ite$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  250.538483][T12022] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  250.551302][T12019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  250.559713][T12019] FAT-fs (loop0): Filesystem has been set read-only
[  250.577742][T12019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x66e80, 0x0)
ftruncate(r3, 0x2008001)
dup3(r4, r3, 0x0)
io_setup(0x40000000008, &(0x7f0000000240)=<r5=>0x0)
io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x200a00}])
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
fcntl$setsig(r7, 0xa, 0x8)
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)
io_cancel(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0xfff, r0, &(0x7f0000000400)="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", 0x1000, 0xffffffffffffffe0, 0x0, 0x0, r6}, &(0x7f0000000200))
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)

[  250.587325][T12022] FAT-fs (loop5): Filesystem has been set read-only
[  250.595034][T12019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  250.647143][T12031] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  250.659710][T12033] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  250.673631][T12022] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
22:44:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x4c000000, 0x0)

[  250.702506][T12031] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  250.725381][T12042] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  250.874796][ T4996] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  250.906552][T12047] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  250.914886][T12047] FAT-fs (loop0): Filesystem has been set read-only
[  250.922193][T12045] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  250.934913][T12045] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  250.943289][T12045] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  251.114695][ T4996] usb 2-1: Using ep0 maxpacket: 16
[  251.234753][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.245842][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.255604][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  251.264803][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.273350][ T4996] usb 2-1: config 0 descriptor??
[  251.315234][ T4996] usbhid 2-1:0.0: can't add hid device: -22
[  251.321267][ T4996] usbhid: probe of 2-1:0.0 failed with error -22
[  251.515739][T12017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
22:44:12 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x80200, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r4, &(0x7f0000001680)=[{{&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000000580)=""/90, 0x5a}], 0x5, &(0x7f0000000680)=""/4096, 0x1000}, 0x7}], 0x1, 0x2, &(0x7f00000016c0)={0x77359400})
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x10, r5, 0x6f164000)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001780)={0xffffffffffffffff, &(0x7f0000001700)="2bcf6bf847267ee807c2b390b5b6fbdacd87aaf7fc676854d89989027a0fdb3c648ece125822", &(0x7f0000001740)}, 0x20)
ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0))
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
madvise(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0xe)
getdents(r7, &(0x7f0000000100)=""/164, 0x20000118)

22:44:12 executing program 3:
prlimit64(0x0, 0x2, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x81, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd0c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000005)
write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14400000", @ANYRES16=r4, @ANYBLOB="050400000000000000007e000000"], 0x14}}, 0x0)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000001700)=[{&(0x7f0000001600)=""/207, 0xcf}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)

22:44:12 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x60000000, 0x0)

[  253.495523][  T140] usb 2-1: USB disconnect, device number 44
22:44:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  253.558840][T12065] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  253.573632][T12065] FAT-fs (loop0): Filesystem has been set read-only
[  253.616350][T12077] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  253.654527][T12065] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:12 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x68000000, 0x0)

[  253.669406][T12081] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  253.703702][T12065] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  253.904306][  T140] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  253.997250][T12091] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  254.019266][T12091] FAT-fs (loop0): Filesystem has been set read-only
[  254.026974][T12091] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  254.067597][T12091] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  254.144297][  T140] usb 2-1: Using ep0 maxpacket: 16
[  254.264385][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.275436][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.285545][  T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  254.294709][  T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.304347][  T140] usb 2-1: config 0 descriptor??
[  254.768042][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.775458][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.782304][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.789189][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.796128][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.802980][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.809857][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.816743][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.823851][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.830727][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.837639][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.844528][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.851528][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.858416][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.865389][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.872232][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.879289][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.886282][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.893146][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.900131][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.907046][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.913898][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.920774][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.927667][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.934546][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.941418][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.948368][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.955330][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.967523][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.975225][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.982089][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.990468][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  254.998360][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.006102][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.013074][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.021311][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.029357][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.037068][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.044092][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.052408][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.061496][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.069439][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.078597][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.087456][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.095859][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.103018][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.111309][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.118993][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.126595][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.133464][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.142542][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.150399][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.158304][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.166231][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.173263][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.181650][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.189330][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.197000][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.203879][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.212214][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.220406][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.228136][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.235812][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.242976][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.251472][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.259396][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.267277][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.274900][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.281792][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.290066][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.297713][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.305339][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.312203][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.321275][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.329023][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.336672][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.343545][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.351798][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.359514][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.367655][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.375567][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.382479][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.390751][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.398824][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.406673][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
22:44:14 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x6c000000, 0x0)

22:44:14 executing program 3:
prlimit64(0x0, 0x2, 0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x81, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd0c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000005)
write(r0, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14400000", @ANYRES16=r4, @ANYBLOB="050400000000000000007e000000"], 0x14}}, 0x0)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000001700)=[{&(0x7f0000001600)=""/207, 0xcf}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)

22:44:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r5)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
sendmmsg$unix(r0, &(0x7f00000008c0)=[{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000400)="a0422181dc22e19f51fe7ab72d914e05a6825221fa609bce3b1cfa009cc5fbecd198949904db2212e292d2faf60909b32e9671d9c11539903219a8de120e264f00179f9f2f3dff78d5f23fefdab12e52c47fb8", 0x53}, {&(0x7f0000000480)="47a5dfcbd88e704e625f5e99c52ee854dc121f63958b6b39ad5109c2edcab405528298d3c03f1e1c5f5fedfad61fa5f5a399bf84b905dc1c5d4f874276d679ad0985082c70acb92fcbe2de8410b3c3d735636573f71a79f2f2f64ac15fc4888d7e050f7427f2d42fef6bfab3312dc5ccc0bc0f7bb37684d8c84a032e945de8acbf8d9f7f584eea3609447a0bfe35699df4ffdb0aa434ad140153b7337daed1ec0b3eda56d648edf1ac72892bbcd8817556dfde904ee8d88f2665e972c175b3ebb48badb0613b0c74e85d70b4a57a68601d183b599a744eff2a04d4368809adf964b7a3", 0xe3}], 0x2, 0x0, 0x0, 0x20000800}, {&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x1}, {&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000006c0)="3698bc583830413424210df2efa894ad5b24a4d9f995238c9b03b5886110b4094377a3a255e94125673bda619edcfb697037434583704ae9acb95c0bf5d86786ca06dfb0944fb85c7024bad259ac2c571dbca27764e3fd5438d4002793e6bd3d4794c0603a3c815b7f4d0b594831519f86a93e93087b4b0c34ef7cb007881d73a1a3bbf7e15488c226c5219e1eb246d76171df0db5d726826977460b737749880f7a0f3495491535fa4a09d3a160a690f657cb3115c25d53d229eb676e23c0e5300e008d526f2b8b349d384e685c29556f4c72a9", 0xd4}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000ff858f66b700000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r6], 0x98, 0x240000c5}], 0x3, 0x8000)
utimensat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x77359400}}, 0x100)
r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r7, &(0x7f00000003c0)='./file0\x00', 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x30e9c3, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r8, &(0x7f0000000100)=""/164, 0x20000118)

[  255.418450][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.426361][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.434047][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.442562][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.450824][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.458574][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
22:44:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  255.466855][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.473953][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.496708][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.514339][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
22:44:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
readv(r1, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/17, 0x11}], 0x1)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)

[  255.548668][T12124] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  255.550611][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.589818][T12124] FAT-fs (loop0): Filesystem has been set read-only
[  255.597359][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.620911][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.629672][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.637726][T12137] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  255.651576][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.653787][T12124] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  255.669164][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.677794][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.685999][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.692889][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.701765][T12138] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  255.711394][T12124] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  255.711547][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.727591][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
22:44:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x74000000, 0x0)

[  255.735652][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.742548][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.751395][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.767903][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.776004][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.782988][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.791818][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.800213][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.808210][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.816209][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.823117][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.832265][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.840251][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.848382][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.855343][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.862342][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.873324][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.881430][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.889960][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.897982][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.906699][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.913699][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.923176][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.931295][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.939513][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.947585][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.955570][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.962560][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.971705][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.979767][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.987889][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  255.996046][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.002974][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.012066][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.020128][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.028310][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.036343][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.044442][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.051630][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.060800][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.068743][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.076813][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.083791][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.092710][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.101097][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.109279][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.117396][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.125522][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.132502][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.141583][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.149641][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.157838][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.166088][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.173026][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.181941][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.189978][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.198107][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.206064][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.213021][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.222234][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.230241][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.238445][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.246530][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.253489][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.262517][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.270718][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.279005][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.287151][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.305182][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.316869][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.332876][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.347807][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.363278][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.371996][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.380083][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.388089][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.396384][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.403364][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.412470][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.421372][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.430325][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.439572][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.449178][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.458163][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.466344][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.473285][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.482222][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.490675][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.498841][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.506897][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
22:44:15 executing program 3:
r0 = socket(0x11, 0x800000003, 0x8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
r2 = dup(0xffffffffffffffff)
recvfrom$inet(r2, &(0x7f0000000140)=""/175, 0xaf, 0x160, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8a}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="0c2634927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07eff8a44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27)

[  256.514962][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.522043][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.531239][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.539351][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.553821][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.562232][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.570187][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.578051][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.585724][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.592688][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.601490][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.609668][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.617789][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.625618][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.632625][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.640930][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.648664][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.656805][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.664957][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.671870][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.680773][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.688442][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.696024][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.702990][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.711362][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.719067][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.726741][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.733595][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.742004][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.749693][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.757488][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.765257][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.772125][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.780516][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.789351][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.797137][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.804750][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.811627][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.819914][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.832483][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.840239][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.848058][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.855987][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.862976][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.871345][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.878978][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.886632][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.893662][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.902146][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.910141][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.917815][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.925547][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.933271][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.941457][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.949511][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.957776][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.965682][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.972535][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.981005][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.988720][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  256.996393][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.003267][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.012178][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.019928][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.027614][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.035430][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.042287][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.050461][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.058121][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
22:44:15 executing program 3:
ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'wg1\x00', {0x3}})
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r0, 0x0, 0x81420000a77, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="353581", 0x3}], 0x1}, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[], 0x17)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x486, 0x186, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x8, 0x7}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x0, 0x40}}]}}}]}}]}}, 0x0)
r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)
mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x80010, r6, 0x4)
keyctl$get_persistent(0x4, 0xffffffffffffffff, r5)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00')
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r7, &(0x7f0000000100)=""/164, 0x20000118)

[  257.066189][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.073079][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.082122][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.096577][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.109474][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.117291][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.125376][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.132253][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.140749][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.148920][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.156806][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.166147][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.173156][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.181742][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.189399][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.197156][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.204915][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.211795][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.220386][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.228201][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.235973][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.242852][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.251297][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.258940][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.266579][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.273432][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.281679][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.289323][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.297009][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.304926][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.311805][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.319985][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.327648][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.335333][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.342211][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.350483][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.358704][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.366571][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.373435][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.381888][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.389771][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.398717][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.407260][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.416061][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.422938][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.431430][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.439418][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.443917][ T4996] usb 4-1: new low-speed USB device number 19 using dummy_hcd
[  257.447951][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.460951][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.467892][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.475037][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.482077][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.489293][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.496924][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.504102][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.511087][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.518089][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.525013][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.532170][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.539203][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.546389][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.553238][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.560139][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.567214][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.574251][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.581112][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.588097][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.594995][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.601859][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.608915][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.616468][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.623337][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.630321][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.637408][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.644504][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.651549][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.658635][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.665651][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.672534][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.679606][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.686499][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.693362][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.693863][ T4996] usb 4-1: Invalid ep0 maxpacket: 16
[  257.700245][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.712376][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.719272][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.726376][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.733321][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.740570][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.747481][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.754724][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.761591][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.768477][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.775383][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.782228][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.789249][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.796165][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.803029][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.809924][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.816824][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.823695][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.830600][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.837497][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.844388][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.851260][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.858283][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.863842][ T4996] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[  257.865172][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.879474][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.886496][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.893367][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.900517][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.907445][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.914372][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.921515][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.928417][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.935662][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.942518][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.949442][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.956514][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.963356][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.970391][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.977310][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.984205][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.991275][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  257.998170][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.005077][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.012003][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.018991][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.025893][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.032737][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.039611][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.046597][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.053454][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.060567][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.067493][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.074389][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.081303][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.088217][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.095125][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.102150][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.109160][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.113812][ T4996] usb 4-1: Invalid ep0 maxpacket: 16
[  258.116072][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.121612][ T4996] usb usb4-port1: attempt power cycle
[  258.128184][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.140570][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.147487][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.154386][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.161281][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.168293][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.175212][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.182072][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.189043][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.195976][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.202844][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.209742][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.216642][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.223489][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.230383][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.237402][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.244351][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.253226][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.260173][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.267382][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.274291][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.281158][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.288275][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.295198][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.302175][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.309222][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.316386][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.323255][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.330165][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.337065][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.344126][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.351423][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.358310][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.365232][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.372097][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.379005][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.385903][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.394605][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.401479][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.408383][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.415388][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.422307][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.429305][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.436236][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.444440][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.451836][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.458805][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.465698][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
22:44:17 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[  258.472543][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.479459][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.486359][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.493207][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.500292][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.507585][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.517618][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.524577][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.531436][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.538345][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.545331][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.552335][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.559253][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.566241][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.573096][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.579992][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.586916][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.594241][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.601096][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.608022][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.615114][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.621965][  T140] wacom 0003:056A:0023.000E: unknown main item tag 0x0
[  258.629061][  T140] wacom 0003:056A:0023.000E: Unknown device_type for 'HID 056a:0023'. Assuming pen.
[  258.639014][  T140] input: Wacom Intuos 12x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0023.000E/input/input15
[  258.653905][  T140] wacom 0003:056A:0023.000E: hidraw0: USB HID v0.00 Device [HID 056a:0023] on usb-dummy_hcd.1-1/input0
[  258.672201][  T140] usb 2-1: USB disconnect, device number 45
[  258.833807][ T4996] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[  258.907652][T12170] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  258.923765][ T4996] usb 4-1: Invalid ep0 maxpacket: 16
22:44:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  258.951861][T12170] FAT-fs (loop0): Filesystem has been set read-only
[  258.961411][T12177] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  258.973033][T12178] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  258.984461][T12177] FAT-fs (loop5): Filesystem has been set read-only
22:44:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:17 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x7a000000, 0x0)

22:44:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  259.008823][T12170] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  259.073887][ T4996] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[  259.084123][  T140] usb 2-1: new high-speed USB device number 46 using dummy_hcd
22:44:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  259.163776][ T4996] usb 4-1: Invalid ep0 maxpacket: 16
[  259.169326][ T4996] usb usb4-port1: unable to enumerate USB device
[  259.333674][  T140] usb 2-1: Using ep0 maxpacket: 16
[  259.473761][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.484816][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.495321][  T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  259.504763][  T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.513488][  T140] usb 2-1: config 0 descriptor??
22:44:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xc0060000, 0x0)

22:44:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
eventfd2(0x8000, 0x800)

[  259.670703][T12177] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  259.679323][T12202] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  259.782747][T12208] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  259.790687][T12208] FAT-fs (loop0): Filesystem has been set read-only
[  259.808185][T12208] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  259.828376][T12216] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  259.837813][T12208] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  259.860511][T12216] FAT-fs (loop5): Filesystem has been set read-only
[  259.948225][T12216] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  260.008303][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.018338][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.027144][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.034994][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.041875][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.050314][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.058224][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.065919][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.072800][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.080991][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.088653][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.096462][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
22:44:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  260.103330][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.112404][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.120384][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.128416][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.139765][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.147870][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.156597][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.164724][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.171741][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.180791][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.188666][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.197057][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.206164][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.213072][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.221824][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.229796][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.237932][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.245960][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.255620][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.264746][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.271961][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.280399][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.288230][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.296197][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.303413][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.311690][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.319418][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.327197][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.335430][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.342856][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.351622][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.361472][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.369669][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.377911][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.386185][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.393396][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.402411][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.410471][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.418927][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.429851][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.437727][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.445492][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.452351][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.460885][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.468468][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.476101][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.483239][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.491544][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.499299][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.507284][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.515032][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.521897][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.530068][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.537808][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.545507][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.552372][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.560861][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.568668][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.576583][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.583477][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.591756][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.599533][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.607400][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.615074][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.621936][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.630267][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.638002][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.645667][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.652633][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.660955][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.668655][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.676421][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.683298][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.691633][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.699330][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
22:44:19 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xf6ffffff, 0x0)

22:44:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)

22:44:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  260.707384][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.715750][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.733617][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.740516][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
22:44:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  260.756853][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.777282][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.781723][T12239] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  260.796335][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.804391][T12239] FAT-fs (loop5): Filesystem has been set read-only
22:44:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  260.807852][T12240] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  260.818390][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.835804][T12252] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
22:44:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  260.863069][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.880531][T12239] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  260.901193][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
22:44:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
getresuid(&(0x7f0000000280)=<r1=>0x0, &(0x7f0000000400), &(0x7f0000000440))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f0000000200)='./file0\x00', 0x6, 0x1, &(0x7f0000000240)=[{&(0x7f0000000300)="9d4c87daf966490de8d6bf7aaa25e07d2de208470106925e9d52c9f00725a28a24ffd885ef8b54d913fe6f704069ebb24cff79ba9e4e40c4f92aa0bc902f2f795a39d177e512d8ded917b999b512c63a505e670a01b4bc2223ce01623ecf94379ba2ce70a6e4ffeb40be9bdaaf7f7911c891e863bcf55953b0d828fb2aa23faad2460723064593b85abe3c", 0x8b, 0x7fff}], 0x2060000, &(0x7f0000000480)={[{@fastboot='fastboot'}, {@fsync_mode_strict='fsync_mode=strict'}, {@inline_dentry='inline_dentry'}, {@inline_dentry='inline_dentry'}, {@fastboot='fastboot'}, {@alloc_mode_reuse='alloc_mode=reuse'}, {@noinline_data='noinline_data'}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@fowner_gt={'fowner>', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, ']'}}, {@fowner_gt={'fowner>', r5}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@appraise='appraise'}, {@hash='hash'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@subj_type={'subj_type'}}]})
fchdir(r0)
r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r8, &(0x7f00000003c0)='./file0\x00', 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0)
getdents(r9, &(0x7f0000000100)=""/164, 0x20000118)

[  260.912667][T12240] FAT-fs (loop0): Filesystem has been set read-only
[  260.925583][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.949483][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.960642][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.969041][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.983210][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  260.991521][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.006736][T12240] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  261.056121][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.069635][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.077880][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.085615][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.092467][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.100698][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.108343][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.116328][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.123208][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.131931][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.140039][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.148018][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.156021][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.162982][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.171182][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.178983][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.186700][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.194514][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.201564][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.210052][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.217972][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.226339][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.233217][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.241994][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.249670][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.257468][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.265373][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.272381][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.280842][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.288677][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.296420][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.303283][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.311594][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.319301][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.326900][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.334654][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.341547][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.349740][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.357439][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.365210][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.372064][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.380182][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.387882][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.395662][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.402622][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.410967][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.418841][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.426527][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.434204][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.441280][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.449648][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.457414][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.465036][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.471916][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.480353][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.487973][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.495907][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.502859][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.511125][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.518815][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.526541][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.534232][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.541081][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.549201][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.556780][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.564456][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.571392][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.579605][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.587570][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.595455][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.602402][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.610709][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.618424][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.626125][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.632977][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.641274][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.649069][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.656751][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.664404][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.671259][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.679472][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.687194][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.695172][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.702296][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.710618][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.718907][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.726667][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.734428][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.741292][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.749798][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.757417][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.765310][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.772197][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.780413][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.788411][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.796112][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.802969][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.811465][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.819399][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.827154][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.834902][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.841767][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.850398][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.858358][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.866362][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.875005][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.882065][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.890418][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.898167][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.905951][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.912960][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.921304][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.929126][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.936930][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.944667][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.951604][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.960005][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.967864][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.975563][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.982435][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.990960][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  261.998679][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.006310][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.013177][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.021632][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.029313][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.036915][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.044626][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.051503][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.059687][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.067421][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.075504][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.082386][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.091256][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.098911][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.106541][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.114231][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.121087][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.129567][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.137372][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.145084][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.152058][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.160376][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.168127][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.175967][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.184960][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.191839][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.200119][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.207784][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.215535][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.222828][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.231264][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.239141][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.246789][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.254590][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.261617][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.269847][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.277568][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.285279][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.292146][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.300498][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.308330][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.315977][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.322990][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.331272][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.338948][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.346917][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.354955][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.361841][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.370056][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.377750][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.385448][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.392311][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.400948][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.408709][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.416550][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.424561][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.431729][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.440084][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.448070][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.456359][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.464386][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.471297][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.479755][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.487496][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.495158][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.502037][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.510506][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.518343][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.526127][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.533001][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.541296][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.548949][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.556611][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.564660][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.571526][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.579906][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.587724][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.595525][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.602411][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.610739][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.618882][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.626662][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.634702][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.641727][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.650348][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.658695][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.666722][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.674637][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.681627][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.690353][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.698183][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.706083][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.713053][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.722041][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.729869][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.738158][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.746141][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.753014][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.761447][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.769403][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.777280][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.785057][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.792144][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.800503][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.808248][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.816626][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.824681][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.831544][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.839894][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.847765][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.855731][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.862651][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.871077][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.878770][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.887172][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.895118][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.902108][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.910543][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.918422][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.926255][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.934102][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.940973][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.949245][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.957043][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.964721][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.971574][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.980076][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.987938][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  262.995662][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.002525][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.010835][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.018765][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.026407][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.033989][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.040839][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.049051][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.056658][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.064348][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.071286][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.079520][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.087141][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.094742][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.101636][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.109908][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.117927][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.125570][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.132616][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.140842][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.148481][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.156102][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.164207][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.171065][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.179297][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.186885][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.194697][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.201554][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.209850][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.217522][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.225225][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.232170][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.240403][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.248125][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.255849][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.262704][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.271019][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.278741][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.286419][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.294070][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.301020][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.309236][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.316915][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.324613][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.331474][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.339929][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.348791][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.356792][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.364583][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.371445][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.379694][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.387510][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.395870][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.402745][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.410922][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.418751][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.426385][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.434297][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.441426][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.450368][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.458119][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.465832][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.472707][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.480920][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.488789][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.496571][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.504191][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.511062][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.519422][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.527213][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.535194][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.542066][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.550465][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.558322][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.566168][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.573040][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.581328][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.589125][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.596786][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.604630][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.611515][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.619807][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.627527][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.635293][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.642177][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.650387][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.658212][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.665877][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.672736][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.681214][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.688897][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.696726][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.704592][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.711655][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
22:44:22 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$pptp(0x18, 0x1, 0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')

22:44:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(r0, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
getdents(r3, &(0x7f0000000100)=""/152, 0x98)

22:44:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xfeffffff, 0x0)

[  263.720023][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.727878][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.735921][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.742932][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.758454][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
22:44:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(r0, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  263.770331][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.778222][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.787959][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
22:44:22 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18020000000000000000000010000000850000002a0000009500000000000000e8b6a6f350e4edbd1beac1fd0c51bbd356b68fd53e32e6fb983effea0d26f2f033e08d43cb000000000000000000000000000000858200002bd0d1e30624daff7a2f58fa7cf6b67b1a62ff445a7d5e04ab437555fe96769b6645a35e4404a7a3dacfbad1cefcc6fe746646f6f4590a17a83d4a35d8c6d65f3c8320b7253769aedc3a0e3b4de8275365299588fe7d4796a1d16f681f46a61894882eda0fee0ffae224eaf57213"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="4be624e60b8588ae2b8961abc53c", 0x0, 0x4000}, 0x28)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000100)=""/246, &(0x7f0000000080)=0xf6)

[  263.821124][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.829725][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.842414][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.850453][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
22:44:22 executing program 3:
flock(0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2)
r0 = dup(0xffffffffffffffff)
write$P9_RCREATE(r0, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x10, 0x2}, 0x1}}, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x3000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/232)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16)

[  263.866463][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.878390][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.889687][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.902294][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.922887][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
22:44:22 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x1d)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="036974001410e5b14d000c45ec59acfa1dc10100"/36, @ANYRES32], 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000100000000000000000000038e3ff0000", @ANYRES32=r3, @ANYBLOB="00000000000000000c001a8008000280040001800500270000000000"], 0x34}}, 0x0)

[  263.974036][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.992368][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  263.999317][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  264.006721][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  264.013689][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  264.020909][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  264.023077][T12294] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  264.027839][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  264.043707][T12297] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  264.044263][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  264.060452][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  264.067345][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  264.074241][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  264.081115][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  264.089084][  T140] wacom 0003:056A:0023.000F: unknown main item tag 0x0
[  264.099257][  T140] wacom 0003:056A:0023.000F: Unknown device_type for 'HID 056a:0023'. Assuming pen.
[  264.109927][  T140] input: Wacom Intuos 12x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0023.000F/input/input18
22:44:22 executing program 3:
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000180)=0x78)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000040)="401f08010000193000009727c100020800002da5b149bf2ded26f2ac42343ffa2fa16eaa6de8eba7ccf87732aa623ed2f27203a9422cf8e79b7c30895f0d782afcf50085c14af2010000007be4e34c40f5b2ed463d9e6b0b319a366238bd909524c322ef3e7333c0b6f5de6379710ae5f300000000000000", 0x78)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
r3 = syz_open_procfs(0x0, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x95)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_logind_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:init_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040054)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`P\x00\x00', @ANYRES16=r5, @ANYBLOB="060127bd7000ffdbdf250600000008000500ffffffff14000300ff01000000000000000000000000000114000300fe88000000000000000000000000010108000500e000000214000200ff020000000000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x42}, 0x40880)
getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f00000001c0))

[  264.131147][  T140] wacom 0003:056A:0023.000F: hidraw0: USB HID v0.00 Device [HID 056a:0023] on usb-dummy_hcd.1-1/input0
[  264.153957][  T140] usb 2-1: USB disconnect, device number 46
[  264.399743][T12320] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  264.431258][T12320] FAT-fs (loop5): Filesystem has been set read-only
[  264.496897][T12320] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  264.506133][T12329] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  264.543173][  T140] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  264.783128][  T140] usb 2-1: Using ep0 maxpacket: 16
[  264.903172][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.914283][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.924059][  T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  264.933204][  T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.941787][  T140] usb 2-1: config 0 descriptor??
[  265.194699][T12278] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  265.423549][  T140] hid (null): unknown global tag 0xc
[  265.432208][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.440330][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.448589][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.456335][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.464051][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.470937][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.479258][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.487031][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.493978][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.500837][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.509550][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.517190][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.524917][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.531779][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.540064][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.547818][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.555430][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.562310][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.570552][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.578212][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.585942][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.593784][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.600662][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.609157][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.616837][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.624667][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.631555][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.639939][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.647770][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.655516][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.662423][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.670751][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.678420][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.686023][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.692896][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.701217][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.709171][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.716902][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.724674][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.732245][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.740434][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.748103][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.755792][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.763773][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.770738][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.779656][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.787347][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.795345][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.802229][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.811797][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.819592][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.827474][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.835783][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.842658][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.851158][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.860386][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.868074][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.875872][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.882753][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x1
[  265.891094][  T140] wacom 0003:056A:0023.0010: unknown main item tag 0x0
[  265.898952][  T140] wacom 0003:056A:0023.0010: unknown global tag 0xc
[  265.906775][  T140] wacom 0003:056A:0023.0010: item 0 1 1 12 parsing failed
[  265.914825][  T140] wacom 0003:056A:0023.0010: parse failed
[  265.920586][  T140] wacom: probe of 0003:056A:0023.0010 failed with error -22
[  265.929974][  T140] usb 2-1: USB disconnect, device number 47
22:44:24 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:24 executing program 3:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0xa8)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
close(r0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0)
ftruncate(r1, 0x2008002)
r2 = socket(0x0, 0x1, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118)
r3 = dup(r2)
setsockopt$inet_tcp_buf(r3, 0x6, 0x0, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
setsockopt$inet_tcp_buf(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x0, 0x11, 0x0, r4})
sendfile(r0, r1, 0x0, 0x200fff)
r5 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x10000007)
r6 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r6, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@empty, 0x8, 0x0, 0x4e21, 0x1ff, 0xa, 0x80, 0x20, 0x2f}, {0x6, 0x6, 0x7, 0x8, 0xfffffffffffffe01, 0x8, 0x8e, 0x2}, {0x6, 0x7, 0x4, 0x7}, 0x101, 0x6e6bc0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x1f}, 0x0, 0x4, 0x1, 0x8, 0x9, 0x9, 0xffffffff}}, 0xe8)
read(r2, &(0x7f0000000180)=""/19, 0x13)

22:44:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(r0, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xffff1f00, 0x0)

22:44:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setregset(0x4205, 0xffffffffffffffff, 0x6, &(0x7f0000000200)={&(0x7f00000001c0)="7a1931427da4bea5089435d82c78", 0xe})
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)

22:44:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(r0, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  266.204681][T12348] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  266.222814][T12345] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:25 executing program 3:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
unshare(0x44000600)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=<r1=>0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r4 = dup2(r3, r0)
clone3(&(0x7f0000000200)={0x2200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/101, 0x65, &(0x7f0000000140)=""/10, &(0x7f00000001c0)=[r1, r2], 0x2, {r4}}, 0x58)
recvmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0)

[  266.248976][T12348] FAT-fs (loop5): Filesystem has been set read-only
[  266.260333][T12345] FAT-fs (loop0): Filesystem has been set read-only
[  266.276186][T12362] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(r0, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:25 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r0, &(0x7f0000000100)=""/164, 0x20000118)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x12c67341075437d5}, 0x6)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x101000, 0x0)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0x124)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$cont(0x18, 0x0, 0xfffffffffffffb5a, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, 0x0, 0x0, 0x0)
capget(&(0x7f0000000480)={0x19980330}, &(0x7f00000004c0)={0xa8, 0x6, 0x3ff, 0x1000, 0x5d, 0x7})
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000000104dad65be64a9dbbfbca834bf3c701020000000000000600060000000000000040000000000000", @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000)

[  266.298063][T12348] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  266.321585][T12361] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
22:44:25 executing program 3:
writev(0xffffffffffffffff, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008c0)
arch_prctl$ARCH_GET_CPUID(0x1011)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9)
r3 = gettid()
clone(0xd7a69000, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128})
wait4(0x0, 0x0, 0x0, 0x0)

[  266.389987][T12345] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  266.405342][T12378] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  266.442965][  T140] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  266.521919][T12391] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use)
[  266.682879][  T140] usb 2-1: Using ep0 maxpacket: 16
[  266.816589][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.827573][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  266.838181][  T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  266.847558][  T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.858298][  T140] usb 2-1: config 0 descriptor??
[  267.103258][T12349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  267.323346][  T140] hid (null): unknown global tag 0xc
[  267.331856][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.339755][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.347449][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.355227][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.362100][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.370385][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.378037][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.385841][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.392701][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.401039][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.409059][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.416690][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.424387][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.431264][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.439602][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.447796][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.454735][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.461596][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.470474][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.478216][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.486081][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.494253][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.501140][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.509436][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.517743][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.525767][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.532651][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.540860][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.549213][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.557026][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.564762][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.571623][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.580164][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.587847][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.596052][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.604204][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.611382][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.619943][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.627783][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.635864][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.642782][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.649625][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.658505][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.666249][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.674043][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.682094][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.689840][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.697580][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.705318][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.712214][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.720370][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.728110][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.735975][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.743660][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.750521][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.758668][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.766374][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.774355][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.781225][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x1
[  267.789767][  T140] wacom 0003:056A:0023.0011: unknown main item tag 0x0
[  267.797487][  T140] wacom 0003:056A:0023.0011: unknown global tag 0xc
[  267.804949][  T140] wacom 0003:056A:0023.0011: item 0 1 1 12 parsing failed
[  267.812150][  T140] wacom 0003:056A:0023.0011: parse failed
[  267.819224][  T140] wacom: probe of 0003:056A:0023.0011 failed with error -22
[  267.827993][  T140] usb 2-1: USB disconnect, device number 48
22:44:26 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xffffff0f, 0x0)

22:44:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(r0, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e660ef8b4de37618b24b870fb3f", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)

22:44:26 executing program 2:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  268.083962][T12402] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  268.091812][T12402] FAT-fs (loop0): Filesystem has been set read-only
[  268.112085][T12408] FAT-fs (loop5): invalid media value (0x00)
[  268.124124][T12408] FAT-fs (loop5): Can't find a valid FAT filesystem
22:44:26 executing program 2:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:26 executing program 2:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xfffffff6, 0x0)

[  268.236133][T12402] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  268.260316][T12408] FAT-fs (loop5): invalid media value (0x00)
[  268.267518][T12408] FAT-fs (loop5): Can't find a valid FAT filesystem
[  268.312732][  T140] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  268.501422][T12436] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  268.510142][T12436] FAT-fs (loop0): Filesystem has been set read-only
[  268.535561][T12436] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  268.543701][T12439] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  268.552786][  T140] usb 2-1: Using ep0 maxpacket: 16
[  268.672724][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.683619][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.693490][  T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  268.702514][  T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.711232][  T140] usb 2-1: config 0 descriptor??
[  268.963052][T12406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  269.203208][  T140] hid (null): unknown global tag 0xc
[  269.211716][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.219574][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.227182][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.234975][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.241834][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.250003][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.258559][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.266209][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.273958][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.280818][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.289146][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.296918][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.304620][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.311475][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.319678][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.327559][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.335254][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.342146][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
22:44:28 executing program 3:
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @broadcast, 0x0, 0x0, 'lblcr\x00', 0x0, 0x80003ff}, {@empty}}, 0x44)
syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x186}], 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x800)
ioctl$FIOCLEX(r0, 0x5451)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0)
rt_sigaction(0x5, &(0x7f00000001c0)={&(0x7f0000000140)="430f1ea4c700000100c421385de8c4c209cfb93d625ced400faef8c402f91cfb47d8c8660f38f6dbc4c3b5cf1933c423414b5d00652e2e64430fae83de0e0000", 0x80000004, &(0x7f0000000180)="c44101d2cb3081f8ffffffc401a95e6e06642e41d9f8c423556c6300a9f245e005c4e27d78180f53c947a3e800000000000000c4a17c28bebab3118d", {[0x5]}}, &(0x7f0000000200)={&(0x7f00000002c0)="660fe557fec481fc77c482f91d17c42215048900000000c4e2d597550df2400f12ed0f0f800000000097c4e3097ba334a6e2a700f342d201460f0f96000000001c", 0x0, &(0x7f0000000340)="650f8e00000000c48191fa9f6774b8153e660f1b9d00080000c44269455b05c4a3791d08e36664f344aef2426fc4e1645f7579c4a2b9039fcd000000f226da1d78558ce1"}, 0x8, &(0x7f00000003c0))

[  269.350520][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.358539][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.366346][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.374154][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.381034][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.389408][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.397668][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.405715][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.412849][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.419730][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.426692][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.433606][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.440477][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.447492][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.454477][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.461391][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.468361][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.475273][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.482134][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.489014][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.495905][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.502801][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.509641][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.516522][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.523441][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.530298][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.537170][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.544091][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.550943][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.557860][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.564780][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.571626][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.578502][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.585426][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.592280][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.599180][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.606100][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.612996][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.619873][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.626758][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.633654][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x1
[  269.640516][  T140] wacom 0003:056A:0023.0012: unknown main item tag 0x0
[  269.647404][  T140] wacom 0003:056A:0023.0012: unknown global tag 0xc
[  269.654016][  T140] wacom 0003:056A:0023.0012: item 0 1 1 12 parsing failed
[  269.661173][  T140] wacom 0003:056A:0023.0012: parse failed
[  269.666943][  T140] wacom: probe of 0003:056A:0023.0012 failed with error -22
[  269.675391][  T140] usb 2-1: USB disconnect, device number 49
22:44:28 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x202880, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)

22:44:28 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xfffffffe, 0x0)

22:44:28 executing program 3:
prlimit64(0x0, 0xb, &(0x7f0000000280)={0x470000000000, 0x20000000006}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000000000000}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x8)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x4, 0x3}, 0x0)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9)
syz_open_procfs(0x0, 0x0)
r5 = creat(&(0x7f0000000040)='./bus\x00', 0xa)
fcntl$setstatus(r5, 0x4, 0x46000)
lseek(r5, 0x4200, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0))
r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001})
r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
sendfile(r5, r7, 0x0, 0x8400fffffffb)
sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e)

[  269.951395][T12459] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  269.964669][T12459] FAT-fs (loop0): Filesystem has been set read-only
22:44:28 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:28 executing program 4:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  269.995256][T12463] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  270.010804][T12459] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  270.013126][T12463] FAT-fs (loop5): Filesystem has been set read-only
22:44:28 executing program 4:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x80000000000, 0x0)

[  270.043519][T12476] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x400200, 0x0)
mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000200)=""/178, 0xb2)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
connect$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x9}}, 0x10)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f0000000100)=""/25, &(0x7f0000000300)=0x19)

22:44:28 executing program 4:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  270.159942][T12480] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  270.212549][  T140] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  270.283394][T12490] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  270.301395][T12490] FAT-fs (loop0): Filesystem has been set read-only
[  270.312581][T12490] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  270.332367][T12490] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  270.462806][  T140] usb 2-1: Using ep0 maxpacket: 16
[  270.582543][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.593543][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.603589][  T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  270.612738][  T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.621316][  T140] usb 2-1: config 0 descriptor??
[  270.863108][T12464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  271.102927][  T140] hid (null): unknown global tag 0xc
[  271.111426][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.119566][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.126509][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.133941][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.140822][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.147984][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.154884][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.161739][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.168722][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.175641][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.182547][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.189518][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.196532][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.203482][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.210335][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.217262][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.224303][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.231460][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.238359][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.245276][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.252145][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.259130][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.266093][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.272994][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.279858][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.286757][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.293788][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.300658][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.309073][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.316851][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.324463][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.331330][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.339553][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.347237][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.354864][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.361944][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.370409][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.378135][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.386024][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.393820][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.400772][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.409026][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.416811][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.424783][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.431666][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.440369][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.448131][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.456117][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.463932][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.470908][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.479208][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.487139][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.494871][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.501747][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.510010][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.517786][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.525585][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.533719][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.540662][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x1
[  271.548855][  T140] wacom 0003:056A:0023.0013: unknown main item tag 0x0
[  271.556481][  T140] wacom 0003:056A:0023.0013: unknown global tag 0xc
[  271.563807][  T140] wacom 0003:056A:0023.0013: item 0 1 1 12 parsing failed
[  271.570972][  T140] wacom 0003:056A:0023.0013: parse failed
[  271.578234][  T140] wacom: probe of 0003:056A:0023.0013 failed with error -22
[  271.586945][  T140] usb 2-1: USB disconnect, device number 50
22:44:30 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:30 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:30 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:30 executing program 5:
openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x40, 0x0)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000ffc1df250b00000005002d00000000000800320009000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8, 0x8000)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
fchdir(r2)
r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x10000, 0x62)
mkdirat(r4, &(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000400))
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)

22:44:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x100000000000000, 0x0)

22:44:30 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xddf}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"#'], 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x2, 0x88}}}, &(0x7f0000000080)={0x37, 0x0, 0x0, 0x0, 0x0, 0x0})

22:44:30 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  271.858950][T12515] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00'})
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)

22:44:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x200000000000000, 0x0)

[  271.912271][T12515] FAT-fs (loop0): Filesystem has been set read-only
[  271.921921][T12534] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  271.940892][T12515] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  272.092330][  T140] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  272.102749][  T115] usb 2-1: new high-speed USB device number 51 using dummy_hcd
22:44:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:30 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  272.216683][T12549] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  272.225791][T12549] FAT-fs (loop0): Filesystem has been set read-only
[  272.236846][T12549] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  272.265429][T12547] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  272.276623][T12547] FAT-fs (loop5): Filesystem has been set read-only
[  272.319816][T12547] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  272.330142][T12549] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  272.339578][T12560] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  272.356422][  T115] usb 2-1: Using ep0 maxpacket: 16
[  272.482503][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.496597][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.508439][  T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  272.518065][  T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.527062][  T115] usb 2-1: config 0 descriptor??
[  272.533262][  T140] usb 4-1: unable to get BOS descriptor or descriptor too short
[  272.612392][  T140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.623324][  T140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  272.636713][  T140] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  272.646100][  T140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.654949][  T140] usb 4-1: config 0 descriptor??
[  272.762628][T12524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  273.002789][  T115] hid (null): unknown global tag 0xc
[  273.011305][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.019183][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.026784][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.034402][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.041310][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.049943][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.057764][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.065411][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.073148][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.080027][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.088213][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.096095][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.103758][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.110631][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.117872][T12512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  273.119788][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.132466][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.139406][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.146374][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.153368][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.160230][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.167112][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.174253][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.181215][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.188110][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.195091][  T140] usbhid 4-1:0.0: can't add hid device: -71
[  273.201035][  T140] usbhid: probe of 4-1:0.0 failed with error -71
[  273.207465][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.215201][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.222060][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.228987][  T140] usb 4-1: USB disconnect, device number 23
[  273.235219][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.242564][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.249433][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.256619][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.263535][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.270388][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.277302][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.284231][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.291086][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.300352][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.307433][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.314346][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.321210][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.328128][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.335148][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.342320][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.349196][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.356299][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.363304][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.371227][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.378135][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.385215][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.392307][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.399191][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.406120][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.413050][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.420003][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.430413][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.440154][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.447597][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.455196][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.462082][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x1
[  273.469003][  T115] wacom 0003:056A:0023.0014: unknown main item tag 0x0
[  273.475927][  T115] wacom 0003:056A:0023.0014: unknown global tag 0xc
[  273.482540][  T115] wacom 0003:056A:0023.0014: item 0 1 1 12 parsing failed
[  273.489784][  T115] wacom 0003:056A:0023.0014: parse failed
[  273.495577][  T115] wacom: probe of 0003:056A:0023.0014 failed with error -22
[  273.504168][  T115] usb 2-1: USB disconnect, device number 51
22:44:32 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x8a, 0xaa, 0x8f, 0x0, [], [{}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x300000000000000, 0x0)

