: 14734 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 347.835980][T14734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.846032][T14734] Call Trace: [ 347.849325][T14734] dump_stack+0x14a/0x1ce [ 347.853650][T14734] ? devkmsg_release+0x11c/0x11c [ 347.858936][T14734] ? show_regs_print_info+0x12/0x12 [ 347.864164][T14734] ? __rcu_read_lock+0x50/0x50 [ 347.867511][T14733] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 347.868927][T14734] ? update_io_ticks+0x1aa/0x1c0 [ 347.868937][T14734] should_fail+0x6fb/0x860 [ 347.868944][T14734] ? setup_fault_attr+0x3d0/0x3d0 [ 347.868955][T14734] ? mempool_alloc_slab+0x16/0x30 [ 347.868969][T14734] ? mempool_free+0x380/0x380 [ 347.881155][T14733] FAT-fs (loop0): Filesystem has been set read-only [ 347.881688][T14734] should_failslab+0x5/0x20 [ 347.895521][T14733] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 347.896565][T14734] kmem_cache_alloc+0x36/0x260 [ 347.896576][T14734] ? mempool_free+0x380/0x380 [ 347.896590][T14734] mempool_alloc_slab+0x16/0x30 [ 347.912510][T14733] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 347.920230][T14734] mempool_alloc+0x116/0x690 [ 347.920241][T14734] ? blk_mq_requeue_work+0x9d0/0x9d0 [ 347.920248][T14734] ? mempool_resize+0x910/0x910 [ 347.920261][T14734] ? generic_make_request+0xd0f/0xdb0 [ 347.926342][T14762] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 347.929689][T14734] ? blk_attempt_plug_merge+0x310/0x310 [ 347.929698][T14734] ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570 [ 347.929712][T14734] bio_alloc_bioset+0x209/0x690 [ 347.929724][T14734] ? __bio_add_page+0x274/0x430 [ 347.991301][T14734] ? bio_chain_endio+0xf0/0xf0 [ 347.996082][T14734] ? submit_bio+0x14b/0x570 [ 348.000591][T14734] submit_bh_wbc+0x1ba/0x790 [ 348.005298][T14734] __block_write_full_page+0x862/0xe30 [ 348.010756][T14734] ? mark_buffer_write_io_error+0x150/0x150 [ 348.016651][T14734] ? fat_block_truncate_page+0x50/0x50 [ 348.022119][T14734] __mpage_writepage+0x141f/0x1890 [ 348.027227][T14734] ? rmap_walk+0xd0/0xd0 [ 348.031469][T14734] ? mpage_writepages+0x2f0/0x2f0 [ 348.036488][T14734] ? page_mkclean+0x330/0x330 [ 348.041430][T14734] ? percpu_counter_add_batch+0x12d/0x150 [ 348.047238][T14734] ? wait_on_page_writeback+0x200/0x200 [ 348.052875][T14734] ? stack_trace_save+0x123/0x1f0 [ 348.057907][T14734] ? __rcu_read_lock+0x50/0x50 [ 348.062674][T14734] write_cache_pages+0x912/0xdc0 [ 348.067650][T14734] ? mpage_writepages+0x2f0/0x2f0 [ 348.072943][T14734] ? tag_pages_for_writeback+0x580/0x580 [ 348.078584][T14734] ? avc_has_perm_noaudit+0x400/0x400 [ 348.084051][T14734] mpage_writepages+0x155/0x2f0 [ 348.088930][T14734] ? fat_block_truncate_page+0x50/0x50 [ 348.094394][T14734] ? clean_buffers+0x230/0x230 [ 348.099215][T14734] ? arch_stack_walk+0xb8/0x120 [ 348.104279][T14734] ? fat_block_truncate_page+0x50/0x50 [ 348.109716][T14734] ? unwind_get_return_address_ptr+0x130/0x130 [ 348.116043][T14734] ? memset+0x1f/0x40 [ 348.120043][T14734] ? fat_readpage+0x20/0x20 [ 348.124541][T14734] do_writepages+0x13a/0x280 [ 348.129116][T14734] ? __writepage+0xc0/0xc0 [ 348.133550][T14734] ? __rcu_read_lock+0x50/0x50 [ 348.138306][T14734] ? unwind_get_return_address_ptr+0x130/0x130 [ 348.144451][T14734] filemap_write_and_wait_range+0x3b2/0x460 [ 348.150317][T14734] ? filemap_write_and_wait+0x420/0x420 [ 348.155866][T14734] ? unwind_get_return_address+0x48/0x90 [ 348.161492][T14734] ? timespec64_trunc+0x67/0xa0 [ 348.166346][T14734] ? fat_truncate_time+0x402/0x520 [ 348.171456][T14734] generic_file_direct_write+0x18b/0x6d0 [ 348.177081][T14734] ? pagecache_write_end+0xa0/0xa0 [ 348.182192][T14734] ? file_update_time+0x398/0x3f0 [ 348.187214][T14734] ? file_remove_privs+0x640/0x640 [ 348.192322][T14734] ? __kasan_slab_free+0x1f2/0x230 [ 348.197407][T14734] ? down_write+0xd8/0x150 [ 348.201828][T14734] __generic_file_write_iter+0x25f/0x440 [ 348.207468][T14734] ? get_pid_task+0x86/0x90 [ 348.211948][T14734] generic_file_write_iter+0x4a6/0x650 [ 348.217401][T14734] __vfs_write+0x59d/0x720 [ 348.221794][T14734] ? __kernel_write+0x340/0x340 [ 348.226766][T14734] ? avc_policy_seqno+0x17/0x70 [ 348.231605][T14734] ? security_file_permission+0x128/0x300 [ 348.237300][T14734] vfs_write+0x217/0x4f0 [ 348.241587][T14734] ksys_write+0x18c/0x2c0 [ 348.245934][T14734] ? file_open_root+0x450/0x450 [ 348.250784][T14734] ? __ia32_sys_read+0x80/0x80 [ 348.255524][T14734] do_syscall_64+0xcb/0x150 [ 348.260023][T14734] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 348.265890][T14734] RIP: 0033:0x45ca69 [ 348.269760][T14734] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.289515][T14734] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.298118][T14734] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 22:45:47 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_delrule={0x60, 0x21, 0x8, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x4, 0x4}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x84}, @FRA_SRC={0x8, 0x2, @loopback}, @FRA_DST={0x8, 0x1, @local}, @FRA_DST={0x8, 0x1, @private=0xa010102}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x100000001}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_FLOW={0x8, 0xb, 0x6a97735a}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x1884) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x50b200, 0x0) r4 = socket(0xb, 0x3, 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48008}, 0x40000) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000001c0)={0x5, 0x9, {0x0, 0xf3, 0x0, {0xb36, 0x9b8b}, {0x322, 0x3ff}, @cond=[{0x4da, 0x9, 0x7f, 0x4, 0x3, 0x81}, {0x6, 0x3, 0x4, 0xd53b, 0x3, 0x5}]}, {0x53, 0x9, 0x40, {0x5, 0x7}, {0xc6, 0x5}, @ramp={0x101, 0x1000, {0xf43, 0x401, 0x8, 0x77a}}}}) r5 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1100) 22:45:47 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 348.306111][T14734] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 348.314539][T14734] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 348.322524][T14734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 348.330515][T14734] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 [ 348.442356][T14775] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 348.451696][T14775] FAT-fs (loop0): Filesystem has been set read-only [ 348.458830][T14775] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 348.475486][T14775] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 348.501102][T14787] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 348.687683][ T140] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 348.927673][ T140] usb 6-1: Using ep0 maxpacket: 32 [ 349.047756][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 349.059115][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.069399][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 349.080931][ T140] usb 6-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 349.090276][ T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.099372][ T140] usb 6-1: config 0 descriptor?? [ 349.338154][T14736] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 349.346198][T14736] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.5' sets config #8 [ 349.598217][ T140] hid (null): unknown global tag 0xc [ 349.606778][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.616058][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.624307][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.632434][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.640559][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.648670][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.656769][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.664906][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.673022][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.681146][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.689266][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.697343][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.705465][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.713609][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.721979][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.730128][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.738360][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.746453][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.754657][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.762783][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.770878][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.778988][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.787082][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.795182][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.803578][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.811684][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.820504][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.828624][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.836696][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.847323][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.855430][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.863525][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.871696][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.879822][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.887954][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.896119][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.904419][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.912526][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.920730][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.933297][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.941412][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.949545][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.957643][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.965803][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.973931][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.982079][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.990173][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 