22:44:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r6 = fcntl$dupfd(r4, 0x0, r5)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1594e450bd3449e9}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f00000001c0)={0x3, 0x3, 0xbc77, 0x8, 0x2, 0x6})

[  273.725640][T12582] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  273.736284][T12582] FAT-fs (loop5): Filesystem has been set read-only
[  273.747732][T12582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12582 comm=syz-executor.5
[  273.768241][T12582] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  273.790741][T12598] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  273.814184][T12589] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  273.825543][T12589] FAT-fs (loop0): Filesystem has been set read-only
[  273.834349][T12589] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  273.883493][T12589] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  273.892603][  T140] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  273.904174][T12601] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  274.002143][  T115] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  274.252160][  T115] usb 2-1: Using ep0 maxpacket: 16
[  274.302156][  T140] usb 4-1: unable to get BOS descriptor or descriptor too short
[  274.382186][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.394266][  T140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.405344][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.415101][  T140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  274.430521][  T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  274.439933][  T140] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  274.449156][  T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.458667][  T140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.468188][  T115] usb 2-1: config 0 descriptor??
[  274.475348][  T140] usb 4-1: config 0 descriptor??
22:44:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:33 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)

22:44:33 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:33 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x400000000000000, 0x0)

22:44:33 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r0, &(0x7f0000000100)=""/164, 0x20000118)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
r2 = socket(0x100000000011, 0x2, 0x0)
bind(r2, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0}, &(0x7f00000002c0)=0xfeeb)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0xd, 0x0, 0xd}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x0, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x0, 0x1480}, [@IFLA_MTU={0x8, 0x4, 0x1a}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040005}, 0x8004)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
unshare(0x60040600)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000050}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x1ff)
pipe(&(0x7f00000004c0))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[  274.712617][T12591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  274.713101][T12607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
22:44:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  274.812092][  T140] usbhid 4-1:0.0: can't add hid device: -71
[  274.819244][T12617] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  274.820656][  T140] usbhid: probe of 4-1:0.0 failed with error -71
[  274.836408][T12615] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  274.840234][T12619] FAT-fs (loop2): bogus number of reserved sectors
[  274.856385][T12619] FAT-fs (loop2): Can't find a valid FAT filesystem
[  274.874785][T12617] FAT-fs (loop5): Filesystem has been set read-only
[  274.880403][T12615] FAT-fs (loop0): Filesystem has been set read-only
[  274.889375][T12635] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  274.889418][  T140] usb 4-1: USB disconnect, device number 24
22:44:33 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  274.942734][  T115] hid (null): unknown global tag 0xc
[  274.948144][T12617] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  274.957413][T12615] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  274.969613][T12637] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  274.975496][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.000435][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.007563][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.018290][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.028157][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.035080][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.042078][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.048947][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.055839][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.063431][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.070365][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.077243][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.084870][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.094256][T12639] FAT-fs (loop2): bogus number of reserved sectors
[  275.101520][T12639] FAT-fs (loop2): Can't find a valid FAT filesystem
[  275.109925][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.118320][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.126107][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.133910][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.140865][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.150227][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.159594][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.167449][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.175307][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.182939][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.189813][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.198266][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.206281][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.214959][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.221846][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.231142][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.239708][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.247873][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.256076][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.263727][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.270585][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.278947][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.286729][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.294788][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.303062][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.310199][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.319034][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.327505][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.335428][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.343333][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.350189][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.358319][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.366176][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.374155][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.381044][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.389398][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.397128][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.404836][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.411869][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.420212][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.428471][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.436161][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.443760][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.450644][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.458912][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.466591][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x1
[  275.474792][  T115] wacom 0003:056A:0023.0015: unknown main item tag 0x0
[  275.481773][  T115] wacom 0003:056A:0023.0015: unknown global tag 0xc
[  275.489926][  T115] wacom 0003:056A:0023.0015: item 0 1 1 12 parsing failed
[  275.498036][  T115] wacom 0003:056A:0023.0015: parse failed
[  275.504842][  T115] wacom: probe of 0003:056A:0023.0015 failed with error -22
[  275.513401][  T115] usb 2-1: USB disconnect, device number 52
22:44:34 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_vs_stats\x00')
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)={0x4, 0x2, 0x0, 0x1fe7a10c, 0x1, [{0x2, 0x3, 0xcd0d, [], 0x4b00}]})
getdents(r0, &(0x7f0000000100)=""/164, 0x20000118)
symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={<r5=>0x0}, &(0x7f0000000300)=0xc)
ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000340)={&(0x7f0000000400)=""/216, 0xd8})
mkdirat(r3, &(0x7f00000003c0)='./file0\x00', 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0xa4)

22:44:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:34 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x500000000000000, 0x0)

22:44:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x50)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000506030000000000000000000300000a05000100070000000900020073797a30000000000900030073797a30090000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40)
perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, @perf_config_ext={0x1, 0x1}, 0x0, 0xfffffffffffffffd, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x22)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r4, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400})

22:44:34 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  275.675141][T12646] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  275.688917][T12646] FAT-fs (loop5): Filesystem has been set read-only
[  275.697576][T12653] FAT-fs (loop4): bogus number of reserved sectors
[  275.705657][T12646] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  275.709829][T12653] FAT-fs (loop4): Can't find a valid FAT filesystem
[  275.724800][T12654] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  275.728144][T12662] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  275.733266][T12656] FAT-fs (loop2): bogus number of reserved sectors
[  275.748809][T12654] FAT-fs (loop0): Filesystem has been set read-only
[  275.754604][T12656] FAT-fs (loop2): Can't find a valid FAT filesystem
[  275.756424][T12654] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:34 executing program 5:
syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffff57a, 0x3, &(0x7f0000000340)=[{&(0x7f0000000200)="a171de38f8fcf9499e413e5a0ffb1544acf87b28b740eda76ea97215999de794c2d6fb26ca5068a02c11277288c515b9cfae34e2898866a2b091b0aac0751e2dbb99f69c4dcb10b711d1ef8b572d0791b01cc53415dc922f1437bdc53270445cca811eabe15aa3516163c0ad4cb61067852d978a5ca7ecb8f08eb8ad8ebba6a8fac19ade07", 0x85}, {&(0x7f0000000500)="e48e3cccd6930bca7fe20a7d0c91579d946c5844eb1a7cb0fdc5d26ee12c5c4f2ddda6a9fae225ac606bebbe82c194f7cbd936e9ffffffff2c9165aa5ed1ac940a679af4641add1f880b2b08cf6d5c6a256f9c74e77257d09c8c3e433ab3fc9e7336ea811cb3", 0x66, 0x40000001}, {&(0x7f0000000400)="8c97c96ce3b9d60a5d1451f6f21e4d16cd8b9d10c88984328ee1c27bd4aa664607dec38cf80d16c5e2de4239046f34aca87f08d7e8d0f29fd460f9d4654b72c6dca9bfd582915cc627fc28e3a7fd6013ec0443c475f75f4675f647e6437e96194ba17f3c73ada7db84843e600759ed0dcc60a4fb3d297df6920fb05ee1be77a1cdeda16dd742a98e1cfcfd87da79eed36ce953592951a162e2418072d80ee5e6ef09a70d8922fc08360a02df61a3c8c871683b7c90e8f3adfa41f648cf0d70f156dcfb3e53f05fbf000f54d209d46cbd5fb46dc71151bb154fbb4051d960946f407e2daf134a2951720addab0e44fb280652", 0xf2, 0x3}], 0x2000, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x3c)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x28000044}, 0x4000040)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
r2 = gettid()
ptrace$setopts(0x4200, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x7, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
socket$inet(0x10, 0x3, 0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000080)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)

22:44:34 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x600000000000000, 0x0)

[  275.775706][T12654] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:34 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x50)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000506030000000000000000000300000a05000100070000000900020073797a30000000000900030073797a30090000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40)
perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, @perf_config_ext={0x1, 0x1}, 0x0, 0xfffffffffffffffd, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x22)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r4, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400})

22:44:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  275.949628][T12678] FAT-fs (loop4): bogus number of reserved sectors
[  275.956600][T12678] FAT-fs (loop4): Can't find a valid FAT filesystem
22:44:34 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x700000000000000, 0x0)

22:44:34 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x4, &(0x7f0000000240)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}, {&(0x7f0000000400)="aa199cfdfcca301692444f1a8058cb9223fef1b85cab3b5dc02b372f341216a4351742e34bb3718ce39ef25f6ad1c13b1b9e9e0afafa3d6112ffc950bf51b812535c9f35fb36d09b454bbd5dad5ab1dab96deaa2d0b2fe40f1f3e8b4d8dc790fc8b9126812b46807e99b8d7f69f9bd9e2a6e5412f1060a731fb84caebe654334b12d18030b8361ef93a46bff03a2898a6a3bdad30f2dcba1bdd3b684de22253475e01344a3d470c1ec6a9479395f114f8b4c2d09dda3d8e8a8fffbebcdc2b5cfd1e8c1519da1bb58a6e166f52d6d5eeb1b84102a6f0361766c5e61d24d890dc507eb8f58f79a883ef0d22dfa7b851dacaa4584d782d6697d1e3ab5d5f39aad4ea251147c6ab969c0a5f962d5ccd9d914eb315df69477dd3f71782dcfeabaa47167bc4c9c8d204413b3f2226ae740132d911a5c1c8648e9ad0b16f0bb005c88f4f3ff8a7ae9afb169fefa446e558de889a16b5e430a0fb04b82e1ed57e102838f37aff6d6276c86a71aba848d24fb9bea9aa4f20e4845921a9b807e81ead87d2e7c7418e8fd65b315f42abfba2773fc0ffc664396f4248cf77c0f00f557ffb5c6ed0308dc67af1cb80e7979a51c02839125d5786c4ce99cb8362a051fe47cbec50d977d058be283acf76a379706ced72f5a4b249ce0cd4aa7ab239217e8baff191a2da5fdcdf21cca60bc15aa5ed5344dcc9698eff4e2f2e73c81a0c430da5a770e5e1a0934cb98e9fa52260b11394ee3238a334cda9092e797935b43d086c6cffdd20ce21e5613c1424a84a720fe9403531199130805ea5736bf46c062e9e48ca7b0b30a6f87122d9b143def9a56847565d7a6c2eb398bfb951ceafacc95cf93a33d685a0e3a254390d2fb6eafac95a68d2967538162ca46d352eab99f3aa0d001dd873ec1b9d176b88de0e852ac1499cc1a7f12e33ac6c515bd7b7f0cdf864f6c9b9b3eccc4bfd2423a6dad4f09d96e33d7a6d88f65ef0dabf72d528296124c4b373d8a20b5f18654c4aa6e19a21be93461a96e0c9655a3644319f6fd4a02895d734f301f42bcde4c162396ba72446a54f400b52a9994d99e1741f3cd8409aa2ee0db3cc464a3de51d0fbd924412ae5c33c67f7ad0db441e9f63df3cec6091fcbe4dcd1ed95e839c9fe8989b12f72e2530dfc7ce67fcc8020a41dd2302dc39ceee26990ae9144da2963b9c2467f968fd12c8835e0d804306750ea308947a427c67a54117c55f930f4f7f1b6d3a6a9bbc50033fdd2eb7a96bbbda1e628541dfd63dac5f574c6767d39f6bdd1fab36831ea5ef90e86aa66dd8ca949e045daa00799579469c294a3c5c05a2cd10cf46827bbcbdfa54d7d1042b330914eb0d398111e29adce45150d09c82f84514d1d80adf13d4585cfb3cf8d07d346944797d0975e4c4aa7d3bfac49cd24fd406af959feefa0094354ab3939ed4d0c7a957038316d5cd068644751a25318bd5ef651162f7fa64d2725601dda0956f0e056e207377d4041f3da31b9abab218d43c2a5f6636bf080bd9e383d945d5b167243b1488c0ff90bca6f024a2d3d354f7ca7647b903387d25d72a078805cca27ea9ca0f6a5edec35bd0079c2fe828e5cfb6ad82bc7b2f9c62ea10e3d91c4503bc23d9975a78ed2e35153e6adbce14064c2e5bd57710efcedcefa5e1dac3c80b61fbadf4010e29d68689598d802f2c998e336ca5006df3f1980a24d9039e1aa54f866dc880b642325ede073c0a114af9e41fa4679263a857d2f310f5ce15cb2e9248ceded828a787c063fa12a871be7bb98415c309db2dd5f2de29a85c20649a4091ff048c69a8adfd508147e7c735afa5c836fdf6b0814355fce5455fc99806a3ff4099e6166bd316edc17e7719eb3c5098271cc3c9926ae4d892fd41eeec4178a8ec42f53d6ba209fff5b1689ab80f2d0e4881b9d810faf356303dce8447e291c00b10fa9710ec396c2167ec95157a44b2bc785bae155e4e3cab4baabf4c0812ac273f7f6ab8ecbb4c3894806904ed9edf2b07bc9b58a4fc9d02066cd60ff1395efa95a4654778c9c5f3e38470ff642fc9e516e123c6ad349419ac93f52dcfa212adbf11780335195d69c7e8531d361279e0f984e0c9821f8d95a0a7c5fb696c7951843dc00ff7af1f6a78c95d71983e3d8f41ed8e0848702b1a57eb63164c80173e164caf5474622c2865f451c331ab0fe8817039179302d53195632ac04a9ab2f1b80fd95b6e37a74db5e1d2c1ed2b75c74b68f9fac430122aca4ee44e4480da053092a88e3ce810d3678a242eb058184e7c31ef3e0fe754b399504d6b7fa87401cb989fa5178137db4a62f0002dd1f6e16e08f50be35e9f7dff087204237fa2e33ff02fa2248be14835f66cc820443d0b8d763e72b4b69ed001da562a6c01c9e3a3d8ac2c055bfcb1b4ea303af7bbaf96b398dce26d5ff3cd7bf941137e0df9c95f65bfe7128d4c303994cceafd865f955a2a4114662f2a4132e43d56d969fc014b72621efe975de8716ecbdc4787c85ed8951d9edcd754f1354c9158e383ec21804017649ec1d9b89a87180c947ffcbc4e7430a0fc7e97052bf40f0702b808d87947c27b76711a014ba6be24b45a3f1a941bb8212e6148ad1bdbad015425ea44af641081bb282a34c33bfd6007d8969d1f1bb07e810b01b92f87febe6f52571ccae5da9d3b5068ac9b5085fd1137df71f88c29d2fb14668d2b140b06a41d1290c78474d822d1201de508f3be64bba6cfa6f9829a970d2ede8a14e2be40d9208ff0bae1d08ca4bc5038ac8265576a5a4b9d8be9a72f6b8c2a80393222ccc7b6c0914ab9b92bd9715bba111ecb5830ca62250d7b0e255f2887daf8e0c4fda9ad9f14c4d33dcfb257ced1abe91ae5a884f3cdd6cb170b9ba95455577ebd0596825df33ddc966892db3885b63bf578ad78f302a406c49922db764c9fb4e7beb72dabcdb67765ba59e85eed7f0145197ca9026d5a01448b0406cab9019227812dbbc348542bafd03dcbc176694d353f91b53c322d7c58f1e6428220265249f01f16acd9ce6024e0ad2367bd714b20597f4ad89d03fd7da000920e0fb620d087c4299771c1d7981aa2622c7f0dd5e82229e46e09c17f390844fbea5cd947483f3ec0d7624f87bf72b7d08668ae43a3165917acc1eff8e1c7d15845a08618020ddb6c25e42d2101286736d68d70495ff4c3a924d98656ad17bb4760643c25323b0b13fa6254bfaf9a16976e8e47c101093aa53b05533797e46e8269a927d6452cbf8c28cc6a02c062f84d5e3e95826668b53d35f6c02049e65c604731d6c9b9f36276d858c29b2941d553151b197aa26e0e5c77c61ecaed94e49b2b331ac5eaaf058de474cf690febe8fc783974dde9bf498c845865f2f887253f010e07b220b92bc3357c59820b2acb9edd093832e6b9eccb65210a6f5ca377b24f5bbc785de85257b4106f8f73eeba11dda4cddad53ac6eebdb339f2f609534f7df81c0f3a1e1c7e83c21a432a612279bf265a494f20c5cbdfe312ce08ca7470f00e575cb2f56d75d282ac7d3442308df39636732939ed4d64a21e001c158ee461ea8876fd6d175470a95e5e897e37d93c6957ea89edd1dacaf3e4ff46acb8e51183610601ea39caa5e5f723b43ca0becb163b8d2daf770b29a4b611223bff22dd9770c85f2e2f75ce80a0894c1367b81a68409221eabdd4abd5d3d0c0786a6d3e0dfbde784c1b9d614ca94c9aafecb36cd72c35bb8324095bcb3fe6749b853d41cfa821d37031a77fc234fc5b9b526db4b749fd3ade321ed5e9831e2b3e0641eb6cbe1fe19dd798991ba87029a69bc69fce6cf191da9154b51e21b40a77f584cadf46e56c02e68a2711dee9c333c524b5d735513edbc348b0b14e733510a3a499e578a4396e3772a59e5347aeb5fddc2e715987a632403612e6801a2d34d43e8da9c7170afd6384cf2689b61abe77ab536fc070a91741756e32189766ce6a222615b0a029b8beb93d1a7ba461fe8d3f5dcfc7041c5af1d68c95eed8fb9594e66f412e3d9b091b9cff56c5b7398962c5b04dd0c0cd22d7445f54e74d91076ac81c568d72dd2d0eb836f085736ad71fc8fb85df0ce7a2f146a2b4743130f922565c94bd61527b1f5cc5c5ce00597ce8e37be7521e9a88ad779e3fe27ed2a80ba99f8b70f3f0ad550a779874bc5ff0911b5cf4d7508dffea5f6ea7e696050e41b709ba8447a0976885c98487319ff3647dbe4fbd2094b59f7ae29d04d760f862c622bd99661a6a9f08c50a43499e00af80adc2185f5e16299ca3b00dafeb16684d37eaf9a77ff88a04567265f408e756a1e34b84ac51c1dc1137f9297fbf7dfdf5a37f6f0a9ec585d547787542f889382948806f0fc0ff848eac5fd8747ee66f7d4db51c8a0979c0d4692903132b2c13888ca5c447777846704f1d66e1dcc87dc4b048c4ce3dd48747fdadb360cbd8d0a73174310760bf07d9ac2befcc1013cc214c6c9bd0e7117da73ca9e8387dd1a7fd7c9821eb00c98648f18bd6f04c589fc68aecafa14cba0e7c083ec93e923a602611d02da2eebe71f0d04b793524ba6ddf2948d34fac999d5b9c07f48135f1b1be8e25e04fdac4a0b441097b0bdd2520b64d666190a0d65d0f3d17896072c356178d6cbac4344c7964e258186e77a4429aed5be1f9fd35bec2b84c30275676ed080ba4ec8b82015d3f228826707c0e6c21813a30e0bf385c033316d2fcb37492b3cce8d0add6520e368685fbba53ac2dc20eb124986df8623a2cff97773a7cc28dfea73cc2bc49bfd3baf9433057ff6aa13243bccf44dafd05a6c8c381905473d13480b97de58f59e57a16451a2f35fb06ccf2145ac01f6834e417d051ca9d5319e11370a83be8f7fa3d2b82e3de12c8173e9ad5bce42c66759fc7330089af2e40045bbd6cd4140e6dc0ff8c5a360d028c7c9f52facffd66b8f165ced41c34835954f855baf2ade040101049257a68581e533b9732bafa11767a1f19c478c608ac9d9f74fc294e4dfb4f2f966c187e7ce5a2fe60ab719946f0fd6704785f08cfaf9fc4bc6ff9e7951d7aaed23535a83df6b29ffc8d22ea8726b3a9c9b663e07c1a613e6ac5a64eb33e9047ee43e5264ac571664eeb08655ad340c9cf89bb032ccb94271082be979515ea3aaf829d92b9fa78e85ebcbb365e065610fd4c17be914dfcb6f00e8110fc350ec04872ff9e4a1750938b48336b54916def694d93675f33972bf1e54a54ae0494bc9c4f383a1aa0cf0d9d8a21fcbd6123403eae0fe19b54cd02e25d352a9ca58306b90fd8f773de88d929eb415b5bfc1b8450482316b44400ada6b3a9d7c702e4e131def7d865dfc5e0d93cdc60451cea0848c7072255c4b67526a80c313312f2410f562d088c83994d40b1b627ca562a085e38a678948ec5c0a15f59f38a274c76ac2922ccd7e8f8630458f9873331256f200836f766bc2ca2dfc741c39ed8302eb596eb9496b980d2cf0b9c034de05629a861073b3dc8222c3a833781ca4d2b5938473e0dae1a2786210dc86d6a5d521a5205f98aaac59f5563d0ce1875709e7c91695a73d012882da7af46dd243f4bd1bcfbf7925216f0213151aa41a1eb2759a9bce9c1396df4bbc46fddbc8edaf42c33d6cbfab819580bc059d3d1d0785a6670969d7a92cd9879c227283230337e568849544cd8a85f32570f7a9b30d60250ae8f7e2e1d8136150876c3121cbb2ab532fc7c5af256e336990515d46a82486cec26d9cf49946f8c320ac462a6d2ea255189054b4890ef56ba14c5b4958b45b6629445a8f5011e18cb614cb0ac8b8d0b4ab", 0x1000, 0x186}, {&(0x7f00000001c0)="9c753416e94aa609f15b9f7b3d58ab1633a08e749f32e5ce4313458f5dee859e9fe9d1ffc85b0ef8420e0c692c7ac1c8e72c7a42fc1875ffdbd4ddee3e61ae55d7ad50c245f97ae27715d559bd286bb553f392a5832f559c69e4150e2f35dee0a1bc4773a25a2123257c37d4f1c4", 0x6e, 0x3}, {&(0x7f0000001400)="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", 0x1000, 0x40}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x24a083, 0x182)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000300)='wireguard\x00')
lseek(r0, 0x5, 0x3)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
creat(&(0x7f0000000340)='./file0\x00', 0x4)

[  276.034951][T12685] FAT-fs (loop2): bogus number of reserved sectors
[  276.042320][T12685] FAT-fs (loop2): Can't find a valid FAT filesystem
[  276.071940][  T115] usb 2-1: new high-speed USB device number 53 using dummy_hcd
22:44:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:34 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  276.197213][T12699] FAT-fs (loop5): invalid media value (0x8e)
[  276.203476][T12699] FAT-fs (loop5): Can't find a valid FAT filesystem
[  276.214061][T12697] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  276.230553][T12702] FAT-fs (loop4): bogus number of reserved sectors
[  276.237275][T12702] FAT-fs (loop4): Can't find a valid FAT filesystem
[  276.257460][T12697] FAT-fs (loop0): Filesystem has been set read-only
[  276.278255][T12707] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  276.321953][  T115] usb 2-1: Using ep0 maxpacket: 16
[  276.332668][T12697] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  276.353356][T12699] FAT-fs (loop5): invalid media value (0x8e)
[  276.359497][T12699] FAT-fs (loop5): Can't find a valid FAT filesystem
[  276.442463][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.453667][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.472280][  T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  276.481312][  T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.491067][  T115] usb 2-1: config 0 descriptor??
[  276.732375][T12650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  277.031914][  T115] usbhid 2-1:0.0: can't add hid device: -71
[  277.037982][  T115] usbhid: probe of 2-1:0.0 failed with error -71
[  277.046356][  T115] usb 2-1: USB disconnect, device number 53
22:44:36 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:36 executing program 3:
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00')
r0 = socket(0x11, 0x800000003, 0x8)
bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8a}]}, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="0c2634927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27)
truncate(&(0x7f00000002c0)='./file0\x00', 0xc9)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101c83, 0x0)

22:44:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x800000000000000, 0x0)

22:44:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
rt_sigsuspend(&(0x7f00000001c0)={[0x3]}, 0x8)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)

[  277.481887][T12724] FAT-fs (loop2): bogus number of reserved sectors
[  277.489055][T12724] FAT-fs (loop2): Can't find a valid FAT filesystem
[  277.505537][T12731] FAT-fs (loop4): bogus number of reserved sectors
[  277.519214][T12731] FAT-fs (loop4): Can't find a valid FAT filesystem
22:44:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  277.582970][T12726] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  277.604423][T12739] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  277.608097][T12726] FAT-fs (loop0): Filesystem has been set read-only
[  277.619389][T12739] FAT-fs (loop5): Filesystem has been set read-only
[  277.622735][T12744] FAT-fs (loop4): bogus number of reserved sectors
22:44:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  277.633223][T12744] FAT-fs (loop4): Can't find a valid FAT filesystem
[  277.652778][T12738] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  277.664060][T12726] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x900000000000000, 0x0)

[  277.678739][T12748] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  277.712078][T12749] FAT-fs (loop4): bogus number of reserved sectors
[  277.720048][T12749] FAT-fs (loop4): Can't find a valid FAT filesystem
22:44:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  277.755137][    T5] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  277.807292][T12754] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  277.833602][T12754] FAT-fs (loop0): Filesystem has been set read-only
[  277.846033][T12754] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  277.876562][T12754] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  277.887166][T12760] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  278.011749][    T5] usb 2-1: Using ep0 maxpacket: 16
[  278.131797][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.143083][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.153047][    T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  278.163907][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.172972][    T5] usb 2-1: config 0 descriptor??
[  278.288541][T12739] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  278.334402][T12739] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  278.412089][T12729] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  278.721726][    T5] usbhid 2-1:0.0: can't add hid device: -71
[  278.727899][    T5] usbhid: probe of 2-1:0.0 failed with error -71
[  278.735911][    T5] usb 2-1: USB disconnect, device number 54
22:44:37 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:37 executing program 3:
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00')
r0 = socket(0x11, 0x800000003, 0x8)
bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x8a}]}, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f00000012c0)="0c2634927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27)
truncate(&(0x7f00000002c0)='./file0\x00', 0xc9)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x101c83, 0x0)

22:44:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xa00000000000000, 0x0)

22:44:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x674}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
r5 = socket(0x100000000011, 0x2, 0x0)
bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, <r6=>0x0}, &(0x7f00000002c0)=0xfeeb)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4)
bind$xdp(r4, &(0x7f0000000900)={0x2c, 0xa, r6}, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x82400250}, 0xc, &(0x7f0000000340)={&(0x7f0000000a80)={0xfc, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x0)
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)

[  279.189058][T12778] FAT-fs (loop4): bogus number of reserved sectors
[  279.189394][T12776] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  279.195741][T12781] FAT-fs (loop2): bogus number of reserved sectors
[  279.222966][T12778] FAT-fs (loop4): Can't find a valid FAT filesystem
[  279.228403][T12776] FAT-fs (loop0): Filesystem has been set read-only
[  279.232610][T12781] FAT-fs (loop2): Can't find a valid FAT filesystem
[  279.253174][T12780] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  279.261363][T12780] FAT-fs (loop5): Filesystem has been set read-only
[  279.263750][T12792] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  279.323339][T12776] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  279.351385][T12800] FAT-fs (loop4): bogus number of reserved sectors
[  279.358749][T12800] FAT-fs (loop4): Can't find a valid FAT filesystem
22:44:38 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xb00000000000000, 0x0)

22:44:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  279.366141][T12780] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  279.379245][T12796] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x410002, 0x0)
write$FUSE_DIRENT(r3, &(0x7f0000000200)={0x68, 0x0, 0x4, [{0x5, 0x1, 0x1, 0x9, '{'}, {0x2, 0x2, 0x5, 0x626, 'fd/3\x00'}, {0x6, 0x9, 0x0, 0x101}]}, 0x68)

[  279.441663][    T5] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  279.572888][T12806] FAT-fs (loop4): bogus number of reserved sectors
[  279.579459][T12806] FAT-fs (loop4): Can't find a valid FAT filesystem
[  279.618747][T12817] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  279.626851][T12817] FAT-fs (loop0): Filesystem has been set read-only
[  279.636964][T12817] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  279.681581][    T5] usb 2-1: Using ep0 maxpacket: 16
[  279.701984][T12810] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  279.707518][T12816] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  279.717832][T12816] FAT-fs (loop5): Filesystem has been set read-only
[  279.729821][T12816] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  279.821693][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.832624][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.842517][    T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  279.851581][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.860156][    T5] usb 2-1: config 0 descriptor??
[  280.112077][T12785] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  280.391590][    T5] usbhid 2-1:0.0: can't add hid device: -71
[  280.397687][    T5] usbhid: probe of 2-1:0.0 failed with error -71
[  280.405258][    T5] usb 2-1: USB disconnect, device number 55
22:44:39 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6a7bedcdd0e8f042, 0x0, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xb3, &(0x7f0000000180)=""/181, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x78)

22:44:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xc00000000000000, 0x0)

22:44:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setuid(r1)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r2)
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r4=>0x0, <r5=>0x0})
io_getevents(0x0, 0x0, 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000300)={r4, r5+10000000})
mkdirat(r3, &(0x7f00000003c0)='./file0\x00', 0x0)
syz_open_pts(r2, 0x181200)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)

22:44:39 executing program 5:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)

[  280.852000][T12833] FAT-fs (loop2): bogus number of reserved sectors
[  280.856460][T12832] FAT-fs (loop4): bogus number of reserved sectors
[  280.869828][T12833] FAT-fs (loop2): Can't find a valid FAT filesystem
[  280.881282][T12841] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:39 executing program 3:
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000002400070500"/19, @ANYRES32, @ANYBLOB="00000000ffffffff", @ANYRESHEX=r0], 0x3}}, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x11, 0x800000003, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup3(r5, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd6e2bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000dc0)=0xa)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ff4d09ff0f000000000000fffff7", @ANYRES32=r7], 0x2}}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
r8 = socket$inet(0x10, 0x2, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r1, 0x0, r8, 0x0, 0x84ffde, 0x0)

22:44:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  280.904250][T12832] FAT-fs (loop4): Can't find a valid FAT filesystem
[  280.912372][T12841] FAT-fs (loop0): Filesystem has been set read-only
[  280.934017][T12850] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x7}, 0x8)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fsync(r1)
mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)

[  280.972806][T12841] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  280.995978][T12858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12858 comm=syz-executor.3
22:44:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xd00000000000000, 0x0)

[  281.016831][T12856] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  281.057211][T12860] FAT-fs (loop4): bogus number of reserved sectors
[  281.060284][T12858] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.3'.
[  281.070360][T12860] FAT-fs (loop4): Can't find a valid FAT filesystem
[  281.141485][  T115] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  281.151025][T12868] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  281.165659][T12868] FAT-fs (loop5): Filesystem has been set read-only
[  281.201698][T12870] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  281.210556][T12870] FAT-fs (loop0): Filesystem has been set read-only
[  281.219491][T12870] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  281.231509][T12871] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  281.239637][T12866] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  281.248608][T12868] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  281.257137][T12866] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  281.381441][  T115] usb 2-1: Using ep0 maxpacket: 16
[  281.521505][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.532406][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.542239][  T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  281.551254][  T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.560012][  T115] usb 2-1: config 0 descriptor??
[  281.801944][T12846] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  282.101456][  T115] usbhid 2-1:0.0: can't add hid device: -71
[  282.107442][  T115] usbhid: probe of 2-1:0.0 failed with error -71
[  282.115471][  T115] usb 2-1: USB disconnect, device number 56
22:44:41 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:41 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16, 0x6}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)

22:44:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xe00000000000000, 0x0)

22:44:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xd00000000000000, 0x0)

[  282.551827][T12891] FAT-fs (loop5): invalid media value (0xed)
[  282.557895][T12891] FAT-fs (loop5): Can't find a valid FAT filesystem
[  282.581944][T12888] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  282.592459][T12888] FAT-fs (loop0): Filesystem has been set read-only
22:44:41 executing program 3:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000202505a8a440000102030109020b000101000000090400000007010009090501020000000000"], &(0x7f0000000340)={0x0, 0x0, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xea, &(0x7f00000001c0)=@string={0xea, 0x3, "483b50276a5036ebbb7834a898319b8613bd6e2f980565cee3e5e0684c25ca665011ef3b474af714dd797fed5cc1dabd5e547245bef55bcbc14d8ddf5d07302a3b06ce2cbb825c759c21ab4469c72797d707a2569376c70955fad1c87a29e507a3d2814077d0d1ccb1d7c26c56f24fd8459eb7cffd7b75eb9f7fd769aab5cd882c22f40a410c7f06159446baa36f0d7f6b22b4b805fa63315f393837925cf889ce2976fec6f9fa3dd9cfc3a8561b9ff4458323c5cbf60eeb57d559cf3b4dd3b7320529f0b248a7bc7b41d172688a30958e34a986f6b1817c0c560dcd3695fcbd385a191aecedf6dd"}}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
clock_settime(0x7, &(0x7f00000000c0)={r3, r4+10000000})

22:44:41 executing program 5:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000700)={0xcc, 0x0, &(0x7f0000000540)=[@exit_looper, @register_looper, @request_death={0x400c630e, 0x1}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x1, 0x3d}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/219, 0xdb, 0x2, 0x20}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @exit_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x742cb9d02d060a52}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x2}], 0xa4, 0x0, &(0x7f0000000640)="fa7c9bb145470532235c6597e6f6570a03ec528a519809cd86b9a20891bce81eb29c1c2e360bfb7d9fae7a0cb921cf8f29bee438f1f64ab213fd52a7490e5e99423afdf1174da345585e8d53f7686c5718af72fbd5321a5b2bb1796d0534fc8cdefa1bb6a0a85512ed1c97281ee6f62de6d5bfa6e660b436e33ec70d148d4612f6f4681c5d5d40bd35b79f888309ec63414a5bd530accbdc74b3cc145e5b0763fcaa30ef"})
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
fallocate(r4, 0x78, 0x1f, 0x200)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x10000, 0x531}, {0x10c, 0x8001}], r6}, 0x18, 0x3)

[  282.599368][T12888] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  282.614060][T12895] FAT-fs (loop2): bogus number of reserved sectors
[  282.620739][T12890] FAT-fs (loop4): bogus number of reserved sectors
[  282.627386][T12890] FAT-fs (loop4): Can't find a valid FAT filesystem
[  282.631025][T12895] FAT-fs (loop2): Can't find a valid FAT filesystem
22:44:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xf00000000000000, 0x0)

22:44:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  282.657805][T12888] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:41 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)

22:44:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  282.772948][T12913] FAT-fs (loop4): bogus number of reserved sectors
[  282.787096][T12913] FAT-fs (loop4): Can't find a valid FAT filesystem
[  282.804229][T12918] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  282.812263][  T115] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  282.820515][T12918] FAT-fs (loop0): Filesystem has been set read-only
[  282.827498][T12918] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  282.892377][T12923] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  282.900390][T12923] FAT-fs (loop5): Filesystem has been set read-only
[  282.901354][  T140] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  282.918122][T12918] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  282.930161][T12919] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  283.051265][  T115] usb 2-1: Using ep0 maxpacket: 16
[  283.151349][  T140] usb 4-1: Using ep0 maxpacket: 32
[  283.171420][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.182540][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.192419][  T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  283.201498][  T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.209983][  T115] usb 2-1: config 0 descriptor??
[  283.351299][  T140] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  283.361420][  T140] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  283.451868][T12887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  283.521281][  T140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  283.530344][  T140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.538354][  T140] usb 4-1: Product: syz
[  283.542581][  T140] usb 4-1: Manufacturer: 㭈❐偪碻꠴㆘蚛봓⽮֘칥棠╌曊ᅐ㯯䩇ᓷ秝셜뷚呞䕲쭛䷁ݝ⨰ػⳎ芻畜↜䒫읩霧ߗ嚢皓ে突죑⥺ߥ튣䂁큷쳑ힱ泂鹅쾷篽羟槗떪裍∬૴ుٿ鐕멆澣缍≫뢴洞ㅣ㥟㜸岒觸⧎ﹶ阮㷺쿙ꣃ᭖荅씣핗콙䴻럓Բ䢲벧䅻狑詨锰㒎蚩뇶粁嘌촍锶뷼娸ᨙ
[  283.575761][  T140] usb 4-1: SerialNumber: syz
[  283.751250][  T115] usbhid 2-1:0.0: can't add hid device: -71
[  283.757394][  T115] usbhid: probe of 2-1:0.0 failed with error -71
[  283.764887][  T115] usb 2-1: USB disconnect, device number 57
[  283.813182][  T140] usb 4-1: USB disconnect, device number 25
22:44:42 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1000000000000000, 0x0)

22:44:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:42 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:42 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
fchdir(r0)
mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)

[  284.217391][T12939] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  284.225971][T12942] FAT-fs (loop2): bogus number of reserved sectors
[  284.232592][T12941] FAT-fs (loop4): bogus number of reserved sectors
[  284.239143][T12941] FAT-fs (loop4): Can't find a valid FAT filesystem
[  284.249020][T12942] FAT-fs (loop2): Can't find a valid FAT filesystem
22:44:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  284.261687][T12939] FAT-fs (loop0): Filesystem has been set read-only
[  284.296886][T12953] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  284.387177][T12939] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  284.406017][T12956] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  284.461138][  T140] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  284.485919][T12957] FAT-fs (loop2): bogus number of reserved sectors
[  284.497562][T12957] FAT-fs (loop2): Can't find a valid FAT filesystem
[  284.591124][  T115] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  284.711112][  T140] usb 2-1: Using ep0 maxpacket: 16
[  284.831247][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.842238][  T115] usb 4-1: Using ep0 maxpacket: 32
[  284.847385][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.857238][  T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  284.866365][  T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.875046][  T140] usb 2-1: config 0 descriptor??
[  285.041151][  T115] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  285.051292][  T115] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  285.111476][T12944] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  285.221410][  T115] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  285.230570][  T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.238591][  T115] usb 4-1: Product: syz
[  285.242797][  T115] usb 4-1: Manufacturer: 㭈❐偪碻꠴㆘蚛봓⽮֘칥棠╌曊ᅐ㯯䩇ᓷ秝셜뷚呞䕲쭛䷁ݝ⨰ػⳎ芻畜↜䒫읩霧ߗ嚢皓ে突죑⥺ߥ튣䂁큷쳑ힱ泂鹅쾷篽羟槗떪裍∬૴ుٿ鐕멆澣缍≫뢴洞ㅣ㥟㜸岒觸⧎ﹶ阮㷺쿙ꣃ᭖荅씣핗콙䴻럓Բ䢲벧䅻狑詨锰㒎蚩뇶粁嘌촍锶뷼娸ᨙ
[  285.276010][  T115] usb 4-1: SerialNumber: syz
[  285.411116][  T140] usbhid 2-1:0.0: can't add hid device: -71
[  285.417100][  T140] usbhid: probe of 2-1:0.0 failed with error -71
[  285.424602][  T140] usb 2-1: USB disconnect, device number 58
22:44:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1100000000000000, 0x0)

22:44:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201a960", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf2503000000050005000100000005000300800000002c0001801400020067656e6576653100000000000000000014000200726f736530000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
r4 = socket(0x100000000011, 0x2, 0x0)
bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0}, &(0x7f00000002c0)=0xfeeb)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4)
bind$xdp(r3, &(0x7f0000000900)={0x2c, 0xa, r5}, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES16, @ANYBLOB="ae2e13c26638d7ff77699bdc53e27483b9d9d172f5c5d25dc8a48d64203ae3c0e22558d294f726ab889f24726ec66e355e6ad869407acdd880be7dba097217983e4031"], 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x1400c010)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118)

22:44:44 executing program 3:
openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x78)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0xc0000, 0x0)
ioctl$FIOCLEX(r3, 0x5451)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x95}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
rmdir(&(0x7f0000000000)='./bus\x00')

22:44:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  285.522249][  T115] usb 4-1: USB disconnect, device number 26
[  285.561111][T12974] FAT-fs (loop2): invalid media value (0x00)
[  285.568692][T12974] FAT-fs (loop2): Can't find a valid FAT filesystem
[  285.590763][T12980] FAT-fs (loop4): bogus number of reserved sectors
[  285.604956][T12975] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  285.610505][T12980] FAT-fs (loop4): Can't find a valid FAT filesystem
[  285.624484][T12982] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  285.633136][T12975] FAT-fs (loop5): Filesystem has been set read-only
[  285.640706][T12982] FAT-fs (loop0): Filesystem has been set read-only
[  285.649637][T12982] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1200000000000000, 0x0)

[  285.674002][T12982] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  285.702976][T12975] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
22:44:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  285.738356][T12996] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  285.759874][T12999] FAT-fs (loop4): bogus number of reserved sectors
[  285.776799][T12999] FAT-fs (loop4): Can't find a valid FAT filesystem
22:44:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
r2 = accept4$tipc(r1, 0x0, &(0x7f00000001c0), 0x0)
getpeername$tipc(r2, &(0x7f0000000200)=@id, &(0x7f0000000240)=0x10)
r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f00000003c0)='./file0\x00', 0x8)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)

22:44:44 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

22:44:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  285.918160][T13009] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  285.926242][T13009] FAT-fs (loop5): Filesystem has been set read-only
22:44:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1300000000000000, 0x0)

22:44:44 executing program 5:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
setuid(0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r9)
lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [{0x2, 0x4}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x1, r3}, {0x2, 0x6, r5}, {0x2, 0x5, r7}], {0x4, 0x1}, [{0x8, 0x1, r9}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="01fc8f9c3c4ed78a3fe4ed9a018d521ec3ec3ac86c4494f9df2969adc6938745ef07ca8352e8ddf51e47427b8d137a798b72859cd86d6d51679c87f466332e1209f26bb30c15bf4c48615b25a599072c4d5aa10912b7021e402ef6c58d2e863a55ebd3d7147a8d3a088eea6112b2bfc1c9", @ANYRES16=0x0, @ANYBLOB="00000000000000000000130000001c0009800800010000000000080002a65f6d5f0008000100"], 0x3}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53)
splice(r0, 0x0, r2, 0x0, 0x400000, 0x0)

[  285.964939][T13009] FAT-fs (loop5): error, invalid access to FAT (entry 0x000006c0)
[  285.978222][T13015] FAT-fs (loop4): bogus number of reserved sectors
[  286.004134][T13015] FAT-fs (loop4): Can't find a valid FAT filesystem
[  286.142116][T13026] FAT-fs (loop2): invalid media value (0x00)
[  286.149528][T13026] FAT-fs (loop2): Can't find a valid FAT filesystem
[  286.186497][    T5] usb 2-1: new high-speed USB device number 59 using dummy_hcd
22:44:45 executing program 3:
openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350600000fff07006706000002000000070300000ee60060bf050000000000004f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be9525db67754bb12feffffff8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955cfa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab70100010000000000d04acd6002d4519af619e3cca4d69e0dee5eb106774a8f3e6916df85aaf34c4756ad3aed75ec88158f0200000000c8fb735fd552bdbcfdcc39598068551a7c291c3770e335c206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401c3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f8d2001e03a651bb96589a7eab04871bc47287cd313f00000000000000407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce699452050000000000000026a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea6a58bc3eeed729a2f95e1d6a1fc357b27990f51d33cd1bdf3dbcdf1c2cbb82ce8605abd094d3c495483186eef5cb247aa410dd86f07ea7ba5cded1f8fc47de13d2ba17b1e608cc3067aa5e2460900d472c275cc1dcd46a6321be36dd5342da5989dcc8c1e9ed32eb08bfbd9f7a4a1c63020a8d6d9662b3bc89140a6a36413f1369126c3f54250d7b3639e13f8df6ff262b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x78)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0xc0000, 0x0)
ioctl$FIOCLEX(r3, 0x5451)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x95}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
rmdir(&(0x7f0000000000)='./bus\x00')

22:44:45 executing program 5:
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r1 = socket$inet(0x10, 0x800, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r2 = dup3(r0, r1, 0x80000)
ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000040))
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="50336ee9ff46a638cae7684e7670512f6743ea322dc769e37900bc86a37389708db8")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071119f00000000008510000006000000850000000000000095000003000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

22:44:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:45 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2000000000000000, 0x0)

22:44:45 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:45 executing program 3:
openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350600000fff07006706000002000000070300000ee60060bf050000000000004f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be9525db67754bb12feffffff8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955cfa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab70100010000000000d04acd6002d4519af619e3cca4d69e0dee5eb106774a8f3e6916df85aaf34c4756ad3aed75ec88158f0200000000c8fb735fd552bdbcfdcc39598068551a7c291c3770e335c206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401c3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f8d2001e03a651bb96589a7eab04871bc47287cd313f00000000000000407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce699452050000000000000026a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea6a58bc3eeed729a2f95e1d6a1fc357b27990f51d33cd1bdf3dbcdf1c2cbb82ce8605abd094d3c495483186eef5cb247aa410dd86f07ea7ba5cded1f8fc47de13d2ba17b1e608cc3067aa5e2460900d472c275cc1dcd46a6321be36dd5342da5989dcc8c1e9ed32eb08bfbd9f7a4a1c63020a8d6d9662b3bc89140a6a36413f1369126c3f54250d7b3639e13f8df6ff262b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x78)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0xc0000, 0x0)
ioctl$FIOCLEX(r3, 0x5451)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x95}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
rmdir(&(0x7f0000000000)='./bus\x00')

[  286.387727][T13046] FAT-fs (loop4): bogus number of reserved sectors
[  286.397372][T13044] FAT-fs (loop2): invalid media value (0x00)
[  286.408608][T13048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  286.417931][T13046] FAT-fs (loop4): Can't find a valid FAT filesystem
[  286.420722][T13044] FAT-fs (loop2): Can't find a valid FAT filesystem
22:44:45 executing program 5:
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0)
r0 = getpid()
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000140)=ANY=[@ANYBLOB="0200260009bf64f31864855d987f4e1c654c69299fabf54db67a40b37bf9bba43ad2802148acf64a229c49d2f2bfc9ecf604e4f2"])
sched_setattr(r0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0xfffffff8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xb)
timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, &(0x7f0000000400))
recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000000bc0)=""/98, 0x62}, 0x401}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f00000029c0)=""/70, 0x46}, {&(0x7f0000002a40)=""/188, 0xbc}, {&(0x7f0000003b00)=""/252, 0xfc}, {&(0x7f0000003c00)=""/113, 0x71}, {0x0}, {&(0x7f0000003cc0)=""/66, 0x42}], 0x6, &(0x7f0000003f00)=""/155, 0x9b}, 0xb2e}], 0x2, 0x120, 0x0)
process_vm_readv(0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/23, 0x17}, {&(0x7f0000000340)=""/25, 0x19}], 0x2, &(0x7f0000000a00)=[{&(0x7f0000000480)=""/106, 0x6a}, {0x0}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/5, 0x5}, {&(0x7f00000006c0)=""/50, 0x32}, {&(0x7f0000000840)=""/109, 0x6d}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/89, 0x59}], 0x8, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x2000000, 0xa5cc, 0xffffffffffffffff}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x50)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x9000, 0x0, 0x0, 0x5, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280)='NLBL_CALIPSO\x00')
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x5000000, &(0x7f0000000a80)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})

[  286.433455][T13048] FAT-fs (loop0): Filesystem has been set read-only
[  286.445324][T13048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  286.460964][    T5] usb 2-1: Using ep0 maxpacket: 16
[  286.493468][T13048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  286.530255][T13066] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  286.539620][T13048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  286.621053][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.633113][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.652517][    T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  286.664264][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.678231][    T5] usb 2-1: config 0 descriptor??
[  286.941437][T13012] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  287.250983][    T5] usbhid 2-1:0.0: can't add hid device: -71
[  287.257464][    T5] usbhid: probe of 2-1:0.0 failed with error -71
[  287.265158][    T5] usb 2-1: USB disconnect, device number 59
22:44:46 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

22:44:46 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @local, 0x5}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x67, 0x0, [], [@jumbo={0xc2, 0x4, 0x1f}]}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
modify_ldt$write2(0x11, &(0x7f0000000040)={0x1000, 0x1000, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10)

22:44:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x2500000000000000, 0x0)

22:44:46 executing program 5:
mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x8001, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x2)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0)

[  287.693139][T13085] FAT-fs (loop2): invalid media value (0x00)
[  287.710381][T13087] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  287.715876][T13085] FAT-fs (loop2): Can't find a valid FAT filesystem
[  287.731677][T13094] FAT-fs (loop4): invalid media value (0x00)
22:44:46 executing program 5:
unshare(0x60040600)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r0, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)

22:44:46 executing program 3:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350600000fff07006706000002000000070300000ee60060bf050000000000004f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be9525db67754bb12feffffff8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5a010027546e7c955cfa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab70100010000000000d04acd6002d4519af619e3cca4d69e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d75ec88158f0200000000c8fb735fd552bdbcfdcc39598068551a7c291c3770e335c206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401c3738270b315d3627787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f8d2001e03a651bb96589a7eab04871bc47287cd313f00000000000000407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce699452050000000000000026a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea6a58bc3eeed729a2f95e1d6a1fc357b27990f51d33cd1bdf3dbcdf1c2cbb82ce8605abd094d3c495483186eef5cb247aa410dd86f07ea7ba5cded1f8fc47de13d2ba17b1e608cc3067aa5e2460900d472c275cc1dcd46a6321be36dd5342da5989dcc8c1e9ed32eb08bfbd9f7a4a1c63020a8d6c3f54250d7b3639e13f8df6ff262b2c"], &(0x7f0000000100)='GPL\x00'}, 0x48)
syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0xc00000000000000)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)

[  287.747058][T13087] FAT-fs (loop0): Filesystem has been set read-only
[  287.763204][T13094] FAT-fs (loop4): Can't find a valid FAT filesystem
22:44:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  287.800499][T13104] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0)

22:44:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  287.840977][T13087] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  287.946986][T13117] FAT-fs (loop4): invalid media value (0x00)
[  287.965702][T13117] FAT-fs (loop4): Can't find a valid FAT filesystem
[  288.010883][    T5] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  288.083454][T13123] FAT-fs (loop2): invalid media value (0x00)
[  288.089817][T13123] FAT-fs (loop2): Can't find a valid FAT filesystem
[  288.250823][    T5] usb 2-1: Using ep0 maxpacket: 16
[  288.380918][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.391919][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.401810][    T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  288.410982][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.419559][    T5] usb 2-1: config 0 descriptor??
[  288.661202][T13099] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  288.950828][    T5] usbhid 2-1:0.0: can't add hid device: -71
[  288.956791][    T5] usbhid: probe of 2-1:0.0 failed with error -71
[  288.964772][    T5] usb 2-1: USB disconnect, device number 60
22:44:48 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

22:44:48 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x10003, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}, &(0x7f0000000280)=0x10)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
ptrace(0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
r4 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3)
recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000340))
clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)

22:44:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:48 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x4000080000000000, 0x0)

22:44:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:48 executing program 3:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000320001000000001ef6000000f62b30344f6290085b6a5a008c0001000c000e000700012078740000105493adc5c5c9420080000000000000000000"], 0x1}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

[  289.400956][T13143] FAT-fs (loop4): invalid media value (0x00)
[  289.409331][T13143] FAT-fs (loop4): Can't find a valid FAT filesystem
[  289.431024][T13146] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  289.439562][T13148] FAT-fs (loop2): invalid media value (0x00)
22:44:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  289.445034][T13146] FAT-fs (loop0): Filesystem has been set read-only
[  289.454688][T13146] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  289.455335][T13148] FAT-fs (loop2): Can't find a valid FAT filesystem
[  289.463390][T13158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13158 comm=syz-executor.3
[  289.486066][T13146] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  289.520320][T13146] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:48 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da072100000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x0}, 0x0)
syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000000)='B')

22:44:48 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x4800000000000000, 0x0)

22:44:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  289.678489][T13165] FAT-fs (loop4): invalid media value (0x00)
[  289.684561][  T115] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  289.697247][T13165] FAT-fs (loop4): Can't find a valid FAT filesystem
22:44:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  289.778122][T13175] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  289.796929][T13175] FAT-fs (loop0): Filesystem has been set read-only
[  289.803672][T13178] FAT-fs (loop4): invalid media value (0x00)
[  289.807159][T13175] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  289.809647][T13178] FAT-fs (loop4): Can't find a valid FAT filesystem
[  289.832651][T13175] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  289.847699][T13181] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  289.950694][  T115] usb 2-1: Using ep0 maxpacket: 16
[  289.980695][    T5] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  290.100875][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.111908][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.121917][  T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  290.131162][  T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.139743][  T115] usb 2-1: config 0 descriptor??
[  290.250640][    T5] usb 6-1: Using ep0 maxpacket: 16
[  290.370696][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.381045][T13154] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  290.381620][    T5] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  290.402110][    T5] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.21
[  290.411155][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.419694][    T5] usb 6-1: config 0 descriptor??
[  290.680658][  T115] usbhid 2-1:0.0: can't add hid device: -71
[  290.686709][  T115] usbhid: probe of 2-1:0.0 failed with error -71
[  290.694476][  T115] usb 2-1: USB disconnect, device number 61
22:44:49 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:49 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:49 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x4c00000000000000, 0x0)

22:44:49 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x2)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private=0xa010104}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {}, {0x200000000000000}}, {{@in=@private=0xa010101}, 0x0, @in=@private=0xa010101}}, 0xe8)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0)
r2 = socket$inet(0x2, 0x3, 0x7)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @remote}}]}, 0x110)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x94)

[  291.131267][T13201] FAT-fs (loop4): invalid media value (0x00)
[  291.147774][T13193] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  291.155828][    T5] usbhid 6-1:0.0: can't add hid device: -71
[  291.156111][T13201] FAT-fs (loop4): Can't find a valid FAT filesystem
[  291.164590][    T5] usbhid: probe of 6-1:0.0 failed with error -71
22:44:49 executing program 3:
r0 = socket$inet6(0xa, 0x4, 0x0)
connect(r0, &(0x7f0000000280)=@ipx={0x4, 0x5, 0x1, "5b2640a2bdca", 0xff}, 0x80)
syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00')
preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0)

22:44:49 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(r0, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  291.199371][T13193] FAT-fs (loop0): Filesystem has been set read-only
[  291.210970][T13208] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  291.212188][    T5] usb 6-1: USB disconnect, device number 16
22:44:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  291.242954][T13193] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  291.262997][T13212] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  291.308633][T13218] FAT-fs (loop4): invalid media value (0x00)
[  291.315349][T13218] FAT-fs (loop4): Can't find a valid FAT filesystem
[  291.410565][ T4996] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  291.650522][ T4996] usb 2-1: Using ep0 maxpacket: 16
[  291.780590][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.791514][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.801568][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  291.810890][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.819579][ T4996] usb 2-1: config 0 descriptor??
[  291.860549][  T115] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  292.060912][T13204] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  292.120500][  T115] usb 6-1: Using ep0 maxpacket: 16
[  292.240543][  T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.251451][  T115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  292.264255][  T115] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.21
[  292.273411][  T115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.282163][  T115] usb 6-1: config 0 descriptor??
[  292.370533][ T4996] usbhid 2-1:0.0: can't add hid device: -71
[  292.376550][ T4996] usbhid: probe of 2-1:0.0 failed with error -71
[  292.384897][ T4996] usb 2-1: USB disconnect, device number 62
22:44:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(r0, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x6000000000000000, 0x0)

22:44:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:51 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6, 0x0, 0x400000000}, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000001040)=[{{&(0x7f0000000a80)=@isdn, 0x80, 0x0}, 0x1a}, {{&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000004340)=""/4077, 0xfed}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000000b00)=""/216, 0xd8}, {0x0}], 0x4}, 0x9840}, {{0x0, 0x0, &(0x7f0000002c40)}}, {{&(0x7f0000002d40)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/151, 0x97}, {0x0}, {&(0x7f0000000900)=""/110, 0x6e}, {&(0x7f0000000dc0)=""/182, 0xb6}, {&(0x7f0000001400)=""/157, 0x9d}], 0x5, &(0x7f0000000d00)=""/141, 0x8d}}, {{&(0x7f0000000300)=@x25={0x9, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/24, 0x18}, {&(0x7f0000000640)=""/169, 0xa9}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/154, 0x9a}, {&(0x7f0000000440)=""/58, 0x3a}, {&(0x7f0000000f80)=""/140, 0x8c}], 0x7}, 0x6}], 0x5, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000740)=[{&(0x7f0000000500)}, {&(0x7f0000001180)="16479519b78ce359f09b78294a4d53dd9f6690e44d10cf3e9164253c062b042938c40c7925cc7b5098ec7c61616d89a53b7752c504f79962caa3728d9c35122e57a4fd692a837479d7483201ded621b0fbb7b411427501eef7ea03f9966ebb3f263137fe4bb978ff5debe8d1f5dd4e24c787947199384a060083c4f192690c64bf457954af49d356b97f0983018499a0ab2fefe8c113de116684c74f44a029e493ed0723faf449bd17fa9fa923a583dadeab61359e44756d57a51be080a0422cd3aa0d83b168202bd8d4ef264edc652f0112be99a98aa5", 0xd7}, {&(0x7f00000003c0)="27459e365fbdebd925bbf241cecbe37501258685d3d8b9", 0x17}, {&(0x7f0000000700)="364ec2dbce10b25a6337ca0a231e73f35efdda1f5500f5b141", 0x19}], 0x4, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2000, 0x0, 0x0, 0x4f}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ftruncate(0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0xc438)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4)
writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001940)="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"/441, 0x1b9}], 0x3)
sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x8085, 0x11, 0x0, 0xfffffef1)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80)

[  292.601582][T13239] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  292.614444][T13241] FAT-fs (loop4): invalid media value (0x00)
[  292.631215][T13241] FAT-fs (loop4): Can't find a valid FAT filesystem
[  292.633576][T13239] FAT-fs (loop0): Filesystem has been set read-only
[  292.644598][  T115] usbhid 6-1:0.0: can't add hid device: -71
[  292.650892][  T115] usbhid: probe of 6-1:0.0 failed with error -71
[  292.658364][  T115] usb 6-1: USB disconnect, device number 17
[  292.664896][T13249] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  292.690786][T13239] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:51 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8)
fcntl$dupfd(r0, 0x0, r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000280)={{0x2, 0x4e24, @multicast1}, {0x1, @broadcast}, 0x20, {0x2, 0x4e22, @rand_addr=0x64010101}, 'veth0\x00'})
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xe1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006100100000000000e4ff000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

22:44:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
fcntl$setstatus(r0, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270ff", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x6800000000000000, 0x0)

22:44:51 executing program 3:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x27)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0xc)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x5, 0x0, 0xfffffffffffffff7})
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x6, 0x4}, 0x0, 0x0, &(0x7f0000000180)={0x3, 0x5, 0x3, 0x3}, &(0x7f00000001c0)=0x3f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0xfff}}, 0x10)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x4000, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x109240, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r0, r4, 0x4, r5}, 0x10)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x10000, 0x0)
sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x6, 0x6, 0x201, 0x0, 0x0, {0xf, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, <r6=>0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000540)=':%\x00'}, 0x30)
write$binfmt_elf32(r6, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x20, 0x9, 0xff, 0x2, 0x3e, 0x9, 0x1eb, 0x38, 0x360, 0x7f, 0x80, 0x20, 0x2, 0x4, 0x1ff}, [{0x60000000, 0x3, 0x9, 0x15d8, 0x7, 0x20, 0x10000, 0x1ff}], "4e2c0424b1a1ddeaa1486e14ace3e351e1b52e7bade8602aea03a30ca20546f661c12c5f1935003d9f591a1f2a7984c45e8dd077dfb79234d0a17e96380576dd5bd7b58e2282790362e7d13fc954b4ef93f09c9b0291d062690a3f1960e3ef76a3fe020adca79a0bc393afc9181339da0291b60dd0ac0047e7c44c8d9c425e647d7401a28434e8762128af81ccddb10595911966a56d6b08d4144f9518", [[], []]}, 0x2f5)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b00)={r7, &(0x7f0000000940)="2141c4bddaa87ba7dd29f6b23e970808582e3d294d06123c42052aef2e3af5628855111e09bc91ef773a9a174de5f27af9b1412876c9dfd268b1f6e65f8d37fc43cf2129be49121a6c323cce49bc696cd9751af4850eb3292dc2d56a0263fa745c09d76f28cf660af8e0d001ad54157fba7453cb07d3801432351a22a3e75b2aa2dc8446e542597f89253c000fa649c8a12acc937df3c2674695de907992808118c32fadc3fdc0f0cbd23eb52fa1a777fa0e63c223d9110da86e9cdaa0c3c2a652035e2460ecd358193f4f1cec1ecb2955113a5eaf2401876ebf968680d4c5bd0c368c34f7427aea5cef9ed3ae2599b3a85d91ab7ff6b8b6c722d9a2d8a132", &(0x7f0000000a40)="e69c050fd5c1a636b030ba0f44aab379d328aaf08019829eb201ca3b835669289008d055476e5216691fff865086ef55fe3d7c5f66dbf9e86f314c86cad52ed0c9220856b7c1e1b359aa50461e52152f9b2899a60714f8574c27e3a9d1bdac894d53c514f3637d6960c6880302a60a5fa7b489914f0023ce7c4996ee8f0fb7668b8e6596d072f594e0beb9ceaeb97c7553947053", 0x2}, 0x20)
getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000cc0)=0xe8)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000d00)={@loopback, @rand_addr=0x64010102, r8}, 0xc)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000d80)='westwood\x00', 0x9)

[  292.822199][T13259] FAT-fs (loop4): invalid media value (0x00)
[  292.829606][T13256] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  292.848101][T13259] FAT-fs (loop4): Can't find a valid FAT filesystem
22:44:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:51 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r0, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)
fsmount(r0, 0x0, 0x73)
syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff80000000000, 0x7ffe}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x0, 0x0, 0x12, 0x0, "22375740b12b4a3d46843fcf50141e091a7f475f44f6ef2f79f30469412765ca2e838501525c1aa474fcd6b4c61b433fec74863216e426f3823b5b4ae180dfc1b1ca15a798381ba51f50b8bba4991adc"}, 0xd8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00')
syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac00000000006300e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}])
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7d29e)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={[], 0xffff, 0x1000, 0x81, 0x3, 0x7fff, r1})

[  292.877927][T13256] FAT-fs (loop0): Filesystem has been set read-only
[  292.898312][T13267] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  292.914376][T13256] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x6c00000000000000, 0x0)

[  293.112818][T13285] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  293.123159][T13285] FAT-fs (loop0): Filesystem has been set read-only
[  293.134441][T13285] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  293.148750][T13285] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  293.150410][  T115] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  293.164582][T13290] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  293.173068][T13285] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  293.410359][  T115] usb 2-1: Using ep0 maxpacket: 16
[  293.540481][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.551439][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.561326][  T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  293.570474][  T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.579020][  T115] usb 2-1: config 0 descriptor??
[  293.830747][T13268] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  294.110381][  T115] usbhid 2-1:0.0: can't add hid device: -71
[  294.116367][  T115] usbhid: probe of 2-1:0.0 failed with error -71
[  294.126793][  T115] usb 2-1: USB disconnect, device number 63
22:44:53 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:53 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x7400000000000000, 0x0)

22:44:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(0x0, 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:53 executing program 5:
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x8e, 0x5844, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x40)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0)="d2a49ef6146727498f99ec8434b99af785b0ecbd2180d2f2900072f6011e8442890b70d1fbdf2e8f96da279c75ca216ef6a9c4d9feea208999ad74d3d18b160ad0a060131fea1b3749044ea148fdbe83cf5d3d340f4a31dc8abceab8d0f4863339bc44d7e345b43e3876681002d466f0960144cad52ce3437b516d4c73a43ecdb9cc14f674213f68b8e0718ad97016c433197b4c0ca92e4dc83a502d455a64ce080130af871d187e95e9afc80b0f06c6e23e13b333d732da49174746a7e25989a38135e9", &(0x7f0000000080)}, 0x20)
r1 = dup(r0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000180)}, 0x20)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast1, @in=@remote}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000180)}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000240)={0xff, "f212037f917f103f7612b07f3b2db4b5f083175c45d855852b2cc9ab4408f706df0ec598129073c1fa0a35f80ba94a4603cb1ec012f154b2436563837d8b14c6"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r4, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}]}, 0x1c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_open_dev$char_usb(0xc, 0xb4, 0x20)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

22:44:53 executing program 3:
syz_usb_connect$cdc_ncm(0x0, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109028d0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000042402011524120400a317a88b045e4f01a607c0ffcb7e392a0a24072003004d00090007240aff81017f0724140080ff01090581030000fc00000904010000020d0000090401fe", @ANYRES16], 0x0)

22:44:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(0x0, 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:53 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r0, &(0x7f0000000100)=""/164, 0x20000118)
write$P9_RMKDIR(r0, &(0x7f00000001c0)={0x14, 0x49, 0x2, {0x20, 0x4, 0x1}}, 0x14)
chdir(0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x121203, 0x0)
getdents(r1, 0x0, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f00000002c0)=""/212, 0xd4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
clock_getres(0x5, &(0x7f0000000280))
r4 = socket(0x100000000011, 0x2, 0x0)
bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0}, &(0x7f00000002c0)=0xfeeb)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4)
bind$xdp(r3, &(0x7f0000000900)={0x2c, 0xa, r5}, 0x10)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x319, 0x7, 0x400, 0x11, 0x20000, r5})

[  294.609424][T13311] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  294.627265][T13311] FAT-fs (loop0): Filesystem has been set read-only
22:44:53 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x7a00000000000000, 0x0)

[  294.659284][T13322] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  294.690416][T13311] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  294.700568][T13327] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(0x0, 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  294.840270][  T115] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  294.860346][ T4996] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  294.861837][T13334] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  294.882712][T13334] FAT-fs (loop0): Filesystem has been set read-only
[  294.891088][T13334] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  294.964709][T13334] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  294.986150][T13343] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  295.110283][  T115] usb 4-1: Using ep0 maxpacket: 32
[  295.110430][ T4996] usb 2-1: Using ep0 maxpacket: 16
[  295.240284][  T115] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  295.240306][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.250655][  T115] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  295.261418][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.272541][  T115] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.283987][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  295.292292][  T115] usb 4-1: too many endpoints for config 1 interface 1 altsetting 254: 255, using maximum allowed: 30
[  295.301866][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.312254][  T115] usb 4-1: config 1 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  295.323554][ T4996] usb 2-1: config 0 descriptor??
[  295.339550][  T115] usb 4-1: config 1 interface 1 has no altsetting 1
[  295.500295][  T115] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  295.509357][  T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.517888][  T115] usb 4-1: Product: syz
[  295.522083][  T115] usb 4-1: Manufacturer: syz
[  295.526674][  T115] usb 4-1: SerialNumber: syz
[  295.570728][  T115] usb 4-1: selecting invalid altsetting 1
[  295.580991][T13319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  295.790257][  T115] cdc_ncm 4-1:1.0: bind() failure
[  295.795990][  T115] cdc_ncm 4-1:1.1: bind() failure
[  295.804470][  T115] usb 4-1: USB disconnect, device number 27
[  295.860335][ T4996] usbhid 2-1:0.0: can't add hid device: -71
[  295.866327][ T4996] usbhid: probe of 2-1:0.0 failed with error -71
[  295.874003][ T4996] usb 2-1: USB disconnect, device number 64
22:44:55 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xc006000000000000, 0x0)

[  296.352666][T13365] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  296.400146][T13365] FAT-fs (loop0): Filesystem has been set read-only
[  296.419020][T13376] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  296.464677][T13365] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  296.473322][T13377] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  296.540132][ T4996] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  296.600208][    T5] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  296.780105][ T4996] usb 4-1: Using ep0 maxpacket: 32
[  296.840168][    T5] usb 2-1: Using ep0 maxpacket: 16
[  296.900219][ T4996] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  296.910499][ T4996] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  296.922294][ T4996] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.932516][ T4996] usb 4-1: too many endpoints for config 1 interface 1 altsetting 254: 255, using maximum allowed: 30
[  296.943899][ T4996] usb 4-1: config 1 interface 1 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  296.957533][ T4996] usb 4-1: config 1 interface 1 has no altsetting 1
[  296.964742][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.975715][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.986055][    T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  296.995502][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.004439][    T5] usb 2-1: config 0 descriptor??
[  297.130165][ T4996] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  297.139263][ T4996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.147768][ T4996] usb 4-1: Product: syz
[  297.152409][ T4996] usb 4-1: Manufacturer: syz
[  297.157007][ T4996] usb 4-1: SerialNumber: syz
[  297.200515][ T4996] usb 4-1: selecting invalid altsetting 1
[  297.240758][T13370] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
22:44:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:56 executing program 5:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2e2fd78908006c6530"], &(0x7f0000000000)='./file0\x00', 0x0, 0x1083004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2aa482e, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r0, &(0x7f0000000100)=""/164, 0x20000118)
faccessat(r0, &(0x7f0000000080)='./file1\x00', 0x25, 0x200)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000001c0)={0x1, 0x0, 0x2, 0xffff})

22:44:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000440)={@broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100}, 0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a0000000d0694d6b53995e13d67261a2190b5201ae780301e13e447979e182", @ANYRES16=r1, @ANYBLOB="000328830000000000000000000008000500ac141437050001000031bf476469d7166629e9efef4bf12a010000001400060076657468315f746f5f627269646765002b00070073797374656d6e753a6f626a6563745f723a7761746368646f675f6465766963655f743a7330000014000200ff02000000000000000000008000000114000200fc01000000000000000000000000000014000300"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x488)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a6800, 0x103}}], 0x1, 0x100, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={<r3=>0x0})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0xb}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000000)=r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000180)=""/50, &(0x7f00000001c0)=0x32)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)

22:44:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xf6ffffff00000000, 0x0)

22:44:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  297.420100][ T4996] cdc_ncm 4-1:1.0: bind() failure
[  297.428383][ T4996] cdc_ncm 4-1:1.1: bind() failure
[  297.445594][ T4996] usb 4-1: USB disconnect, device number 28
22:44:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  297.548591][T13393] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  297.582384][T13393] FAT-fs (loop0): Filesystem has been set read-only
[  297.632712][T13407] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  297.716245][T13393] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  297.730070][    T5] usbhid 2-1:0.0: can't add hid device: -71
[  297.735745][T13414] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  297.746430][    T5] usbhid: probe of 2-1:0.0 failed with error -71
[  297.755962][    T5] usb 2-1: USB disconnect, device number 65
22:44:56 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x2, 0x1, 0x3, 0x1, 0x3, 0x6d}, &(0x7f0000000100)=0x20)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x78)

22:44:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xfeffffff00000000, 0x0)

22:44:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000440)={@broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100}, 0xc)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a0000000d0694d6b53995e13d67261a2190b5201ae780301e13e447979e182", @ANYRES16=r1, @ANYBLOB="000328830000000000000000000008000500ac141437050001000031bf476469d7166629e9efef4bf12a010000001400060076657468315f746f5f627269646765002b00070073797374656d6e753a6f626a6563745f723a7761746368646f675f6465766963655f743a7330000014000200ff02000000000000000000008000000114000200fc01000000000000000000000000000014000300"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x488)
sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a6800, 0x103}}], 0x1, 0x100, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={<r3=>0x0})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0xb}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000000)=r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000180)=""/50, &(0x7f00000001c0)=0x32)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170)

22:44:56 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:57 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba0000000000000001000000002a6a956b8537939980e348143eae51152e94d55eade2422312d668043445852128552d5a1293c191a70e4d4799020000000000000086b7504013e040276dd87a025cbb9c1b51745b114fd30d2fb81c79a1316c9d482a64e7a3b98eff3029e1d70566beed861d98261762022c181f2b87a1e3e167b4ec0f7e3b1fd6f995a65b0f6ebf3a09c3a2fe1de9ec813079", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = fcntl$dupfd(r2, 0x0, r3)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/908], 0x1)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
mknod(0x0, 0x0, 0xe5)
perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchownat(r4, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1000)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x10000, 0x4)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x6, 0xfffffffc}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)

[  298.232090][T13427] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  298.288530][T13427] FAT-fs (loop0): Filesystem has been set read-only
[  298.298810][T13442] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  298.326112][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
22:44:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  298.354369][T13427] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xffff1f0000000000, 0x0)

22:44:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  298.395386][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
22:44:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  298.471015][  T115] usb 2-1: new high-speed USB device number 66 using dummy_hcd
22:44:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  298.560655][T13459] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  298.580024][T13459] FAT-fs (loop0): Filesystem has been set read-only
[  298.605154][T13459] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  298.686752][T13459] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  298.698021][T13470] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  298.739938][  T115] usb 2-1: Using ep0 maxpacket: 16
[  298.860146][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.878078][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.901089][  T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
22:44:57 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xbb, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}}}]}}]}}, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x40, 0x2, 0x1}}, 0x14)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "aa7a032b"}, @global=@item_4={0x3, 0x1, 0x4, "9b72eee9"}]}}, 0x0}, 0x0)

[  298.929929][  T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.940173][  T115] usb 2-1: config 0 descriptor??
[  299.180848][T13429] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  299.269906][  T140] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  299.640035][  T140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.651169][  T140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.661082][  T140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  299.673907][  T140] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.40
[  299.683018][  T115] usbhid 2-1:0.0: can't add hid device: -71
[  299.689537][  T115] usbhid: probe of 2-1:0.0 failed with error -71
[  299.695968][  T140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.704833][  T115] usb 2-1: USB disconnect, device number 66
[  299.711858][  T140] usb 4-1: config 0 descriptor??
22:44:58 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xffffff0f00000000, 0x0)

22:44:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:58 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:44:58 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r3 = accept4(r2, 0x0, &(0x7f0000000080), 0x80800)
r4 = syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f00000028c0), 0xc, &(0x7f0000002b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0400135d2f88000300000000000000000000000000000000000097742af5543af6d338cb7c9ee0a0c9b893764e21b5d50e4fe34dc09c769f72840363d21c73fef4f210cb6327c1c232e47b6fb93e11f7e6e7665a37af3e617b2a022afd316a70caf7c275930f584d708ed1c456171b1bdf7b8aed914c"], 0x20}}, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x20a042, 0x43)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r1}, {0x8, 0x1, r6}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa7b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24020000)
rt_sigtimedwait(&(0x7f0000000200)={[0x7]}, &(0x7f0000000380), 0x0, 0x8)
r7 = memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r7, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
syz_open_procfs(0x0, &(0x7f0000000240)='sched\x00')

[  300.170808][T13488] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  300.184848][T13488] FAT-fs (loop0): Filesystem has been set read-only
[  300.193600][  T140] wacom 0003:056A:00BB.0016: unknown main item tag 0x0
22:44:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:44:59 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd5', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r0])
read$FUSE(r0, &(0x7f0000003000), 0xffffff92)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd, 0x0, 0x948200}}, 0x50)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r2)
lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x7}, [], {}, [{0x8, 0x2, r2}]}, 0x2c, 0x0)

[  300.220156][  T140] wacom 0003:056A:00BB.0016: Unknown device_type for 'HID 056a:00bb'. Assuming pen.
[  300.258603][T13502] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  300.275063][  T140] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00BB.0016/input/input21
[  300.292809][T13488] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:44:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  300.327580][T13508] fuse: Unknown parameter 'fd50x0000000000000003'
[  300.345047][T13510] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  300.363659][  T140] wacom 0003:056A:00BB.0016: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.3-1/input0
22:44:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0xffffffff00000000, 0x0)

[  300.409679][T13513] fuse: Unknown parameter 'fd50x0000000000000003'
[  300.416847][  T140] usb 4-1: USB disconnect, device number 29
[  300.523879][T13518] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  300.544597][T13518] FAT-fs (loop0): Filesystem has been set read-only
[  300.559304][T13518] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  300.579801][  T115] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  300.590154][T13518] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  300.605215][T13522] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  300.849788][  T115] usb 2-1: Using ep0 maxpacket: 16
[  300.969844][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.980908][  T115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.990696][  T115] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  300.999771][  T115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.008467][  T115] usb 2-1: config 0 descriptor??
[  301.159809][    T5] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  301.260399][T13492] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  301.519804][    T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.530845][    T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.540686][    T5] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  301.553501][    T5] usb 4-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.40
[  301.562548][    T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.571244][    T5] usb 4-1: config 0 descriptor??
[  301.759867][  T115] usbhid 2-1:0.0: can't add hid device: -71
[  301.765852][  T115] usbhid: probe of 2-1:0.0 failed with error -71
[  301.773250][  T115] usb 2-1: USB disconnect, device number 67
22:45:00 executing program 3:
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0)
syz_read_part_table(0x156be, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005020314af00031400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}])

22:45:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:00 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/166, 0xa6}], 0x1, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "98cc8ffac2d9798000"})
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00')
fsetxattr$security_ima(r0, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "66f063f08b7333df2b9047dfcbac3af8368a5aff"}, 0x15, 0x2)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000200)={{0x3, 0x0, @identifier="bdf61479bf48c0d874524a04029f9d5f"}})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2802000000002202, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c0000000000000002000000020000000d4000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4810, 0x0)

[  302.039747][    T5] usbhid 4-1:0.0: can't add hid device: -71
[  302.049514][    T5] usbhid: probe of 4-1:0.0 failed with error -71
[  302.073963][    T5] usb 4-1: USB disconnect, device number 30
[  302.075500][T13541] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  302.089617][T13541] EXT4-fs (loop5): filesystem is read-only
[  302.100681][T13541] EXT4-fs (loop5): bad geometry: block count 309150182597985336 exceeds size of device (33024 blocks)
22:45:00 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:00 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

22:45:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{0x0, 0xffffffffffffffe2, 0x0}}, {{&(0x7f0000002dc0)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}}], 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x44004)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/hci\x00')
fchdir(r4)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x70, 0x1f, 0x5, 0x8, 0xcd, 0x0, 0x800, 0x14, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000240), 0x4}, 0x80, 0x1, 0x1, 0x7, 0x4, 0x1ff, 0x40}, r4, 0xf, r0, 0x2)
fchdir(0xffffffffffffffff)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000400)={0x52, "348654b63058485a0a6d17b6ff3a8ff9e3e4f6775a5d3014725ad67f9c28e900019b689b1d7b6167631111351b99ed8fbe153ad58803449deb90bd7b4a23f4f9"})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc02c8d1}, 0x880)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="db80833c000000002000128008000100767469001400028008000400ac1e000108000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="6e5ae6e2735c9ad6644e8c49d88781cece1c1f5221804f48552596d068d551d5adb0e9af1f00fd668232eb534caedd1ae405410a3e65438478fa9200000000db68a1437d693fe76a06b7dd61c7fd7c7b57f7e74f71d23bcc555b4ddb02655270e72420df097a8f289a711882125b9d29f8710965bca79129ac6be7e7b9fb469cc0e07d2f614e0ffe1ef80000000000000000"], 0x48}}, 0x40)

22:45:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$KDDISABIO(r5, 0x4b37)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)
sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x121000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x74, 0x2, 0x9, 0x801, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x800}}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

22:45:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:01 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2)

22:45:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  302.499764][ T4996] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  302.585968][T13580] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  302.593912][T13580] FAT-fs (loop0): Filesystem has been set read-only
[  302.601711][T13580] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  302.638177][T13580] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  302.647611][T13593] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  302.656470][T13580] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  302.759719][ T4996] usb 2-1: Using ep0 maxpacket: 16
[  302.919738][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.930791][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.940552][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  302.949645][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.958204][ T4996] usb 2-1: config 0 descriptor??
[  303.200295][T13560] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  303.699652][ T4996] usbhid 2-1:0.0: can't add hid device: -71
[  303.705636][ T4996] usbhid: probe of 2-1:0.0 failed with error -71
[  303.713649][ T4996] usb 2-1: USB disconnect, device number 68
22:45:02 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:02 executing program 5:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040))
unshare(0x20000400)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0x8, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_tid_address(&(0x7f0000000000))
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5453, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000200)=<r1=>0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000100)=0x80000003)
io_pgetevents(r1, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0)
unshare(0x40000000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000001780)=ANY=[@ANYBLOB="fef931da", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf2513000000d800be005ae8dc242acfcead2497c0c3096be4dcadeabf3b5281471524e435639438d77057d86392ac5c2cb092513687f8ebff9b5b5605f3b6892d7339bb820cd4df4ec3f49ffc3948f32d37a2cb0da6ebed5294a6a1a3b5025c67886ffea691a3146d46eb2bcac4bfe3554b5c57e7ea9eb4f46d20cf79fd465e8b5241f9bf946b3b08202989e6dda8038e4cda37c8f74db9e290fcc30a3b91bbd3813d38aaf3b8a5eeaa3ac1fca7f6e85e56489da6594329ad6fba462072b0d1682c711314a22ea47577153b35574b9996fef06ff7f6750fa5ceb0e23e150500"], 0x3}, 0x1, 0x0, 0x0, 0x20000880}, 0x8010)

22:45:02 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01000000000000000000c924800700000005810319020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
fsync(r1)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x80, 0x1c, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={r3, 0x5, 0x10000})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000040)={r3, 0x0, 0x7})

22:45:02 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x3)

22:45:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:02 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:02 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(0xffffffffffffffff, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  304.205750][T13612] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  304.229231][T13612] FAT-fs (loop0): Filesystem has been set read-only
[  304.244137][T13612] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4)

[  304.264237][T13612] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:03 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(0xffffffffffffffff, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  304.390423][T13628] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  304.400040][T13628] FAT-fs (loop0): Filesystem has been set read-only
[  304.407862][T13628] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  304.429509][  T115] usb 4-1: new high-speed USB device number 31 using dummy_hcd
22:45:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x5)