349.998309][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.006382][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.015116][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.023608][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.031751][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.040843][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.048974][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.057064][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.065195][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.073311][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.081425][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.089532][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x1 [ 350.097629][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0 [ 350.105701][ T140] logitech-djreceiver 0003:046D:C539.001A: unknown global tag 0xc [ 350.113562][ T140] logitech-djreceiver 0003:046D:C539.001A: item 0 1 1 12 parsing failed [ 350.122010][ T140] logitech-djreceiver 0003:046D:C539.001A: logi_dj_probe: parse failed [ 350.130286][ T140] logitech-djreceiver: probe of 0003:046D:C539.001A failed with error -22 [ 350.140082][ T140] usb 6-1: USB disconnect, device number 36 [ 350.697642][ T140] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 350.937592][ T140] usb 6-1: Using ep0 maxpacket: 32 [ 351.057666][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 351.068803][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.079170][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 351.091429][ T140] usb 6-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 351.100756][ T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.109589][ T140] usb 6-1: config 0 descriptor?? 22:45:49 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:49 executing program 2 (fault-call:12 fault-nth:10): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:49 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs(r3, &(0x7f00000000c0)='uid_map\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000100)={0x0, @adiantum}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r8) keyctl$chown(0x4, 0x0, r5, r8) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000040)={0x8, 'bridge0\x00', {'macvlan0\x00'}, 0x1f}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80), 0x5e, 0x4000000) 22:45:49 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000000000040042dcddb4000d5d060f16367630900144c04000001b10000090581030000000000ca93b00b2b6bb1163ecae393da506d9420aebf3668830aa7ee8a1e521f9ec6965524584d666ad709effd584ac341000b698e81de0e2f6d6d069e87d97ead7ef5f3296d1d8288830bc5f5681bc7d91f67240f77e588041bdea9a805c9e9a46f337e9f86b059f1daac"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="da0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57c, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x41) getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1200) 22:45:49 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:50 executing program 3: sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = accept4(r0, &(0x7f0000000100)=@un=@abs, &(0x7f0000000180)=0x80, 0x80800) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 22:45:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0xa, r5}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) [ 351.297633][ T140] usbhid 6-1:0.0: can't add hid device: -71 [ 351.303711][ T140] usbhid: probe of 6-1:0.0 failed with error -71 [ 351.314362][T14812] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 351.333362][T14811] FAULT_INJECTION: forcing a failure. [ 351.333362][T14811] name failslab, interval 1, probability 0, space 0, times 0 [ 351.337985][T14812] FAT-fs (loop0): Filesystem has been set read-only [ 351.367880][T14812] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 351.375873][T14811] CPU: 0 PID: 14811 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 351.381808][ T140] usb 6-1: USB disconnect, device number 37 22:45:50 executing program 3: r0 = socket$inet(0x10, 0x80000, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000600)=0x80, 0x4) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_addrs=@xdp={0x2c, 0x1, 0x0, 0x2}}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0xfff, 0x8ef8b0c4, 0x4, 0x4, 0x4, "2d5b3b0bb1e19f0020dc74d259bcad6b2e22b8", 0x401, 0x400}) setuid(r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={r2, r4, r6}, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYRESOCT=r2], 0x0) syz_usb_connect(0x0, 0x51e, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xfc, 0xfe, 0x9e, 0x20, 0x1410, 0x6000, 0x3857, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50c, 0x2, 0x7f, 0xf7, 0x10, 0x0, [{{0x9, 0x4, 0x21, 0x1, 0x1, 0xd7, 0x51, 0x3, 0x0, [], [{{0x9, 0x5, 0xf, 0x10, 0x400, 0x2, 0x1, 0x8, [@generic={0x9b, 0x11, "30f3088d60ad45d269fe7e914b970ce916ee050392820afb4147174d5c10c1060ce32ad3ca2d5cedd4069c34e800847efc1538c394039b31ce2be24f0e5745aa61f4c30e6ff166405c6520dd7601a83f78bb40b7489d8903f5ec2318dfbb94b7ccd67cdca32245d374795a4697122736c98bc66d9a8e45df38ce871d0a882c0f5629dbfeb7741650a71168b0104a6b8076d5b96810be0c59ef"}]}}]}}, {{0x9, 0x4, 0x3d, 0x0, 0xd, 0xff, 0xf, 0xb3, 0xf7, [], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0xa5, 0x8, 0x6c, [@generic={0x5f, 0x1e, "1627e104118b73f2fe97d2254a588a157dce76b46dfbae7dcc3b61a84e06cb4adbd5c26f36d31a9ad6563866a5c615afb9587abdf9dd1b081fee128a96cedeb6b1c8c1ff40699d176c6c6d724f543db684beea5d5e2a9fd035d6fd9ea8"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0x81, 0x20, 0x3, [@generic={0xf, 0x23, "dcf1d38cc15c939fe2b443f400"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x3, 0xdd, 0xff, [@generic={0x89, 0x10, "03847bb39d72dafdadbe258c74334eea41f21caeae863af5bc515f5eb2770f921d1c563761d39e386d2e9eaa21c0c1e90f0933a284488a67622128de89b8c6a0dd3521cbd35f3b0a3dce81fbad2983d40444f92480d009480584c1607acf3bbf7cca3069f6aafc43ea7f1a4ffdc84ef4c2401e62db6a4aa3239d0ae7234f970dd4c48a92be59e5"}, @generic={0xe3, 0x9, "c7d910687a634b29322958112ec97f3091e15fdc01dcc3314f89d694632a0266026037b67b0c6a1250786792d1678665bef0983a244ec6660b06a943f0df04b98fb75a4d451d39ebd91d6c55a6ef986ec8ca7c2124b98476299226c581920f531ad7712841f3bde8491c2510f24f42cee934cd4ba87984e09418134d4186f9ab41f6a10e7fa88a95f2dd6852dc594baf2a8d6438ef2227e0808cce7995273e3e7d2cab623570305bbb43f55bae014b9bc0a08420844a95b13b77ac8ca8555f722eb19c417bbbfdd1f42447b261925c61a9277f69810ad03024393786cf582c6395"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x1, 0x7, 0x4}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x2, 0x28, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x3f, 0xa65a}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x20, 0x1f, 0x9}}, {{0x9, 0x5, 0x6, 0x3183300f2f942980, 0x10, 0x3, 0x7, 0x0, [@generic={0xbc, 0x7, "85b21390f23ef2cb20dc63f5131e8284407d0053354bf1857d4b07204d4bfeefc449b6c917d105c18f6474b17e81ac0a3cd1f43b693e28878be3a9b8dc1177a508a23f430036c3e07abaca13de0d76b32d4fdfed95fb7fb24ad32694e146a39c442e180844c5ec759895394767bf81b2916eedc878ce052aa7414e51fe22bacaa1f06d3f6addcbd24f8c0bfb84958ac85f37809fb6b7784b51b0acd690af8c4b0613a76065b06239677cd0793bae46534c60d35575d41bac1856"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x1, 0x0, 0x3e, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x81, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1f}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x3f, 0x7f, 0x5}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x6c, 0x1f, 0x2}}, {{0x9, 0x5, 0x9, 0xd, 0x400, 0x6, 0x3f, 0x1, [@generic={0xb1, 0xa, "3412fa85554299edbfc23feb253a02f0a555785ff8e16b6eb347260adbf27e70aadbbffdb24308383ad70cb5881e779089e99ac036d4fdddd1e87cdf413a69ec70dcb1daa993d943d4366196e2ec656039467204b8b855e5351a6c9d9dacbc27005e24ec03d09def633d63be6643d6bee6f5be043263920bcd10bfff8dfb6ed46e65721b2e8a58ef5101c3e188cab24708607fe131b59256df1262a4ac480b9a3a24546441132404361143e7e98cb7"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x5a, 0xff, 0x7, [@generic={0x6e, 0xf, "cdb4be40a5cbf704410e0216616fb292b253e240a54494c1012db4740d56330d477abd42fa97508bfd6811ee86e11f63df3cf931ef29fe0802485c4cbb9ede2f0d1eab6564cbe12a693b38b385d032290bc078e4667476e9c88879ef5d26932447244fdbd71b3bcd90623d7d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6c, 0x3ff}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7, 0x80, 0x1, 0xef, 0x7f}, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="050f0500c0"]}) [ 351.386036][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.386040][T14811] Call Trace: [ 351.386055][T14811] dump_stack+0x14a/0x1ce [ 351.386069][T14811] ? devkmsg_release+0x11c/0x11c [ 351.414591][T14811] ? show_regs_print_info+0x12/0x12 [ 351.420192][T14811] ? __rcu_read_lock+0x50/0x50 [ 351.424957][T14811] ? update_io_ticks+0x1aa/0x1c0 [ 351.430412][T14811] should_fail+0x6fb/0x860 [ 351.434832][T14811] ? setup_fault_attr+0x3d0/0x3d0 [ 351.439888][T14811] ? mempool_alloc_slab+0x16/0x30 [ 351.444908][T14811] ? mempool_free+0x380/0x380 [ 351.449582][T14811] should_failslab+0x5/0x20 [ 351.454211][T14811] kmem_cache_alloc+0x36/0x260 [ 351.459059][T14811] ? mempool_free+0x380/0x380 [ 351.463758][T14811] mempool_alloc_slab+0x16/0x30 [ 351.468607][T14811] mempool_alloc+0x116/0x690 [ 351.473192][T14811] ? blk_mq_requeue_work+0x9d0/0x9d0 [ 351.478499][T14811] ? mempool_resize+0x910/0x910 [ 351.483371][T14811] ? generic_make_request+0xd0f/0xdb0 [ 351.488737][T14811] ? blk_attempt_plug_merge+0x310/0x310 [ 351.494283][T14811] ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570 [ 351.500088][T14811] bio_alloc_bioset+0x209/0x690 [ 351.504940][T14811] ? __bio_add_page+0x274/0x430 [ 351.509815][T14811] ? bio_chain_endio+0xf0/0xf0 [ 351.512183][T14812] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 351.514572][T14811] ? submit_bio+0x14b/0x570 [ 351.514588][T14811] submit_bh_wbc+0x1ba/0x790 [ 351.531555][T14811] __block_write_full_page+0x862/0xe30 [ 351.537019][T14811] ? mark_buffer_write_io_error+0x150/0x150 [ 351.542913][T14811] ? fat_block_truncate_page+0x50/0x50 [ 