[  304.431386][T13628] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  304.437166][  T140] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  304.445379][T13634] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  304.583543][T13638] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  304.591607][T13638] FAT-fs (loop0): Filesystem has been set read-only
[  304.598688][T13638] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  304.614361][T13638] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  304.709581][  T140] usb 2-1: Using ep0 maxpacket: 16
[  304.819577][  T115] usb 4-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config
[  304.829878][  T115] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  304.838732][  T115] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  304.851744][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.862822][  T140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.872600][  T140] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  304.881688][  T140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.890388][  T140] usb 2-1: config 0 descriptor??
[  305.019566][  T115] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  305.028747][  T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.036773][  T115] usb 4-1: Product: syz
[  305.040958][  T115] usb 4-1: Manufacturer: syz
[  305.045530][  T115] usb 4-1: SerialNumber: syz
[  305.091931][  T115] cdc_ncm 4-1:1.0: bind() failure
[  305.130007][T13604] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  305.639514][  T140] usbhid 2-1:0.0: can't add hid device: -71
[  305.645876][  T140] usbhid: probe of 2-1:0.0 failed with error -71
[  305.653606][  T140] usb 2-1: USB disconnect, device number 69
22:45:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(0xffffffffffffffff, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:04 executing program 5:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040))
unshare(0x20000400)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0x8, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_tid_address(&(0x7f0000000000))
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5453, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000200)=<r1=>0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000100)=0x80000003)
io_pgetevents(r1, 0x0, 0x2, &(0x7f0000000400)=[{}, {}], &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0)
unshare(0x40000000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000001780)=ANY=[@ANYBLOB="fef931da", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf2513000000d800be005ae8dc242acfcead2497c0c3096be4dcadeabf3b5281471524e435639438d77057d86392ac5c2cb092513687f8ebff9b5b5605f3b6892d7339bb820cd4df4ec3f49ffc3948f32d37a2cb0da6ebed5294a6a1a3b5025c67886ffea691a3146d46eb2bcac4bfe3554b5c57e7ea9eb4f46d20cf79fd465e8b5241f9bf946b3b08202989e6dda8038e4cda37c8f74db9e290fcc30a3b91bbd3813d38aaf3b8a5eeaa3ac1fca7f6e85e56489da6594329ad6fba462072b0d1682c711314a22ea47577153b35574b9996fef06ff7f6750fa5ceb0e23e150500"], 0x3}, 0x1, 0x0, 0x0, 0x20000880}, 0x8010)

22:45:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2)

22:45:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(0xffffffffffffffff, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:06 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6)

22:45:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(0xffffffffffffffff, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  307.719687][  T140] usb 4-1: USB disconnect, device number 31
22:45:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(0xffffffffffffffff, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:06 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6)
ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040))

22:45:06 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x9, 0x2880000000000000, 0x0, 0x2, 0x10, 0x0, "8198f217501feb368961457b9c53a9eb13b5b7b422f7c4b8c2285ed6ef938f1742177f3e1d32006e47c196e2b372a765c985436c7a83b615b9d1b8295d9b972f", "386051ae0e1b83c10d86ef4ce29d81902474551715764f2b40d58eaef6eb9ba0bf6f8a5bb660b3442295dca5bf9328f05656619e5f3d31dc0a3649142d30c3ea", "97cc12a20ac94c38a703372c58d6f6582203d05c1e7462a3c5d260bd548f638e", [0x1, 0x8]})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000010301010009210000000122050009058103"], 0x0)
syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, &(0x7f0000000280)={0x40, 0x8, 0x2, {0x2, 0xe}}, 0x0, 0x0, 0x0}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x4, "eda89a62"}, 0x0, 0x0, 0x0, 0x0})

[  307.770384][T13674] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  307.778232][T13674] FAT-fs (loop0): Filesystem has been set read-only
[  307.826230][T13682] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x7)

[  307.900775][T13674] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  308.019250][ T4996] usb 2-1: new high-speed USB device number 70 using dummy_hcd
22:45:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  308.169671][T13707] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  308.186952][T13707] FAT-fs (loop0): Filesystem has been set read-only
[  308.195036][T13707] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  308.219294][  T115] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  308.230228][T13707] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  308.238164][T13711] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  308.246422][T13707] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  308.289262][ T4996] usb 2-1: Using ep0 maxpacket: 16
[  308.419281][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.430187][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.440557][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  308.449988][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.458643][ T4996] usb 2-1: config 0 descriptor??
[  308.469324][  T115] usb 6-1: Using ep0 maxpacket: 32
[  308.609307][  T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.620688][  T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.630456][  T115] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[  308.639505][  T115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.648037][  T115] usb 6-1: config 0 descriptor??
[  308.689549][  T115] hub 6-1:0.0: USB hub found
[  308.699818][T13677] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  308.909280][  T115] hub 6-1:0.0: 7 ports detected
[  308.929271][  T115] hub 6-1:0.0: insufficient power available to use all downstream ports
[  309.179239][ T4996] usbhid 2-1:0.0: can't add hid device: -71
[  309.185255][ T4996] usbhid: probe of 2-1:0.0 failed with error -71
[  309.195503][ T4996] usb 2-1: USB disconnect, device number 70
22:45:08 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x8)

22:45:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:08 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8000}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x78)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
sendmmsg$sock(r0, &(0x7f0000001b40)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010100}, 0x3, 0x4, 0x1, 0x4}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="abeb1c46fe4b5ada7ec0b998992c9c476ab0213b02985819b80809621f764bcc9488067d7ccefd3657287a3fbc50e3eccb057adb0a36f5af02ca0ae026e35e1a6026ee4689b2438a886525307689df1b9fb69eb44e73eb81cfab12bb5c0e55c85f2796aed81394acd096cf30dcffb5fcaa90b792f5d960334efd89b53c8044bb56cbefb64b133ac6156660ea41a159badb6f854358f2f0fb16bb83189117b20c5fe37de0c1a48d03c843ff80c62556e23e8803452d5a9c3e0b1f1baecfc66b9ada9d1e74b102abc4d8c57049a947f0e21da949610e216381ceec", 0xda}], 0x1, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xa92}}, @timestamping={{0x14, 0x1, 0x25, 0xee70}}, @mark={{0x14, 0x1, 0x24, 0x75}}], 0x78}}, {{&(0x7f0000000640)=@x25={0x9, @null='               \x00'}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="853ba6921547d6912dd8136740525e08e062ab0b0a9e32de6cfa309de4669bf513bf48f370d2530d6244c7e147b84de7e4c78df0342af72ea20f554bb06be5ef39a61040266267041b073e930e3ec4d3e4fc8673f1d19d747bd27cacda243c7ef22cea", 0x63}, {&(0x7f0000000740)="82c9b6f393147538606cd6f04bcce0d8d7977b65fcf91d738874d3b0bdf89c89986ba4bbb1ea0c537e593081b3b59ce2937cca96248762b4e8d60ba3a54f0ba43d9d479c5feba12b8d9925de60898d8988aaa25108d66e84933ba30fe976b1a243b88ac87e04775952a0c043bf8eef418eadba8642cf54df35bee3ae387cb97bdeeb01d7316403dada5c8b26bfc5a0b9b0d435a632791eec3b38ee037080dc2842c46c1596a569d50d0d31dc5eca1e57cb5817e6edc25de8f079b783d69f8ff136d12513e88d71e1093af63c5d4bf3", 0xcf}, {&(0x7f0000000840)="8be5f8905e82d8ef07a5a69aee711310c0dc2ef9ca393f6123ac9f326f010d5320620589eee9bd848d7d95b30f383c4d95b6d41404f4dd4587554c613efa640acf33706211ac8f89e716ad9cafcda4dc11566f33eecc75527eb4d6a056b7eabf5aeb44632d97dce37f60f83d95b7814a1b7ee59773e48394e8c6ff", 0x7b}, {&(0x7f00000008c0)="046534f57572804efc236855bb603f8a3318623546e237a2d290c4584c6aba6cf80ea84013913e3e6eb900ab8561e8aa1dfd32fedf35bf4ff6f042fc404f2fc6dbc268e299d6f106a21d5c0bede41c83f739d77ad48c165cf85a549dd337ec7702e0e3e0c699502eaed37e7a86a6ba017475a179f40f25deb6dd8e0ab3b24726e52282cc70b5f80ffde57501100c1cf230ffd3e5a24fc2d44c91925fd55068409cf9a6a25fb38c159dc59dc93fb57946933b2b33ca46dc4df19ee638899f514117a847c654b97b9fe9f004d048bd339207c64f97", 0xd4}, {&(0x7f00000009c0)="5f9374517406e2c6a6fb46ec67a21f9ed3bcaff98ff5fd03bdbb", 0x1a}, {&(0x7f0000000a00)="7f53a2f16bc0e006d3e90e322cfc1c982bbfbcb06275c1d3b92d83269dba58c70aeaabe1bad213b4219c381621ae7e5f2e6355bf16a5418150e9f353d89dca592b20e5bd989e3bb46121437c27e793578641e9a8250193e74b4cf46d64225ec7ce3a017ea0c7fbbc947a6ea42d9a8ae0504211a9979c6a3d1384da2f308da961e43ef2a3ce6f163e0976e849ae2ffce34849ef5a9d998cc786", 0x99}], 0x6, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x20}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x139a}}], 0xa8}}, {{&(0x7f0000000c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x3, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c80)="59de35df5c98c165fe1110db68cd226d3c6075f83e76b9e3224a7fc2b3f1ad2fb399f5eaca0e34f727e8316deec8291c973a6aa1e8c050d169dcf23305ee921c30cb12955a1722a7a0dd1233890fbd58b8c1a117ff33f1f6d9c4c6426678eef9256c3c0ec7939af020f8d29818", 0x6d}], 0x1, &(0x7f0000000d40)=[@timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000dc0)="d23ed8cebdf3237d615dcf1a9b9ff1200546e12ddb180798e54bdf95cc17b63309e779c9928b227a32f0c894f919e334be069fe07a93761d345761d8693bcb2a7c8be8e9d6d798f8376da14a27a34f5f81bb3f2417281c06e4a954b3d5701f3e76aa950a2be64cd498694fe23d6e372efefde0794f96ea488685e1faef487735efd25e5e82cdec82f7a3d3a99b4e3bab914c3c0f3313ffbb2efe5c30c7150b243af3c68807aa28cf9d8af9ba13cb678a2faf81050481447b2aafbb16eea216786523de9aa80e31f0ec7b0b244f1525645be4d9cc09635f492382811dd31d002805c1e2db9138aaa988e2fee181c11e16be", 0xf1}, {&(0x7f0000000ec0)="23bee53043d0b6bd3e5355ea27503beffd351847fb897bdd45a09b21c9700931f9ded8e1150098837bbce36d47ecda39b31c02afbee6dec7e1190b23972c464197cd8da11af9eb85297487876258917f31bca41fb4d0c19eebed15fb5a0935", 0x5f}], 0x2, &(0x7f0000000f80)=[@timestamping={{0x14, 0x1, 0x25, 0x755}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x2964ce5e0}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xffff1bd4}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001040)}, {&(0x7f0000001080)="223bf7e29ca64c5786a6c645cf3efa5a804a3c6e56065a41cb81d8201908e0a7933777aef6dccc45ada97eb65bd54f986597c25bc82e77bb37c9c6c9b325e3f6ef2f2146f9fb15680f26ccd7a3e6b4133675374da7ef77a0bfbf1cc1f7d6b6404aa7c775d489c0ec449e73ad0c1579e906482ca1f4893f55209ae5b8770d0fbc32dd5a562a821a65e35991e39300ed407933fcfa18ee51969a822cffcc757195a83389525327ad426fecccae7162d13a04f530451a7ce6558b442315a2a3fc792a44", 0xc2}, {&(0x7f0000001180)="42b9a1885910c57846b9dee83932d7f23cf1922b9996c11e7e44bd90dff0de923c74f8fdc283140233f076a82cca2637d65e19a70f0ab56e9d8c22f20b94451d7b4f2d083fb79a8420a5cd3eae24e1b8733f448ef347106d738d5adb3b8a61857f2260", 0x63}, {&(0x7f0000001200)="8bf589271e1d3dcd82dadd28a1dd17f860f4ca0d7d9762783caa5f18c042bcabc0b8fc9c19e5c28d80c9c6e8985fb3f97573f22160a583b14780baee32cfbe1c4c890de2db7a3e6e507d7fb18f8ace982dc0d77d0318b5c932a575cdba80d056fba61a24872156bbf5ff38b30a525f64b533a825519c5d0dc8037c4e9bba1d0449d3e9769a9b691665e48cd256cb51eaae2f3380e8f8b7208f68d96116995bfae153f6f8e7a07a80e226985a009d11d5ee0b18e2daa8584264d0d015d3a72b321a3ddb62b1057dba2992af3f24b6e3a14bf51b3e140e", 0xd6}, {&(0x7f0000001300)="be04630034a1fb90dee225", 0xb}, {&(0x7f0000001340)}, {&(0x7f0000001380)="d91f6ee1d80156857135a12747e36eafcd3d7b0b357726640bfe26688cf2aecee5979a04a5abf2c638286c6f7be218bd7a5247e3ff8c7d09e2fe1273fc055f15ba32011604d8909b5bbebf54dda52926151d6f3e26f9c9b36d4ca1aae2f1074ddafcbab3a7df355569b47513f2ec652d4ac45f380885", 0x76}], 0x7, &(0x7f0000001480)=[@txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x615}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x90}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001540)="fc208a2ac14263dfeaeea47816f53efff6c4a81c873025591519a72e82b17f1471ee63b22bc4fbd1aa6440fe3e592ef568eef8595b0ea4535b532266af56d42bfe90af700ae58ed00e513ff1ae10839213adc75543093e1a8d87a559ef4458b79d33db5b4f5977730056307ba8c8f29e799c3e501dda5a1fd6aaa1606815a1f795a5a8c98f05596a85ea43de945d88b9ae25b7afd09839a119ef1b94fa57edb4fa1a9605f11d084122da64e73b40cd9e5cb04128fc6d79be5d9d665aac628637663c41c728dd34437786703b22308932d4bf7d88d2b3e174c74255eba276", 0xde}, {&(0x7f0000001640)="be108e07451217bbf179de73c22f075206bda3f5d744c3667bd9ad00762a94aafabc4861df791b2a6fa6adebcc7723670a0266a4ffb0b45c69a03402e58d6cc0ce41ab343dfa57ff8ae662af52087aba8b13ead48280f0d0e3174a519dbde42911144af5b91b6d56d7a1be21cd5b1efee806490c73fbf4b49a", 0x79}], 0x2, &(0x7f0000001700)=[@txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x22}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0xf0}}, {{&(0x7f0000001800)=@rc={0x1f, @any, 0x3f}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001880)="a60b45601d531cc89c527e93dd40aa8a3dbb1cb8fcfad2c914412424cee6e2504451e76d2bdae265e2daad9b713b6730b4d0e2125d1e0b40c8db7cf90de7e9f74d95fa3241959dcea102ae725cbd2301034a722c76247af4789ac0a2adc47cf8d27c6eea7c9949ec266ff44818475ef343d18169056b606092abad78d1bf787a96ec15e1a62eff6d0a6b816fd03e23460f4e8cb71dbbebe6f5ec119b459b27a1181f35e2e583da7b70d4c67f11cd7011c963d025d1f3af19f7ac573e89", 0xbd}, {&(0x7f0000001940)="6f53e6e358123a8bfbfff2f56a62b5e0735440e72b956c6d725fb0286e465887f79c84bdda97ef8a47af06cfa2ebda279dc97812130d70cbdbbf464ce3e211405ddccdd53b26d878180a11807620a7d5fcc098cd057742602153f0b16f39900302b1bb73e877a29bbcb2bbc0631e04bcab6427910f8b42f707d96f52443aca6d8a1f56cd553bb268c8818a", 0x8b}, {&(0x7f0000001a00)="b88231efaee94dd690f4bc56fdc90862ae400a456d4d915e5fbac217f671e3d6c0e97190da0b50d646ac725dd53089e06f3c27874908da418e91eac5806cf659912b5b0bb3583792d0769e73e43f805f466958270a7e30fb2fae16fd3e1758e890fee6dc85b1bc938350a5047ec03c5a2f508ae58e3fcc7edf7b911a146141efb7c63c23af4f838c15201968bfc0371696f2daca53cace8d44be75ed1a3b3c581bda07e86c67d524e98c482bd918e3ece093430a2050b4d12e3d26fabe", 0xbd}, {&(0x7f0000001ac0)="ee853b519168f9d1e3d8734acc57ae266ea2ffca44ffb6c16a8e9f5b5e84de32355add5c4b542419905c389d", 0x2c}], 0x4}}], 0x7, 0x40000)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
close(r4)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
r5 = socket(0x100000000011, 0x2, 0x0)
bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, <r6=>0x0}, &(0x7f00000002c0)=0xfeeb)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4)
bind$xdp(r3, &(0x7f0000000900)={0x2c, 0xa, r6}, 0x10)
sendmsg$inet(r2, &(0x7f0000002d80)={&(0x7f0000001040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001d00)="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", 0x1000}], 0x1, &(0x7f0000002d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0x7, [{@multicast2}, {@empty, 0x8}]}, @generic={0x83, 0x4, "c31b"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x60}, 0x20000801)

22:45:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  309.693721][T13732] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  309.727794][T13732] FAT-fs (loop0): Filesystem has been set read-only
[  309.738453][T13732] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  309.756638][T13732] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  309.776257][T13743] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  309.919226][ T4996] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  310.050075][  T115] usb 6-1: USB disconnect, device number 18
[  310.159127][ T4996] usb 2-1: Using ep0 maxpacket: 16
[  310.279153][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.290154][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  310.300568][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  310.309967][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.318519][ T4996] usb 2-1: config 0 descriptor??
[  310.559554][T13725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  310.739083][  T115] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  310.979091][  T115] usb 6-1: Using ep0 maxpacket: 32
[  311.049136][ T4996] usbhid 2-1:0.0: can't add hid device: -71
[  311.055211][ T4996] usbhid: probe of 2-1:0.0 failed with error -71
[  311.063229][ T4996] usb 2-1: USB disconnect, device number 71
22:45:10 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$TIOCMGET(r5, 0x5415, &(0x7f00000000c0))
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r4, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe)

22:45:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x9)

22:45:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:10 executing program 3:
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x8000})
r1 = socket$inet(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x800)
ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)})
r3 = gettid()
ptrace$setopts(0x4200, r3, 0x0, 0x0)
tkill(r3, 0x3c)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r3, 0x0, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x800})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)

22:45:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  311.299683][  T115] usb 6-1: unable to read config index 0 descriptor/all
[  311.310741][  T115] usb 6-1: can't read configurations, error -71
[  311.322622][T13764] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  311.347766][T13764] FAT-fs (loop0): Filesystem has been set read-only
[  311.378928][T13775] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  311.432821][T13764] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:10 executing program 3:
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
chmod(&(0x7f0000000000)='./file0\x00', 0xed178ced64577ce)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68)
creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)

22:45:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:10 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)

[  311.477503][T13779] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  311.503234][T13764] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xa)

22:45:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:10 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0xa0ffff, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowergir=./bus,workdir=./file1,up\x00erdir=./file0'])
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})

[  311.662464][T13796] overlayfs: unrecognized mount option "lowergir=./bus" or missing value
[  311.674374][T13796] overlayfs: conflicting lowerdir path
[  311.683344][T13796] overlayfs: unrecognized mount option "lowergir=./bus" or missing value
[  311.710941][T13795] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  311.721412][T13795] FAT-fs (loop0): Filesystem has been set read-only
[  311.728771][T13795] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  311.738192][T13799] overlayfs: conflicting lowerdir path
[  311.772316][T13795] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  311.781359][T13800] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  311.879001][ T4996] usb 2-1: new high-speed USB device number 72 using dummy_hcd
22:45:10 executing program 3:
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000105e04da07000000001e0109022400010000000009040000090300000009210000000122220009058103", @ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX=r2, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r0], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000082a9000170900be00839e75414a64"], 0x0}, 0x0)

22:45:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  312.118966][ T4996] usb 2-1: Using ep0 maxpacket: 16
22:45:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xb)

22:45:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  312.224278][T13812] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  312.238992][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
22:45:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, 0x0)
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  312.265441][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.287942][T13812] FAT-fs (loop0): Filesystem has been set read-only
[  312.291628][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  312.338121][T13818] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  312.351939][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.372382][T13812] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  312.404104][T13825] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  312.412075][ T4996] usb 2-1: config 0 descriptor??
[  312.659403][T13789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  313.158980][ T4996] usbhid 2-1:0.0: can't add hid device: -71
[  313.164955][ T4996] usbhid: probe of 2-1:0.0 failed with error -71
[  313.173090][ T4996] usb 2-1: USB disconnect, device number 72
22:45:12 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, 0x0)
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(0x0, 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:12 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xc)

22:45:12 executing program 5:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = dup(r0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x78)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40004)
syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000280)='.\x00', 0x2a4)
r5 = inotify_init()
r6 = inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x80000000)
inotify_rm_watch(r4, r6)
inotify_rm_watch(r3, r6)

22:45:12 executing program 3:
syz_read_part_table(0x7, 0x0, &(0x7f0000000000))
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
clock_gettime(0x2, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
clock_settime(0x0, &(0x7f0000000200)={r1, r2+10000000})
getdents(r0, &(0x7f0000000100)=""/164, 0x20000118)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0xc, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200c0055)

22:45:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, 0x0)
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  313.642061][T13840] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  313.675373][T13840] FAT-fs (loop0): Filesystem has been set read-only
22:45:12 executing program 3:
syz_read_part_table(0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

22:45:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(0x0, 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  313.700959][T13852] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  313.735892][T13840] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:12 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x20)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'vcan0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}})
write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x0, 0x4, 0x7}}, 0x14)
ftruncate(r1, 0x2008001)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000180)={0x5, {{0xa, 0x4e20, 0x1ff, @loopback, 0x1ff}}, {{0xa, 0x4e22, 0x29, @empty, 0xfffffed4}}}, 0x108)

22:45:12 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xd)

[  313.762057][T13857] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(0x0, 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  313.898848][ T4996] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  313.928470][T13867] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  313.939588][T13867] FAT-fs (loop0): Filesystem has been set read-only
[  313.947271][T13867] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  313.979717][T13867] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  313.991240][T13875] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  314.148827][ T4996] usb 2-1: Using ep0 maxpacket: 16
[  314.268953][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.279941][ T4996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.290314][ T4996] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  314.299744][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.308301][ T4996] usb 2-1: config 0 descriptor??
[  314.549491][T13844] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  315.048893][ T4996] usbhid 2-1:0.0: can't add hid device: -71
[  315.058421][ T4996] usbhid: probe of 2-1:0.0 failed with error -71
[  315.066634][ T4996] usb 2-1: USB disconnect, device number 73
22:45:14 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b8"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:14 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xaef}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x8800)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x4a80, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000440)=0x8, 0x4)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x5c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200ffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x10000000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

22:45:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xe)

22:45:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x8810, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x65e2f000)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x0)

22:45:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  315.543250][T13896] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  315.550590][T13893] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500)
22:45:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  315.585013][T13893] FAT-fs (loop5): Filesystem has been set read-only
[  315.589013][T13896] FAT-fs (loop0): Filesystem has been set read-only
[  315.610069][T13906] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  315.649193][T13896] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  315.669163][T13910] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:14 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xf)

22:45:14 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x44c02)
io_setup(0x100000000000c333, &(0x7f0000000200))
r1 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0)
recvmmsg(r0, &(0x7f0000009e40)=[{{&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000000640)=""/245, 0xf5}, {&(0x7f0000000740)=""/194, 0xc2}], 0x7, &(0x7f0000001fc0)=""/4096, 0x1000}, 0xb3}, {{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/80, 0x50}, {&(0x7f0000000940)=""/17, 0x11}, {&(0x7f0000000a00)=""/153, 0x99}, {&(0x7f0000000ac0)=""/247, 0xf7}, {&(0x7f0000000980)=""/31, 0x1f}], 0x5, &(0x7f0000000c40)=""/225, 0xe1}, 0xdaf5}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/91, 0x5b}, {&(0x7f0000000dc0)}], 0x3, &(0x7f0000000e40)=""/134, 0x86}, 0x368}, {{&(0x7f0000000f00)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f0000001040)=""/134, 0x86}], 0x2, &(0x7f0000001140)=""/58, 0x3a}, 0x1}, {{&(0x7f0000001180)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)=""/87, 0x57}, {&(0x7f0000001280)=""/70, 0x46}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000001300)=""/240, 0xf0}], 0x4, &(0x7f0000001440)=""/162, 0xa2}, 0x2}, {{&(0x7f0000001500)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001580)=""/135, 0x87}, {&(0x7f0000001640)=""/27, 0x1b}, {&(0x7f0000001680)=""/119, 0x77}], 0x3, &(0x7f0000001740)=""/126, 0x7e}, 0xc973}, {{&(0x7f0000004fc0), 0x80, &(0x7f00000072c0)=[{&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/80, 0x50}, {&(0x7f00000060c0)=""/24, 0x18}, {&(0x7f0000006100)=""/219, 0xdb}, {&(0x7f0000006200)=""/146, 0x92}, {&(0x7f00000062c0)=""/4096, 0x1000}], 0x6, &(0x7f0000007340)=""/231, 0xe7}, 0x800}, {{&(0x7f0000007440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000007a00)=[{&(0x7f00000074c0)=""/167, 0xa7}, {&(0x7f0000007580)=""/11, 0xb}, {&(0x7f00000075c0)=""/205, 0xcd}, {&(0x7f00000076c0)=""/233, 0xe9}, {&(0x7f00000077c0)=""/80, 0x50}, {&(0x7f0000007840)=""/86, 0x56}, {&(0x7f00000078c0)=""/90, 0x5a}, {&(0x7f0000007940)=""/187, 0xbb}], 0x8, &(0x7f0000007a80)=""/178, 0xb2}, 0x80000}, {{&(0x7f0000007b40)=@vsock, 0x80, &(0x7f0000009d00)=[{&(0x7f0000007bc0)=""/70, 0x46}, {&(0x7f0000007c40)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/92, 0x5c}, {&(0x7f0000008cc0)=""/4, 0x4}, {&(0x7f0000008d00)=""/4096, 0x1000}], 0x5, &(0x7f0000009d80)=""/172, 0xac}, 0x9}], 0x9, 0x40000020, &(0x7f000000a080)={0x77359400})
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f000000a580)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000a540)={&(0x7f000000a0c0)={0x46c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SSID={0x13, 0x34, "26a200805d497fda9c8323317a8a60"}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IE_ASSOC_RESP={0x29d, 0x80, "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"}, @NL80211_ATTR_TX_RATES={0x19c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xec, 0x0, [@NL80211_TXRATE_LEGACY={0x10, 0x1, "5b0ca88cc0b6c013e1dec801"}, @NL80211_TXRATE_LEGACY={0x20, 0x1, "9a45330905958a16fc934679de847d52e8fcfdabe75d7efc3c59f356"}, @NL80211_TXRATE_LEGACY={0xc, 0x1, "278987f31069e3d3"}, @NL80211_TXRATE_HT={0x24, 0x2, "3ba65d1a3b27d0aac534a94d4f30e555ef51d2f768d3c2e02ba4ed6765350962"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x2, 0x1, 0x4ae, 0x1, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, "562c2ea3548ddbfa9d92e531e565c54a384f8ebdfab8fdae167a22"}, @NL80211_TXRATE_HT={0x49, 0x2, "0914e5ac8600b75ca0df27b0123b1b342262bb8acfb5924b4572cdd877c9dd1b60db0f5f298ca916e16dd46b999b12ae0652ca53de9fc505213b59e63a790c521ddf5483c4"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xac, 0x3, [@NL80211_TXRATE_LEGACY={0xf, 0x1, "9dd09c54839bc377ab6dc3"}, @NL80211_TXRATE_HT={0x3d, 0x2, "d5665508be3d2c6873fad24ae94a17027f390b222b680f47e82cce35552a76cd6ba29ad5dc2231605a6c16f4e575b507b0387686f53242e197"}, @NL80211_TXRATE_HT={0x25, 0x2, "8001ec949649d3cc5aa5964c8e183eb65ad2b6d9dd3760585ad5504a691f0b1ce6"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0xfe01, 0xff, 0x8001, 0x4, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x59, 0x6, 0x7fff, 0x9, 0x0, 0x9, 0x8, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x46c}, 0x1, 0x0, 0x0, 0x80}, 0x4000801)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000017c0)={0x0, 0xfb, 0x7f5, 0x0, 0xfe, "d1acae3576bb63f55bc9dff22c4f011b", "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"}, 0x7f5, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_bridge\x00', {}, 0x7ff})
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
get_robust_list(0x0, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x98428d57a99b5f44)
io_setup(0xd, &(0x7f0000000100)=<r3=>0x0)
io_submit(r3, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}])
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty}, 0x10)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)

[  315.693093][T13896] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  315.788785][    T5] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  315.796450][ T4996] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  315.831760][T13920] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  315.845653][T13920] FAT-fs (loop0): Filesystem has been set read-only
[  315.853068][T13920] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  315.893650][T13920] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  316.048787][    T5] usb 2-1: Using ep0 maxpacket: 16
[  316.098880][ T4996] usb 4-1: device descriptor read/64, error 18
[  316.178833][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.189725][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.200101][    T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  316.209493][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.219760][    T5] usb 2-1: config 0 descriptor??
[  316.459349][T13897] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  316.488768][ T4996] usb 4-1: device descriptor read/64, error 18
[  316.758762][ T4996] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  316.978816][    T5] usbhid 2-1:0.0: can't add hid device: -71
[  316.984803][    T5] usbhid: probe of 2-1:0.0 failed with error -71
[  316.993089][    T5] usb 2-1: USB disconnect, device number 74
[  317.028819][ T4996] usb 4-1: device descriptor read/64, error 18
22:45:16 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b8"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  317.418753][ T4996] usb 4-1: device descriptor read/64, error 18
[  317.548815][ T4996] usb usb4-port1: attempt power cycle
[  317.678734][    T5] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  317.918721][    T5] usb 2-1: Using ep0 maxpacket: 16
[  318.048765][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.059772][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.069529][    T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  318.078776][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.087429][    T5] usb 2-1: config 0 descriptor??
[  318.258710][ T4996] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  318.329232][T13936] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  318.358847][ T4996] usb 4-1: Invalid ep0 maxpacket: 210
22:45:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:17 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10)

22:45:17 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
alarm(0x4)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
unshare(0x44020600)
ioctl$EVIOCGMASK(r0, 0x40044581, 0x0)

22:45:17 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r0, &(0x7f0000000100)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, "bf564a3ff89be675"}}}}, 0x42)

22:45:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  318.508676][ T4996] usb 4-1: new high-speed USB device number 35 using dummy_hcd
22:45:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  318.567988][T13952] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  318.610226][T13952] FAT-fs (loop0): Filesystem has been set read-only
[  318.633706][T13961] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:17 executing program 3:
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x10a000, 0x0)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000240)={0x7, 'veth1\x00', {0x1}, 0x8})
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
clone(0xc52ca700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendfile(r1, r1, &(0x7f0000000200), 0xa198)
r2 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r2, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@routing={0x0, 0x6, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, [], 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}, 0x38)

22:45:17 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x11)

[  318.671590][T13952] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  318.694045][T13963] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  318.808553][T13976] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  318.818653][T13976] FAT-fs (loop0): Filesystem has been set read-only
[  318.835244][T13976] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  318.848744][    T5] usbhid 2-1:0.0: can't add hid device: -71
[  318.858587][    T5] usbhid: probe of 2-1:0.0 failed with error -71
[  318.871539][T13976] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  318.883525][    T5] usb 2-1: USB disconnect, device number 75
[  318.895137][T13984] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  318.904693][T13976] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  318.988724][ T4996] usb 4-1: device not accepting address 35, error -71
[  318.995701][ T4996] usb usb4-port1: unable to enumerate USB device
22:45:18 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b8"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:18 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000001c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0)
getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000100)=0x4)

22:45:18 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x813}, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r4)
r5 = socket(0x1e, 0x1, 0x0)
keyctl$revoke(0x3, 0x0)
sendmsg(r5, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$P9_RWALK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="710000006f010500000000000000010000000000000004010000000100000000000000100300000008000000000000004000000000050000000000000008040000000500000000000000040300000002000000000000000801000000060000000000000080020000000300000000000000"], 0x71)
r6 = open(&(0x7f0000000140)='./bus\x00', 0x40342, 0x0)
ftruncate(r6, 0x2008002)
sendfile(r4, r6, 0x0, 0x200fff)

22:45:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x12)

22:45:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  319.339692][T13996] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  319.356464][T13996] FAT-fs (loop0): Filesystem has been set read-only
[  319.364285][T13996] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x13)

[  319.389271][T13996] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  319.598641][    T5] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  319.632887][T14019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  319.682249][T14019] FAT-fs (loop0): Filesystem has been set read-only
[  319.723972][T14027] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  319.770145][T14019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  319.785566][T14028] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  319.793769][T14019] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  319.868640][    T5] usb 2-1: Using ep0 maxpacket: 16
[  319.988703][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.999615][    T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.012099][    T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  320.021183][    T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.029816][    T5] usb 2-1: config 0 descriptor??
[  320.269037][T14000] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  320.768695][    T5] usbhid 2-1:0.0: can't add hid device: -71
[  320.774651][    T5] usbhid: probe of 2-1:0.0 failed with error -71
[  320.782734][    T5] usb 2-1: USB disconnect, device number 76
22:45:19 executing program 4 (fault-call:9 fault-nth:0):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x25)

22:45:19 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x813}, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r4)
r5 = socket(0x1e, 0x1, 0x0)
keyctl$revoke(0x3, 0x0)
sendmsg(r5, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$P9_RWALK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="710000006f010500000000000000010000000000000004010000000100000000000000100300000008000000000000004000000000050000000000000008040000000500000000000000040300000002000000000000000801000000060000000000000080020000000300000000000000"], 0x71)
r6 = open(&(0x7f0000000140)='./bus\x00', 0x40342, 0x0)
ftruncate(r6, 0x2008002)
sendfile(r4, r6, 0x0, 0x200fff)

22:45:19 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x813}, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r4)
r5 = socket(0x1e, 0x1, 0x0)
keyctl$revoke(0x3, 0x0)
sendmsg(r5, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$P9_RWALK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="710000006f010500000000000000010000000000000004010000000100000000000000100300000008000000000000004000000000050000000000000008040000000500000000000000040300000002000000000000000801000000060000000000000080020000000300000000000000"], 0x71)
r6 = open(&(0x7f0000000140)='./bus\x00', 0x40342, 0x0)
ftruncate(r6, 0x2008002)
sendfile(r4, r6, 0x0, 0x200fff)

22:45:20 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c5d0e00050500010d8390102036be43d0109022400010000000009040000028aaa8f00090500000000000000090500000000000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[  321.286486][T14043] FAULT_INJECTION: forcing a failure.
[  321.286486][T14043] name failslab, interval 1, probability 0, space 0, times 0
[  321.300314][T14048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  321.326109][T14043] CPU: 0 PID: 14043 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  321.331794][T14048] FAT-fs (loop0): Filesystem has been set read-only
[  321.336299][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  321.336303][T14043] Call Trace:
[  321.336324][T14043]  dump_stack+0x14a/0x1ce
[  321.336340][T14043]  ? devkmsg_release+0x11c/0x11c
[  321.365465][T14043]  ? show_regs_print_info+0x12/0x12
[  321.370645][T14043]  ? is_bpf_text_address+0x290/0x2b0
[  321.375905][T14043]  should_fail+0x6fb/0x860
[  321.380302][T14043]  ? setup_fault_attr+0x3d0/0x3d0
[  321.385297][T14043]  ? fat_get_entry+0x979/0xaa0
[  321.390034][T14043]  ? fat_parse_long+0x8d/0x9d0
[  321.394769][T14043]  should_failslab+0x5/0x20
[  321.399384][T14043]  kmem_cache_alloc+0x36/0x260
[  321.404290][T14043]  fat_parse_long+0x8d/0x9d0
[  321.408867][T14043]  __fat_readdir+0x874/0x1a10
[  321.413552][T14043]  ? __rcu_read_lock+0x50/0x50
[  321.418326][T14043]  ? perf_trace_ext4_da_reserve_space+0x4fa/0x540
[  321.424816][T14043]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  321.430877][T14043]  ? get_pid_task+0x86/0x90
[  321.435444][T14043]  ? fat_shortname2uni+0x8e0/0x8e0
[  321.440685][T14043]  ? fsnotify+0x13a0/0x1460
[  321.445261][T14043]  ? __rcu_read_lock+0x50/0x50
[  321.450013][T14043]  ? __fsnotify_parent+0xeb/0x310
[  321.455014][T14043]  ? down_read+0x10/0x10
[  321.459233][T14043]  ? security_file_permission+0x1e9/0x300
[  321.465146][T14043]  iterate_dir+0x2a0/0x510
[  321.469554][T14043]  __se_sys_getdents+0x24b/0x540
[  321.474912][T14043]  ? __x64_sys_getdents+0x80/0x80
[  321.479924][T14043]  ? fillonedir+0x260/0x260
[  321.484401][T14043]  ? __ia32_sys_read+0x80/0x80
[  321.489138][T14043]  do_syscall_64+0xcb/0x150
[  321.493618][T14043]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  321.499576][T14043] RIP: 0033:0x45ca69
[  321.503464][T14043] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  321.524609][T14043] RSP: 002b:00007f3b26e23c78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  321.532996][T14043] RAX: ffffffffffffffda RBX: 00000000004dce80 RCX: 000000000045ca69
[  321.541047][T14043] RDX: 0000000020000118 RSI: 0000000020000100 RDI: 0000000000000007
[  321.548994][T14043] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  321.557218][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  321.565191][T14043] R13: 00000000000000f6 R14: 00000000004c3a13 R15: 00007f3b26e246d4
22:45:20 executing program 4 (fault-call:9 fault-nth:1):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  321.737004][T14059] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  321.771866][T14048] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x48)

[  321.781917][T14069] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  321.987695][T14083] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  321.995750][T14083] FAT-fs (loop0): Filesystem has been set read-only
[  322.011435][T14076] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:20 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x3e, 0x0, 0x0, 0x80000001}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r0, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$TCSBRKP(r0, 0x5425, 0x7ff)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
fcntl$setlease(r2, 0x400, 0x0)
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040))
syz_usb_connect(0x0, 0x110, &(0x7f00000005c0)=ANY=[@ANYBLOB="f8ffffffd41530408d2e2933bf48010203010300000000000000080904e6"], 0x0)

22:45:20 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x813}, 0x0)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r4)
r5 = socket(0x1e, 0x1, 0x0)
keyctl$revoke(0x3, 0x0)
sendmsg(r5, &(0x7f0000001dc0)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
write$P9_RWALK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="710000006f010500000000000000010000000000000004010000000100000000000000100300000008000000000000004000000000050000000000000008040000000500000000000000040300000002000000000000000801000000060000000000000080020000000300000000000000"], 0x71)
r6 = open(&(0x7f0000000140)='./bus\x00', 0x40342, 0x0)
ftruncate(r6, 0x2008002)
sendfile(r4, r6, 0x0, 0x200fff)

22:45:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x18)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

[  322.078553][  T140] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  322.086531][T14076] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4c)

22:45:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  322.338626][  T140] usb 6-1: Using ep0 maxpacket: 16
[  322.399460][    T5] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  322.498631][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.510347][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.520468][  T140] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  322.529993][  T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.544926][  T140] usb 6-1: config 0 descriptor??
[  322.678545][    T5] usb 2-1: device descriptor read/64, error 18
[  322.789568][T14073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  323.032419][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.039388][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.046345][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.055264][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.062936][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.070753][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.077651][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.078524][    T5] usb 2-1: device descriptor read/64, error 18
[  323.086718][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.097685][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.104702][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.111692][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.118601][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.125447][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.132339][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.139236][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.146645][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.153550][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.160461][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.167389][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.174285][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.181189][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.188040][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.194936][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.202154][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.209035][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.215902][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.222806][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.229728][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.236646][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.243673][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.250704][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.257583][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.264466][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.271378][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.278237][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.285111][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.292166][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.299095][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.305953][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.312869][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.319797][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.326662][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.333571][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.340546][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.347419][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.354479][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.361392][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.368255][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.368565][    T5] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  323.375251][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.389791][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.396970][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.403869][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.410877][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.417741][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.424688][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.431689][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.438589][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.445625][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.452583][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.459494][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.466357][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.473274][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.480185][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.487983][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.494892][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.501812][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.508716][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.515598][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.522504][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.529535][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.536394][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.543276][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.550189][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.557048][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.563945][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.570941][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.578951][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.585994][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.593413][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.600433][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.607296][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.614382][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.621476][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.628350][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.635257][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.642167][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.649101][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.655974][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.662892][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.668503][    T5] usb 2-1: device descriptor read/64, error 18
[  323.670094][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.683112][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.689991][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.696871][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.703843][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.710871][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.717823][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.724719][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.731640][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.738629][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.745681][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.752591][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.759490][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.766338][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.773335][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.780229][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.787073][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.794083][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.801270][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.808121][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.815040][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.821955][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.828838][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.835708][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.842588][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.850525][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.857822][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.864741][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.871659][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.878559][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.885419][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.892311][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.899216][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.906060][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.912965][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.919868][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.926712][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.933776][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.940852][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.948005][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.954921][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.961821][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.968741][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.975740][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.982725][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.989753][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  323.996716][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.003620][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.011522][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.018529][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.025413][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.032310][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.039229][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.046716][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.054135][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.061041][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.068002][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.074906][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.078472][    T5] usb 2-1: device descriptor read/64, error 18
[  324.081796][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.094786][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.101681][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.109498][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.116342][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.123234][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.130252][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.137364][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.144265][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.151169][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.158053][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.165050][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.172128][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.179019][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.185880][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.192787][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.199775][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.206636][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.208577][    T5] usb usb2-port1: attempt power cycle
[  324.213521][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.225733][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.232864][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.239761][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.246619][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.253549][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.260470][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.267324][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.274203][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.281126][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.287968][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.294869][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.301796][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.308676][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.315548][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.322448][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.329342][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.336229][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.343142][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.350098][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.357011][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.364005][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.370911][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.377783][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.384766][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.391763][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.398691][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.405659][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.412559][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.419601][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.426899][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.433798][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.440792][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.447655][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.454537][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.461466][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.468339][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.475218][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.482127][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.489132][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.496007][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.502919][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.509829][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.516740][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.523746][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.530667][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.537514][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.544391][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.552338][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.559223][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.566081][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.572966][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.579886][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.589047][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.595921][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.603018][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.610083][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.616970][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.623870][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.630857][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.637805][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.644910][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.651810][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.659386][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.666245][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.673159][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.680210][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.687169][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.694072][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.700970][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.707828][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.714723][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.721618][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.728504][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
22:45:23 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000c5d0e00050500010d83901e9020109022b00010000000009040000028aaa8f0009050000000000000009050000000000edff"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0)