351.548398][T14811] __mpage_writepage+0x141f/0x1890 [ 351.553518][T14811] ? rmap_walk+0xd0/0xd0 [ 351.557759][T14811] ? mpage_writepages+0x2f0/0x2f0 [ 351.562782][T14811] ? page_mkclean+0x330/0x330 [ 351.567460][T14811] ? percpu_counter_add_batch+0x12d/0x150 [ 351.573473][T14811] ? wait_on_page_writeback+0x200/0x200 [ 351.579022][T14811] ? stack_trace_save+0x123/0x1f0 [ 351.584044][T14811] ? __rcu_read_lock+0x50/0x50 [ 351.588806][T14811] write_cache_pages+0x912/0xdc0 [ 351.593760][T14811] ? mpage_writepages+0x2f0/0x2f0 [ 351.598784][T14811] ? tag_pages_for_writeback+0x580/0x580 [ 351.604420][T14811] ? avc_has_perm_noaudit+0x400/0x400 [ 351.609790][T14811] mpage_writepages+0x155/0x2f0 [ 351.614640][T14811] ? fat_block_truncate_page+0x50/0x50 [ 351.620097][T14811] ? clean_buffers+0x230/0x230 [ 351.624859][T14811] ? arch_stack_walk+0xb8/0x120 [ 351.629706][T14811] ? fat_block_truncate_page+0x50/0x50 [ 351.635171][T14811] ? unwind_get_return_address_ptr+0x130/0x130 [ 351.641317][T14811] ? memset+0x1f/0x40 22:45:50 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800060000000000", @ANYRES64=r0], 0x18}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10000, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = gettid() sendmmsg$unix(r5, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c"], 0x70}], 0x1, 0x0) close(r0) close(r5) close(r1) ptrace(0x10, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="1f801cd8f7b4f01411ae2d948e951f973752b556244b061dd563d3045595ad150db7c2ad1e0dea98302651ecad264265d538f922dc9fe444582af959"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4004084) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x188, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x44000) 22:45:50 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 351.645299][T14811] ? fat_readpage+0x20/0x20 [ 351.649799][T14811] do_writepages+0x13a/0x280 [ 351.654384][T14811] ? __writepage+0xc0/0xc0 [ 351.658829][T14811] ? __rcu_read_lock+0x50/0x50 [ 351.663595][T14811] ? unwind_get_return_address_ptr+0x130/0x130 [ 351.669748][T14811] filemap_write_and_wait_range+0x3b2/0x460 [ 351.675643][T14811] ? filemap_write_and_wait+0x420/0x420 [ 351.681222][T14811] ? unwind_get_return_address+0x48/0x90 [ 351.686850][T14811] ? timespec64_trunc+0x67/0xa0 [ 351.691700][T14811] ? fat_truncate_time+0x402/0x520 22:45:50 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x3f) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = gettid() r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) sendmmsg$unix(r5, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c"], 0x70}], 0x1, 0x0) close(r0) close(r5) close(r1) [ 351.696810][T14811] generic_file_direct_write+0x18b/0x6d0 [ 351.702446][T14811] ? pagecache_write_end+0xa0/0xa0 [ 351.707550][T14811] ? file_update_time+0x398/0x3f0 [ 351.712568][T14811] ? file_remove_privs+0x640/0x640 [ 351.717685][T14811] ? __kasan_slab_free+0x1f2/0x230 [ 351.723089][T14811] ? down_write+0xd8/0x150 [ 351.727502][T14811] __generic_file_write_iter+0x25f/0x440 [ 351.733135][T14811] ? get_pid_task+0x86/0x90 [ 351.737729][T14811] generic_file_write_iter+0x4a6/0x650 [ 351.743191][T14811] __vfs_write+0x59d/0x720 [ 351.747616][T14811] ? __kernel_write+0x340/0x340 [ 351.752468][T14811] ? avc_policy_seqno+0x17/0x70 [ 351.757327][T14811] ? security_file_permission+0x128/0x300 [ 351.763135][T14811] vfs_write+0x217/0x4f0 [ 351.767551][T14811] ksys_write+0x18c/0x2c0 [ 351.771882][T14811] ? file_open_root+0x450/0x450 [ 351.776732][T14811] ? __ia32_sys_read+0x80/0x80 [ 351.777546][ T140] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 351.781575][T14811] do_syscall_64+0xcb/0x150 [ 351.781591][T14811] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 351.799666][T14811] RIP: 0033:0x45ca69 [ 351.803553][T14811] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.823265][T14811] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.831689][T14811] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 351.839650][T14811] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 22:45:50 executing program 2 (fault-call:12 fault-nth:11): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:50 executing program 3: r0 = syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x424, 0x9e00, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x234}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001004712bb18812078516aebd4c346100095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000004c40)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001840)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000b80), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x0, 0x0, 0x1, "c1"}, 0x0, 0x0}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) fstat(r1, &(0x7f0000000000)) [ 351.847595][T14811] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 351.855550][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 351.863501][T14811] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 [ 352.057995][ T140] usb 6-1: device descriptor read/64, error 18 [ 352.066122][T14864] FAULT_INJECTION: forcing a failure. [ 352.066122][T14864] name failslab, interval 1, probability 0, space 0, times 0 [ 352.080228][T14864] CPU: 1 PID: 14864 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 352.090484][T14864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.100907][T14864] Call Trace: [ 352.104197][T14864] dump_stack+0x14a/0x1ce [ 352.108524][T14864] ? devkmsg_release+0x11c/0x11c [ 352.113459][T14864] ? show_regs_print_info+0x12/0x12 [ 352.118711][T14864] ? blk_mq_requeue_work+0x9d0/0x9d0 [ 352.123995][T14864] should_fail+0x6fb/0x860 [ 352.128414][T14864] ? setup_fault_attr+0x3d0/0x3d0 [ 352.133434][T14864] ? blk_mq_requeue_work+0x9d0/0x9d0 [ 352.138722][T14864] ? mempool_alloc_slab+0x16/0x30 [ 352.143744][T14864] ? mempool_free+0x380/0x380 [ 352.148763][T14864] should_failslab+0x5/0x20 [ 352.153266][T14864] kmem_cache_alloc+0x36/0x260 [ 352.158114][T14864] ? mempool_free+0x380/0x380 [ 352.162790][T14864] mempool_alloc_slab+0x16/0x30 [ 352.167637][T14864] mempool_alloc+0x116/0x690 [ 352.172332][T14864] ? _raw_spin_lock+0xa1/0x170 [ 352.177127][T14864] ? __bio_add_page+0x274/0x430 [ 352.181956][T14864] ? mempool_resize+0x910/0x910 [ 352.186782][T14864] ? _raw_spin_unlock+0x5/0x20 [ 352.191539][T14864] ? page_vma_mapped_walk+0x1d5/0x700 [ 352.196904][T14864] bio_alloc_bioset+0x209/0x690 [ 352.201748][T14864] ? page_mkclean+0x330/0x330 [ 352.206422][T14864] ? __down_read+0xfc/0x240 [ 352.210917][T14864] ? bio_chain_endio+0xf0/0xf0 [ 352.216609][T14864] ? bdev_write_page+0xd3/0x1d0 [ 352.222415][T14864] __mpage_writepage+0x1004/0x1890 [ 352.227508][T14864] ? rmap_walk+0xd0/0xd0 [ 352.231829][T14864] ? mpage_writepages+0x2f0/0x2f0 [ 352.236836][T14864] ? page_mkclean+0x330/0x330 [ 352.241521][T14864] ? percpu_counter_add_batch+0x12d/0x150 [ 352.247234][T14864] ? wait_on_page_writeback+0x200/0x200 [ 352.252772][T14864] ? stack_trace_save+0x123/0x1f0 [ 352.257866][T14864] ? __rcu_read_lock+0x50/0x50 [ 352.262611][T14864] write_cache_pages+0x912/0xdc0 [ 352.267556][T14864] ? mpage_writepages+0x2f0/0x2f0 [ 352.272570][T14864] ? tag_pages_for_writeback+0x580/0x580 [ 352.278204][T14864] ? avc_has_perm_noaudit+0x400/0x400 [ 352.284167][T14864] mpage_writepages+0x155/0x2f0 [ 352.289031][T14864] ? fat_block_truncate_page+0x50/0x50 [ 352.294491][T14864] ? clean_buffers+0x230/0x230 [ 352.299241][T14864] ? arch_stack_walk+0xb8/0x120 [ 352.304181][T14864] ? fat_block_truncate_page+0x50/0x50 [ 352.309623][T14864] ? unwind_get_return_address_ptr+0x130/0x130 [ 352.315782][T14864] ? memset+0x1f/0x40 [ 352.319741][T14864] ? fat_readpage+0x20/0x20 [ 352.324316][T14864] do_writepages+0x13a/0x280 [ 352.328892][T14864] ? __writepage+0xc0/0xc0 [ 352.333295][T14864] ? __rcu_read_lock+0x50/0x50 [ 352.338059][T14864] ? unwind_get_return_address_ptr+0x130/0x130 [ 352.344548][T14864] filemap_write_and_wait_range+0x3b2/0x460 [ 352.350447][T14864] ? filemap_write_and_wait+0x420/0x420 [ 352.356002][T14864] ? unwind_get_return_address+0x48/0x90 [ 352.361753][T14864] ? timespec64_trunc+0x67/0xa0 [ 352.366625][T14864] ? fat_truncate_time+0x402/0x520 [ 352.371875][T14864] generic_file_direct_write+0x18b/0x6d0 [ 352.377518][T14864] ? pagecache_write_end+0xa0/0xa0 [ 352.383726][T14864] ? file_update_time+0x398/0x3f0 [ 352.388751][T14864] ? file_remove_privs+0x640/0x640 [ 352.394136][T14864] ? __kasan_slab_free+0x1f2/0x230 [ 352.399229][T14864] ? down_write+0xd8/0x150 [ 352.403626][T14864] __generic_file_write_iter+0x25f/0x440 [ 352.409258][T14864] ? get_pid_task+0x86/0x90 [ 352.413810][T14864] generic_file_write_iter+0x4a6/0x650 [ 352.419308][T14864] __vfs_write+0x59d/0x720 [ 352.423721][T14864] ? __kernel_write+0x340/0x340 [ 352.428757][T14864] ? avc_policy_seqno+0x17/0x70 [ 352.433710][T14864] ? security_file_permission+0x128/0x300 [ 352.439738][T14864] vfs_write+0x217/0x4f0 [ 352.444066][T14864] ksys_write+0x18c/0x2c0 [ 352.448522][T14864] ? file_open_root+0x450/0x450 [ 352.453371][T14864] ? __ia32_sys_read+0x80/0x80 [ 352.458682][T14864] do_syscall_64+0xcb/0x150 [ 352.463175][T14864] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 352.469344][T14864] RIP: 0033:0x45ca69 [ 352.473284][T14864] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.493138][T14864] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 352.502024][T14864] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 352.510025][T14864] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 352.518434][T14864] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 352.526389][T14864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 352.535269][T14864] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 [ 352.617537][T10034] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 352.817498][ T140] usb 6-1: device descriptor read/64, error 18 [ 352.857520][T10034] usb 4-1: Using ep0 maxpacket: 8 [ 352.977578][T10034] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247 [ 352.987752][T10034] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 564 [ 352.997964][T10034] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.087569][ T140] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 353.167579][T10034] usb 4-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice= 0.40 [ 353.176941][T10034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.186006][T10034] usb 4-1: Product: syz [ 353.190463][T10034] usb 4-1: Manufacturer: syz [ 353.195223][T10034] usb 4-1: SerialNumber: syz [ 353.217619][T14854] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 353.224419][T14854] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 353.237985][T10034] usb 4-1: bad CDC descriptors [ 353.242982][T10034] smsc95xx v1.0.6 [ 353.377538][ T140] usb 6-1: device descriptor read/64, error 18 [ 353.438156][T14854] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 353.445221][T14854] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 353.687535][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 353.698302][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 353.767497][ T140] usb 6-1: device descriptor read/64, error 18 [ 353.887563][ T140] usb usb6-port1: attempt power cycle 22:45:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1300) 22:45:52 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:52 executing program 2 (fault-call:12 fault-nth:12): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) r5 = open$dir(&(0x7f0000000000)='./file1\x00', 0x1, 0xe0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000013070103000000000000650a000000010900010073797a3100000000000000000fff"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) execveat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000200)='fd/3\x00', &(0x7f0000000240)='{,\'/:\x00'], &(0x7f0000000400)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='fd/3\x00', &(0x7f0000000380)='){\x00', &(0x7f00000003c0)='&\x00'], 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:52 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) write$P9_RVERSION(r1, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x7f, 0x8, '9P2000.L'}, 0x15) r2 = socket$inet(0x10, 0x80802, 0x0) ioctl$sock_ifreq(r2, 0x8926, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000001c0)={0x2, {{0x2, 0x4e22, @multicast1}}}, 0x88) r4 = accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000000c0)={@remote, @loopback}, &(0x7f0000000100)=0x8) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 354.167536][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 354.267241][T14879] FAULT_INJECTION: forcing a failure. [ 354.267241][T14879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.280624][T14879] CPU: 1 PID: 14879 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 354.290767][T14879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.301341][T14879] Call Trace: [ 354.304626][T14879] dump_stack+0x14a/0x1ce [ 354.308952][T14879] ? devkmsg_release+0x11c/0x11c [ 354.313892][T14879] ? show_regs_print_info+0x12/0x12 [ 354.319086][T14879] should_fail+0x6fb/0x860 [ 354.323501][T14879] ? setup_fault_attr+0x3d0/0x3d0 [ 354.328694][T14879] ? blk_mq_sched_dispatch_requests+0x600/0x600 [ 354.335027][T14879] __alloc_pages_nodemask+0x1ee/0x7c0 [ 354.340403][T14879] ? _raw_spin_lock_irqsave+0x1e0/0x1e0 [ 354.345950][T14879] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 354.351498][T14879] ? __rcu_read_lock+0x50/0x50 [ 354.356397][T14879] __get_free_pages+0xa/0x30 [ 354.360988][T14879] __tlb_remove_page_size+0x167/0x2f0 [ 354.366360][T14879] unmap_page_range+0xd80/0x16e0 [ 354.371396][T14879] ? copy_page_range+0x1710/0x1710 [ 354.376540][T14879] ? tlb_gather_mmu+0x26e/0x330 [ 354.381393][T14879] zap_page_range_single+0x3c4/0x440 [ 354.386801][T14879] ? zap_vma_ptes+0xf0/0xf0 [ 354.391396][T14879] ? vma_interval_tree_iter_first+0x251/0x270 [ 354.397459][T14879] unmap_mapping_pages+0x365/0x3e0 [ 354.402573][T14879] ? finish_mkwrite_fault+0x2f0/0x2f0 [ 354.407931][T14879] ? page_mapped+0xcc/0x2e0 [ 354.412432][T14879] invalidate_inode_pages2_range+0x609/0xd50 [ 354.418394][T14879] ? invalidate_mapping_pages+0x710/0x710 [ 354.424091][T14879] ? filemap_check_errors+0xcf/0x110 [ 354.430688][T14879] ? timespec64_trunc+0x67/0xa0 [ 354.435524][T14879] ? fat_truncate_time+0x402/0x520 [ 354.440633][T14879] generic_file_direct_write+0x3dc/0x6d0 [ 354.446346][T14879] ? pagecache_write_end+0xa0/0xa0 [ 354.451619][T14879] ? file_update_time+0x398/0x3f0 [ 354.456659][T14879] ? file_remove_privs+0x640/0x640 [ 354.461781][T14879] ? __kasan_slab_free+0x1f2/0x230 [ 354.469840][T14879] ? down_write+0xd8/0x150 [ 354.474260][T14879] __generic_file_write_iter+0x25f/0x440 [ 354.479878][T14879] ? get_pid_task+0x86/0x90 [ 354.484456][T14879] generic_file_write_iter+0x4a6/0x650 [ 354.489898][T14879] __vfs_write+0x59d/0x720 [ 354.494285][T14879] ? __kernel_write+0x340/0x340 [ 354.499110][T14879] ? avc_policy_seqno+0x17/0x70 [ 354.504027][T14879] ? security_file_permission+0x128/0x300 [ 354.510061][T14879] vfs_write+0x217/0x4f0 [ 354.514279][T14879] ksys_write+0x18c/0x2c0 [ 354.518579][T14879] ? file_open_root+0x450/0x450 [ 354.523421][T14879] ? __ia32_sys_read+0x80/0x80 [ 354.528154][T14879] do_syscall_64+0xcb/0x150 [ 354.532645][T14879] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 354.538508][T14879] RIP: 0033:0x45ca69 [ 354.542392][T14879] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:45:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x109900, 0x4c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) ftruncate(r0, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) write$FUSE_STATFS(r0, &(0x7f00000001c0)={0x60, 0x0, 0x2, {{0x3, 0x0, 0x0, 0x0, 0x6, 0x7, 0x6, 0x542}}}, 0x60) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) [ 354.562059][T14879] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.570525][T14879] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 354.578467][T14879] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 354.586410][T14879] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 354.594443][T14879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 354.602513][T14879] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 22:45:53 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 354.627545][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000114: -32 [ 354.646680][T14895] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 354.651652][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): Error reading MII_ACCESS 22:45:53 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:53 executing program 2 (fault-call:12 fault-nth:13): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2000) [ 354.673467][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): MII is busy in smsc95xx_mdio_read [ 354.685621][T14895] FAT-fs (loop0): Filesystem has been set read-only 22:45:53 executing program 1: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 354.727782][T10034] smsc95xx 4-1:1.0 eth1: Failed to read reg index 0x00000130: -32 [ 354.737672][T10034] smsc95xx 4-1:1.0 eth1: set_features() failed (-32); wanted 0x0000008000004002, left 0x0000008000004802 [ 354.756162][T10034] smsc95xx 4-1:1.0 eth1: register 'smsc95xx' at usb-dummy_hcd.3-1, smsc95xx USB 2.0 Ethernet, 0e:6d:80:01:fe:1b [ 354.863574][T14926] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 354.873006][T14926] FAT-fs (loop0): Filesystem has been set read-only [ 354.876072][T14928] FAULT_INJECTION: forcing a failure. [ 354.876072][T14928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.880531][T14926] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 354.893216][T14928] CPU: 1 PID: 14928 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 354.893226][T14928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.905623][T14926] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 354.911156][T14928] Call Trace: [ 354.911173][T14928] dump_stack+0x14a/0x1ce [ 354.911182][T14928] ? devkmsg_release+0x11c/0x11c [ 354.911189][T14928] ? show_regs_print_info+0x12/0x12 [ 354.911197][T14928] ? _raw_spin_unlock_irq+0x5/0x20 [ 354.911209][T14928] ? finish_task_switch+0x235/0x4c0 [ 354.921878][T14930] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 354.929132][T14928] should_fail+0x6fb/0x860 [ 354.929141][T14928] ? setup_fault_attr+0x3d0/0x3d0 [ 354.929151][T14928] __alloc_pages_nodemask+0x1ee/0x7c0 [ 354.929161][T14928] ? _raw_spin_lock_irqsave+0x1e0/0x1e0 [ 354.929168][T14928] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 354.929183][T14928] ? __rcu_read_lock+0x50/0x50 [ 354.995834][T14928] __get_free_pages+0xa/0x30 [ 355.000419][T14928] __tlb_remove_page_size+0x167/0x2f0 [ 355.005785][T14928] unmap_page_range+0xd80/0x16e0 [ 355.010843][T14928] ? copy_page_range+0x1710/0x1710 [ 355.015955][T14928] ? tlb_gather_mmu+0x26e/0x330 [ 355.020824][T14928] zap_page_range_single+0x3c4/0x440 [ 355.026126][T14928] ? zap_vma_ptes+0xf0/0xf0 [ 355.030628][T14928] ? vma_interval_tree_iter_first+0x251/0x270 [ 355.036700][T14928] unmap_mapping_pages+0x365/0x3e0 [ 355.041806][T14928] ? finish_mkwrite_fault+0x2f0/0x2f0 [ 355.047371][T14928] ? page_mapped+0xcc/0x2e0 [ 355.051878][T14928] invalidate_inode_pages2_range+0x609/0xd50 [ 355.057838][T14928] ? invalidate_mapping_pages+0x710/0x710 [ 355.063536][T14928] ? filemap_check_errors+0xcf/0x110 [ 355.068799][T14928] ? timespec64_trunc+0x67/0xa0 [ 355.073627][T14928] ? fat_truncate_time+0x402/0x520 [ 355.078749][T14928] generic_file_direct_write+0x3dc/0x6d0 [ 355.084370][T14928] ? pagecache_write_end+0xa0/0xa0 [ 355.089457][T14928] ? file_update_time+0x398/0x3f0 [ 355.094463][T14928] ? file_remove_privs+0x640/0x640 [ 355.099570][T14928] ? __kasan_slab_free+0x1f2/0x230 [ 355.104659][T14928] ? down_write+0xd8/0x150 [ 355.109051][T14928] __generic_file_write_iter+0x25f/0x440 [ 355.114679][T14928] ? get_pid_task+0x86/0x90 [ 355.119177][T14928] generic_file_write_iter+0x4a6/0x650 [ 355.124755][T14928] __vfs_write+0x59d/0x720 [ 355.129170][T14928] ? __kernel_write+0x340/0x340 [ 355.134020][T14928] ? avc_policy_seqno+0x17/0x70 [ 355.138865][T14928] ? security_file_permission+0x128/0x300 [ 355.144558][T14928] vfs_write+0x217/0x4f0 [ 355.148776][T14928] ksys_write+0x18c/0x2c0 [ 