22:45:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x40000218)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:23 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x60)

22:45:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x18)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

[  324.735367][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.742430][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.749318][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.756180][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.763061][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.769952][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.776880][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.783789][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.797291][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.815906][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.829190][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
22:45:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0)

[  324.856076][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.882959][T14125] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  324.894111][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
22:45:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x7ffffffff000)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

[  324.921643][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.930404][T14125] FAT-fs (loop0): Filesystem has been set read-only
[  324.938500][    T5] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  324.940584][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.954546][T14134] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  324.970771][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.977677][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.985085][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  324.992518][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.001044][T14125] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  325.014650][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.024748][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.032914][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.042205][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.050699][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.057581][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
22:45:23 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x68)

22:45:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0)

22:45:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getpeername(r1, &(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, &(0x7f0000000000)=0x80)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000000cc0)=0x8000, 0x4)

[  325.079851][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.102673][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.118493][    T5] usb 2-1: device descriptor read/8, error -71
[  325.121855][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
22:45:23 executing program 1:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141842, 0x0)
timer_create(0x6, &(0x7f0000000080)={0x0, 0x1e, 0x4, @thr={&(0x7f0000000140)="68e7a639ab0136309bd8a36b4c11e04f82c8b9c2159e16be9f21effedfdd4dbd32cb554bad78fa2c5a8d67dc3c91515802e3af94c3433f02039376612b29d878a14b29794d6f7af72f0ba43f799a79eadd9730680368af4c314db222d7a192111d8cd298fe52ce8d195c1ddbc29af06815e1d1985ac9fbc4ff3767e621c8390d54c7217ae1553904df5c76f847c27e49f9f2527f77f7934bc3cd079b5badb6b305e3f7ddc3038df1de2180", &(0x7f00000002c0)="960d0b8493721e4fc635bb082b9c88be1959b7894f4880d8eae858c07e64bc6654a2c99e45d9abb7638c5d7b34baeb7e3b84f4fef1b5bdbae5587d96b0f5b68ae9eefcc1c050bae2de152a8a322f032bf96af71e8af25e99f1a6213dd9206dba91cc42123b17f548ccb4e27b851cc70347a7ed97953206c7da8f2a3348e4c5dbe89ea396f118d254372fb38783954900b841bb501481226857a96c38b9d090088ad9c6d067c4c881103aafac645fe3413b88e8efebdb0b0e60be81ba8ded0a936af8b515c92447412f0dd4ad59dad3ab3bd0ce08ac078b99b00485b83601c11ce81e2d410cc583d53b9b14aa37ae07fd5dc2d168aed68ad40a389dbec06270b58d90371b6b9e6e4b3d2af5feb3570cea6ad6837c52f13ca739653565cd1e8dabecf604246602f5d6154c6f337ea3b3b3318257117e936a57e0c8f779572f402f9bfb52006c60b4fece200cbeba9fa1d91d799a222360205c75bf70d9dc8b57d1fc8a29206a2305fcbc4e5623c696ec955381e96b8a4d11cc9a02d53a3a12a3a9d2b5d8378628c17b3bf94e571a82fdbfbc002323c1ebb3de36122730815ae83cccb7a33a155a22e96cb5ee95e04d1bbcb4f2c06c0913c6ffb1ac125217b171c490be50a2b2007a21cc00e071b86ccb57509cc40b61779d426e8a9a3b89966c24033eb47e9d704aca9cb498fc1a622a99948a6957bb5934fdcc6ba7b8e9b04880e73a5a01d0b13e39213c854fe0970303c6aa1d0ab46af03cd8568613da75f1fd5280b75515acba376c389c9d4cefe6c6b841be269f47582fdaf4a9e52bc66531fc2b74aa91f58afda2a396ff14b2dcf7e3a0df4ade306442efad418d54f58037e728fe2d9441afe79230c89c76654a702ab4137968eafbf0e5150fd48882fd41371c202f4535057558f87e09f52591de2dc7b3c9ec44e2a6d3b88ffe4cd10de6adb8c1e4737ccd92f4619d59608485e1a6c4d52d2c73f313908ef2c7b64d07ac88f605fc84ff5c92b39427986edfb5b96b7d55e5d4b9c854b1f73428567d48b3f6f433b52333ccd47122121dd0d3962566be8ec8ffc0d9a17409ec51ccab6ab5735b5ad11b83db44387c180c18cdf18408d02a45dcdbc09ff7a3f6133deb2a6efc7cc0e62efcac2049ad03e0edae202dce2188645ca0466a3cf1f1d39e0d0bcee4e582caeb231c93cbee9fe09333c3c2f4cd9322811cca95363f62566284676a881abc4be84c7ba26de5acf4e461e0ea0e6aa5501fd0e9e84cc79695bb031036672ed9797c5ec1113c54488d783c362fc38f2e9ec2b08ce53d5071d63936552dda80c8202aa142b1c7e0774a9dedab2a6048dae54494d94251643a7ae5b755826cd0e440513170b061e7b2b95da3e35b2d72628f4a95cbf79488cf61aa1288886e44b4dc0e9534034dff4e4eab533d04b31a18f4a1d71102e798539378b90f63dc09f8a42222a94557629fcc9fe7671fa834c763e4e1828df04bcf30be899182425972dc4656fd8d9fd814ae7f08437b0ac088215ecc3e1baae4e88d765ad2236b829f26d5a76be21fd4ed0b35c9a7a0584e3d3e241f20e9ff73a78890dcb4abfc4ece64d4c055ecd2bc8f43ee66882e15a52471b6d88954f9f3f8876ad65e326ac6bfbafcd9075521e965e284a1c9c877255479c1d48e9b06e63a7354dd6e325a383ac0944dad2f89d44f8688152e39cdbacaa6518fe4325e096ecc3f1d2592525e766e27f47c6b731901b0df2f288036804a4d2a4c2155c571bc3a3b5ae41a774ea1a8c54f0b23f01392c4873cf1b650220da120f13c08bcddfd9b20b83aebbc75fe8b716f69056484f2b418fd9bb527b237241816353ad44a29551aa794f015ad314b624073362118e33e107442fc00983e46950eabaf84d4006a2cc7bc396f3e76ab552ba1af3ebd02b9610d7f39e1fa4b9fe6ae49dfeb0b26bab7a07e1afbb21f58c1ff635966177fbf558260bd7c2694ab40945f4d8fc9cfcd2e18d484abd58c536d62f8d302fdd4e5358a032d53f32a1b5a4244434712bc04ef8f70aeaefaf03f9cdd68598aa5c6cea6189f62ffed5bbbdc5ee3e46feb2ab20bf080b6548a06b3f3cc3151170afe532d1f0833fcf8ae953e10ddc83309aebcb3ef6590af10fac6abec5e5eaa0dfe34767289a8aaa6ec64585235497461e9cbfbdc69cb371843384363a304e833279b89cbe29a33965b43204ab1bb6a9effd86c6e8008860bf2885688c79721860387f8fd02c263783c7be12e3708bef0798e5098fcb140b5754ddcc912f8aed222abbd6acc705487321783672e884892517a7270705c43da9e6ec190f3a0428bd7c5a21ebf264ec216043a448c53a435483e49e705a316ef03da023e21ff25a3774fd57294df4533f6ea20ab7ea3b8eb8a4b4007ad6faff319ffc3c6256317351ef2cd962fc9fdeb38145ebdc767cc312e57aa5ac39cb1ce522f7b324bb5a1ff2f1818931f955b79fbbc8b7c212a450f9168298c5273f9bcb2ab6e4666ffb298eb335e7db8ddb50389bb9a3a886545e4815311e4a4e3e0e46780b20681be1dc4e872e12915378602bf94c72896020d57ff67b9ae5e35f8a90582389cb525d46c4fde0794eeb688d0591dd578dd8c08ddc03fe1dd187a10052002cbec52281c50b501ca414f4dd34e57963e19d1ced5ac6d4364f75588e55313a486ec6c920d3b4669780e26970f7bffb784f7cac7ea6ce0f16c360fd5d47f0e7945ae7aae6b887358b28ce3053c553598e9adeda5d4260ea41791ab031dbbde4b15c15bbc61baa4eb58bf418f6afa9200ad0ca5106e3eefd5924cb12a7c1c43f914c2162d7f4cf184da0a1740c3457992c4db7fda7e70cc5d31ec18ca6ae8cc691f845023271af5c7f22db9a66624d80dedb28aae116e9ddbc2ce2c66d7a64325990393120a0bb2286bb047a3d13b9f43df95eaf1aa4776f36361e069c18cb5b261f87aad0d0baa2d87c2e25b2da73f44931565e92e832802cd6d259dc78396050934d7889a071137b16b86c220fc6978540036c68a051cb1dd340d876617869afae11dba02fd48f60e4692891f419634ee38a8d7310c13b2d7f816aca30104553f4b8fec4dedf3d9ee6ff8724d11fbefa87db6389fe516c4f1af3d24bab1a21262fba59b78f7d2cb0ee302008b50d262b24349a34eb235175cc91c846908685491a1ade89c450391f45173ffed92217d3ea116bb62c78b3a6bdfae2e2fc6207bd0e6dba47df6bfa1cfc5cb5dfe61d2ec149d28080eb26535cfa09c689980249bd31216a2e330606a72f29729510fbba2e2606b604439635c832f4df871236b1b752a4b8bf0d9608e8782f63ce2bd48412f8223c0bd9f73d4b9d935db17e052ad8bfa1417821ab68780854adaa1503f313f92991c6c1c5a231c554e66a7877d1b7fd6be538a7278fddbf36c948925ab4ec390e32b11026401a56c7b8a3225c4ced0a45d7c4380ea1b47c5af9e7dfc1fd9ce1dd897c90e2dd4b607e908786e13c6dcfaa5d28954e6e10641fc11731147e12b34ca7b48e63a36c3646ce7539ef4584f1fd657df951bad2582602bff68c0ed4c5c6997547c3770c70326477ffb0c662cb84f8143d6203dc64fe4ea83655f0a28bd8cafcb8c9bd6337bc9e818ddace8ad6f5a89c3b39dbdf5102f06632c81d2a8792384e0d305f2b7231d14469509cf64f98eebad35bd3d679b6f103eebb630f7f504c9fcbc37927a9f4d6024af2668c57fa64adab2666602737f9b00efed3f6015a826851ff67955acec2280e475d834d2a4a4281e44c6d363f920a246cb5db169c7699b0166db5ebb5d2e203fd80c473d3df036bc2febc387c7a931716957e4358d8c006c83b8896c6376221301290ea5a5739fdb46de403cc90a05e1e767c612c12fd8a505c41614c86228faac41c249efcc7890dd487c56ed8b29e9d2e291f7f70763f247f2a63c2f032d03beff39db48b685475626dfc07674587aebb4e3e2f1ee675a9b11ec04739f9b2677c105ce5904a69d58aaba357b5438ea3f5f2cf713a93bf8caf9861194990fcc8112735561bfcae364f9442a230aa7671347717ab4f1b23870281c15c99ed65f668716d39a82c0bc5e075746fc4bc1f79c3b05ee87b4fd3fe835069fdc191c248bc15276b78b56e689686bedd63d313b8758399f33e8dd8b7bc8f5205c6b440e624187fcf5b742fc8fed5e55f740eb6980078f6afdfb90a991e9c4f863df89841ff452f94d0fa6b7f3033ed34704c6614540bba8c2118ffafe62338fa3709282fd663e85664ca150a3e0b882a85188d3486fd2a67401cedc9182b5f8e020b0edb8a386ee743b874e0d8eb855daac004cdd8c1c117312c5b21c0c2dc8c8eee36c41c8af89b57a434e3ba152e915e7b1e307a3f5d04aa1ebe1d31b0e261dcff22c438e7f024ef23e57a6f07ce73d9402cfb9cd6edcedb53c01532cfd6b71a306b3ce3f00c1fcf8c8d375377701004d0335698f45a283650e5c929282202e14286edf4aaa5f774b689afddd4535a63f459df6333a75fb985f5cd9408c88021cd23b0bec51c78ae01e9ac9e36364319b56fa3e5a378cc6f1737a8e0a8cacb51cef11d1468735b5d7adf60f935c449464cf76c37f0afa20d32e9c3049b02af6c8e93c397913604cea30d4c0d2c62daf46b75ddfaed005ee014d072c019c15b0c99060e08fad0f97abbdfdc8550a7da112911a459dd9137a74a80b0797fa1ccbfdc00176ec32c28513ed0b915c49f6d2cdd0cad407da70b88e20491352b61a4c3de15d25caede59cc231c82a5072fcb146b9c50fd4857709b2e5854a4c2caceb6a98c0cff2a9b79372fc922733ec74dfca1ef168b222f1af645263e4623beba09b737af76e5e9ea7290266064cc7fe7567ff68ce0b41be09b343329484efdacfb60bc7b06a899b35c67cc3561d6bb093a984e6827c6705b83d188ec3e5f92c0207fabd82542dd10f87add181e65089f877138c4cd7340fe9b217962b1632385db1885b3816f6c28677b9b8059c37866827047194731946492a76ac9cb6f32398f3541a9f67abc6bc31fdddf58b5793559c3311686ff9ab0a27544fe68c4e6d5d2a97b10e97972623212c9c0f456a4121925e05423194f5d4150dec6ec5ebed676450ce31128d40bd59dfc32acbd45f6cd41129cdf77061e66b9fc34bdf48521c6234726895c3f9b29100f31302a20759ebb7754dec041dc95925199f54fbb563c3365fb9173bd76cf3b38d05364b50d2517f7a1eed3fa840920bd6821572e5cd689443f64e0e90b1470aea23116b2c6ed185c4951f46765171c8d0f05388dd53995c5225833d64fd80108ec53be7f979053d634dc7f6b0361ee3406404077f9e21e6f3d6f737ac5a514d1473714bd978a34f7f8e728bf25ae5d393f9912539a23b620f5de63aa42767c53f8fff1a24beeeee9274d6f371b830ab8ce782370db044ae0557efa4af83b81d64e243d1e3d12ca15a311892b7f952bd5de5bf7060090acf987f5592e1e004eacebe34f29b331fc2307c02177c420a610bc5c6e08528fd35f1b87a07080ca3696719555dea65ae7c790f42a93d6e5a9c078a0e1f6e051aed2d6180ae8a30b765b775e84bce83338d0b679488f3668c3dc6dfbb51978eb3afa4440bd2db6a715a3526f411242c862da3177bc5174296cc543650bd5697069155b73ed6dae94e03ef03ddc868a7718bc4044774edc850e4f5f001268895ed8034d2ab659eda3985ea8d2b027ce79d89b5ff18b6405f9d84e199634b1a8f836affea180ec0b8d6a929b16441b8e22721e58cc4ecf3e240f68825892c1d2cb8"}}, &(0x7f0000000200))
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0)
pipe(&(0x7f0000000040))
perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x804)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000014c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040080}, 0x40000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
write$FUSE_DIRENTPLUS(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="21807d0eb4bbe66e42633929a01d7a7fe711acda935ac2feb57f228c545c7e6787db11888340c1f68543626116459e6d990b3b8857c7be1fcb4305f711e7dfa80bb02b950952ea65cfa4f6de51a8a4d917b9e4d2d25f864a11214a09716d64"], 0x5)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

[  325.154222][T14144] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  325.162741][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.176785][T14144] FAT-fs (loop0): Filesystem has been set read-only
[  325.185008][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
22:45:23 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r0, &(0x7f0000000100)=""/164, 0x20000118)
connect$netlink(r0, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x9c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="9353310000000000000001"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040085}, 0x40000)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4)
writev(r2, &(0x7f0000000780)=[{&(0x7f00000002c0)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b3e2a5c0a730363ef31008ea4f161cf0f1d187f8e87d1294d6cbd61c70666fd430ddedf6e70257171251f503c968715e1b1511614264f9f52afed76d5d9aa638cd3503ab8f7cac090bc7705af55", 0xd8}, {&(0x7f0000000000)="96431fb16da29741590ad657dcde5ce3e5fe9f4eb306f34cf2429c62c0fdefbae36740a7fe962142171420d7f14b6cae8af86507ff78a1dda991aea5952e43e7e0146a3c035f0113d617240e8940c60cdf340002ceb3a2c52ce34a2bf285f200000013475210defa4dac9d784e0c8913ba007a5d00200000319f9400000000000000", 0x82}, {&(0x7f0000001340)="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", 0x1b9}], 0x3)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x228, 0x11, 0x0, 0x27)

[  325.198778][T14144] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  325.206927][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.217045][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.233555][T14144] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  325.267063][T14157] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  325.270689][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.314848][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.331327][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.339400][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.346292][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.355202][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.362075][    T5] usb 2-1: device descriptor read/8, error -71
[  325.369887][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.376777][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.385271][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.393192][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.401103][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.407994][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.416949][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.425079][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.432908][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.441009][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.447981][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.456876][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.464805][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.473038][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.480925][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.487888][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.496119][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.503750][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.511438][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.520396][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.527269][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.535998][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.543750][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.551777][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.559834][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.566712][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.574903][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.582779][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.590445][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.597318][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.605418][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.613102][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.620663][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.627538][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.638197][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.645757][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.653582][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.662572][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.670331][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.677270][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.685479][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.693294][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.700999][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.708314][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.716537][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.724320][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.732092][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.739810][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.746762][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.755303][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.763093][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.770836][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.777697][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.785904][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.793735][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.801503][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.808362][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.816716][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.824342][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.832141][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.839846][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.846713][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.855074][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.862850][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.870572][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.877490][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.885652][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.893396][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.901046][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.907899][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.916356][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.923978][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.931671][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.939359][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.946214][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.954561][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.962293][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.970093][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.976953][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.985075][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  325.992720][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.000545][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.007431][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.015710][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.023444][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.031113][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.037973][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.046213][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.053893][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.061501][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.069276][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.076145][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.084678][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.092415][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.100194][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.107055][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.115373][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.123018][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.130872][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.137745][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.145941][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.153615][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.161228][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.168090][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.176413][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.184234][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.191927][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.199621][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.206519][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.214805][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.222536][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.230258][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.237128][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.245682][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.253321][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.260928][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.267983][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.276246][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.283882][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.291594][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.299405][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.306257][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.314393][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.321976][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.329678][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.336549][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.344837][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.352547][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.360185][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.367111][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.375423][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.383174][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.390950][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.397845][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.406218][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.413840][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.421454][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.428321][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.436527][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.444100][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.451755][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.459350][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.466214][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.474416][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.482070][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.489642][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.496490][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.504728][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.512309][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.519877][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.526815][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.537186][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.544803][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.552414][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.560190][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.567134][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.575395][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.582958][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.590614][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.597489][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.606441][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.614272][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.621896][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.629588][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.636442][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.644919][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.652795][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.660500][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.667360][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.675908][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.683623][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.691543][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.699211][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.706070][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.714302][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.722057][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.729632][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.736485][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.744681][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.752281][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.759881][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.766744][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.775571][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.783200][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.790735][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.798034][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.806307][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.813953][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.821560][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.829437][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.836308][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.844451][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.852183][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.859808][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.866671][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.874868][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.882742][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.890343][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.897204][  T140] wacom 0003:056A:0023.0017: unknown main item tag 0x0
[  326.905516][  T140] wacom 0003:056A:0023.0017: Unknown device_type for 'HID 056a:0023'. Assuming pen.
[  326.916137][  T140] input: Wacom Intuos 12x12 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0023.0017/input/input24
[  326.929997][  T140] wacom 0003:056A:0023.0017: hidraw0: USB HID v0.00 Device [HID 056a:0023] on usb-dummy_hcd.5-1/input0
[  326.943651][  T140] usb 6-1: USB disconnect, device number 21
[  327.348399][  T140] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  327.598387][  T140] usb 6-1: Using ep0 maxpacket: 16
[  327.718457][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.729358][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.739110][  T140] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  327.748119][  T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.756796][  T140] usb 6-1: config 0 descriptor??
22:45:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r2, r2)
r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x54)
r6 = socket$inet(0x10, 0x3, 0x0)
fcntl$notify(r3, 0x402, 0x1)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000300)="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")
ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000000)=0xfa)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r7, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f00000001c0)="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")

22:45:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

22:45:26 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f00000001c0)="25bcc574769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d270146d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='journal_path=.'])
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x6c, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xa0, 0x40, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x18, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0xb4d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xf9, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xd6, 0x0, 0x6a}}]}}}]}}]}}, &(0x7f0000000240)={0xffffffffffffff0c, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x2, 0x1, 0xff, 0x9e}, 0xffffffe4, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x6, 0x1c, 0x7f}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
syz_mount_image$tmpfs(&(0x7f0000000280)='tmpfs\x00', &(0x7f00000002c0)='./file0\x00', 0xc7, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000480)="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", 0x1000, 0x6}, {&(0x7f0000000300)="931866a194532e9c51e11c0be5d64434bef0451f5ac01ae369e9f4c7e187281c0c79b2f2bfb73e4d39f631c31571c26084aad54fca13e42bedf0196056f6f518c4299de2d1d6e4b7890b429885816ce0a58c2ddfa4d4be4d9021ca74b1594fe16b66b55987748037f066313165ca946c058887d74513823d5c597b79bf3f6366898c802c8203", 0x86, 0x2}, {&(0x7f00000015c0)="9babe21d5a728c2f90062649ad513eeb31a2f451911d577da8263dea2b5e92a9af32e4c8525ade48dc5f14e7e5cf431f6ea198189ce62e860c7da58776280af699ebaf103fac4fdf81cac2207a5f24cfd2af68ab277939180a898484456c9c7878095faa985a0ba2d698c1f7683bea93f605b407dfc555884893190c1515671b62eb59add89bf1d211b47f", 0x8b, 0xff}], 0x30000c0, &(0x7f0000001540)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x74, 0x70, 0x34, 0x37, 0x6b, 0x31]}}, {@size={'size', 0x3d, [0x25, 0x39]}}], [{@euid_lt={'euid<', r1}}, {@uid_gt={'uid>', r3}}]})

22:45:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6c)

22:45:26 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x60002014})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0)
epoll_wait(r1, &(0x7f0000000040)=[{}, {}], 0x2, 0xffffae86)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r2, &(0x7f0000000100)=""/164, 0x20000118)
connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e)

22:45:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

[  327.873240][   T22] audit: type=1400 audit(1591915526.595:16): avc:  denied  { block_suspend } for  pid=14176 comm="syz-executor.1" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[  327.908408][  T140] usbhid 6-1:0.0: can't add hid device: -71
[  327.914471][  T140] usbhid: probe of 6-1:0.0 failed with error -71
22:45:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
utimensat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xfff)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
getdents(r5, &(0x7f0000000300)=""/153, 0xaa)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

[  327.925100][T14182] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

[  327.966206][  T140] usb 6-1: USB disconnect, device number 22
[  327.978150][T14182] FAT-fs (loop0): Filesystem has been set read-only
[  327.993434][T14197] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x74)

22:45:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
getsockname$netlink(r4, &(0x7f0000000000), &(0x7f00000001c0)=0xc)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

[  328.031664][T14182] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x7a)

22:45:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff21d, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c00d461d2c5b809731f66617400020401edf2ff0270fff828c7dd2301f9055e55b844398e935d76cd6b789ee6cbe7f18da515385c79124bbe4456ca9e841f6d4338f6f42ba5ab9c70c87d5580e0bd6d88f36ef57a091c2808ea9928bc31fb462f91814ac5e67b0cb25ea0a126da20f84f96031cd5509be63a816ddb2f03c78b1ae5ca4389c438ab4ead72", 0x8c, 0x10003}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x6)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}}}, 0x10)
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
r5 = socket$inet(0x10, 0x3, 0x0)
r6 = socket$inet(0x2, 0x1, 0x400)
ioctl$sock_ifreq(r6, 0x8947, &(0x7f0000000180)={'caif0\x00', @ifru_flags=0x200})
close(r5)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:27 executing program 5:
r0 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010ac054c0200000000000109022d00810000000009040001010300000009210200000122040c09058103000000000009050203000404fe7f"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000c5d0f40050500010d8390102ab761481092b5b03010902240001f0ff000009040000028aaa8f000905000000000000000905"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="1b12b4a418b044dddb985861c49994075d00b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00')
r4 = socket$inet(0x10, 0x3, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x30, 0x44, {0x44, 0x22, "2e2a21af4af0bba9e6e4f9fae739bb1c63e1793e6ce0f7234698e1b3b3f42f47f62f0d7879021a74bea77d51aaf845d6b0cbceb3d1fc08004cdd5224ee03ac538be9"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000380)={0x40, 0x18, 0x62, "7c636f19a947925cd0ad6bf7c23771ac6fe002608fefc5dfda22f79f0a43908b576467537ea4dcfe984a7bdc29e2bf73b1e8a886fa4827eeb1bc04351a945b090a35f946668ced690356d99d70a3baa4f3c9976bb85bb35f1209b393dcbf9368d918"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x7, 0xf240, 0x10001, 0x3, 0x101, 0x7, 0x79, 0x800, 0x5, 0x8, 0x4, 0x9}}, &(0x7f00000004c0)={0x20, 0x85, 0x4}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x1ff}, &(0x7f0000000580)={0x20, 0x89, 0x2}})
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000240)=0x7)
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x0, 0x70bd28, 0x0, {}, ["", ""]}, 0x14}}, 0x40)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x2000000)

22:45:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
utimensat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xfff)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
getdents(r5, &(0x7f0000000300)=""/153, 0xaa)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

[  328.408966][T14227] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  328.418000][T14227] FAT-fs (loop0): Filesystem has been set read-only
[  328.425678][T14227] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  328.436119][T14227] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  328.451002][T14233] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  328.489173][T14234] FAT-fs (loop4): bogus number of reserved sectors
[  328.496049][T14234] FAT-fs (loop4): Can't find a valid FAT filesystem
[  328.546584][T14234] FAT-fs (loop4): bogus number of reserved sectors
[  328.553217][T14234] FAT-fs (loop4): Can't find a valid FAT filesystem
[  328.578330][    T5] usb 6-1: new high-speed USB device number 23 using dummy_hcd
22:45:27 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x3, 0x0)
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x1)
write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet_mtu(r0, 0x0, 0x17, &(0x7f0000000180)=0x8, 0x4)

22:45:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x300)

22:45:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
utimensat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xfff)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
getdents(r5, &(0x7f0000000300)=""/153, 0xaa)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

22:45:27 executing program 4:
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xa040, 0x0)
dup2(r0, r1)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xdffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7ff9a7c1f6661d9b350e500000013", 0x10, 0x3}], 0x0, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, 0x1, 0x5, [@private=0xa010101, @loopback, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x24)
fchdir(r2)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000000))
r6 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000200)={0x9d, 0x4, &(0x7f0000000300)="2ff13461c9981adb4793ba80bdf5be550b83c583754bc11e75026a8e1197e35db13b573503d6b0a235423e3310f2132a1757f03ef5b486fc4d17ed29125bd4e2709b255aafe74b84289c59966597252353d603e3d04eedb57093876b5d14240c811083fc8aae82d064b74e8f328afcaed99f696fd4d760ea409c6b53b59943972c78dda4c7e976a64d4306f8acc3af37cee0c22e14018e6bc833f0222849ec785b51520aac494fd968ca75ef6cb6980cd8de804ff963cde0cc802a1a029626be77b6c123a68f314f83bd49b5846d0b30336b37a14ab44abe329d3411deb7c97beb9cdd74e26dbb48f7fd9515c14aa4cf31fcb45fda7b8617c279467969b96615ad0af85543f3e622ac7cac3ef4c7655255cb235402b62d24ece9c641986b89ecc9e59d025ef465ac1e18a064809eb29f4bf105ed43d72fa3e79a024fb2abdd7179ebdee91740243f93b10b2cbd0881749d1b11ef067888ba0db54f95fa987d9bb61d248dfa162e118762916d20bb509c624413f956469cbd4f594a0dbf0d653ec4fdadfa62239f5c24dd7c338e15042020a6d684f5e5baea129814a116ee03eb24802f092b68aa8cc7c41ed3a72c474e547f4d3420e1012c548077fff6249e458e2a3e309442f02f9516b2abb6a157fba14f6234abab0ed91ccb25ae1290e7c0541e0659b60dc2d54c6941a897e3dec5def4629981e415ecd6e84897b36fa26f6effa8fb8a54386661dc9e17c239d4abee1c34101ef24d392444e97344f457c58a1a67bcd6bfd2f687082ec3b702930e999eeb4e08291d530f1699e05331baea20a5072a54e003d6706c4771dd0e71679d42643d0ecffa66c297132a687873b166d27dda882153d04ec8350c8ab9ed881e7ca099d9bb34a313f1f0a305041801d8ba7a17cf07e9d1008d8d5affd2377c96b43ba2afe820ec7411068e8f62f774bc4500866c416ae3866b2f7a393c1256c228640058191d1b204f307be8cb39c85ed77cd8e3a2b166e4a30faa89f3d378e4f89a1308f42c30cc00696845f93984747ff3291e22525c1c23c3d271c1c7b6a1164d1a5b45798a093c8c69f1835c3a1630fe0fe2d0be7eb74cd7b44e4b7b7b4eee4fa25f573404e78bf7a1ade8f74b62b03fdba04f41d1f76efa6ee050248b31c2bcb271207d0594bc1a0d7a817e7faa7712cebcc4721550a42c5b2bf701ebe6d505e2a5dbf8c550b6e5b12a44231e719698a830f5f2a6e26fd608f1cdcac87c89267f91b64640b91409ce7814a5b76dbb7fff8e3e6853bcb3567141b8a364f2dda8bdeeffabd06b02dc4005dd44b168759e53e3d328b49e7f3dc49710d7948fcd3506fef4fc7798d5002a12b6d7c974e6b55e17872aa57db1bc513739689c0d72d1d21e7f6000bf2eb0ceb7ef32977592f2fc37a751510d4834f87d491a592a4b03e90fd90c64f431c5d9c175acec"})
getdents(0xffffffffffffffff, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:27 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
exit(0x1f10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast1}})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0)

[  328.726119][T14251] FAT-fs (loop4): bogus number of FAT structure
[  328.755535][T14252] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

22:45:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
utimensat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0xfff)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
getdents(r5, &(0x7f0000000300)=""/153, 0xaa)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

[  328.786111][T14251] FAT-fs (loop4): Can't find a valid FAT filesystem
[  328.801807][T14252] FAT-fs (loop0): Filesystem has been set read-only
[  328.811384][T14264] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  328.846631][T14252] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  328.859482][    T5] usb 6-1: device descriptor read/64, error 18
22:45:27 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x40c02, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setparam(r0, &(0x7f0000000240)=0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r2)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0))
write$cgroup_type(r3, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
recvmsg(r2, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff000}], 0x1}, 0x3f00)

[  328.886827][T14265] FAT-fs (loop4): bogus number of FAT structure
[  328.893297][T14270] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  328.933793][T14265] FAT-fs (loop4): Can't find a valid FAT filesystem
[  329.258308][    T5] usb 6-1: device descriptor read/64, error 18
[  329.528309][    T5] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  329.808367][    T5] usb 6-1: device descriptor read/64, error 18
[  330.198304][    T5] usb 6-1: device descriptor read/64, error 18
[  330.318377][    T5] usb usb6-port1: attempt power cycle
[  331.028266][    T5] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  331.118321][    T5] usb 6-1: Invalid ep0 maxpacket: 0
22:45:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

22:45:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x500)

22:45:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ftruncate(r2, 0xd8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xb0, 0x3, 0x18, "aa8f9fd8440e4a8ff21fd5caa7565fe1", "47756589263cffb2d7f224b068373c4515537d46133dadf77158ed535caf512f1dd7e45fbbff10297d026729903575f66f4c7b9aecd592c60202f9ef891e60097d114b2e1158a03deb928c4549a06e61e0c421314b17a4a65aed3b17aa3fb42229edd0339e422c48bfa0e528e4acb0eafbd99978408ca22ce9d7363db015d7232f0f4749cea7f9b007d66831a6e962740c51a9191845f06733626c"}, 0xb0, 0xd440babd050517f8)
r5 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xfffffffffffffe6a)

22:45:30 executing program 1:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb1d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, 0x0, 0x0, 0x0)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
clone3(&(0x7f0000000380)={0x865788c6b3eb5ce9, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x9}, &(0x7f00000001c0)=""/185, 0xb9, &(0x7f0000000280)=""/150, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, r0], 0x5, {r1}}, 0x58)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000640)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000040)=0xd1, 0x4)
recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x80000020}}], 0x3df, 0x86, 0x0)

22:45:30 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x24, 0x2}, 0x20)
syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="120100001f000000390102030109022400010000000009040000028aaa8f0009050000000000000009050000000000000000000000000a657130b597228d4af9290a20a73db3528a02eb35616b7eb29d0ace6f300a06beb8e2b71e"], 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000500)={0x7, 0x80, [0xff81, 0x1f, 0x2, 0x5, 0x8001], 0x8})
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000006000000000000b8be387c3d81dd0ce5b57efbf0f1e4c7008500000080000000c80a17b417a4684235623f6e5e509c5cd6c55d6b7c2f820cb0d0461103aff5c0ada9f417029eabf4c64979e9c708a243d8874d8df6db5afaf77c7588ff38fc131356c3bb7bc710c32f516dd122330404554a3943dbffb570f07a2b3ee07cff67892bb3c9731978f5126500000000000000001a491b590d06a9536094fc048c632b77f94c67329e41ab2ba1dca5266ccbab0b54640bace3511467c68b1fb83972ce62ce7508807aba50e324ab4906d121dd4ea6b6d842bac4e7139ad9f6c59d9ad03b4efec53024b28ca849fce6e81c15d351dfc56cda7eb2da525a4061e7f0afc073007a0521fc92acd82758a3549ac8e8c42e5ab38e6663fc90ae15"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x4f, &(0x7f0000000200)=""/79, 0x40f00, 0xb, [], r2, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x5, 0x6, 0x9}, 0x10, 0xffffffffffffffff, r3}, 0x78)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
eventfd(0x5)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x6, r3, &(0x7f0000000100)="9fcf9f57a112fe2f55e13199c430aab004acc5e37e0846b11c7436ab1eb41ff0754c5ba6f3519e760c2330d8d387ce50a5cc831b206ae961236ce1ed8e9a9ff49ed400b9c2bcb788", 0x48, 0x8001, 0x0, 0x2, r4}, &(0x7f0000000240))
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180))
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000})
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000000)
sendmsg$IPVS_CMD_SET_SERVICE(r1, 0x0, 0x20040000)

[  331.268304][    T5] usb 6-1: new high-speed USB device number 26 using dummy_hcd
22:45:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57e, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="cd61700cabf48b47d622d716f223f055488d3463c33f62f2edb836287cf7a92b41708932d23aef199aa3853c75fceede06c935846b27a193", 0x38, 0x7b}, {&(0x7f00000001c0)="a04d03573c12b744b7d9a4b23e8aefeeb062cfe15a9a74d7a8b7cdede26aa58479437d878b7bbbf9cdbe35454306239c50fb864cc399ebf650ce16c8da015dcfa3fdbc9985023288", 0xfffffffffffffe8b, 0xf6}, {&(0x7f0000000300)="06327c241356087f7e36948cbdce7a1c91dff4e2ba2548bd1a9ae04023d7446e5c13672be45139c4c379eed32b777206b91d82913f44b0030fe150150136f471ef6ec900576c55acaf9cc9a345c0a0d8380f73f2ef653955affeee63d74aae16b20d8c7e1cd94c633cf3360a3e034b583dc507defb26bfdd838d0da12edcb31828b023dab10642e7fa9012e5ddd31c8e3624e5b917efbbd55f919bf40003c9643d30b4d15d8df94c3288d66a5ebe9616dac6f297e08aa9ac6574bca2255dc6c9", 0xc0, 0x959}], 0x2800000, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x2a, 0x4, 0x0, {0x0, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

[  331.348155][T14298] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  331.378278][    T5] usb 6-1: device descriptor read/8, error -71
[  331.411741][T14298] FAT-fs (loop0): Filesystem has been set read-only
[  331.455879][T14308] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  331.478885][T14298] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:30 executing program 2 (fault-call:12 fault-nth:0):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  331.506739][T14317] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x600)

[  331.554263][T14319] FAULT_INJECTION: forcing a failure.
[  331.554263][T14319] name failslab, interval 1, probability 0, space 0, times 0
22:45:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
eventfd(0x5)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x6, r3, &(0x7f0000000100)="9fcf9f57a112fe2f55e13199c430aab004acc5e37e0846b11c7436ab1eb41ff0754c5ba6f3519e760c2330d8d387ce50a5cc831b206ae961236ce1ed8e9a9ff49ed400b9c2bcb788", 0x48, 0x8001, 0x0, 0x2, r4}, &(0x7f0000000240))
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000180))
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000040)=r0)
pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0xffff0000}], 0x1, 0xffff)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80008000})
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000000)
sendmsg$IPVS_CMD_SET_SERVICE(r1, 0x0, 0x20040000)

22:45:30 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  331.600417][T14319] CPU: 0 PID: 14319 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  331.610769][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  331.620835][T14319] Call Trace:
[  331.624209][T14319]  dump_stack+0x14a/0x1ce
[  331.628530][T14319]  ? devkmsg_release+0x11c/0x11c
[  331.633464][T14319]  ? xas_find_marked+0x8ec/0xa10
[  331.638374][T14319]  ? show_regs_print_info+0x12/0x12
[  331.643544][T14319]  ? xas_set_mark+0x18e/0x1e0
[  331.648199][T14319]  should_fail+0x6fb/0x860
[  331.652590][T14319]  ? setup_fault_attr+0x3d0/0x3d0
[  331.657616][T14319]  ? page_writeback_cpu_online+0x2f0/0x2f0
[  331.663393][T14319]  ? ext4_init_io_end+0x25/0xf0
[  331.668217][T14319]  should_failslab+0x5/0x20
[  331.672719][T14319]  kmem_cache_alloc+0x36/0x260
[  331.677472][T14319]  ext4_init_io_end+0x25/0xf0
[  331.682135][T14319]  ext4_writepages+0x158e/0x3f30
[  331.687123][T14319]  ? __getblk_gfp+0x3a/0x750
[  331.691716][T14319]  ? __rcu_read_lock+0x50/0x50
[  331.696486][T14319]  ? ext4_readpage+0x2b0/0x2b0
[  331.701239][T14319]  ? ext4_get_inode_loc+0x60/0x60
[  331.706244][T14319]  ? avc_has_perm+0xd5/0x280
[  331.710808][T14319]  ? avc_has_perm+0x176/0x280
[  331.715457][T14319]  ? ext4_xattr_ibody_get+0x629/0xb20
[  331.720813][T14319]  ? __up_read+0x6f/0x1b0
[  331.725138][T14319]  ? ext4_attr_store+0x840/0x840
[  331.730047][T14319]  ? ext4_readpage+0x2b0/0x2b0
[  331.734787][T14319]  do_writepages+0x13a/0x280
[  331.739350][T14319]  ? __writepage+0xc0/0xc0
[  331.743742][T14319]  ? ext4_xattr_get+0x5a9/0x810
[  331.748577][T14319]  ? memset+0x1f/0x40
[  331.752564][T14319]  filemap_write_and_wait_range+0x3b2/0x460
[  331.758473][T14319]  ? filemap_write_and_wait+0x420/0x420
[  331.763999][T14319]  ? ktime_get_coarse_real_ts64+0xd9/0xf0
[  331.769697][T14319]  generic_file_direct_write+0x18b/0x6d0
[  331.775325][T14319]  ? pagecache_write_end+0xa0/0xa0
[  331.780420][T14319]  ? file_update_time+0x2fd/0x3f0
[  331.785424][T14319]  ? file_remove_privs+0x640/0x640
[  331.790510][T14319]  ? _kstrtoull+0x38d/0x490
[  331.794986][T14319]  ? down_write_trylock+0xd8/0x150
[  331.800086][T14319]  __generic_file_write_iter+0x25f/0x440
[  331.805711][T14319]  ext4_file_write_iter+0x8d9/0x1070
[  331.811024][T14319]  ? perf_trace_ext4_da_reserve_space+0x4fa/0x540
[  331.817420][T14319]  ? ext4_file_read_iter+0x140/0x140
[  331.822695][T14319]  ? proc_fail_nth_write+0x18f/0x250
[  331.827982][T14319]  ? proc_fail_nth_read+0x1d0/0x1d0
[  331.833185][T14319]  ? iov_iter_init+0x83/0x160
[  331.837857][T14319]  __vfs_write+0x59d/0x720
[  331.842254][T14319]  ? __kernel_write+0x340/0x340
[  331.847104][T14319]  ? avc_policy_seqno+0x17/0x70
[  331.851931][T14319]  ? security_file_permission+0x128/0x300
[  331.857626][T14319]  vfs_write+0x217/0x4f0
[  331.861851][T14319]  ksys_write+0x18c/0x2c0
[  331.866170][T14319]  ? file_open_root+0x450/0x450
[  331.870993][T14319]  ? __ia32_sys_read+0x80/0x80
[  331.877043][T14319]  do_syscall_64+0xcb/0x150
[  331.881536][T14319]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  331.887422][T14319] RIP: 0033:0x45ca69
[  331.891299][T14319] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  331.910894][T14319] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  331.919301][T14319] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  331.927264][T14319] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000003
[  331.935251][T14319] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  331.943198][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
22:45:30 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:30 executing program 2 (fault-call:12 fault-nth:1):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  331.951144][T14319] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
[  331.959855][    T5] usb 6-1: device descriptor read/8, error -71
[  331.974538][T14314] FAT-fs (loop4): invalid media value (0x9a)
[  331.980707][T14314] FAT-fs (loop4): Can't find a valid FAT filesystem
[  332.053550][T14330] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  332.069981][T14314] FAT-fs (loop4): invalid media value (0x9a)
[  332.085297][T14314] FAT-fs (loop4): Can't find a valid FAT filesystem
[  332.088314][    T5] usb usb6-port1: unable to enumerate USB device
22:45:30 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:30 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  332.102874][T14330] FAT-fs (loop0): Filesystem has been set read-only
[  332.121254][T14342] FAULT_INJECTION: forcing a failure.
[  332.121254][T14342] name failslab, interval 1, probability 0, space 0, times 0
[  332.133928][T14346] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  332.165948][T14330] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  332.190465][T14358] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  332.201611][T14342] CPU: 0 PID: 14342 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  332.211774][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  332.221836][T14342] Call Trace:
[  332.225127][T14342]  dump_stack+0x14a/0x1ce
[  332.229470][T14342]  ? devkmsg_release+0x11c/0x11c
[  332.234408][T14342]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  332.240470][T14342]  ? show_regs_print_info+0x12/0x12
[  332.245669][T14342]  should_fail+0x6fb/0x860
[  332.250115][T14342]  ? setup_fault_attr+0x3d0/0x3d0
[  332.255403][T14342]  ? mempool_alloc_slab+0x16/0x30
[  332.260429][T14342]  ? mempool_free+0x380/0x380
[  332.265108][T14342]  should_failslab+0x5/0x20
[  332.269630][T14342]  kmem_cache_alloc+0x36/0x260
[  332.274389][T14342]  ? mempool_free+0x380/0x380
[  332.279063][T14342]  mempool_alloc_slab+0x16/0x30
[  332.283913][T14342]  mempool_alloc+0x116/0x690
[  332.288503][T14342]  ? mempool_alloc+0x123/0x690
[  332.293264][T14342]  ? mempool_resize+0x910/0x910
[  332.298372][T14342]  ? mempool_resize+0x910/0x910
[  332.303260][T14342]  ? _raw_spin_unlock+0x5/0x20
[  332.308023][T14342]  ? page_vma_mapped_walk+0x1d5/0x700
[  332.313785][T14342]  bvec_alloc+0x149/0x190
[  332.318118][T14342]  bio_alloc_bioset+0x3dc/0x690
[  332.322975][T14342]  ? bio_chain_endio+0xf0/0xf0
[  332.327743][T14342]  ? bdev_write_page+0xd3/0x1d0
[  332.332591][T14342]  __mpage_writepage+0x1004/0x1890
[  332.337702][T14342]  ? __rcu_read_lock+0x50/0x50
[  332.342462][T14342]  ? mpage_writepages+0x2f0/0x2f0
[  332.347485][T14342]  ? percpu_counter_add_batch+0x12d/0x150
[  332.353293][T14342]  ? wait_on_page_writeback+0x200/0x200
[  332.358841][T14342]  ? stack_trace_save+0x123/0x1f0
[  332.363864][T14342]  ? __rcu_read_lock+0x50/0x50
[  332.368629][T14342]  write_cache_pages+0x912/0xdc0
[  332.373657][T14342]  ? mpage_writepages+0x2f0/0x2f0
[  332.378689][T14342]  ? tag_pages_for_writeback+0x580/0x580
[  332.384322][T14342]  ? avc_has_perm_noaudit+0x400/0x400
[  332.389701][T14342]  mpage_writepages+0x155/0x2f0
[  332.394552][T14342]  ? fat_block_truncate_page+0x50/0x50
[  332.400008][T14342]  ? clean_buffers+0x230/0x230
[  332.404781][T14342]  ? arch_stack_walk+0xb8/0x120
[  332.409761][T14342]  ? fat_block_truncate_page+0x50/0x50
[  332.415226][T14342]  ? unwind_get_return_address_ptr+0x130/0x130
[  332.421380][T14342]  ? memset+0x1f/0x40
[  332.425534][T14342]  ? fat_readpage+0x20/0x20
[  332.430037][T14342]  do_writepages+0x13a/0x280
[  332.434633][T14342]  ? __writepage+0xc0/0xc0
[  332.439143][T14342]  ? __rcu_read_lock+0x50/0x50
[  332.443915][T14342]  ? unwind_get_return_address_ptr+0x130/0x130
[  332.450078][T14342]  filemap_write_and_wait_range+0x3b2/0x460
[  332.456072][T14342]  ? filemap_write_and_wait+0x420/0x420
[  332.461621][T14342]  ? unwind_get_return_address+0x48/0x90
[  332.467259][T14342]  ? timespec64_trunc+0x67/0xa0
[  332.472116][T14342]  ? fat_truncate_time+0x402/0x520
[  332.477231][T14342]  generic_file_direct_write+0x18b/0x6d0
[  332.482872][T14342]  ? pagecache_write_end+0xa0/0xa0
[  332.487982][T14342]  ? file_update_time+0x398/0x3f0
[  332.493007][T14342]  ? file_remove_privs+0x640/0x640
[  332.498117][T14342]  ? __kasan_slab_free+0x1f2/0x230
[  332.503230][T14342]  ? down_write+0xd8/0x150
[  332.507650][T14342]  __generic_file_write_iter+0x25f/0x440
[  332.513312][T14342]  ? get_pid_task+0x86/0x90
[  332.517815][T14342]  generic_file_write_iter+0x4a6/0x650
[  332.523281][T14342]  __vfs_write+0x59d/0x720
[  332.527706][T14342]  ? __kernel_write+0x340/0x340
[  332.532558][T14342]  ? avc_policy_seqno+0x17/0x70
[  332.537409][T14342]  ? security_file_permission+0x128/0x300
[  332.543128][T14342]  vfs_write+0x217/0x4f0
[  332.547370][T14342]  ksys_write+0x18c/0x2c0
[  332.551694][T14342]  ? file_open_root+0x450/0x450
[  332.556545][T14342]  ? __ia32_sys_read+0x80/0x80
[  332.561341][T14342]  do_syscall_64+0xcb/0x150
[  332.565842][T14342]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  332.571726][T14342] RIP: 0033:0x45ca69
[  332.575611][T14342] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  332.597228][T14342] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  332.605630][T14342] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  332.613594][T14342] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  332.621647][T14342] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  332.629699][T14342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  332.637662][T14342] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
[  332.908211][    T5] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  333.148197][    T5] usb 6-1: Using ep0 maxpacket: 16
[  333.268287][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.279220][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.292852][    T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  333.302466][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.311412][    T5] usb 6-1: config 0 descriptor??
[  333.549642][T14301] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  333.782033][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.788947][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.795896][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.804625][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.812302][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.820148][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.827003][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.835099][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.842838][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.850552][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.857416][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.865568][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.873318][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.880895][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.889532][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.896397][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.903433][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.910415][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.917810][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.924699][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.931644][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.938651][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.945514][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.952402][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.959425][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.966297][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.973197][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.980156][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.987067][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  333.995201][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.002786][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.010395][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.017255][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.025509][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.033089][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.040738][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.047586][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.055775][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.062762][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.069679][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.076527][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.083518][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.090453][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.097305][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.104198][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.111082][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.118154][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.125063][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.131965][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.138852][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.145704][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.152577][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.159471][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.166313][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.173275][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.180278][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.187123][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.194009][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.200915][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.207758][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.214639][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.221528][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.228945][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.235816][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.243142][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.250089][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.256985][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.263866][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.270774][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.277613][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.284482][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.291365][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.298249][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.305125][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.312014][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.318904][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.325742][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.332690][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.339593][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.346438][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.353338][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.360759][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.367600][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.374556][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.381463][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.388338][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.395188][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.402062][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.408991][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.415846][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.423506][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.430416][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.437253][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.444121][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.451013][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.458146][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.464999][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.471976][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.478993][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.485932][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.492810][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.499693][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.506534][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.513529][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.520412][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.527262][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.534137][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.541038][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.547878][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.554751][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.561659][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.568540][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.575396][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.582304][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.589215][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.596057][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.603114][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.610799][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.618479][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.626288][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.633321][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.640228][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.647068][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.653954][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.661466][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.668360][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.675263][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.682177][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.689076][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.695924][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.702862][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.709777][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.716637][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.723540][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.730438][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.737290][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.744176][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.751078][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.757935][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.764813][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.771729][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.778630][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.785925][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.792807][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.799713][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.806613][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.813766][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.820670][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.827515][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.834689][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.841619][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.848545][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.855503][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.862442][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.869344][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.876797][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.883689][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.890584][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.897443][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.904376][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.911360][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.918243][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.925116][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.932025][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.939520][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.946368][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.953272][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.960977][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.967927][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.974817][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.981718][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
22:45:33 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="62f3796309c26d9f8805264d7e57ce64ee2ffb62640863b4e00bfeb0fb8cc3540cf6e606df92d601a85be71be1822a7631d61c952f59247a142f97e7a0b35d5c6f60c7728d6132258370e4abc13cfffe96c886d50ea0a791743cd81c45442007fd8a08f2e31c82e0774aa2b5cf18fb251f278d1e10820855a325e53f430b7c410b8de4d0424500da3c58ec0868ea6eb3d7a8ae775092b7f5e5206e8825df4389fc41d9b2559b097418b1acc938a1d57a685c6811fde93d2d9ecc2af6e454c179f54ab6a58a59078a9613f2360aff06b3a57a0f5a79770d5b92c434b6e81af191a663969821b93754a10a91d1c817de89cab325d87a151305", @ANYRES64=r2, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:33 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6c0)

22:45:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x12825, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={<r7=>0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
getresuid(&(0x7f0000004e80)=<r10=>0x0, &(0x7f0000004ec0), &(0x7f0000004f00))
r11 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r12=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r12)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005180)=[{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="6deb3dde2a5ea7e784df25cf923c03fa0bfc3ad3dc1cf03c97962f90468776cd7955229bcf9b89a6cf084649a24fe19262e44df071bf885c5c814b902e3ea24dfb46c5604bf07ea703e607e794ba3562959695942681d51d77c9e652f65b161a5f122c7af912ec934baff368ae1f751baae8a537d1a0bb22ba2fb2f61c2f6e41fb24f740bf4871a4bb7c6e5cbe3cd3ce6c4af6e917f19986cbf1cfbfdd4b882dd9fb7171dfc4798c52ff6ba845c0a9", 0xaf}, {&(0x7f0000000740)="29f714b794698190122bcca331cde6d5f4d4a6141b07234c2488d1d4d245b8bd9afd3e52de77a5c69aa30e0ce40862af25ae131d2142261b88220243f4e42b306948649f66135b928903904a00b4d2ab21a41e50c02b62985b4e3d76a0edbb8bf699445f84a4e02a96c26c08c85077929fe53eda59183d6de8cdd0d20128521f522c9ee031f792e4c34aa79c8b881f2169adb9468f6cd168b58c36b0bffcf829c229006a8034dec5cb68a98dc891f9013e32c912fb4a75b0595d7ccb9dd25d898d9c5b78aba503c8d75ae448fa5605201712c81c2f9bbdb1176411abb97991ab648b9d885b6d204e0fd1fec55f832b2c820328bf9490617d9aa829a3ac8dcb72abe941561cf0794098d85b9b72ead8f59c7375b6333c5324a230ae8ce3c7c3acedf5f0958bb58eadc1569b21c0d0a190fed0bfc448ef57336aee146d0d2f847985b306fdeb448fa82c879b00dbe8f21bf2570e00e5d529c7eb4e3ec47a9a0aaa9429b9d75bf1fb620059c2653733653d6d90f947ee7f88cb46c1d0e854b3d3cafc563f26541bed52b9563694db2dad649f77cf434aa4cddc4c8754d7e82618b2f74bfce6df89c56e656892465f2ce73608ed88a751051303945ea5ac88d38d34d51a4fb94f92e1a541a0e5f39916277f255c38e51f7aad49127aa9c6da5c3a531188d250798b1c094245a3b3f9b4bf570baf7b1b305f542835a48b3428f519c1c1a985fddc0c5a47cf900440bd0ca0f7eda4fc2dea67a06da846f7d0b71dd37e2c6d1430d8ed6b061abe601dcedeecbaedad3e61394631fd0a7f926eef2c1a977916c2584a14e026f247399c9be62bf6eb65787f893e44fb50714844a3b6d51b13070fa26967653cf3b8f17092616ffe7e3b3dd5de7f3e20ebd12e95abeff0003aace2d7bf9446226e54ceb5f0b762f9790f7461697a367674bb9a2a78065e16ad03173556a63756dfdcd1558bbad23956169cbd12422120bda3de32331bb7ddcf4c4c0c4b322fa9c601676dfd00652d1914f4a8d28cffc9731272e61beb3679acc43d69dcb15f7194b916354ef97da400cbce61bc4af4d29578f662b0f2de82800c1afc4f0e241f91de3154c621f758f38abb804852bcb3a54c5ca2121a952e93491da7d2ed3077c78d8ff126bd3eea91f58a43cc969e836a2c6919965f8951458a369acf5a9541ce0845f1f21b599d9ba1d656e9ab917acf1beae62a6659d6df2cbb9470037eddd3ac0dba2f7cac728f88bd42dfbd8b086ca144d438550e5df46ed0c98a6d2c007686f3ef654d7fefd0f9702bc716c7b01083c2dce57430e7ad7f0d60a5f82263fe0fbb75126a22506ebb03fd0b806e23a41ea14cef956467630feef7af0ea4227a800916669959256ec9943b8cd4fd756b97e9bb21d0ca6284593a48c4c0deb91faaa64e14c950d6f17b07880eaa8eabf8e990ff5b66ac75effdb2aeea82b95a3b27bf568f9728e66f08b46b016312b97e378bb9275355cc7242440a1229f8fe548a40f5b93a9abb8acc2e3d21803742f27153694e61104f73634503cfe99fe0c90edf63ce56b79500c1a666f92383cae55a3d6de70cdc1a47209fb36344f3610bd35ca7f2ca5d477bdb5aa5fc10702723ca7cc4d802fbd8dfa3b9962f4ac3a6c6cdbf12b22510fc0a32d00a10bc6a368008f4e21b80e5f9059352bb3fa73dbaf749205ec2106b1c4c25ff969ee9f373d546545f2ce88636587d5e6d6471bc61db968f34ae5f93e3a2a1e4cd76ee2e8ff3a915b505569993d151a153cfd2f66cca394cda7383ca4371f8baa4c2fb365374bad51f5472e0fdd909b05d2e45006e88ca3e1bba2ea0028c8bbac4f00ca276fd1a5af3714675f733bc15009e310cd9bae5a589b98d806fe066eb179712f26b10c7715ce0f0b44680c8350bef80f1ccfb09a6a263cc05111b42c4024ec4bc3459bf709055acd837a21abdf5751d4315a917ae038fde64d0a502a1e80620f798ae67766fc288f8f19099822d932c8837b4b3bba38216ed8cce6ae7862ccece2ed230e656723c76568740cc9f64a5fd393fc5fae7fe741e819bdcea3c66d1220cd6e2304ac41ce64a4808ba6f9a1dc6c61fe20184dcd85a15be16bf3d2af0792903206ac78abdbd8752726a6f3aa3eea515e6987b0285466a8d427d6869968306f08c15314fa36b77c37f595f9de55e34632f30e88977c34eb9dd06bcde9c69a58c2a172eb01f9504117b8369d3952e1df70730c18cca6ce4c0c7f7a1d49ba77870a3a1c65984ef04c81bafb0d775cb1216b715852531c6a6c1875044b57d2ceab58c0802080f42f50ecdf0ae84081ef85c1815ff287d9348405686bf5988d7c14c35d0d657e5aad613ea0db311fe1e4b23ee5c2fa95c4383bebfd6a4adcb6f7aa9081c0a05926560ef136db66fcbaf973cb293b5ac29d177172da7c5c3e86fe2937d33e1f3da8f65a23b8f4d805a322de03289221522636226a3aeb6800a45ea919ba7d987d7b13ab878acef88ee9740f6c2321ced9ab9c8ba237c7a2ba4da6fad0ac9b4fbe87f4cfee0febd0fa7517a5010ebd841babfb89cc215f8499158347bb78e5cd00fad1bcb184b6b2d9afe443b1b5ec58e440237a5f648fa58012422c70cbc3618265e3e36611ac674ca0871b1bd7e144a24c861fd83bf72ab0ec93fccebd669f7052ea0b072e57f89b6ebb5b4f3a7c230a911ce81c992e1ba277f1c12b70b86469e75c604555624f0656291a7f1be8a63d8558a3dff01a4c5036a2f12944a3d1f5ea3c34cf3cac5249e976a844faa80d60aa481a2b316bc7b2c000856ad42e86284607492d5231de306fd19f94280c3c057ab35674323956d78f2e09556a14caa0e14f3fba8d042e30842fa9d4c3f29ef74637fa49ffed8bd571c6970dd18a55963f0400886c2e11f28dd1a34a8f1c72919691a28e81c658e32b3275c815bb0f5280408c15632b016105877167d3b6a342b256c318a56755ca6c40164a6e3e9834bcb55aa0f65839d47a63a096087bfbb5e91ec81b4ca845df7d1f8fec7efcdb8b59b8be057e35d570a432c6ffcd360e1bb53e87db72ec41bf25b78e0cc2158e2c6ad234904336577e845762443789851b382368efbf72ac097ded23549b7180f52dd1da6ecafd91a901680e628196f6ee504654b9c387f4351884cf68c51b38f1800b34e93629bc499245c216cad6a66f5cca1ca18947ca5bac8494eca18d8a86a2ebe1f75f634938cc316cef1864ba9ee92d2b3d14c7e0d5283eb02ba5644bc55d4539311566ea46dee591b0393c5ce2bdb086db04c86c98f0b7197688ae5a2b97e0b55b7369cbfc1609459e6a370d3588a2aab6f0db2bb5bfbe913be56c242e665dde5dd79df63f3e6bbc497c2d1833c138578278a902778b65445d21482a73baa8fcc7f71da2cae722208e9a03187786e384ef64f2ceeaf3fbee3fe59a3708fd61f00c8235c5e1a3797943f92af9ce4fe531a92ff8b669c0a0c82e07a90beaff1b997a9c26bf5c8098f90b35e013cd7b3daa1655e5be7e3cfe36bbc9211759d85b5d7311bc1362e073d3f9e4f825da1e7817ce0751cc343b537142df2f408dbbcd1f6213d84e2074c703a0d557cb0fdf56bbd2019bb38febbd6aa192ea5a94cb2dec67d97711da4bc073bad3a2d4f61d67706a9ced19ba57545065eecf5492f9f6ddd90cd308cc7a805b4182b4a3d4deee64e794da314b2a1f5ebfb334d7fe74c85d37cb1f0bbfd55983652e74637a565097de4b63736805d5799dd3c1b34747c1c0c3b08a9b90592ebfd379a3e9c1055d377e9e4000ce0d5cfa3639995598c812f8f80a6653c4626553b1f698ece95fb07a9563e7f02231c9c3d772815fb6739a8637f159cd20dd6136c0aa036ef4f9b736e612e1f63c7c108577f8017b7d762943184c2b5662a0f3ee03e1d73ccc985036c06f537b492a6e70961f631490bc43186af45ec0508b9d97b8cc544a78b114bcded4cfd1cc0da81b9f22564ce8d1b9b586df9334c4f7ea2ffc3889d8aaeb1fd7bfffddac2a6f1b3948c60c9454f14250a6845926bbf0197b1b4c852ea16d06986720d73eb5510f7d0cdf0d4b56b0c0d5b44aee12fd8c870e77146dc3b12baff571ffbbf423ee957538c97a49c0cf8f81bd4535aa424d9785b2ca20a46107deacd59c1d239c5772a53881c3cf71a1cab8bad86a3c16c742fb647d46dede4b72d9e9c3261c0382f391392e2ab743472e0e52336a273e9dee0330049ab510fedb2d0ed103d1488621ce6808d487199df68f2df3b5aced6e9c9f1f7b0078f250fb08a81b0b164a5e9f33c39e28d02a3e886cb8f625451ec293b269b119216475edfc3853bac8810143cbaf51d84f39945a9f48f5941c626506b3518f3613c8268bc01b7c8e1171b32ea5f91d5fe3a1063882f97c03309cae33151e30fbd6b2cd19005808508d521f616c4a4a8d12ea7e8c78ac3f6ef7b37c54b042549a0d2abd7c92e7500e7dfebaf72891616f028edf0817dee911864ff4624058dbae6057383ffa2e9a6eeff1a6ae0d74721ec3ae57d5a7b9a894e9ae2ca2b427fd35a8ae5016a24d8519a566262602ae99454553a6a8aa9508cee5f16d0658cfbd81a51da3ef0c59b5b6c22d04077be6f1c7e20ce2bfaedd896ca43a7735f5380bf2959c66d5651d6e0483aa3a68d2d8b8d0a9310549e3130e6edf78bfb2413a5c7b122feaa91dd0a0e65776d8867b34eb00dfa50f0c15fd9220db95f2481465b2b0cd48e0cb30b22afbd08872ea7eab52faa399e169941c46c2e0b265a12287c04a2c7c013d08f25ce75c5b0b1ed93481558c8305e57404b6c8b108ffb72a289e84f5c3ff2b5b5d6c113af56b97f3d2a8a182ded462f3628a94c365e8dae3612b3a19ed9eb6c807ac854be55b3dab16557ff3619988e68e87c11ad01b11b959f9a0c030a4f03cd880e75a3aad99af9325388c596f35dafd3b981731ed349d270c5d0661039c1aaa40fcf2c486e24f223a075264ad259c418f6ff91fc499ba4607a638e9db8f853afabcf8fbad1c7e870bdb6447572f804d77aa1b5afd25cd402f87bee4b3df33b6491a72627c50fb7f6513ce595df90b513ac824e564ebb67fcfa021ce802c0ae701636961c7b0b02d3a39da5b3f7fe92477d7d93f251209f9bbdbfd0494fa11bf275d1d4f51a974c0a090745af47df5ff1792061efebd789a4db2b9f270f21dd7bf7f49c25cbb667bf0edbe9a1e9e7450e188739ffc1ee97318cc69b95aa48e6ff09c0686848ec3f0b10eeb102621b0341aed11ea28705bec123c22c07aa9e0fedf15233a41776bf3d70c9b3ebd1dac7c4778aac68f6dec042d325339d6022d2b0ba996c23915c5fe860eebe5791b6af3bbd74ce736d73b1ac0aa6e8aa4975436a06f61afbdd20e3c54db5490bf83393ddfd45b15ae61346bbca489c45e097d05572d004170ffc4669564eb559d5e743c852f1bdf68d510a8f10a2162385a42b107fcf538fce0c2b837a1ad048e3f099453a59dd0a7bce8cc1fcfd64120948d5738fb72139807eac2da651cf24e881d102e06d5dcf192d3d13bb2b05ef4124e96e56f18ee9569e263ab2d57c90e86efbff89b154c0a6111293cbe26af554f409f4cc210f68a7aca3c7dcc565b22feb0c532e15e7c37b706944aed7afc4d2f140d1b77481cf901a4dd419ecf38a5feae97b7901e12e16baffa88dcd08a6a086b088d727e065e834084a5b01137acd974a7cfcf0f7fad1c76e138affc7aac3123178907bc9814e1fd809ac41bf8039b15ebf7cb3f7cc1672c07ed150bf980fc5bca252a0f08bf4df469a4490df90a38f", 0x1000}], 0x2, &(0x7f0000001740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x20, 0x88d0}, {&(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002840)=[{&(0x7f0000001800)}, {&(0x7f0000001840)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40000}, {&(0x7f0000002880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000002900)="f62cfc5731fec7ba8eb397f00bf407142a106053935ef6a05d783a6af4d91dd242da181a4cf774974b7fd1d59e342ecf61f9df00e82e1d0cf2d2805b7cffbbe577498dfdbfd2f3c3e3de567905a412e1f433acf2da44cfd00c37978cec6a3da58cf03200b4491334492940acbc4359657d1d6fe0875c84edbcd80717738a313e45241368144c128781a600c35f47234d087628e6e9b12175d9e65be86b0ff4c1dcc0351cca5d6f40b20716547d43faf5b3eec73b592407c08674806f3738d9884a82f7269c509904fdff27784a3eb28ab15a213dae", 0xd5}, {&(0x7f0000002a00)="fdb8de8de38c1c50469d9df6bf4864862321bdfdb7a5d7919cdf0ac5b3177f785d57ddc6664f90253528f6eb7dffd4d32281e54b9983cd819f93ce9b540eb229d8794158d2ed564063e0212d8d0a74d94bd703d479cfd5c5e7456a249b7f3218152cfe231e55ffaa314e3b8544c8db40cb81ab1b7b4a15333f904c5ce4ce2bbaa04d15c94e9a13df1e235a209833ffd9e325f5a33448c01c4d75c963b34fc273b1728a1ac0e1a1cc11cc6c920e51b12dc565802600f34b5424f93c1064969cb6ab274063332ea77a0840d60b0a8c06561e382481b26bb543d177c9e10026b7de95245da80df590f1733893c8a2418907b39a9268620d11d6c52ed103", 0xfc}, {&(0x7f0000002b00)="5d336f58bc2cbe2c11bd949911bb68fd4dcf894b8f", 0x15}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="401b8b6a7d72788867c54087efd92a2ca0f88a9eb9ffd56ead883374a6027a08fcf3952800c2e42614bede2c175f47f29d5efc77c21b020a6e8869c79e1ac20607968068d06dccb7ed3969305fe6d5032e1900108a547563afacacc48b468fd9e46f06329e9dec890a481c4f3f22c0a7e132ebf5b84da8988db162f2256dddb8ba61ba63e7c1a06d73cb5824e4513fed613bb0973ffdcff4ec71180e76b0c54a50cd93ae0d44321da058f7236ad15653313e421693ee30a44a4575687748d5742b4b711a0afdcd1e4fcb71bd6281ab81ba076b18e74dca853e9b9f593ba08db7e4bd", 0xe2}, {&(0x7f0000003c40)="bb5c386e6a723c7130969ec369249b8ccf1aed22719c9b3519a4c3126e16900c338f08064d59631ee5d7ae8bd60fef2e07749a14eb946c8a857ba86d82eb40601999418646f9892a9e6e30db8e70f17f01994eb953c805dc003c13aaa495a1c2386794eee5bffd33b8250232783c76bb9c0d3ee825c0017779682d43c9e837d4d65ef4c35045acf0c13004", 0x8b}, {&(0x7f0000003d00)="0937b001aada622a15dff1d85551d8eb5da6ac93a2d28c520391bf6c426c8c9e38abc944d3317dc57fdb003ae28cb2e12480491423f9666b85c1270a38bd9796247b1881e43fa28b5ebfbf434c08a56f592db3647a4ca8f47a1879d4312d47436852d47d84792b568de9c7bfd50d79", 0x6f}, {&(0x7f0000003d80)="d4330d11e17c0bb5b302e121a11a7b9c89bd73fa51f7288c8a03b50aee20288bd012582ecceea640fee26158303d1ab0ee1a3e9a185db3efcbae1447f0fd782f078bf4528a166f7fd0c5de33b56d0d9c994c459a0ee79fd3d588e943d0d207a0dc07f9b407e6af3c46", 0x69}], 0x8, &(0x7f0000003f40)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x20004000}, {&(0x7f0000003f80)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000004000)="8f3755bd24440a7f5897ced42721de2f2743bc62c0c7be274c3e687eb2d72208c4de76629fec08f776df22a97414cd1e0200d00e92e71cf14f53d15583460147cc9a980a219c13416de94f75445183e184217717299f5b4321a7af960b4cb977bc54d30ac07bb58d40bfc4b10f5df632c6046c19e6e394172274b948cb85c175eb70b7687b3513", 0x87}, {&(0x7f00000040c0)}, {&(0x7f0000004100)="c5d856e12444644bed8ec4c225402c2bd488f21d6834b7d8fb8091f7b75db8b3b879709030e969941905da31295936b32d6ba2435b8dc282d17719ec1022245b0558d1ac6a970813f7866b91177c439fa2af10a3b155c61e674c73ff4f87bc11dfda77d9eb58e52f04078c93a3", 0x6d}], 0x3, &(0x7f00000041c0)=[@rights={{0x18, 0x1, 0x1, [r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x38, 0x20040014}, {0xfffffffffffffffe, 0x0, &(0x7f0000004580)=[{&(0x7f0000004200)="957b3006130068ff231352899531c1db2f95780050a5ee1fce1ecd0f27ea6042a15281558d9ede70c6ffb4b596ab04b9c506e8a6fa3de1758f7d90a6b387ae5ff79aff075f72a147f62d3404be2f774e98195e667a2c5d4551821e7a13a83fe2a03f25cb529cf72d34d3020df03c49881ebae60c372874", 0x77}, {&(0x7f0000004280)="a27b8da40134b346c9cd2dfa83687fad8cafb3c32f029699", 0x18}, {&(0x7f00000042c0)="233196ad220ee6522705a5b2fde4a173077b419aae58e6b27749d19c69afd1f88c80f3e0fd79d391309fbb49a543ff0c42137835770552be3b451969e19209b984b4efec9f681a437db6bc4fc12179696b5a41c6bc7fc68b2f6408396cc36b91d400bf5fbf4fbd572a6fefc628b584ef08b9bdd9be07a75204fcb9df9c8bd754e3a0780b67eaf1d55df53d259eed57beeae97534ad76abf52c52d85718c9b2f39b938871fde615ef31259ae2b93d869981f5a3a223a8ca444f883f961f4a6ea03ed0a6cf89ef60044933509f261c6c1e280904f6e4cfd1446f86f32151528f2ccb4c2182ad8d47", 0xe7}, {&(0x7f00000043c0)="94becff1882f0d8e7ea151652c556e34f4983f997781c2fb0670a89ee7c63c2f822d90e3ec7972fe9c65748696c576add32ca8cbe9b9e421fe295cb55ed1c56b3315147a57d84fd091783400ee37edc3d2cb83da59f9fa5a329d66c6288401d4b0914210c08d2a2865eaa0", 0x6b}, {&(0x7f0000004440)="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", 0xff}, {&(0x7f0000004540)="6a49fa", 0x3}], 0x6, 0x0, 0x0, 0x20000014}, {&(0x7f0000004600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004940)=[{&(0x7f0000004680)="48ad3fba2fa6d7a69a24453d024beeb8d11587da6bf73c765d249b52ba77db0e6725641bf6c6b9fbcb70193a9d1050acf5528c4d433d7272a0f6667ff5dcbfe4924aaf4ac48d77111de47fa9c443a77b77b74c82abe0591253a400ca", 0x5c}, {&(0x7f0000004700)="a8de7fa5b9459e79401082495aa512e9e286044b01d26fe557fb827c85996fea230f7c09400f54997ac093ad10084c5255184e27ead82d0f6dbab42542a4fb3c673c43634ada06e838bac9da7c2205b1a64a8e2beeb8f8158522dcae34ef563308c5f87a9f64e19fe9d2d294035f72193006ae0b59e08350bf0ecb0e1f0f4705fcc72ebab6b30cd2ca4f", 0x8a}, {&(0x7f00000047c0)="7f12ddb61a3631fa2ce69c69e15b274a0e8e4d3930d7d3ae6869be6164b6cf63c0e6a957c77bc25434877f27772b9c7a3ef183dc7ca4e00bb5c4f137d08fc20218e2fbdce218b7a62cb653e424305abaabf90f530094eef0577e79d6defd25585fdadb9b87e3ca8529dea6a8765d6df8074c7601b9acdf44b3de2a05792e5925e706", 0x82}, {&(0x7f0000004880)="19e262b9bcb4f96daab73e68d452801f12250e0bd9b699f6bef892b94e9d2c9aed7d2a264c70bf9aab08336059531bda72448354e2c6f694c7e03a7a48de022e59fe2a6f3775f276ad84fb8fa79677ccae734314260a23cdfaff7229e613d7baec3e1d45440eaa25e5f4ca668265cd753749b2cfcd4961432dc7401727fb09c9f3be52feacf6f5d541b7782fdc2a1b42e2d2bdf189ff7322317aab39a8cc51937eea25", 0xa3}], 0x4, &(0x7f0000004b40)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r6, r3, r0]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}], 0xb0, 0x800}, {&(0x7f0000004c00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000004c80)="d5e948697526be4e1787d8df511e12d89d650925977015061b9fb7ece7a22fde02d07d38f0ae93ef61acd7770961e3e0ba076e21a7d3391f8a28f195e755a810f3b3defb60f92248c78ee38e77b7baaa8bc36b9da887a0353011526edc19853db718cfc75621ca3642924de58b0def1ba20e27664ab0816499", 0x79}, {&(0x7f0000004d00)="6b6d79a9decc5c800bd4926664095d9e832d68ce49736c2777be62b0f41826b48ed26aba9279c13391bbd13ca24dc3305315106737937af4e0efb21e937e40d942d69f8b1ef06833f7fda94ffea4530e5da82832b9db0d1b300d83dfe4347ee7ce42e0f21e14ea8fe8dab8f0e3d6502de0a601b74d8f97785f342a5b0f54acc3864c05624b27414073af375ddfd9a21aa0da515b0c1272689d89", 0x9a}], 0x2, &(0x7f0000004f40)=[@rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r12}}}], 0x60, 0x4000801}, {&(0x7f0000004fc0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000005140)=[{&(0x7f0000005040)="4fead349383822bd428a0a26210cfc4962363ee37dd845e548214faa45609906bbdfd11e599acd8dd1ea39fbd2bf3b00e5b46b315b143795996e48005d028f9650054b2c7b8fae633ee039b7", 0x4c}, {&(0x7f00000050c0)="3381b4e61a3af77a642ad378c30a5a58b358bc2025831cf3f14aa4e4877081c8fb97918825107f86b3d6471f50c62207fea6600fbae6a2a12681524f39a1462b0c08ca12fae0fa481681d4b1989e8aa40642673ed957d05c9483ed55eeaeb5116a5afdf3c9ccb8456edbb475f3", 0x6d}], 0x2, 0x0, 0x0, 0x800}], 0x8, 0x4008850)
setuid(r8)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@allocspi={0x118, 0x16, 0x8, 0x70bd29, 0x25dfdbfe, {{{@in6=@empty, @in6=@remote, 0x4e21, 0x8, 0x4e21, 0x2, 0x2, 0x0, 0xa0, 0x3b, 0x0, r8}, {@in6=@private1, 0x4d4, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x200, 0xfff, 0x0, 0x4, 0xd61, 0x6, 0x4, 0x7}, {0x1f, 0x80000000, 0x9, 0xfffffffffffffff7}, {0x41e13e2f, 0x4, 0x7fff}, 0x70bd2a, 0x0, 0xa, 0x2, 0x0, 0x80}, 0xc249, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x3}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @lastused={0xc, 0xf, 0x7}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x40)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:33 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))

22:45:33 executing program 3:
ioperm(0x0, 0x1ff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r1 = accept$inet(r0, 0x0, &(0x7f0000000000))
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x80000001, 0x7, 0xfffff000, 0x40, 0x10001})

22:45:33 executing program 2 (fault-call:12 fault-nth:2):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:33 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))

[  334.988613][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  334.995491][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.008631][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.024086][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
22:45:33 executing program 3:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0xfffffffc, 0x1, 0x6, 0x7ff, 0x20}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x5, 0x2, 0x0, 0x20, 0x0, 0x1, 0x2b42f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff80000000000, 0x2}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x84)
sendfile(r2, r0, &(0x7f0000000140)=0x7, 0x8)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10002, 0x0)
ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0xfff, 0x3})
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000180)=""/82)
preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0xd990)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x80000, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00')
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb)
preadv(r5, &(0x7f00000017c0), 0x1a1, 0x0)
syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac00000000006300e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}])

[  335.036431][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.043759][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.050702][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.057560][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.064573][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.071777][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.078816][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.086130][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.112499][T14385] FAULT_INJECTION: forcing a failure.
[  335.112499][T14385] name failslab, interval 1, probability 0, space 0, times 0
[  335.137187][T14381] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  335.140608][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.148910][T14381] FAT-fs (loop0): Filesystem has been set read-only
22:45:33 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "1e7e32db", {0x3, 0x105, 0x0, 0x77, 0x8, 0x7, 0x48}})
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

[  335.158559][T14385] CPU: 0 PID: 14385 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  335.169851][T14385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  335.174824][T14381] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  335.181554][T14385] Call Trace:
[  335.181572][T14385]  dump_stack+0x14a/0x1ce
[  335.181580][T14385]  ? devkmsg_release+0x11c/0x11c
[  335.181588][T14385]  ? init_wait_entry+0xd0/0xd0
[  335.181595][T14385]  ? show_regs_print_info+0x12/0x12
[  335.181601][T14385]  ? percpu_ref_tryget_live+0xd7/0x280
[  335.181614][T14385]  should_fail+0x6fb/0x860
[  335.222728][T14385]  ? setup_fault_attr+0x3d0/0x3d0
[  335.227760][T14385]  ? blk_account_io_start+0x3ee/0x4a0
[  335.233177][T14385]  ? mempool_alloc_slab+0x16/0x30
[  335.238199][T14385]  ? mempool_free+0x380/0x380
[  335.242875][T14385]  should_failslab+0x5/0x20
[  335.247374][T14385]  kmem_cache_alloc+0x36/0x260
[  335.252269][T14385]  ? mempool_free+0x380/0x380
[  335.256946][T14385]  mempool_alloc_slab+0x16/0x30
[  335.261881][T14385]  mempool_alloc+0x116/0x690
[  335.266472][T14385]  ? mempool_resize+0x910/0x910
[  335.271318][T14385]  ? _raw_spin_lock+0x170/0x170
[  335.276255][T14385]  ? __rcu_read_lock+0x50/0x50
[  335.281014][T14385]  ? generic_make_request+0xd0f/0xdb0
[  335.286393][T14385]  bio_alloc_bioset+0x209/0x690
[  335.291255][T14385]  ? __test_set_page_writeback+0x848/0x9a0
[  335.297068][T14385]  ? bio_chain_endio+0xf0/0xf0
[  335.301828][T14385]  ? test_clear_page_writeback+0x790/0x790
[  335.307719][T14385]  submit_bh_wbc+0x1ba/0x790
[  335.312308][T14385]  ? create_page_buffers+0x173/0x1d0
[  335.317589][T14385]  __block_write_full_page+0x862/0xe30
[  335.323134][T14385]  ? mark_buffer_write_io_error+0x150/0x150
[  335.329017][T14385]  ? fat_block_truncate_page+0x50/0x50
[  335.334468][T14385]  __mpage_writepage+0x141f/0x1890
[  335.339575][T14385]  ? rmap_walk+0xd0/0xd0
[  335.343814][T14385]  ? mpage_writepages+0x2f0/0x2f0
[  335.348826][T14385]  ? page_mkclean+0x330/0x330
[  335.353518][T14385]  ? percpu_counter_add_batch+0x12d/0x150
22:45:34 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x700)