355.153097][T14928] ? file_open_root+0x450/0x450 [ 355.158113][T14928] ? __ia32_sys_read+0x80/0x80 [ 355.162858][T14928] do_syscall_64+0xcb/0x150 [ 355.167332][T14928] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 355.173230][T14928] RIP: 0033:0x45ca69 [ 355.177116][T14928] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.196805][T14928] RSP: 002b:00007f640222dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.205197][T14928] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 355.213152][T14928] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 [ 355.221106][T14928] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 355.229074][T14928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 355.237022][T14928] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640222e6d4 [ 355.307488][ T140] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 355.397479][ T140] usb 6-1: Using ep0 maxpacket: 16 [ 355.517498][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.528403][ T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.538777][ T140] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 355.548263][ T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.556807][ T140] usb 6-1: config 0 descriptor?? [ 355.798004][T14897] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 356.047934][ T140] hid (null): unknown global tag 0xc [ 356.056586][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.064563][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.072222][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.079835][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.086737][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.094873][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.102664][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.110262][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.117116][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.125322][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.132909][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.140617][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.148343][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.155205][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.163511][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.171227][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.178929][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.185799][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.193943][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.201845][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.209547][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.216401][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.224602][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.232198][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.239413][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.246555][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.253956][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.260992][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.268005][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.274864][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.281803][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.288726][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.295602][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.302480][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.309373][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.316307][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.323184][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.330092][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.337693][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.344642][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.351538][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.358444][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.365301][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.372180][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.379196][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.386036][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.392985][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.399897][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.407025][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.413908][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.420801][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.427673][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.435590][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.442500][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.449406][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.456248][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.463133][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.470022][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.476947][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x1 [ 356.483816][ T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0 [ 356.490728][ T140] wacom 0003:056A:0023.001B: unknown global tag 0xc [ 356.497319][ T140] wacom 0003:056A:0023.001B: item 0 1 1 12 parsing failed [ 356.504515][ T140] wacom 0003:056A:0023.001B: parse failed [ 356.510294][ T140] wacom: probe of 0003:056A:0023.001B failed with error -22 [ 356.518745][ T140] usb 6-1: USB disconnect, device number 40 22:45:55 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) sendfile(r2, r1, 0x0, 0x1c5c2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x6004001) 22:45:55 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x83) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) r6 = syz_open_procfs(r5, &(0x7f0000000000)='net/sockstat6\x00') getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2500) 22:45:55 executing program 2 (fault-call:12 fault-nth:14): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 356.714075][ T240] usb 4-1: USB disconnect, device number 37 [ 356.734036][ T240] smsc95xx 4-1:1.0 eth1: unregister 'smsc95xx' usb-dummy_hcd.3-1, smsc95xx USB 2.0 Ethernet [ 356.737423][ T140] smsc95xx 4-1:1.0 eth1: Failed to read reg index 0x00000114: -19 [ 356.784052][T14962] FAULT_INJECTION: forcing a failure. [ 356.784052][T14962] name failslab, interval 1, probability 0, space 0, times 0 [ 356.799101][T14958] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 356.822254][ T140] ================================================================== [ 356.830349][ T140] BUG: KASAN: use-after-free in smsc95xx_mdio_read+0x635/0x870 [ 356.837864][ T140] Read of size 8 at addr ffff8881cafd29c8 by task kworker/1:2/140 [ 356.845644][ T140] [ 356.847963][ T140] CPU: 1 PID: 140 Comm: kworker/1:2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 356.857640][ T140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.867673][ T140] Workqueue: events check_carrier [ 356.872682][ T140] Call Trace: [ 356.875959][ T140] dump_stack+0x14a/0x1ce [ 356.880259][ T140] ? show_regs_print_info+0x12/0x12 [ 356.885427][ T140] ? printk+0xd2/0x114 [ 356.889469][ T140] print_address_description+0x93/0x620 [ 356.894999][ T140] ? netdev_warn+0x124/0x16b [ 356.899576][ T140] ? smsc95xx_mdio_read+0x14d/0x870 [ 356.904745][ T140] ? netdev_crit+0x16b/0x16b [ 356.909305][ T140] __kasan_report+0x16d/0x1e0 [ 356.913952][ T140] ? smsc95xx_mdio_read+0x635/0x870 [ 356.919133][ T140] kasan_report+0x34/0x60 [ 356.923432][ T140] smsc95xx_mdio_read+0x635/0x870 [ 356.928443][ T140] ? smsc95xx_set_multicast+0x880/0x880 [ 356.934120][ T140] ? _raw_spin_unlock_irq+0x5/0x20 [ 356.939217][ T140] ? finish_task_switch+0x235/0x4c0 [ 356.944401][ T140] check_carrier+0xd1/0x2e0 [ 356.948893][ T140] process_one_work+0x777/0xf90 [ 356.953714][ T140] worker_thread+0xa8f/0x1430 [ 356.958389][ T140] kthread+0x2df/0x300 [ 356.962427][ T140] ? process_one_work+0xf90/0xf90 [ 356.967435][ T140] ? kthread_destroy_worker+0x280/0x280 [ 356.972951][ T140] ret_from_fork+0x1f/0x30 [ 356.977336][ T140] [ 356.979635][ T140] Allocated by task 10034: [ 356.984038][ T140] __kasan_kmalloc+0x12c/0x1c0 [ 356.988789][ T140] __kmalloc+0xf7/0x2d0 [ 356.992915][ T140] kvmalloc_node+0xc2/0x120 [ 356.997413][ T140] alloc_netdev_mqs+0x85/0xc60 [ 357.002173][ T140] usbnet_probe+0x1ae/0x2770 [ 357.006732][ T140] usb_probe_interface+0x631/0xad0 [ 357.011816][ T140] really_probe+0x764/0xf70 [ 357.016307][ T140] driver_probe_device+0xe6/0x230 [ 357.021302][ T140] bus_for_each_drv+0x17a/0x200 [ 357.026135][ T140] __device_attach+0x27b/0x420 [ 357.030870][ T140] bus_probe_device+0xbb/0x200 [ 357.035617][ T140] device_add+0x105a/0x1750 [ 357.040366][ T140] usb_set_configuration+0x197f/0x1f00 [ 357.045888][ T140] generic_probe+0x82/0x140 [ 357.050366][ T140] really_probe+0x764/0xf70 [ 357.054859][ T140] driver_probe_device+0xe6/0x230 [ 357.059882][ T140] bus_for_each_drv+0x17a/0x200 [ 357.064719][ T140] __device_attach+0x27b/0x420 [ 357.069453][ T140] bus_probe_device+0xbb/0x200 [ 357.074201][ T140] device_add+0x105a/0x1750 [ 357.078673][ T140] usb_new_device+0xda7/0x1710 [ 357.083406][ T140] hub_event+0x2963/0x4fa0 [ 357.087789][ T140] process_one_work+0x777/0xf90 [ 357.092609][ T140] worker_thread+0xa8f/0x1430 [ 357.097272][ T140] kthread+0x2df/0x300 [ 357.101323][ T140] ret_from_fork+0x1f/0x30 [ 357.105705][ T140] [ 357.108004][ T140] Freed by task 240: [ 357.111870][ T140] __kasan_slab_free+0x181/0x230 [ 357.116777][ T140] slab_free_freelist_hook+0xd0/0x150 [ 357.122135][ T140] kfree+0x12b/0x600 [ 357.126001][ T140] device_release+0x70/0x1a0 [ 357.130577][ T140] kobject_put+0x1a9/0x250 [ 357.134962][ T140] usb_unbind_interface+0x1d8/0x850 [ 357.140154][ T140] device_release_driver_internal+0x515/0x7b0 [ 357.146200][ T140] bus_remove_device+0x2e7/0x350 [ 357.151115][ T140] device_del+0x7bc/0x1200 [ 357.155522][ T140] usb_disable_device+0x3fe/0xc90 [ 357.160522][ T140] usb_disconnect+0x341/0x880 [ 357.165181][ T140] hub_event+0x1c6c/0x4fa0 [ 357.169565][ T140] process_one_work+0x777/0xf90 [ 357.174383][ T140] worker_thread+0xa8f/0x1430 [ 357.179028][ T140] kthread+0x2df/0x300 [ 357.183088][ T140] ret_from_fork+0x1f/0x30 [ 357.187481][ T140] [ 357.189788][ T140] The buggy address belongs to the object at ffff8881cafd2000 [ 357.189788][ T140] which belongs to the cache kmalloc-4k of size 4096 [ 357.204701][ T140] The buggy address is located 2504 bytes inside of [ 357.204701][ T140] 4096-byte region [ffff8881cafd2000, ffff8881cafd3000) [ 357.218124][ T140] The buggy address belongs to the page: [ 357.223730][ T140] page:ffffea00072bf400 refcount:1 mapcount:0 mapping:ffff8881da80c280 index:0x0 compound_mapcount: 0 [ 357.234641][ T140] flags: 0x8000000000010200(slab|head) [ 357.240071][ T140] raw: 8000000000010200 0000000000000000 0000000100000001 ffff8881da80c280 [ 357.248790][ T140] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 357.257365][ T140] page dumped because: kasan: bad access detected [ 357.264531][ T140] [ 357.266831][ T140] Memory state around the buggy address: [ 357.272453][ T140] ffff8881cafd2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.280500][ T140] ffff8881cafd2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.288530][ T140] >ffff8881cafd2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.296560][ T140] ^ [ 357.302947][ T140] ffff8881cafd2a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.310978][ T140] ffff8881cafd2a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.319018][ T140] ================================================================== [ 357.327236][ T140] Disabling lock debugging due to kernel taint [ 357.344155][T14958] FAT-fs (loop0): Filesystem has been set read-only [ 357.357627][T14962] CPU: 0 PID: 14962 Comm: syz-executor.2 Tainted: G B 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0 [ 357.369275][T14962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.379325][T14962] Call Trace: [ 357.382625][T14962] dump_stack+0x14a/0x1ce [ 357.386956][T14962] ? devkmsg_release+0x11c/0x11c [ 357.392068][T14962] ? show_regs_print_info+0x12/0x12 [ 357.397264][T14962] should_fail+0x6fb/0x860 [ 357.401679][T14962] ? setup_fault_attr+0x3d0/0x3d0 [ 357.406707][T14962] ? mempool_alloc_slab+0x16/0x30 [ 357.411732][T14962] ? mempool_free+0x380/0x380 [ 357.416503][T14962] should_failslab+0x5/0x20 [ 357.421012][T14962] kmem_cache_alloc+0x36/0x260 [ 357.425774][T14962] ? mempool_free+0x380/0x380 [ 357.430449][T14962] mempool_alloc_slab+0x16/0x30 [ 357.435297][T14962] mempool_alloc+0x116/0x690 [ 357.439885][T14962] ? mempool_resize+0x910/0x910 [ 357.444736][T14962] ? fat_get_block+0x52a/0xba0 [ 357.449496][T14962] bio_alloc_bioset+0x209/0x690 [ 357.454344][T14962] ? fat_block_truncate_page+0x50/0x50 [ 357.459797][T14962] ? mem_cgroup_charge_statistics+0x137/0x830 [ 357.465858][T14962] ? bio_chain_endio+0xf0/0xf0 [ 357.470647][T14962] ? mem_cgroup_commit_charge+0x1a1/0x2a0 [ 357.476365][T14962] ? bdev_read_page+0xd6/0x190 [ 357.479685][ T140] usb @ف2' (unnamed net_device) (released): Error reading MII_ACCESS [ 357.481148][T14962] do_mpage_readpage+0x14e2/0x1af0 [ 357.481162][T14962] ? mpage_readpages+0x500/0x500 [ 357.489895][ T140] usb @ف2' (unnamed net_device) (released): MII is busy in smsc95xx_mdio_read [ 357.495003][T14962] ? fat_block_truncate_page+0x50/0x50 [ 357.495010][T14962] mpage_readpage+0xf7/0x1a0 [ 357.495022][T14962] ? mpage_bio_submit+0x500/0x500 [ 357.503944][ T140] usb @ف2' (unnamed net_device) (released): Failed to read MII_BMSR [ 357.509285][T14962] ? fat_block_truncate_page+0x50/0x50 [ 357.509295][T14962] ? __down_read+0x240/0x240 [ 357.509304][T14962] ? pagecache_get_page+0x78e/0x880 [ 357.509316][T14962] ? filemap_map_pages+0x10ca/0x1140 [ 357.516814][T14972] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 357.519331][T14962] filemap_fault+0x1377/0x19d0 [ 357.519341][T14962] ? generic_file_read_iter+0x20b0/0x20b0 [ 357.519351][T14962] handle_mm_fault+0x2837/0x40a0 [ 357.519361][T14962] ? finish_fault+0x230/0x230 [ 357.519371][T14962] ? __up_read+0x1b0/0x1b0 [ 357.519383][T14962] ? vmacache_find+0x205/0x4b0 [ 357.590130][T14962] do_user_addr_fault+0x48a/0x9f0 [ 357.595149][T14962] page_fault+0x2f/0x40 [ 357.599293][T14962] RIP: 0010:iov_iter_fault_in_readable+0x1c8/0x630 [ 357.605761][T14962] Code: ce 8b 4a ff 85 db 0f 84 81 01 00 00 48 63 c3 4d 8d 7c 04 ff 4d 39 e7 0f 82 7a 01 00 00 e8 10 88 4a ff 0f 1f 00 0f ae e8 31 db <45> 8a 2c 24 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 [ 357.623697][T14972] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 357.625354][T14962] RSP: 0018:ffff8881c7a17940 EFLAGS: 00010246 [ 357.625360][T14962] RAX: ffffffff81f772b0 RBX: 0000000000000000 RCX: 0000000000040000 [ 357.625370][T14962] RDX: ffffc90003041000 RSI: 000000000000240b RDI: 000000000000240c [ 357.656201][T14962] RBP: ffff8881c7a179f0 R08: ffffffff81f77292 R09: ffffffff83d3f3ef [ 357.664169][T14962] R10: ffff88819fc43e00 R11: 0000000000000002 R12: 0000000020000000 [ 357.672142][T14962] R13: ffff8881c7a17cc0 R14: 1ffff11038f42f32 R15: 0000000020000fff [ 357.680095][T14962] ? xas_find+0x11f/0x6f0 [ 357.685475][T14962] ? iov_iter_fault_in_readable+0x1a2/0x630 [ 357.691458][T14962] ? iov_iter_fault_in_readable+0x1c0/0x630 [ 357.697348][T14962] ? uuid_parse+0x3e0/0x3e0 [ 357.701834][T14962] ? fat_direct_IO+0x132/0x2f0 [ 357.706607][T14962] generic_perform_write+0x1f6/0x5a0 [ 357.711881][T14962] ? pagecache_write_end+0xa0/0xa0 [ 357.716975][T14962] ? grab_cache_page_write_begin+0x90/0x90 [ 357.722757][T14962] ? file_remove_privs+0x640/0x640 [ 357.727843][T14962] ? __kasan_slab_free+0x1f2/0x230 [ 357.732937][T14962] ? down_write+0xd8/0x150 [ 357.737340][T14962] __generic_file_write_iter+0x2fe/0x440 22:45:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) fallocate(r1, 0x3, 0x0, 0x24000) 22:45:56 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x20000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:56 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 357.742957][T14962] generic_file_write_iter+0x4a6/0x650 [ 357.748386][T14962] __vfs_write+0x59d/0x720 [ 357.752785][T14962] ? __kernel_write+0x340/0x340 [ 357.757692][T14962] ? avc_policy_seqno+0x17/0x70 [ 357.762546][T14962] ? security_file_permission+0x128/0x300 [ 357.768303][T14962] vfs_write+0x217/0x4f0 [ 357.772549][T14962] ksys_write+0x18c/0x2c0 [ 357.776879][T14962] ? file_open_root+0x450/0x450 [ 357.781731][T14962] ? __ia32_sys_read+0x80/0x80 [ 357.786498][T14962] do_syscall_64+0xcb/0x150 22:45:56 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:56 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 357.791001][T14962] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 357.796886][T14962] RIP: 0033:0x45ca69 [ 357.800772][T14962] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.820454][T14962] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 357.828862][T14962] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69 [ 357.837089][T14962] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004 22:45:56 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) ptrace$cont(0x18, 0xffffffffffffffff, 0x7fff, 0x7f) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200082, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000001c0)={0x1, 0x1, 0x5}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)="9905d94c310874da6bfd49e783023f048af6d3d16d99f472cedf63d8a59241e937f8431080a3aa7f853fe39b81e3024cda0c7cc31287fc7c8448c5d0748b5679453b8496fa6808ea9a0e9b4325f57bb7af0a38f83945647b55018cc1f7f4eb0a58c0e48f7f56da4c59892690b2b1b009c0dd6ee0e84a7075e13a8746f4b4fe824fca3eedad7c88755baf196dcffca513186d0102cfa0fe2c0601dc43a9e8377a2eb3256a67b5d4035c00f2b93e18dec64c000ae460d892116c9e7f814bbd7f26fb868bf4242e31e88bb9d29b9a42092cfb42a718b630c818058581fd1ec510183931d86f8cc6cfeb5e7939dde42fc4d6d418cd1e8d171120a1", 0xf9}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) 22:45:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000) 22:45:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 357.845060][T14962] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 357.853054][T14962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 357.861021][T14962] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4 22:45:56 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:56 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 357.995370][T15020] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 358.003526][T15020] FAT-fs (loop0): Filesystem has been set read-only [ 358.016138][T15020] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 358.054585][T15020] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 358.237333][ T5] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 358.477323][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 358.597378][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.608294][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.618706][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 358.628066][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.636622][ T5] usb 6-1: config 0 descriptor?? [ 358.878134][T15011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 359.107848][ T5] hid (null): unknown global tag 0xc [ 