[  335.359232][T14385]  ? wait_on_page_writeback+0x200/0x200
[  335.364766][T14385]  ? stack_trace_save+0x123/0x1f0
[  335.369814][T14385]  ? __rcu_read_lock+0x50/0x50
[  335.374689][T14385]  write_cache_pages+0x912/0xdc0
[  335.379624][T14385]  ? mpage_writepages+0x2f0/0x2f0
[  335.384736][T14385]  ? tag_pages_for_writeback+0x580/0x580
[  335.390343][T14385]  ? avc_has_perm_noaudit+0x400/0x400
[  335.395690][T14385]  mpage_writepages+0x155/0x2f0
[  335.400535][T14385]  ? fat_block_truncate_page+0x50/0x50
[  335.405982][T14385]  ? clean_buffers+0x230/0x230
[  335.410755][T14385]  ? arch_stack_walk+0xb8/0x120
[  335.415675][T14385]  ? fat_block_truncate_page+0x50/0x50
[  335.421146][T14385]  ? unwind_get_return_address_ptr+0x130/0x130
[  335.427368][T14385]  ? memset+0x1f/0x40
[  335.431372][T14385]  ? fat_readpage+0x20/0x20
[  335.436037][T14385]  do_writepages+0x13a/0x280
[  335.440638][T14385]  ? __writepage+0xc0/0xc0
[  335.445080][T14385]  ? __rcu_read_lock+0x50/0x50
[  335.449825][T14385]  ? unwind_get_return_address_ptr+0x130/0x130
[  335.455958][T14385]  filemap_write_and_wait_range+0x3b2/0x460
[  335.461853][T14385]  ? filemap_write_and_wait+0x420/0x420
[  335.468586][T14385]  ? unwind_get_return_address+0x48/0x90
[  335.474201][T14385]  ? timespec64_trunc+0x67/0xa0
[  335.479112][T14385]  ? fat_truncate_time+0x402/0x520
[  335.484216][T14385]  generic_file_direct_write+0x18b/0x6d0
[  335.490233][T14385]  ? pagecache_write_end+0xa0/0xa0
[  335.495319][T14385]  ? file_update_time+0x398/0x3f0
[  335.500340][T14385]  ? file_remove_privs+0x640/0x640
[  335.505496][T14385]  ? __kasan_slab_free+0x1f2/0x230
[  335.511050][T14385]  ? down_write+0xd8/0x150
[  335.515478][T14385]  __generic_file_write_iter+0x25f/0x440
[  335.521091][T14385]  ? get_pid_task+0x86/0x90
[  335.525580][T14385]  generic_file_write_iter+0x4a6/0x650
[  335.531014][T14385]  __vfs_write+0x59d/0x720
[  335.535404][T14385]  ? __kernel_write+0x340/0x340
[  335.540316][T14385]  ? avc_policy_seqno+0x17/0x70
[  335.545148][T14385]  ? security_file_permission+0x128/0x300
[  335.550839][T14385]  vfs_write+0x217/0x4f0
[  335.555065][T14385]  ksys_write+0x18c/0x2c0
[  335.559388][T14385]  ? file_open_root+0x450/0x450
[  335.564217][T14385]  ? __ia32_sys_read+0x80/0x80
[  335.568971][T14385]  do_syscall_64+0xcb/0x150
[  335.573549][T14385]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  335.579416][T14385] RIP: 0033:0x45ca69
[  335.583281][T14385] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  335.602887][T14385] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  335.611298][T14385] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  335.619253][T14385] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  335.627200][T14385] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  335.635155][T14385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  335.643490][T14385] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
[  335.652062][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
22:45:34 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))

[  335.659512][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.666436][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.673359][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.680287][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.687181][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.694116][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.701043][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.707935][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
22:45:34 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  335.718610][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.725611][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.734576][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.750077][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.764667][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.775076][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.783393][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.791909][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.799906][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.810075][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.817851][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.827431][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.835594][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.846863][T14436] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  335.849237][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.863798][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.865616][T14436] FAT-fs (loop0): Filesystem has been set read-only
[  335.871408][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.881541][T14436] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  335.884544][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.900322][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.907255][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.910367][T14436] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  335.916423][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.930111][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.930489][T14440] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  335.937038][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.951706][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.958787][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.965685][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.972566][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.979454][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.986323][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  335.993223][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.000126][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.006974][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.013848][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.020739][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.027599][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.034475][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.041366][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.048265][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.055121][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.058080][  T140] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  336.062011][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.076296][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.083178][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.090080][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.096941][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.103818][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.110722][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.117681][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.124561][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.131478][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.138361][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.145250][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.152142][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.159030][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.165867][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.172748][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.179733][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.186579][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.193466][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.200370][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.207218][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.214120][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.221014][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.227912][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.234843][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.241789][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.248709][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.255563][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.262474][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.269375][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.276219][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.283178][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.290102][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.296941][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.303833][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.310735][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.317592][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.324498][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.331393][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.338372][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.345236][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.352143][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.359043][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.365905][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.372792][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.379679][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.386643][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.393518][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.400420][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.407287][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.414197][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.421104][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.427965][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.434896][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.441801][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.448695][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.455574][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.462454][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.469368][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.476260][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.483304][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.490239][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.497091][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.503991][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.512113][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.519001][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.525864][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.532769][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.539661][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.546507][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.554352][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.561253][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.568145][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.575015][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.581912][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.588818][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.595660][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.598145][  T140] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  336.602554][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.614681][  T140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.618464][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.627838][  T140] usb 5-1: Product: syz
[  336.633432][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.638810][  T140] usb 5-1: Manufacturer: syz
[  336.644509][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.650605][  T140] usb 5-1: SerialNumber: syz
[  336.655926][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.667359][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.674400][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.681312][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.688221][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.695097][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.702014][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.708912][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.715805][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.722725][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.729631][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.736486][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.743376][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.750317][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.757197][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.764308][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.771206][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.778082][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.784934][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.791814][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.798707][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.805568][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.812543][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.819447][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.826294][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.833233][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.840139][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.847371][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.854369][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.861280][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.868171][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.875041][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.882296][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.889219][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.896079][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.902954][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.909840][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.916684][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.923557][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.930444][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.937506][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.944394][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.952470][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.959367][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.966224][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.973134][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.980023][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.986865][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  336.993784][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.000680][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.007536][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.014431][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.021326][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.028209][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.035061][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.042054][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.049022][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.055879][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.062871][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.069791][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.076636][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.083518][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.090503][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.097739][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.104662][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.111551][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.118428][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.125283][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.132203][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.139090][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.145942][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.152831][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.159922][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.166790][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.173673][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.180567][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.187411][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.194285][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.201176][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.208048][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.214921][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.221802][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.228693][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.235535][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.242418][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.249322][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.256300][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.263200][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.270130][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.276988][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.283889][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.291424][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.298341][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.305194][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.312076][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.318968][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.325911][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.332804][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.339697][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.346536][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.353606][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.360549][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.367875][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.374820][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.381895][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.388809][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.395664][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.402756][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.409665][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.416525][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.423405][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.430312][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.437168][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.444134][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.451179][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.458067][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.464942][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.472008][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.478904][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.485774][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.492670][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.499594][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.506452][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.513325][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.520224][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.527152][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.534030][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.540920][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.547760][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.554657][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.561546][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.568436][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.575310][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.582215][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.589102][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.595964][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.602864][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.609762][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.616611][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.623599][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.630511][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.637382][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.644268][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.651211][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.658114][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.664976][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.671874][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.678786][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.685642][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.692540][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.699436][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.706281][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.713189][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.720084][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.726940][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.733842][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.741202][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.748091][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.754963][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.761850][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.768741][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.775597][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.782483][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.789394][    T5] wacom 0003:056A:0023.0018: unknown main item tag 0x0
[  337.796391][    T5] wacom 0003:056A:0023.0018: Unknown device_type for 'HID 056a:0023'. Assuming pen.
[  337.806573][    T5] input: Wacom Intuos 12x12 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0023.0018/input/input27
[  337.826844][    T5] wacom 0003:056A:0023.0018: hidraw0: USB HID v0.00 Device [HID 056a:0023] on usb-dummy_hcd.5-1/input0
[  337.844521][    T5] usb 6-1: USB disconnect, device number 27
22:45:36 executing program 5:
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:36 executing program 2 (fault-call:12 fault-nth:3):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:36 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:36 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000cd2ff8)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00')
chroot(&(0x7f0000000040)='./file0/file0\x00')
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
statx(r1, &(0x7f0000000000)='./file0/file0/file0\x00', 0x4000, 0x20, &(0x7f0000000340))
geteuid()
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x1)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1)

22:45:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x900)

22:45:36 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  338.039279][T14457] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  338.072018][T14466] FAULT_INJECTION: forcing a failure.
[  338.072018][T14466] name failslab, interval 1, probability 0, space 0, times 0
[  338.081127][T14457] FAT-fs (loop0): Filesystem has been set read-only
[  338.088334][T14466] CPU: 0 PID: 14466 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  338.101431][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  338.102485][T14475] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  338.111485][T14466] Call Trace:
[  338.111502][T14466]  dump_stack+0x14a/0x1ce
[  338.111512][T14466]  ? devkmsg_release+0x11c/0x11c
[  338.111519][T14466]  ? show_regs_print_info+0x12/0x12
[  338.111528][T14466]  ? __rcu_read_lock+0x50/0x50
[  338.111536][T14466]  ? update_io_ticks+0x1aa/0x1c0
[  338.111543][T14466]  should_fail+0x6fb/0x860
[  338.111550][T14466]  ? setup_fault_attr+0x3d0/0x3d0
[  338.111560][T14466]  ? mempool_alloc_slab+0x16/0x30
[  338.111574][T14466]  ? mempool_free+0x380/0x380
[  338.166641][T14466]  should_failslab+0x5/0x20
[  338.168449][T14457] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  338.171226][T14466]  kmem_cache_alloc+0x36/0x260
[  338.171240][T14466]  ? mempool_free+0x380/0x380
[  338.188449][T14466]  mempool_alloc_slab+0x16/0x30
[  338.193302][T14466]  mempool_alloc+0x116/0x690
[  338.196036][T14479] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  338.197888][T14466]  ? blk_mq_requeue_work+0x9d0/0x9d0
[  338.197903][T14466]  ? mempool_resize+0x910/0x910
[  338.215817][T14466]  ? generic_make_request+0xd0f/0xdb0
[  338.221187][T14466]  ? blk_attempt_plug_merge+0x310/0x310
[  338.226732][T14466]  ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570
[  338.232538][T14466]  bio_alloc_bioset+0x209/0x690
22:45:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xa00)

[  338.237390][T14466]  ? __bio_add_page+0x274/0x430
[  338.242353][T14466]  ? bio_chain_endio+0xf0/0xf0
[  338.247117][T14466]  ? submit_bio+0x14b/0x570
[  338.251648][T14466]  submit_bh_wbc+0x1ba/0x790
[  338.256244][T14466]  __block_write_full_page+0x862/0xe30
[  338.261700][T14466]  ? mark_buffer_write_io_error+0x150/0x150
[  338.267591][T14466]  ? fat_block_truncate_page+0x50/0x50
[  338.273097][T14466]  __mpage_writepage+0x141f/0x1890
[  338.278370][T14466]  ? rmap_walk+0xd0/0xd0
[  338.282719][T14466]  ? mpage_writepages+0x2f0/0x2f0
[  338.287725][T14466]  ? page_mkclean+0x330/0x330
[  338.292404][T14466]  ? percpu_counter_add_batch+0x12d/0x150
[  338.298107][T14466]  ? wait_on_page_writeback+0x200/0x200
[  338.303647][T14466]  ? stack_trace_save+0x123/0x1f0
[  338.308643][T14466]  ? __rcu_read_lock+0x50/0x50
[  338.313381][T14466]  write_cache_pages+0x912/0xdc0
[  338.318306][T14466]  ? mpage_writepages+0x2f0/0x2f0
[  338.323301][T14466]  ? tag_pages_for_writeback+0x580/0x580
[  338.328911][T14466]  ? avc_has_perm_noaudit+0x400/0x400
[  338.334267][T14466]  mpage_writepages+0x155/0x2f0
[  338.339099][T14466]  ? fat_block_truncate_page+0x50/0x50
[  338.344527][T14466]  ? clean_buffers+0x230/0x230
[  338.349260][T14466]  ? arch_stack_walk+0xb8/0x120
[  338.354101][T14466]  ? fat_block_truncate_page+0x50/0x50
[  338.359563][T14466]  ? unwind_get_return_address_ptr+0x130/0x130
[  338.365698][T14466]  ? memset+0x1f/0x40
[  338.369717][T14466]  ? fat_readpage+0x20/0x20
[  338.374203][T14466]  do_writepages+0x13a/0x280
[  338.378770][T14466]  ? __writepage+0xc0/0xc0
[  338.383178][T14466]  ? __rcu_read_lock+0x50/0x50
[  338.387913][T14466]  ? unwind_get_return_address_ptr+0x130/0x130
[  338.394037][T14466]  filemap_write_and_wait_range+0x3b2/0x460
[  338.399907][T14466]  ? filemap_write_and_wait+0x420/0x420
[  338.405540][T14466]  ? unwind_get_return_address+0x48/0x90
[  338.411191][T14466]  ? timespec64_trunc+0x67/0xa0
[  338.416129][T14466]  ? fat_truncate_time+0x402/0x520
[  338.421219][T14466]  generic_file_direct_write+0x18b/0x6d0
[  338.426861][T14466]  ? pagecache_write_end+0xa0/0xa0
[  338.431964][T14466]  ? file_update_time+0x398/0x3f0
[  338.436990][T14466]  ? file_remove_privs+0x640/0x640
[  338.442078][T14466]  ? __kasan_slab_free+0x1f2/0x230
[  338.447184][T14466]  ? down_write+0xd8/0x150
[  338.451599][T14466]  __generic_file_write_iter+0x25f/0x440
[  338.457204][T14466]  ? get_pid_task+0x86/0x90
[  338.461681][T14466]  generic_file_write_iter+0x4a6/0x650
[  338.467113][T14466]  __vfs_write+0x59d/0x720
[  338.471521][T14466]  ? __kernel_write+0x340/0x340
[  338.476356][T14466]  ? avc_policy_seqno+0x17/0x70
[  338.481195][T14466]  ? security_file_permission+0x128/0x300
[  338.486913][T14466]  vfs_write+0x217/0x4f0
[  338.491152][T14466]  ksys_write+0x18c/0x2c0
[  338.495477][T14466]  ? file_open_root+0x450/0x450
[  338.500311][T14466]  ? __ia32_sys_read+0x80/0x80
[  338.505051][T14466]  do_syscall_64+0xcb/0x150
[  338.509562][T14466]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  338.515426][T14466] RIP: 0033:0x45ca69
[  338.519292][T14466] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
22:45:37 executing program 3:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904070000020d0000050d240f0100000000000000000006241a0000000905810340000000000904011267478b70b2f2c6b07e539b1eff9b38ce9c4f0992570da2b7ac0ce81e84f63e35e0d2000000000000000000bb39375789e80d3c3665ce3a8b7c9581a7c79db31c8ecdfe6e0222138c0eac35ced0"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

[  338.538876][T14466] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  338.547265][T14466] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  338.555213][T14466] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  338.563173][T14466] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  338.571123][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  338.579081][T14466] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
22:45:37 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:37 executing program 2 (fault-call:12 fault-nth:4):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}]}, 0x28}}, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x28, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x1)
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r4)
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r5, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff})
r7 = dup2(r6, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r8, &(0x7f0000000100)=""/164, 0x20000118)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x40240, 0x0)

22:45:37 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  338.706141][T14486] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  338.716602][T14486] FAT-fs (loop0): Filesystem has been set read-only
[  338.720759][T10034] usb 5-1: USB disconnect, device number 5
[  338.731982][T14486] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  338.779471][T14486] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  338.809502][T14494] FAULT_INJECTION: forcing a failure.
[  338.809502][T14494] name failslab, interval 1, probability 0, space 0, times 0
[  338.833135][T14505] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  338.836496][   T22] audit: type=1400 audit(1591915537.555:17): avc:  denied  { write } for  pid=14500 comm="syz-executor.4" name="net" dev="proc" ino=63611 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
[  338.846286][T14494] CPU: 0 PID: 14494 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  338.869646][   T22] audit: type=1400 audit(1591915537.555:18): avc:  denied  { add_name } for  pid=14500 comm="syz-executor.4" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
[  338.874058][T14494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  338.874061][T14494] Call Trace:
[  338.874076][T14494]  dump_stack+0x14a/0x1ce
[  338.874090][T14494]  ? devkmsg_release+0x11c/0x11c
[  338.896860][   T22] audit: type=1400 audit(1591915537.555:19): avc:  denied  { create } for  pid=14500 comm="syz-executor.4" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1
[  338.906605][T14494]  ? show_regs_print_info+0x12/0x12
[  338.906615][T14494]  ? __rcu_read_lock+0x50/0x50
[  338.906624][T14494]  ? update_io_ticks+0x1aa/0x1c0
[  338.906631][T14494]  should_fail+0x6fb/0x860
[  338.906642][T14494]  ? setup_fault_attr+0x3d0/0x3d0
[  338.927998][  T140] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  338.940657][T14494]  ? mempool_alloc_slab+0x16/0x30
[  338.940665][T14494]  ? mempool_free+0x380/0x380
[  338.940672][T14494]  should_failslab+0x5/0x20
[  338.940682][T14494]  kmem_cache_alloc+0x36/0x260
[  338.940689][T14494]  ? mempool_free+0x380/0x380
[  338.940695][T14494]  mempool_alloc_slab+0x16/0x30
[  338.940702][T14494]  mempool_alloc+0x116/0x690
[  338.940711][T14494]  ? blk_mq_requeue_work+0x9d0/0x9d0
[  338.940717][T14494]  ? mempool_resize+0x910/0x910
[  338.940733][T14494]  ? generic_make_request+0xd0f/0xdb0
[  339.021080][T14494]  ? blk_attempt_plug_merge+0x310/0x310
[  339.026659][T14494]  ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570
[  339.032467][T14494]  bio_alloc_bioset+0x209/0x690
[  339.037685][T14494]  ? __bio_add_page+0x274/0x430
[  339.042741][T14494]  ? bio_chain_endio+0xf0/0xf0
[  339.047524][T14494]  ? submit_bio+0x14b/0x570
[  339.052475][T14494]  submit_bh_wbc+0x1ba/0x790
[  339.057064][T14494]  __block_write_full_page+0x862/0xe30
[  339.062517][T14494]  ? mark_buffer_write_io_error+0x150/0x150
[  339.071102][T14494]  ? fat_block_truncate_page+0x50/0x50
[  339.076563][T14494]  __mpage_writepage+0x141f/0x1890
[  339.081676][T14494]  ? rmap_walk+0xd0/0xd0
[  339.085920][T14494]  ? mpage_writepages+0x2f0/0x2f0
[  339.091710][T14494]  ? page_mkclean+0x330/0x330
[  339.096467][T14494]  ? percpu_counter_add_batch+0x12d/0x150
[  339.102266][T14494]  ? wait_on_page_writeback+0x200/0x200
[  339.108952][T14494]  ? stack_trace_save+0x123/0x1f0
[  339.113961][T14494]  ? __rcu_read_lock+0x50/0x50
[  339.118703][T14494]  write_cache_pages+0x912/0xdc0
[  339.123631][T14494]  ? mpage_writepages+0x2f0/0x2f0
[  339.128628][T14494]  ? tag_pages_for_writeback+0x580/0x580
[  339.134248][T14494]  ? avc_has_perm_noaudit+0x400/0x400
[  339.139591][T14494]  mpage_writepages+0x155/0x2f0
[  339.144429][T14494]  ? fat_block_truncate_page+0x50/0x50
[  339.149871][T14494]  ? clean_buffers+0x230/0x230
[  339.154608][T14494]  ? arch_stack_walk+0xb8/0x120
[  339.159446][T14494]  ? fat_block_truncate_page+0x50/0x50
[  339.164880][T14494]  ? unwind_get_return_address_ptr+0x130/0x130
[  339.171006][T14494]  ? memset+0x1f/0x40
[  339.174982][T14494]  ? fat_readpage+0x20/0x20
[  339.179528][T14494]  do_writepages+0x13a/0x280
[  339.185416][T14494]  ? __writepage+0xc0/0xc0
[  339.189829][T14494]  ? __rcu_read_lock+0x50/0x50
[  339.194583][T14494]  ? unwind_get_return_address_ptr+0x130/0x130
[  339.201167][T14494]  filemap_write_and_wait_range+0x3b2/0x460
[  339.207044][T14494]  ? filemap_write_and_wait+0x420/0x420
[  339.212615][T14494]  ? unwind_get_return_address+0x48/0x90
[  339.218227][T14494]  ? timespec64_trunc+0x67/0xa0
[  339.223058][T14494]  ? fat_truncate_time+0x402/0x520
[  339.228162][T14494]  generic_file_direct_write+0x18b/0x6d0
[  339.233771][T14494]  ? pagecache_write_end+0xa0/0xa0
[  339.238853][T14494]  ? file_update_time+0x398/0x3f0
[  339.243850][T14494]  ? file_remove_privs+0x640/0x640
[  339.248931][T14494]  ? __kasan_slab_free+0x1f2/0x230
[  339.254048][T14494]  ? down_write+0xd8/0x150
[  339.258443][T14494]  __generic_file_write_iter+0x25f/0x440
[  339.264067][T14494]  ? get_pid_task+0x86/0x90
[  339.268559][T14494]  generic_file_write_iter+0x4a6/0x650
[  339.273993][T14494]  __vfs_write+0x59d/0x720
[  339.278411][T14494]  ? __kernel_write+0x340/0x340
[  339.283253][T14494]  ? avc_policy_seqno+0x17/0x70
[  339.288102][T14494]  ? security_file_permission+0x128/0x300
[  339.293795][T14494]  vfs_write+0x217/0x4f0
[  339.298028][T14494]  ksys_write+0x18c/0x2c0
[  339.302331][T14494]  ? file_open_root+0x450/0x450
[  339.307153][T14494]  ? __ia32_sys_read+0x80/0x80
[  339.311889][T14494]  do_syscall_64+0xcb/0x150
[  339.316383][T14494]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  339.322265][T14494] RIP: 0033:0x45ca69
[  339.326147][T14494] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  339.345740][T14494] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  339.354611][T14494] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  339.358031][  T140] usb 4-1: config 1 has an invalid interface number: 7 but max is 1
[  339.362567][T14494] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  339.362572][T14494] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  339.362576][T14494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  339.362581][T14494] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
[  339.362778][    T5] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  339.383568][  T140] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  339.420518][  T140] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  339.430737][  T140] usb 4-1: config 1 has no interface number 0
[  339.588015][  T140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  339.597109][  T140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.605143][  T140] usb 4-1: Product: syz
[  339.609343][  T140] usb 4-1: Manufacturer: syz
[  339.613936][  T140] usb 4-1: SerialNumber: syz
[  339.647968][    T5] usb 6-1: device descriptor read/64, error 18
[  339.658886][  T140] cdc_ncm 4-1:1.7: skipping garbage
[  339.664119][  T140] cdc_ncm 4-1:1.7: bind() failure
[  340.037961][    T5] usb 6-1: device descriptor read/64, error 18
[  340.307930][    T5] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  340.577943][    T5] usb 6-1: device descriptor read/64, error 18
22:45:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xb00)

22:45:39 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:39 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x3, 'netpci0\x00', {0x7f}, 0x1ff})
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000000))
setuid(0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r6)
lsetxattr$system_posix_acl(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100281c0000000002000000", @ANYRES16, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="0200bea4b6ad26fad6b02d0000cc6bad497ccd9fa8b7c5eeef3351efb8dded127dae09cb9b0ee664320e6fe35e990e716b3e12072807c6cb9453ddc328546896997bb7e5cd59aa7a32b4e033ea041e00a9a71f371bb0878de633f351d024530d38f0e562eb94d076", @ANYRES32=r4, @ANYBLOB="040001000000000008000300", @ANYRES32=r6, @ANYBLOB="10000500000000002000000000000000"], 0x64, 0x6)
r7 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r8, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:39 executing program 2 (fault-call:12 fault-nth:5):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  340.967956][    T5] usb 6-1: device descriptor read/64, error 18
[  341.054483][T14528] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  341.078233][T14534] FAULT_INJECTION: forcing a failure.
[  341.078233][T14534] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  341.081995][T14528] FAT-fs (loop0): Filesystem has been set read-only
22:45:39 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  341.091501][T14534] CPU: 1 PID: 14534 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  341.091506][T14534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  341.091509][T14534] Call Trace:
[  341.091528][T14534]  dump_stack+0x14a/0x1ce
[  341.091536][T14534]  ? devkmsg_release+0x11c/0x11c
[  341.091544][T14534]  ? show_regs_print_info+0x12/0x12
[  341.091553][T14534]  ? find_next_zero_bit+0xfb/0x120
[  341.091561][T14534]  ? sbitmap_get+0x464/0x510
[  341.091567][T14534]  should_fail+0x6fb/0x860
[  341.091573][T14534]  ? setup_fault_attr+0x3d0/0x3d0
[  341.091579][T14534]  ? __sbitmap_queue_get+0x16f/0x230
[  341.091589][T14534]  __alloc_pages_nodemask+0x1ee/0x7c0
[  341.091597][T14534]  ? __blk_mq_tag_idle+0x90/0x90
[  341.091610][T14534]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  341.101845][    T5] usb usb6-port1: attempt power cycle
[  341.108342][T14534]  ? init_wait_entry+0xd0/0xd0
[  341.108354][T14534]  ? percpu_ref_tryget_live+0xd7/0x280
[  341.108366][T14534]  ? blk_queue_enter+0x730/0x730
[  341.108373][T14534]  ? disk_map_sector_rcu+0x249/0x2c0
[  341.108388][T14534]  alloc_slab_page+0x3a/0x3a0
[  341.131053][T14544] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  341.131134][T14534]  new_slab+0x97/0x450
[  341.159516][T14528] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  341.160849][T14534]  ___slab_alloc+0x2e0/0x450
[  341.160861][T14534]  ? mempool_alloc_slab+0x16/0x30
[  341.160873][T14534]  ? mempool_alloc_slab+0x16/0x30
[  341.242940][T14534]  kmem_cache_alloc+0x23f/0x260
[  341.247796][T14534]  ? mempool_free+0x380/0x380
[  341.252481][T14534]  mempool_alloc_slab+0x16/0x30
[  341.257506][T14534]  mempool_alloc+0x116/0x690
[  341.262209][T14534]  ? blk_mq_requeue_work+0x9d0/0x9d0
[  341.267496][T14534]  ? mempool_resize+0x910/0x910
[  341.272346][T14534]  ? generic_make_request+0xd0f/0xdb0
[  341.277735][T14534]  ? blk_attempt_plug_merge+0x310/0x310
[  341.283284][T14534]  ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570
[  341.289183][T14534]  bio_alloc_bioset+0x209/0x690
[  341.294039][T14534]  ? __bio_add_page+0x274/0x430
[  341.298904][T14534]  ? bio_chain_endio+0xf0/0xf0
22:45:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xc00)

[  341.303665][T14534]  ? submit_bio+0x14b/0x570
[  341.308167][T14534]  submit_bh_wbc+0x1ba/0x790
[  341.312758][T14534]  __block_write_full_page+0x862/0xe30
[  341.318214][T14534]  ? mark_buffer_write_io_error+0x150/0x150
[  341.324109][T14534]  ? fat_block_truncate_page+0x50/0x50
[  341.329661][T14534]  __mpage_writepage+0x141f/0x1890
[  341.334777][T14534]  ? rmap_walk+0xd0/0xd0
[  341.339033][T14534]  ? mpage_writepages+0x2f0/0x2f0
[  341.344052][T14534]  ? page_mkclean+0x330/0x330
[  341.348829][T14534]  ? percpu_counter_add_batch+0x12d/0x150
[  341.354656][T14534]  ? wait_on_page_writeback+0x200/0x200
[  341.360362][T14534]  ? stack_trace_save+0x123/0x1f0
[  341.365370][T14534]  ? __rcu_read_lock+0x50/0x50
[  341.370122][T14534]  write_cache_pages+0x912/0xdc0
[  341.375232][T14534]  ? mpage_writepages+0x2f0/0x2f0
[  341.380423][T14534]  ? tag_pages_for_writeback+0x580/0x580
[  341.386123][T14534]  ? avc_has_perm_noaudit+0x400/0x400
[  341.391493][T14534]  mpage_writepages+0x155/0x2f0
[  341.396325][T14534]  ? fat_block_truncate_page+0x50/0x50
[  341.401788][T14534]  ? clean_buffers+0x230/0x230
[  341.406545][T14534]  ? arch_stack_walk+0xb8/0x120
[  341.411509][T14534]  ? fat_block_truncate_page+0x50/0x50
[  341.416944][T14534]  ? unwind_get_return_address_ptr+0x130/0x130
[  341.423072][T14534]  ? memset+0x1f/0x40
[  341.427028][T14534]  ? fat_readpage+0x20/0x20
[  341.431503][T14534]  do_writepages+0x13a/0x280
[  341.436067][T14534]  ? __writepage+0xc0/0xc0
[  341.440470][T14534]  ? __rcu_read_lock+0x50/0x50
[  341.445224][T14534]  ? unwind_get_return_address_ptr+0x130/0x130
[  341.451359][T14534]  filemap_write_and_wait_range+0x3b2/0x460
[  341.457226][T14534]  ? filemap_write_and_wait+0x420/0x420
[  341.462748][T14534]  ? unwind_get_return_address+0x48/0x90
[  341.468371][T14534]  ? timespec64_trunc+0x67/0xa0
[  341.473219][T14534]  ? fat_truncate_time+0x402/0x520
[  341.478327][T14534]  generic_file_direct_write+0x18b/0x6d0
[  341.484195][T14534]  ? pagecache_write_end+0xa0/0xa0
[  341.489462][T14534]  ? file_update_time+0x398/0x3f0
[  341.494486][T14534]  ? file_remove_privs+0x640/0x640
[  341.499597][T14534]  ? __kasan_slab_free+0x1f2/0x230
[  341.504685][T14534]  ? down_write+0xd8/0x150
[  341.509093][T14534]  __generic_file_write_iter+0x25f/0x440
[  341.514724][T14534]  ? get_pid_task+0x86/0x90
[  341.519232][T14534]  generic_file_write_iter+0x4a6/0x650
[  341.524665][T14534]  __vfs_write+0x59d/0x720
[  341.529316][T14534]  ? __kernel_write+0x340/0x340
[  341.534140][T14534]  ? avc_policy_seqno+0x17/0x70
[  341.538966][T14534]  ? security_file_permission+0x128/0x300
[  341.544659][T14534]  vfs_write+0x217/0x4f0
[  341.548875][T14534]  ksys_write+0x18c/0x2c0
[  341.553212][T14534]  ? file_open_root+0x450/0x450
[  341.558034][T14534]  ? __ia32_sys_read+0x80/0x80
[  341.562789][T14534]  do_syscall_64+0xcb/0x150
[  341.567284][T14534]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  341.573236][T14534] RIP: 0033:0x45ca69
[  341.577119][T14534] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  341.596958][T14534] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  341.605455][T14534] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  341.613423][T14534] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  341.621547][T14534] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  341.629588][T14534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  341.637542][T14534] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
22:45:40 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
r5 = getuid()
syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./bus\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000300)="2347ace1a9e651d620b5abde96420b67f0d8f125df70abdcd22c5c5a59d70efda6f1db395003db1ed32239d4bb3de7914c4d39d6b7b33f41cc65e867e31ba9d7fbf98af26cfda6cd6c2bda57ad04a02c03fd3b7574", 0x55, 0xfffffffffffffff8}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp857,fowner=', @ANYRESDEC=r2, @ANYBLOB=',uid<', @ANYRESDEC=r4, @ANYBLOB="2c6673636f6e746578743d757365725f752c6673757569643d66666239383732372d333301382d383831562d623230632d66346437316b37352c726f6f74636f6e746578743d73746166665f752c736d61636b6673726f6f743d2b2c293a2c7569643e", @ANYRESDEC=r5, @ANYBLOB="00100000000000007872616973652c666f776e65723e", @ANYRESDEC=0xee00, @ANYBLOB=',\x00'])
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff})
r7 = dup2(r6, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
pipe2(&(0x7f0000000000)={<r9=>0xffffffffffffffff}, 0x0)
ioctl$RNDCLEARPOOL(r9, 0x5206, &(0x7f00000001c0)=0x80000001)
getdents(r8, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:40 executing program 3:
unshare(0x44000600)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r0, &(0x7f0000000100)=""/164, 0x20000118)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40802)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)

22:45:40 executing program 2 (fault-call:12 fault-nth:6):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:40 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  341.656695][ T4997] usb 4-1: USB disconnect, device number 36
22:45:40 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:40 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  341.794411][T14568] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  341.795190][T14599] FAULT_INJECTION: forcing a failure.
[  341.795190][T14599] name failslab, interval 1, probability 0, space 0, times 0
[  341.810088][T14568] FAT-fs (loop0): Filesystem has been set read-only
[  341.828436][    T5] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  341.829069][T14568] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  341.867600][T14599] CPU: 0 PID: 14599 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  341.877782][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  341.887959][T14599] Call Trace:
[  341.891250][T14599]  dump_stack+0x14a/0x1ce
[  341.895604][T14599]  ? devkmsg_release+0x11c/0x11c
[  341.900536][T14599]  ? show_regs_print_info+0x12/0x12
[  341.906343][T14599]  ? __rcu_read_lock+0x50/0x50
[  341.911135][T14599]  ? update_io_ticks+0x1aa/0x1c0
[  341.916586][T14599]  should_fail+0x6fb/0x860
[  341.921095][T14599]  ? setup_fault_attr+0x3d0/0x3d0
[  341.926120][T14599]  ? mempool_alloc_slab+0x16/0x30
[  341.931224][T14599]  ? mempool_free+0x380/0x380
[  341.935892][T14599]  should_failslab+0x5/0x20
[  341.940433][T14599]  kmem_cache_alloc+0x36/0x260
[  341.945198][T14599]  ? mempool_free+0x380/0x380
[  341.949899][T14599]  mempool_alloc_slab+0x16/0x30
[  341.954793][T14599]  mempool_alloc+0x116/0x690
[  341.959385][T14599]  ? blk_mq_requeue_work+0x9d0/0x9d0
[  341.964670][T14599]  ? mempool_resize+0x910/0x910
[  341.966168][T14568] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  341.969516][T14599]  ? generic_make_request+0xd0f/0xdb0
[  341.969526][T14599]  ? blk_attempt_plug_merge+0x310/0x310
[  341.969536][T14599]  ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570
[  341.969551][T14599]  bio_alloc_bioset+0x209/0x690
[  341.998844][T14599]  ? __bio_add_page+0x274/0x430
[  342.003666][T14599]  ? bio_chain_endio+0xf0/0xf0
[  342.008400][T14599]  ? submit_bio+0x14b/0x570
[  342.013310][T14599]  submit_bh_wbc+0x1ba/0x790
[  342.017906][T14599]  __block_write_full_page+0x862/0xe30
[  342.023782][T14599]  ? mark_buffer_write_io_error+0x150/0x150
[  342.029683][T14599]  ? fat_block_truncate_page+0x50/0x50
[  342.035141][T14599]  __mpage_writepage+0x141f/0x1890
[  342.040245][T14599]  ? rmap_walk+0xd0/0xd0
[  342.044458][T14599]  ? mpage_writepages+0x2f0/0x2f0
[  342.049471][T14599]  ? page_mkclean+0x330/0x330
[  342.054150][T14599]  ? percpu_counter_add_batch+0x12d/0x150
[  342.059851][T14599]  ? wait_on_page_writeback+0x200/0x200
[  342.065377][T14599]  ? stack_trace_save+0x123/0x1f0
[  342.070382][T14599]  ? __rcu_read_lock+0x50/0x50
[  342.075148][T14599]  write_cache_pages+0x912/0xdc0
[  342.080063][T14599]  ? mpage_writepages+0x2f0/0x2f0
[  342.085061][T14599]  ? tag_pages_for_writeback+0x580/0x580
[  342.090669][T14599]  ? avc_has_perm_noaudit+0x400/0x400
[  342.096275][T14599]  mpage_writepages+0x155/0x2f0
[  342.101099][T14599]  ? fat_block_truncate_page+0x50/0x50
[  342.106528][T14599]  ? clean_buffers+0x230/0x230
[  342.112326][T14599]  ? arch_stack_walk+0xb8/0x120
[  342.117174][T14599]  ? fat_block_truncate_page+0x50/0x50
[  342.122623][T14599]  ? unwind_get_return_address_ptr+0x130/0x130
[  342.128767][T14599]  ? memset+0x1f/0x40
[  342.132733][T14599]  ? fat_readpage+0x20/0x20
[  342.137209][T14599]  do_writepages+0x13a/0x280
[  342.141800][T14599]  ? __writepage+0xc0/0xc0
[  342.146265][T14599]  ? __rcu_read_lock+0x50/0x50
[  342.151282][T14599]  ? unwind_get_return_address_ptr+0x130/0x130
[  342.157425][T14599]  filemap_write_and_wait_range+0x3b2/0x460
[  342.163293][T14599]  ? filemap_write_and_wait+0x420/0x420
[  342.168826][T14599]  ? unwind_get_return_address+0x48/0x90
[  342.174435][T14599]  ? timespec64_trunc+0x67/0xa0
[  342.179263][T14599]  ? fat_truncate_time+0x402/0x520
[  342.184349][T14599]  generic_file_direct_write+0x18b/0x6d0
[  342.189957][T14599]  ? pagecache_write_end+0xa0/0xa0
[  342.195053][T14599]  ? file_update_time+0x398/0x3f0
[  342.200095][T14599]  ? file_remove_privs+0x640/0x640
[  342.205184][T14599]  ? __kasan_slab_free+0x1f2/0x230
[  342.210288][T14599]  ? down_write+0xd8/0x150
[  342.214694][T14599]  __generic_file_write_iter+0x25f/0x440
[  342.220349][T14599]  ? get_pid_task+0x86/0x90
[  342.224834][T14599]  generic_file_write_iter+0x4a6/0x650
[  342.230372][T14599]  __vfs_write+0x59d/0x720
[  342.234764][T14599]  ? __kernel_write+0x340/0x340
[  342.239633][T14599]  ? avc_policy_seqno+0x17/0x70
[  342.244557][T14599]  ? security_file_permission+0x128/0x300
[  342.250369][T14599]  vfs_write+0x217/0x4f0
[  342.254610][T14599]  ksys_write+0x18c/0x2c0
[  342.259349][T14599]  ? file_open_root+0x450/0x450
[  342.264187][T14599]  ? __ia32_sys_read+0x80/0x80
[  342.268938][T14599]  do_syscall_64+0xcb/0x150
[  342.273459][T14599]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  342.279338][T14599] RIP: 0033:0x45ca69
[  342.283205][T14599] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  342.302890][T14599] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  342.311288][T14599] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  342.319244][T14599] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  342.327209][T14599] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  342.335183][T14599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  342.343322][T14599] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
[  342.387926][    T5] usb 6-1: Using ep0 maxpacket: 16
[  342.507966][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.519395][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.530313][    T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  342.539811][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.548700][    T5] usb 6-1: config 0 descriptor??
[  342.788293][T14538] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  343.028395][    T5] hid (null): unknown global tag 0xc
[  343.037014][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.045199][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.052872][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.060525][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.067396][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.075495][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.082623][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.089615][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.096461][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.103468][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.111533][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.118935][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.125818][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.133262][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.140184][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.147030][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.153905][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.160967][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.167869][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.174748][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.181784][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.188698][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.195566][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.202451][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.209449][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.216315][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.223283][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.230212][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.237074][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.245484][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.253443][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.261061][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.268656][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.275522][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.283661][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.291125][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.298270][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.305386][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.312267][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.319932][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.326781][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.333674][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.340674][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.347526][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.354524][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.361782][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.368712][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.375861][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.382790][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.389875][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.397607][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.404508][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.411401][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.418582][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.425823][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.432887][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.439876][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.448587][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.455452][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x1
[  343.463193][    T5] wacom 0003:056A:0023.0019: unknown main item tag 0x0
[  343.470092][    T5] wacom 0003:056A:0023.0019: unknown global tag 0xc
[  343.476660][    T5] wacom 0003:056A:0023.0019: item 0 1 1 12 parsing failed
[  343.483936][    T5] wacom 0003:056A:0023.0019: parse failed
[  343.489724][    T5] wacom: probe of 0003:056A:0023.0019 failed with error -22
[  343.498346][    T5] usb 6-1: USB disconnect, device number 30
[  344.007824][    T5] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  344.247817][    T5] usb 6-1: Using ep0 maxpacket: 16
[  344.367902][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.378784][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.388889][    T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  344.397946][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.406530][    T5] usb 6-1: config 0 descriptor??
[  344.648195][T14538] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
22:45:43 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:43 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000006100000054ddffffff0000020000000000000000b7f0cf73cb1a2606a3cdf375b701982796f5"], &(0x7f0000281ffc)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xcc0, 0x0, &(0x7f00000000c0)="5c710957ca9f13550b2ac06c05dd", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

22:45:43 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xd00)

22:45:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="0400000000000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='flush'])
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r3)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r4 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:43 executing program 2 (fault-call:12 fault-nth:7):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:43 executing program 5:
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000c5d0e00050500010d8390102030109022400010000000009040000028aaa8f00090500"/54], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @link_local}, 0x1a, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'netdevsim0\x00'})
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:43 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:43 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f00000000c0)=""/9, 0x9}, 0x3a12}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000240)='./file0\x00', 0x232781, 0x162)
fchdir(r4)
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r5, 0x84)
lseek(r5, 0x0, 0x2)
r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8400fffffffa)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