359.116443][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.123358][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.130288][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.137139][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.144193][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.151170][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.158051][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.164897][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.171861][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.178769][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.185606][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.192494][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.199380][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.206220][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.213127][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.220216][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.227072][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.233958][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.240848][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.247736][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.254608][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.261487][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.268421][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.275263][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.282129][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.289067][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.295922][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.302974][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.309881][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.316741][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.323649][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.330542][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.337444][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.344296][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.351194][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.358106][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.364945][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.372110][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.378999][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.385856][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.392817][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.399726][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.406585][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.413467][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.420408][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.427317][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.434167][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.441044][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.447940][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.454825][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.461743][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.468871][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.475720][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.482584][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.489476][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.496334][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.503236][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.510120][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.516972][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x1 [ 359.523924][ T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0 [ 359.530826][ T5] wacom 0003:056A:0023.001C: unknown global tag 0xc [ 359.537425][ T5] wacom 0003:056A:0023.001C: item 0 1 1 12 parsing failed [ 359.544620][ T5] wacom 0003:056A:0023.001C: parse failed [ 359.550380][ T5] wacom: probe of 0003:056A:0023.001C failed with error -22 [ 359.558776][ T5] usb 6-1: USB disconnect, device number 41 [ 360.077277][ T5] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 360.317264][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 360.447323][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.458224][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.467995][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 360.477005][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.485736][ T5] usb 6-1: config 0 descriptor?? [ 360.728005][T15059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 360.787736][ T5] hid (null): unknown global tag 0xc [ 360.796271][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.804240][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.811808][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.819518][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.826465][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.835459][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.843286][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.851005][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.858689][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.865546][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.874609][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 22:45:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000b803", @ANYRES32=r1, @ANYBLOB="81d509a538b808258092c8a39369eebf1b36169dbeb58d8c4b1e2ba5324d76573080ef8611d0388a0f847a02b7b8c4418fbbe60f926eec48e83e1da3e89cbaa1611e0f35d70d4972215f6d41e81a455df87121960a2eab671ebd1edfdac434b3d4a1f101e9d6f87360d548562f3aa546df2dfc1e33f01e1e7ad818ef480e9833f1a1e0e95b0d550967e09df53d787a0df236e2b14b3492b61532907ec790817e37186298e51626c654053c543f3e461bc927a06bc8509f29bedf82d4da54d47d24bf"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:45:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4800) 22:45:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:45:59 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000240)='\x00<\xd2\xc8\xf8\xb3!\xf2\x81\xc6\xaa\xbc\b\x9e\xd2\xd6\xe1\x10\xf0\x8c}\x8a\x10`\xa11\xcb\xaf\xf1\xe6\xe1d[\x12a\xde\x89[\xc2+Gx9\x9f\'\xb7\xbc\x1bw\xaf}QD#L\xaf\xe3\x00\xbb\xe1T\xad\x9d\xff\xfek\xc3X\xd6\x84\xc5\xb6Z}\x19f\x86\xbb#\xc0\x03_\xe4+\xa3T\x033X\x95\xc2v\x83\x93\x81\xc7n\xd8\x80\xa2\xa3M\xbaSN\xc3\xaa\xe9\xdd\x9bC$\xf0\xcc\xa7\x0e\x95\xffW\x7f\x17^\xed\xfa\x04\xa9`\xc6\xdf\xe26\x9f\x05\xed\xf4x2\x04\xa5\x16\xc5\xfe\xb6\tr[\x19\xce+\x8cx\xf7,z\xd7D\xadEvv6(\xf1n\x04y\xbbK{\r\"N\x7f\x9a\x19\xaa\xe1\xa3\x14\xec\x13\x7f\xc7e\x8cA\x7fT#)\x033V', 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x7) 22:45:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2000) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r7, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(r6, 0x0, 0xffffffffffffff1e) 22:45:59 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 360.882292][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.890328][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.913963][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.927628][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 22:45:59 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 360.935869][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.952123][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 360.962011][T15072] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c000100000000000000000007", @ANYRES32], 0x28}}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 360.999362][T15072] FAT-fs (loop0): Filesystem has been set read-only [ 361.009259][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 22:45:59 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:45:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) 22:45:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) [ 361.041940][T15088] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 361.046830][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.072300][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.074056][T15072] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:45:59 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 361.090027][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.092183][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.108102][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.120080][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.130677][T15097] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 361.144326][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.161471][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.181615][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.188778][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.196439][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.203992][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.210895][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.217785][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.224644][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.231513][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.238393][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.245232][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.252115][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.259015][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.265962][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.272831][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.279715][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.286559][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.293516][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.300428][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.307323][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.314170][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.321048][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.327961][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.334862][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.341955][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.348849][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.355694][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.362713][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.369610][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.376521][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.383532][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.390483][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.397357][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.404239][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.411125][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x1 [ 361.418037][ T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0 [ 361.424910][ T5] wacom 0003:056A:0023.001D: unknown global tag 0xc [ 361.431519][ T5] wacom 0003:056A:0023.001D: item 0 1 1 12 parsing failed [ 361.439027][ T5] wacom 0003:056A:0023.001D: parse failed [ 361.444888][ T5] wacom: probe of 0003:056A:0023.001D failed with error -22 [ 361.453442][ T5] usb 6-1: USB disconnect, device number 42 [ 361.807273][ T5] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 362.047180][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 362.167253][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.178286][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.189596][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 362.198937][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.208108][ T5] usb 6-1: config 0 descriptor?? [ 362.448937][T15078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 362.947222][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 362.953273][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 362.961332][ T5] usb 6-1: USB disconnect, device number 43 [ 363.657134][ T5] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 363.907149][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 364.027312][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.041775][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.053329][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 364.063168][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.072294][ T5] usb 6-1: config 0 descriptor?? 22:46:02 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:46:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4c00) 22:46:02 executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x400, 0x24) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x800}}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 22:46:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:46:02 executing program 5: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) 22:46:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9353310000000000000001"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r3, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x25, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}}, 0xc8040) ftruncate(r1, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0xffffffffffffff00, 0x3, 0x6, 0x4, 0x2, 0x1, 0x3, 0xfffffffffffffffd}, &(0x7f00000001c0)={0x2, 0x9e5, 0x1, 0x1f, 0x3, 0x6, 0x800, 0xf622}, &(0x7f0000000200)={0x8001, 0x2e, 0xffffffffffffff7c, 0x6, 0x5, 0xaa3, 0x80000001, 0x1}, &(0x7f0000000280)={r7, r8+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8}) getdents(r6, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) fadvise64(r1, 0xffffffff, 0x0, 0x4) 22:46:03 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:46:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r4, &(0x7f0000000100)=""/164, 0x20000118) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) [ 364.215360][T15132] overlayfs: workdir and upperdir must be separate subtrees [ 364.236398][T15145] overlayfs: workdir and upperdir must be separate subtrees [ 364.238243][T15138] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:46:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) fcntl$setstatus(r1, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0) 22:46:03 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r3, &(0x7f0000000100)=""/164, 0x20000118) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 22:46:03 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 364.297167][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 364.304204][ T5] usbhid: probe of 6-1:0.0 failed with error -71 22:46:03 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 364.347540][ T5] usb 6-1: USB disconnect, device number 44 [ 364.354188][T15138] FAT-fs (loop0): Filesystem has been set read-only [ 364.365372][T15152] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:46:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16, 0xfffffffffffffffc}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x105581, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r1, &(0x7f0000000100)=""/164, 0x20000118) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) fchdir(r0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x88e17736c98aa507) ftruncate(r2, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r5, &(0x7f0000000100)=""/164, 0x20000118) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents(r7, &(0x7f0000000100)=""/164, 0x20000118) getdents(r7, &(0x7f0000000440)=""/173, 0xad) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x80, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}}, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) [ 364.389957][T15138] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) 22:46:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6000) 22:46:03 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') 22:46:03 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00') [ 364.430414][T15167] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 364.517753][T15177] FAT-fs (loop4): bogus number of reserved sectors [ 364.542210][T15177] FAT-fs (loop4): Can't find a valid FAT filesystem [ 364.554730][T15184] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 364.574115][T15184] FAT-fs (loop0): Filesystem has been set read-only [ 364.584197][T15184] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 364.690378][T15190] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 364.698932][T15191] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0) [ 364.707983][ T5] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 364.711606][T15177] FAT-fs (loop4): bogus number of reserved sectors [ 364.726709][T15177] FAT-fs (loop4): Can't find a valid FAT filesystem [ 365.067212][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 365.079164][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.091371][ T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 365.102647][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.111981][ T5] usb 6-1: config 0 descriptor?? [ 365.358157][T15137] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 365.587701][ T5] hid (null): unknown global tag 0xc [ 365.597212][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.604294][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.611524][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.618849][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.626263][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.633750][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.641193][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.648529][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.655916][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.663283][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.670559][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.677457][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.684325][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.692111][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.699260][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.706556][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.714058][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.721288][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.729976][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.737219][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.744506][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.751642][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.758733][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.766212][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.773467][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.780775][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.787782][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.794823][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.801807][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.808957][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.816530][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.823939][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.831438][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.838935][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.846004][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.853350][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.860507][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.868066][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.875170][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.882605][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.889967][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.898115][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.905409][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.912961][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.919914][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.927165][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.934794][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.941905][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.949304][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.956658][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.963988][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.972425][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.979775][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.986775][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 365.994003][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 366.001316][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 366.008494][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 366.015843][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 366.023121][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x1 [ 366.030290][ T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0 [ 366.038176][ T5] wacom 0003:056A:0023.001E: unknown global tag 0xc [ 366.045199][ T5] wacom 0003:056A:0023.001E: item 0 1 1 12 parsing failed [ 366.052505][ T5] wacom 0003:056A:0023.001E: parse failed [ 366.058713][ T5] wacom: probe of 0003:056A:0023.001E failed with error -22 [ 366.067713][ T5] usb 6-1: USB disconnect, device number 45 [ 366.557037][ T5] usb 6-1: new full-speed USB device number 46 using dummy_hcd