22:45:43 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  344.797874][    T5] usbhid 6-1:0.0: can't add hid device: -71
[  344.798291][T14628] FAULT_INJECTION: forcing a failure.
[  344.798291][T14628] name failslab, interval 1, probability 0, space 0, times 0
[  344.814598][T14630] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  344.838204][    T5] usbhid: probe of 6-1:0.0 failed with error -71
22:45:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

[  344.885414][T14630] FAT-fs (loop0): Filesystem has been set read-only
[  344.892553][    T5] usb 6-1: USB disconnect, device number 31
[  344.903632][T14628] CPU: 0 PID: 14628 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  344.913794][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  344.923844][T14628] Call Trace:
[  344.927655][T14628]  dump_stack+0x14a/0x1ce
[  344.931983][T14628]  ? devkmsg_release+0x11c/0x11c
[  344.937261][T14628]  ? show_regs_print_info+0x12/0x12
[  344.942461][T14628]  ? __rcu_read_lock+0x50/0x50
[  344.947228][T14628]  ? update_io_ticks+0x1aa/0x1c0
[  344.952193][T14628]  should_fail+0x6fb/0x860
[  344.952852][T14654] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  344.956640][T14628]  ? setup_fault_attr+0x3d0/0x3d0
[  344.956651][T14628]  ? mempool_alloc_slab+0x16/0x30
[  344.956663][T14628]  ? mempool_free+0x380/0x380
22:45:43 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xe00)

[  344.972330][T14630] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  344.974603][T14628]  should_failslab+0x5/0x20
[  344.974612][T14628]  kmem_cache_alloc+0x36/0x260
[  344.974626][T14628]  ? mempool_free+0x380/0x380
[  344.983396][T14661] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  344.987072][T14628]  mempool_alloc_slab+0x16/0x30
[  344.987086][T14628]  mempool_alloc+0x116/0x690
[  345.018550][T14628]  ? blk_mq_requeue_work+0x9d0/0x9d0
[  345.023975][T14628]  ? mempool_resize+0x910/0x910
[  345.028801][T14628]  ? generic_make_request+0xd0f/0xdb0
[  345.034146][T14628]  ? blk_attempt_plug_merge+0x310/0x310
[  345.039661][T14628]  ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570
[  345.045438][T14628]  bio_alloc_bioset+0x209/0x690
[  345.050285][T14628]  ? __bio_add_page+0x274/0x430
[  345.055104][T14628]  ? bio_chain_endio+0xf0/0xf0
[  345.059840][T14628]  ? submit_bio+0x14b/0x570
[  345.064325][T14628]  submit_bh_wbc+0x1ba/0x790
[  345.068899][T14628]  __block_write_full_page+0x862/0xe30
[  345.074984][T14628]  ? mark_buffer_write_io_error+0x150/0x150
[  345.080881][T14628]  ? fat_block_truncate_page+0x50/0x50
[  345.086584][T14628]  __mpage_writepage+0x141f/0x1890
[  345.091683][T14628]  ? rmap_walk+0xd0/0xd0
[  345.096335][T14628]  ? mpage_writepages+0x2f0/0x2f0
[  345.101351][T14628]  ? page_mkclean+0x330/0x330
[  345.106015][T14628]  ? percpu_counter_add_batch+0x12d/0x150
[  345.111714][T14628]  ? wait_on_page_writeback+0x200/0x200
[  345.117243][T14628]  ? stack_trace_save+0x123/0x1f0
[  345.122259][T14628]  ? __rcu_read_lock+0x50/0x50
[  345.127019][T14628]  write_cache_pages+0x912/0xdc0
[  345.131933][T14628]  ? mpage_writepages+0x2f0/0x2f0
[  345.136952][T14628]  ? tag_pages_for_writeback+0x580/0x580
[  345.142759][T14628]  ? avc_has_perm_noaudit+0x400/0x400
[  345.148144][T14628]  mpage_writepages+0x155/0x2f0
[  345.153061][T14628]  ? fat_block_truncate_page+0x50/0x50
[  345.158524][T14628]  ? clean_buffers+0x230/0x230
[  345.163297][T14628]  ? arch_stack_walk+0xb8/0x120
[  345.168125][T14628]  ? fat_block_truncate_page+0x50/0x50
[  345.173563][T14628]  ? unwind_get_return_address_ptr+0x130/0x130
[  345.179688][T14628]  ? memset+0x1f/0x40
[  345.183734][T14628]  ? fat_readpage+0x20/0x20
[  345.188287][T14628]  do_writepages+0x13a/0x280
[  345.192866][T14628]  ? __writepage+0xc0/0xc0
[  345.197327][T14628]  ? __rcu_read_lock+0x50/0x50
[  345.202272][T14628]  ? unwind_get_return_address_ptr+0x130/0x130
[  345.209030][T14628]  filemap_write_and_wait_range+0x3b2/0x460
[  345.214923][T14628]  ? filemap_write_and_wait+0x420/0x420
[  345.220465][T14628]  ? unwind_get_return_address+0x48/0x90
[  345.226102][T14628]  ? timespec64_trunc+0x67/0xa0
[  345.231892][T14628]  ? fat_truncate_time+0x402/0x520
[  345.236985][T14628]  generic_file_direct_write+0x18b/0x6d0
[  345.242688][T14628]  ? pagecache_write_end+0xa0/0xa0
[  345.247780][T14628]  ? file_update_time+0x398/0x3f0
[  345.252801][T14628]  ? file_remove_privs+0x640/0x640
[  345.258072][T14628]  ? __kasan_slab_free+0x1f2/0x230
[  345.263156][T14628]  ? down_write+0xd8/0x150
[  345.267551][T14628]  __generic_file_write_iter+0x25f/0x440
[  345.273334][T14628]  ? get_pid_task+0x86/0x90
[  345.277821][T14628]  generic_file_write_iter+0x4a6/0x650
[  345.283262][T14628]  __vfs_write+0x59d/0x720
[  345.287654][T14628]  ? __kernel_write+0x340/0x340
[  345.292496][T14628]  ? avc_policy_seqno+0x17/0x70
[  345.297326][T14628]  ? security_file_permission+0x128/0x300
[  345.303015][T14628]  vfs_write+0x217/0x4f0
[  345.307287][T14628]  ksys_write+0x18c/0x2c0
[  345.311590][T14628]  ? file_open_root+0x450/0x450
[  345.316469][T14628]  ? __ia32_sys_read+0x80/0x80
[  345.321231][T14628]  do_syscall_64+0xcb/0x150
[  345.325781][T14628]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  345.331742][T14628] RIP: 0033:0x45ca69
[  345.335613][T14628] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  345.355546][T14628] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  345.364060][T14628] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  345.372031][T14628] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  345.379989][T14628] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
22:45:44 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:44 executing program 2 (fault-call:12 fault-nth:8):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:44 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  345.388059][T14628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  345.396026][T14628] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
22:45:44 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:44 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f00000000c0)=""/9, 0x9}, 0x3a12}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r4 = open(&(0x7f0000000240)='./file0\x00', 0x232781, 0x162)
fchdir(r4)
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r5, 0x84)
lseek(r5, 0x0, 0x2)
r6 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8400fffffffa)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

22:45:44 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  345.733650][T14692] FAULT_INJECTION: forcing a failure.
[  345.733650][T14692] name failslab, interval 1, probability 0, space 0, times 0
[  345.757870][    T5] usb 6-1: new low-speed USB device number 32 using dummy_hcd
[  345.806800][T14696] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  345.826238][T14692] CPU: 1 PID: 14692 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  345.829690][T14696] FAT-fs (loop0): Filesystem has been set read-only
[  345.836578][T14692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  345.836582][T14692] Call Trace:
[  345.836601][T14692]  dump_stack+0x14a/0x1ce
[  345.836612][T14692]  ? devkmsg_release+0x11c/0x11c
[  345.836625][T14692]  ? show_regs_print_info+0x12/0x12
[  345.852395][T14696] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  345.853282][T14692]  ? __rcu_read_lock+0x50/0x50
[  345.853296][T14692]  ? update_io_ticks+0x1aa/0x1c0
[  345.872806][T14696] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  345.879000][T14692]  should_fail+0x6fb/0x860
[  345.879010][T14692]  ? setup_fault_attr+0x3d0/0x3d0
[  345.879022][T14692]  ? mempool_alloc_slab+0x16/0x30
[  345.879028][T14692]  ? mempool_free+0x380/0x380
[  345.879035][T14692]  should_failslab+0x5/0x20
[  345.879044][T14692]  kmem_cache_alloc+0x36/0x260
[  345.879051][T14692]  ? mempool_free+0x380/0x380
[  345.879065][T14692]  mempool_alloc_slab+0x16/0x30
[  345.884985][T14711] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  345.889210][T14692]  mempool_alloc+0x116/0x690
[  345.889221][T14692]  ? blk_mq_requeue_work+0x9d0/0x9d0
[  345.889228][T14692]  ? mempool_resize+0x910/0x910
[  345.889235][T14692]  ? generic_make_request+0xd0f/0xdb0
[  345.889243][T14692]  ? blk_attempt_plug_merge+0x310/0x310
[  345.889251][T14692]  ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570
[  345.889265][T14692]  bio_alloc_bioset+0x209/0x690
[  345.979886][T14692]  ? __bio_add_page+0x274/0x430
[  345.984814][T14692]  ? bio_chain_endio+0xf0/0xf0
[  345.989565][T14692]  ? submit_bio+0x14b/0x570
[  345.994100][T14692]  submit_bh_wbc+0x1ba/0x790
[  345.997828][    T5] usb 6-1: Invalid ep0 maxpacket: 16
[  345.998808][T14692]  __block_write_full_page+0x862/0xe30
[  346.010546][T14692]  ? mark_buffer_write_io_error+0x150/0x150
[  346.016944][T14692]  ? fat_block_truncate_page+0x50/0x50
[  346.022501][T14692]  __mpage_writepage+0x141f/0x1890
[  346.027610][T14692]  ? rmap_walk+0xd0/0xd0
[  346.031830][T14692]  ? mpage_writepages+0x2f0/0x2f0
[  346.037007][T14692]  ? page_mkclean+0x330/0x330
[  346.042530][T14692]  ? percpu_counter_add_batch+0x12d/0x150
[  346.048227][T14692]  ? wait_on_page_writeback+0x200/0x200
[  346.053754][T14692]  ? stack_trace_save+0x123/0x1f0
[  346.058748][T14692]  ? __rcu_read_lock+0x50/0x50
[  346.063511][T14692]  write_cache_pages+0x912/0xdc0
[  346.068601][T14692]  ? mpage_writepages+0x2f0/0x2f0
[  346.074294][T14692]  ? tag_pages_for_writeback+0x580/0x580
[  346.079899][T14692]  ? avc_has_perm_noaudit+0x400/0x400
[  346.085264][T14692]  mpage_writepages+0x155/0x2f0
[  346.090095][T14692]  ? fat_block_truncate_page+0x50/0x50
[  346.095558][T14692]  ? clean_buffers+0x230/0x230
[  346.100312][T14692]  ? arch_stack_walk+0xb8/0x120
[  346.105163][T14692]  ? fat_block_truncate_page+0x50/0x50
[  346.111478][T14692]  ? unwind_get_return_address_ptr+0x130/0x130
[  346.118071][T14692]  ? memset+0x1f/0x40
[  346.122157][T14692]  ? fat_readpage+0x20/0x20
[  346.126750][T14692]  do_writepages+0x13a/0x280
[  346.131334][T14692]  ? __writepage+0xc0/0xc0
[  346.135748][T14692]  ? __rcu_read_lock+0x50/0x50
[  346.140488][T14692]  ? unwind_get_return_address_ptr+0x130/0x130
[  346.146630][T14692]  filemap_write_and_wait_range+0x3b2/0x460
[  346.147745][    T5] usb 6-1: new low-speed USB device number 33 using dummy_hcd
[  346.152514][T14692]  ? filemap_write_and_wait+0x420/0x420
[  346.152524][T14692]  ? unwind_get_return_address+0x48/0x90
[  346.152539][T14692]  ? timespec64_trunc+0x67/0xa0
[  346.176128][T14692]  ? fat_truncate_time+0x402/0x520
[  346.181345][T14692]  generic_file_direct_write+0x18b/0x6d0
[  346.186962][T14692]  ? pagecache_write_end+0xa0/0xa0
[  346.192081][T14692]  ? file_update_time+0x398/0x3f0
[  346.199088][T14692]  ? file_remove_privs+0x640/0x640
[  346.205723][T14692]  ? __kasan_slab_free+0x1f2/0x230
[  346.210870][T14692]  ? down_write+0xd8/0x150
[  346.215462][T14692]  __generic_file_write_iter+0x25f/0x440
[  346.221100][T14692]  ? get_pid_task+0x86/0x90
[  346.225848][T14692]  generic_file_write_iter+0x4a6/0x650
[  346.231526][T14692]  __vfs_write+0x59d/0x720
[  346.236046][T14692]  ? __kernel_write+0x340/0x340
[  346.240946][T14692]  ? avc_policy_seqno+0x17/0x70
[  346.245988][T14692]  ? security_file_permission+0x128/0x300
[  346.252480][T14692]  vfs_write+0x217/0x4f0
[  346.256699][T14692]  ksys_write+0x18c/0x2c0
[  346.261010][T14692]  ? file_open_root+0x450/0x450
[  346.265830][T14692]  ? __ia32_sys_read+0x80/0x80
[  346.270578][T14692]  do_syscall_64+0xcb/0x150
[  346.275237][T14692]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  346.281196][T14692] RIP: 0033:0x45ca69
[  346.285088][T14692] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  346.304763][T14692] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  346.315024][T14692] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  346.322975][T14692] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  346.330945][T14692] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  346.338928][T14692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  346.347859][T14692] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
[  346.397748][    T5] usb 6-1: Invalid ep0 maxpacket: 16
[  346.403679][    T5] usb usb6-port1: attempt power cycle
[  347.137732][    T5] usb 6-1: new low-speed USB device number 34 using dummy_hcd
[  347.227804][    T5] usb 6-1: Invalid ep0 maxpacket: 16
[  347.377734][    T5] usb 6-1: new low-speed USB device number 35 using dummy_hcd
[  347.467808][    T5] usb 6-1: Invalid ep0 maxpacket: 16
[  347.473323][    T5] usb usb6-port1: unable to enumerate USB device
22:45:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc539, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x1dc}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7f, 0x20, 0x9}}]}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0xa0382)
ioctl$USBDEVFS_SETINTERFACE(r1, 0xc0105502, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000080)=0x8)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))

22:45:46 executing program 3:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x42)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x0, &(0x7f0000000200), 0x100080, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC=r6, @ANYBLOB=',smackfstransmute=fd/3\x00,\x00'])

22:45:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xf00)

22:45:46 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:46 executing program 2 (fault-call:12 fault-nth:9):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:46 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:46 executing program 3:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r1, 0x2081fc)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x4c042, 0x43)
ftruncate(r2, 0x200004)
fcntl$setstatus(r0, 0x4, 0x6100)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
r3 = open(&(0x7f00000001c0)='./file0\x00', 0x149042, 0x0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x4003fe)
ftruncate(r0, 0x9)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000002c0)={0x0, r0})

[  347.812102][T14734] FAULT_INJECTION: forcing a failure.
[  347.812102][T14734] name failslab, interval 1, probability 0, space 0, times 0
[  347.825817][T14734] CPU: 1 PID: 14734 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  347.835980][T14734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  347.846032][T14734] Call Trace:
[  347.849325][T14734]  dump_stack+0x14a/0x1ce
[  347.853650][T14734]  ? devkmsg_release+0x11c/0x11c
[  347.858936][T14734]  ? show_regs_print_info+0x12/0x12
[  347.864164][T14734]  ? __rcu_read_lock+0x50/0x50
[  347.867511][T14733] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  347.868927][T14734]  ? update_io_ticks+0x1aa/0x1c0
[  347.868937][T14734]  should_fail+0x6fb/0x860
[  347.868944][T14734]  ? setup_fault_attr+0x3d0/0x3d0
[  347.868955][T14734]  ? mempool_alloc_slab+0x16/0x30
[  347.868969][T14734]  ? mempool_free+0x380/0x380
[  347.881155][T14733] FAT-fs (loop0): Filesystem has been set read-only
[  347.881688][T14734]  should_failslab+0x5/0x20
[  347.895521][T14733] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  347.896565][T14734]  kmem_cache_alloc+0x36/0x260
[  347.896576][T14734]  ? mempool_free+0x380/0x380
[  347.896590][T14734]  mempool_alloc_slab+0x16/0x30
[  347.912510][T14733] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  347.920230][T14734]  mempool_alloc+0x116/0x690
[  347.920241][T14734]  ? blk_mq_requeue_work+0x9d0/0x9d0
[  347.920248][T14734]  ? mempool_resize+0x910/0x910
[  347.920261][T14734]  ? generic_make_request+0xd0f/0xdb0
[  347.926342][T14762] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  347.929689][T14734]  ? blk_attempt_plug_merge+0x310/0x310
[  347.929698][T14734]  ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570
[  347.929712][T14734]  bio_alloc_bioset+0x209/0x690
[  347.929724][T14734]  ? __bio_add_page+0x274/0x430
[  347.991301][T14734]  ? bio_chain_endio+0xf0/0xf0
[  347.996082][T14734]  ? submit_bio+0x14b/0x570
[  348.000591][T14734]  submit_bh_wbc+0x1ba/0x790
[  348.005298][T14734]  __block_write_full_page+0x862/0xe30
[  348.010756][T14734]  ? mark_buffer_write_io_error+0x150/0x150
[  348.016651][T14734]  ? fat_block_truncate_page+0x50/0x50
[  348.022119][T14734]  __mpage_writepage+0x141f/0x1890
[  348.027227][T14734]  ? rmap_walk+0xd0/0xd0
[  348.031469][T14734]  ? mpage_writepages+0x2f0/0x2f0
[  348.036488][T14734]  ? page_mkclean+0x330/0x330
[  348.041430][T14734]  ? percpu_counter_add_batch+0x12d/0x150
[  348.047238][T14734]  ? wait_on_page_writeback+0x200/0x200
[  348.052875][T14734]  ? stack_trace_save+0x123/0x1f0
[  348.057907][T14734]  ? __rcu_read_lock+0x50/0x50
[  348.062674][T14734]  write_cache_pages+0x912/0xdc0
[  348.067650][T14734]  ? mpage_writepages+0x2f0/0x2f0
[  348.072943][T14734]  ? tag_pages_for_writeback+0x580/0x580
[  348.078584][T14734]  ? avc_has_perm_noaudit+0x400/0x400
[  348.084051][T14734]  mpage_writepages+0x155/0x2f0
[  348.088930][T14734]  ? fat_block_truncate_page+0x50/0x50
[  348.094394][T14734]  ? clean_buffers+0x230/0x230
[  348.099215][T14734]  ? arch_stack_walk+0xb8/0x120
[  348.104279][T14734]  ? fat_block_truncate_page+0x50/0x50
[  348.109716][T14734]  ? unwind_get_return_address_ptr+0x130/0x130
[  348.116043][T14734]  ? memset+0x1f/0x40
[  348.120043][T14734]  ? fat_readpage+0x20/0x20
[  348.124541][T14734]  do_writepages+0x13a/0x280
[  348.129116][T14734]  ? __writepage+0xc0/0xc0
[  348.133550][T14734]  ? __rcu_read_lock+0x50/0x50
[  348.138306][T14734]  ? unwind_get_return_address_ptr+0x130/0x130
[  348.144451][T14734]  filemap_write_and_wait_range+0x3b2/0x460
[  348.150317][T14734]  ? filemap_write_and_wait+0x420/0x420
[  348.155866][T14734]  ? unwind_get_return_address+0x48/0x90
[  348.161492][T14734]  ? timespec64_trunc+0x67/0xa0
[  348.166346][T14734]  ? fat_truncate_time+0x402/0x520
[  348.171456][T14734]  generic_file_direct_write+0x18b/0x6d0
[  348.177081][T14734]  ? pagecache_write_end+0xa0/0xa0
[  348.182192][T14734]  ? file_update_time+0x398/0x3f0
[  348.187214][T14734]  ? file_remove_privs+0x640/0x640
[  348.192322][T14734]  ? __kasan_slab_free+0x1f2/0x230
[  348.197407][T14734]  ? down_write+0xd8/0x150
[  348.201828][T14734]  __generic_file_write_iter+0x25f/0x440
[  348.207468][T14734]  ? get_pid_task+0x86/0x90
[  348.211948][T14734]  generic_file_write_iter+0x4a6/0x650
[  348.217401][T14734]  __vfs_write+0x59d/0x720
[  348.221794][T14734]  ? __kernel_write+0x340/0x340
[  348.226766][T14734]  ? avc_policy_seqno+0x17/0x70
[  348.231605][T14734]  ? security_file_permission+0x128/0x300
[  348.237300][T14734]  vfs_write+0x217/0x4f0
[  348.241587][T14734]  ksys_write+0x18c/0x2c0
[  348.245934][T14734]  ? file_open_root+0x450/0x450
[  348.250784][T14734]  ? __ia32_sys_read+0x80/0x80
[  348.255524][T14734]  do_syscall_64+0xcb/0x150
[  348.260023][T14734]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  348.265890][T14734] RIP: 0033:0x45ca69
[  348.269760][T14734] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  348.289515][T14734] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  348.298118][T14734] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
22:45:47 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_delrule={0x60, 0x21, 0x8, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x4, 0x4}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x84}, @FRA_SRC={0x8, 0x2, @loopback}, @FRA_DST={0x8, 0x1, @local}, @FRA_DST={0x8, 0x1, @private=0xa010102}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x100000001}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_FLOW={0x8, 0xb, 0x6a97735a}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x1884)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x50b200, 0x0)
r4 = socket(0xb, 0x3, 0x1)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48008}, 0x40000)
ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000001c0)={0x5, 0x9, {0x0, 0xf3, 0x0, {0xb36, 0x9b8b}, {0x322, 0x3ff}, @cond=[{0x4da, 0x9, 0x7f, 0x4, 0x3, 0x81}, {0x6, 0x3, 0x4, 0xd53b, 0x3, 0x5}]}, {0x53, 0x9, 0x40, {0x5, 0x7}, {0xc6, 0x5}, @ramp={0x101, 0x1000, {0xf43, 0x401, 0x8, 0x77a}}}})
r5 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1100)

22:45:47 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  348.306111][T14734] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  348.314539][T14734] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  348.322524][T14734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  348.330515][T14734] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
[  348.442356][T14775] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  348.451696][T14775] FAT-fs (loop0): Filesystem has been set read-only
[  348.458830][T14775] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  348.475486][T14775] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  348.501102][T14787] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  348.687683][  T140] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  348.927673][  T140] usb 6-1: Using ep0 maxpacket: 32
[  349.047756][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  349.059115][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.069399][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 127, changing to 10
[  349.080931][  T140] usb 6-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00
[  349.090276][  T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.099372][  T140] usb 6-1: config 0 descriptor??
[  349.338154][T14736] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  349.346198][T14736] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.5' sets config #8
[  349.598217][  T140] hid (null): unknown global tag 0xc
[  349.606778][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.616058][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.624307][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.632434][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.640559][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.648670][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.656769][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.664906][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.673022][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.681146][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.689266][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.697343][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.705465][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.713609][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.721979][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.730128][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.738360][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.746453][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.754657][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.762783][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.770878][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.778988][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.787082][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.795182][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.803578][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.811684][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.820504][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.828624][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.836696][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.847323][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.855430][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.863525][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.871696][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.879822][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.887954][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.896119][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.904419][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.912526][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.920730][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.933297][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.941412][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.949545][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.957643][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.965803][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.973931][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.982079][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.990173][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  349.998309][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.006382][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.015116][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.023608][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.031751][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.040843][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.048974][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.057064][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.065195][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.073311][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.081425][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.089532][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x1
[  350.097629][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown main item tag 0x0
[  350.105701][  T140] logitech-djreceiver 0003:046D:C539.001A: unknown global tag 0xc
[  350.113562][  T140] logitech-djreceiver 0003:046D:C539.001A: item 0 1 1 12 parsing failed
[  350.122010][  T140] logitech-djreceiver 0003:046D:C539.001A: logi_dj_probe: parse failed
[  350.130286][  T140] logitech-djreceiver: probe of 0003:046D:C539.001A failed with error -22
[  350.140082][  T140] usb 6-1: USB disconnect, device number 36
[  350.697642][  T140] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  350.937592][  T140] usb 6-1: Using ep0 maxpacket: 32
[  351.057666][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  351.068803][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.079170][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 127, changing to 10
[  351.091429][  T140] usb 6-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00
[  351.100756][  T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.109589][  T140] usb 6-1: config 0 descriptor??
22:45:49 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:49 executing program 2 (fault-call:12 fault-nth:10):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:49 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=<r3=>0x0)
syz_open_procfs(r3, &(0x7f00000000c0)='uid_map\x00')
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r5)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000100)={0x0, @adiantum})
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r6 = socket$inet(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r8)
keyctl$chown(0x4, 0x0, r5, r8)
ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000040)={0x8, 'bridge0\x00', {'macvlan0\x00'}, 0x1f})
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg(r0, &(0x7f0000004d80), 0x5e, 0x4000000)

22:45:49 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000000000040042dcddb4000d5d060f16367630900144c04000001b10000090581030000000000ca93b00b2b6bb1163ecae393da506d9420aebf3668830aa7ee8a1e521f9ec6965524584d666ad709effd584ac341000b698e81de0e2f6d6d069e87d97ead7ef5f3296d1d8288830bc5f5681bc7d91f67240f77e588041bdea9a805c9e9a46f337e9f86b059f1daac"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="da0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57c, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x41)
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:49 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1200)

22:45:49 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:50 executing program 3:
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = accept4(r0, &(0x7f0000000100)=@un=@abs, &(0x7f0000000180)=0x80, 0x80800)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

22:45:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
r4 = socket(0x100000000011, 0x2, 0x0)
bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80)
getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0}, &(0x7f00000002c0)=0xfeeb)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0xa, r5}, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

[  351.297633][  T140] usbhid 6-1:0.0: can't add hid device: -71
[  351.303711][  T140] usbhid: probe of 6-1:0.0 failed with error -71
[  351.314362][T14812] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  351.333362][T14811] FAULT_INJECTION: forcing a failure.
[  351.333362][T14811] name failslab, interval 1, probability 0, space 0, times 0
[  351.337985][T14812] FAT-fs (loop0): Filesystem has been set read-only
[  351.367880][T14812] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  351.375873][T14811] CPU: 0 PID: 14811 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  351.381808][  T140] usb 6-1: USB disconnect, device number 37
22:45:50 executing program 3:
r0 = socket$inet(0x10, 0x80000, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x120000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000600)=0x80, 0x4)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_addrs=@xdp={0x2c, 0x1, 0x0, 0x2}})
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$cont(0x20, r2, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0xfff, 0x8ef8b0c4, 0x4, 0x4, 0x4, "2d5b3b0bb1e19f0020dc74d259bcad6b2e22b8", 0x401, 0x400})
setuid(r4)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0x0, r6)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={r2, r4, r6}, 0xc)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYRESOCT=r2], 0x0)
syz_usb_connect(0x0, 0x51e, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xfc, 0xfe, 0x9e, 0x20, 0x1410, 0x6000, 0x3857, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50c, 0x2, 0x7f, 0xf7, 0x10, 0x0, [{{0x9, 0x4, 0x21, 0x1, 0x1, 0xd7, 0x51, 0x3, 0x0, [], [{{0x9, 0x5, 0xf, 0x10, 0x400, 0x2, 0x1, 0x8, [@generic={0x9b, 0x11, "30f3088d60ad45d269fe7e914b970ce916ee050392820afb4147174d5c10c1060ce32ad3ca2d5cedd4069c34e800847efc1538c394039b31ce2be24f0e5745aa61f4c30e6ff166405c6520dd7601a83f78bb40b7489d8903f5ec2318dfbb94b7ccd67cdca32245d374795a4697122736c98bc66d9a8e45df38ce871d0a882c0f5629dbfeb7741650a71168b0104a6b8076d5b96810be0c59ef"}]}}]}}, {{0x9, 0x4, 0x3d, 0x0, 0xd, 0xff, 0xf, 0xb3, 0xf7, [], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0xa5, 0x8, 0x6c, [@generic={0x5f, 0x1e, "1627e104118b73f2fe97d2254a588a157dce76b46dfbae7dcc3b61a84e06cb4adbd5c26f36d31a9ad6563866a5c615afb9587abdf9dd1b081fee128a96cedeb6b1c8c1ff40699d176c6c6d724f543db684beea5d5e2a9fd035d6fd9ea8"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0x81, 0x20, 0x3, [@generic={0xf, 0x23, "dcf1d38cc15c939fe2b443f400"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x3, 0xdd, 0xff, [@generic={0x89, 0x10, "03847bb39d72dafdadbe258c74334eea41f21caeae863af5bc515f5eb2770f921d1c563761d39e386d2e9eaa21c0c1e90f0933a284488a67622128de89b8c6a0dd3521cbd35f3b0a3dce81fbad2983d40444f92480d009480584c1607acf3bbf7cca3069f6aafc43ea7f1a4ffdc84ef4c2401e62db6a4aa3239d0ae7234f970dd4c48a92be59e5"}, @generic={0xe3, 0x9, "c7d910687a634b29322958112ec97f3091e15fdc01dcc3314f89d694632a0266026037b67b0c6a1250786792d1678665bef0983a244ec6660b06a943f0df04b98fb75a4d451d39ebd91d6c55a6ef986ec8ca7c2124b98476299226c581920f531ad7712841f3bde8491c2510f24f42cee934cd4ba87984e09418134d4186f9ab41f6a10e7fa88a95f2dd6852dc594baf2a8d6438ef2227e0808cce7995273e3e7d2cab623570305bbb43f55bae014b9bc0a08420844a95b13b77ac8ca8555f722eb19c417bbbfdd1f42447b261925c61a9277f69810ad03024393786cf582c6395"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x1, 0x7, 0x4}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x2, 0x28, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x3f, 0xa65a}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x20, 0x1f, 0x9}}, {{0x9, 0x5, 0x6, 0x3183300f2f942980, 0x10, 0x3, 0x7, 0x0, [@generic={0xbc, 0x7, "85b21390f23ef2cb20dc63f5131e8284407d0053354bf1857d4b07204d4bfeefc449b6c917d105c18f6474b17e81ac0a3cd1f43b693e28878be3a9b8dc1177a508a23f430036c3e07abaca13de0d76b32d4fdfed95fb7fb24ad32694e146a39c442e180844c5ec759895394767bf81b2916eedc878ce052aa7414e51fe22bacaa1f06d3f6addcbd24f8c0bfb84958ac85f37809fb6b7784b51b0acd690af8c4b0613a76065b06239677cd0793bae46534c60d35575d41bac1856"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x1, 0x0, 0x3e, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x81, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1f}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x3f, 0x7f, 0x5}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x6c, 0x1f, 0x2}}, {{0x9, 0x5, 0x9, 0xd, 0x400, 0x6, 0x3f, 0x1, [@generic={0xb1, 0xa, "3412fa85554299edbfc23feb253a02f0a555785ff8e16b6eb347260adbf27e70aadbbffdb24308383ad70cb5881e779089e99ac036d4fdddd1e87cdf413a69ec70dcb1daa993d943d4366196e2ec656039467204b8b855e5351a6c9d9dacbc27005e24ec03d09def633d63be6643d6bee6f5be043263920bcd10bfff8dfb6ed46e65721b2e8a58ef5101c3e188cab24708607fe131b59256df1262a4ac480b9a3a24546441132404361143e7e98cb7"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x5a, 0xff, 0x7, [@generic={0x6e, 0xf, "cdb4be40a5cbf704410e0216616fb292b253e240a54494c1012db4740d56330d477abd42fa97508bfd6811ee86e11f63df3cf931ef29fe0802485c4cbb9ede2f0d1eab6564cbe12a693b38b385d032290bc078e4667476e9c88879ef5d26932447244fdbd71b3bcd90623d7d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6c, 0x3ff}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7, 0x80, 0x1, 0xef, 0x7f}, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="050f0500c0"]})

[  351.386036][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  351.386040][T14811] Call Trace:
[  351.386055][T14811]  dump_stack+0x14a/0x1ce
[  351.386069][T14811]  ? devkmsg_release+0x11c/0x11c
[  351.414591][T14811]  ? show_regs_print_info+0x12/0x12
[  351.420192][T14811]  ? __rcu_read_lock+0x50/0x50
[  351.424957][T14811]  ? update_io_ticks+0x1aa/0x1c0
[  351.430412][T14811]  should_fail+0x6fb/0x860
[  351.434832][T14811]  ? setup_fault_attr+0x3d0/0x3d0
[  351.439888][T14811]  ? mempool_alloc_slab+0x16/0x30
[  351.444908][T14811]  ? mempool_free+0x380/0x380
[  351.449582][T14811]  should_failslab+0x5/0x20
[  351.454211][T14811]  kmem_cache_alloc+0x36/0x260
[  351.459059][T14811]  ? mempool_free+0x380/0x380
[  351.463758][T14811]  mempool_alloc_slab+0x16/0x30
[  351.468607][T14811]  mempool_alloc+0x116/0x690
[  351.473192][T14811]  ? blk_mq_requeue_work+0x9d0/0x9d0
[  351.478499][T14811]  ? mempool_resize+0x910/0x910
[  351.483371][T14811]  ? generic_make_request+0xd0f/0xdb0
[  351.488737][T14811]  ? blk_attempt_plug_merge+0x310/0x310
[  351.494283][T14811]  ? fscrypt_set_bio_crypt_ctx+0x1b1/0x570
[  351.500088][T14811]  bio_alloc_bioset+0x209/0x690
[  351.504940][T14811]  ? __bio_add_page+0x274/0x430
[  351.509815][T14811]  ? bio_chain_endio+0xf0/0xf0
[  351.512183][T14812] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  351.514572][T14811]  ? submit_bio+0x14b/0x570
[  351.514588][T14811]  submit_bh_wbc+0x1ba/0x790
[  351.531555][T14811]  __block_write_full_page+0x862/0xe30
[  351.537019][T14811]  ? mark_buffer_write_io_error+0x150/0x150
[  351.542913][T14811]  ? fat_block_truncate_page+0x50/0x50
[  351.548398][T14811]  __mpage_writepage+0x141f/0x1890
[  351.553518][T14811]  ? rmap_walk+0xd0/0xd0
[  351.557759][T14811]  ? mpage_writepages+0x2f0/0x2f0
[  351.562782][T14811]  ? page_mkclean+0x330/0x330
[  351.567460][T14811]  ? percpu_counter_add_batch+0x12d/0x150
[  351.573473][T14811]  ? wait_on_page_writeback+0x200/0x200
[  351.579022][T14811]  ? stack_trace_save+0x123/0x1f0
[  351.584044][T14811]  ? __rcu_read_lock+0x50/0x50
[  351.588806][T14811]  write_cache_pages+0x912/0xdc0
[  351.593760][T14811]  ? mpage_writepages+0x2f0/0x2f0
[  351.598784][T14811]  ? tag_pages_for_writeback+0x580/0x580
[  351.604420][T14811]  ? avc_has_perm_noaudit+0x400/0x400
[  351.609790][T14811]  mpage_writepages+0x155/0x2f0
[  351.614640][T14811]  ? fat_block_truncate_page+0x50/0x50
[  351.620097][T14811]  ? clean_buffers+0x230/0x230
[  351.624859][T14811]  ? arch_stack_walk+0xb8/0x120
[  351.629706][T14811]  ? fat_block_truncate_page+0x50/0x50
[  351.635171][T14811]  ? unwind_get_return_address_ptr+0x130/0x130
[  351.641317][T14811]  ? memset+0x1f/0x40
22:45:50 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x3f)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800060000000000", @ANYRES64=r0], 0x18}, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10000, 0x0)
ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040))
r5 = socket$unix(0x1, 0x5, 0x0)
connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r6 = gettid()
sendmmsg$unix(r5, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c"], 0x70}], 0x1, 0x0)
close(r0)
close(r5)
close(r1)
ptrace(0x10, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002cbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="1f801cd8f7b4f01411ae2d948e951f973752b556244b061dd563d3045595ad150db7c2ad1e0dea98302651ecad264265d538f922dc9fe444582af959"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4004084)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x188, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x44000)

22:45:50 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  351.645299][T14811]  ? fat_readpage+0x20/0x20
[  351.649799][T14811]  do_writepages+0x13a/0x280
[  351.654384][T14811]  ? __writepage+0xc0/0xc0
[  351.658829][T14811]  ? __rcu_read_lock+0x50/0x50
[  351.663595][T14811]  ? unwind_get_return_address_ptr+0x130/0x130
[  351.669748][T14811]  filemap_write_and_wait_range+0x3b2/0x460
[  351.675643][T14811]  ? filemap_write_and_wait+0x420/0x420
[  351.681222][T14811]  ? unwind_get_return_address+0x48/0x90
[  351.686850][T14811]  ? timespec64_trunc+0x67/0xa0
[  351.691700][T14811]  ? fat_truncate_time+0x402/0x520
22:45:50 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x3f)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0)
socket$unix(0x1, 0x5, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r6 = gettid()
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
sendmmsg$unix(r5, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c"], 0x70}], 0x1, 0x0)
close(r0)
close(r5)
close(r1)

[  351.696810][T14811]  generic_file_direct_write+0x18b/0x6d0
[  351.702446][T14811]  ? pagecache_write_end+0xa0/0xa0
[  351.707550][T14811]  ? file_update_time+0x398/0x3f0
[  351.712568][T14811]  ? file_remove_privs+0x640/0x640
[  351.717685][T14811]  ? __kasan_slab_free+0x1f2/0x230
[  351.723089][T14811]  ? down_write+0xd8/0x150
[  351.727502][T14811]  __generic_file_write_iter+0x25f/0x440
[  351.733135][T14811]  ? get_pid_task+0x86/0x90
[  351.737729][T14811]  generic_file_write_iter+0x4a6/0x650
[  351.743191][T14811]  __vfs_write+0x59d/0x720
[  351.747616][T14811]  ? __kernel_write+0x340/0x340
[  351.752468][T14811]  ? avc_policy_seqno+0x17/0x70
[  351.757327][T14811]  ? security_file_permission+0x128/0x300
[  351.763135][T14811]  vfs_write+0x217/0x4f0
[  351.767551][T14811]  ksys_write+0x18c/0x2c0
[  351.771882][T14811]  ? file_open_root+0x450/0x450
[  351.776732][T14811]  ? __ia32_sys_read+0x80/0x80
[  351.777546][  T140] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  351.781575][T14811]  do_syscall_64+0xcb/0x150
[  351.781591][T14811]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  351.799666][T14811] RIP: 0033:0x45ca69
[  351.803553][T14811] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  351.823265][T14811] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  351.831689][T14811] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  351.839650][T14811] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
22:45:50 executing program 2 (fault-call:12 fault-nth:11):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:50 executing program 3:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x424, 0x9e00, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x234}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001004712bb18812078516aebd4c346100095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000004c40)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001840)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000b80), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x0, 0x0, 0x1, "c1"}, 0x0, 0x0})
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
fstat(r1, &(0x7f0000000000))

[  351.847595][T14811] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  351.855550][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  351.863501][T14811] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
[  352.057995][  T140] usb 6-1: device descriptor read/64, error 18
[  352.066122][T14864] FAULT_INJECTION: forcing a failure.
[  352.066122][T14864] name failslab, interval 1, probability 0, space 0, times 0
[  352.080228][T14864] CPU: 1 PID: 14864 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  352.090484][T14864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  352.100907][T14864] Call Trace:
[  352.104197][T14864]  dump_stack+0x14a/0x1ce
[  352.108524][T14864]  ? devkmsg_release+0x11c/0x11c
[  352.113459][T14864]  ? show_regs_print_info+0x12/0x12
[  352.118711][T14864]  ? blk_mq_requeue_work+0x9d0/0x9d0
[  352.123995][T14864]  should_fail+0x6fb/0x860
[  352.128414][T14864]  ? setup_fault_attr+0x3d0/0x3d0
[  352.133434][T14864]  ? blk_mq_requeue_work+0x9d0/0x9d0
[  352.138722][T14864]  ? mempool_alloc_slab+0x16/0x30
[  352.143744][T14864]  ? mempool_free+0x380/0x380
[  352.148763][T14864]  should_failslab+0x5/0x20
[  352.153266][T14864]  kmem_cache_alloc+0x36/0x260
[  352.158114][T14864]  ? mempool_free+0x380/0x380
[  352.162790][T14864]  mempool_alloc_slab+0x16/0x30
[  352.167637][T14864]  mempool_alloc+0x116/0x690
[  352.172332][T14864]  ? _raw_spin_lock+0xa1/0x170
[  352.177127][T14864]  ? __bio_add_page+0x274/0x430
[  352.181956][T14864]  ? mempool_resize+0x910/0x910
[  352.186782][T14864]  ? _raw_spin_unlock+0x5/0x20
[  352.191539][T14864]  ? page_vma_mapped_walk+0x1d5/0x700
[  352.196904][T14864]  bio_alloc_bioset+0x209/0x690
[  352.201748][T14864]  ? page_mkclean+0x330/0x330
[  352.206422][T14864]  ? __down_read+0xfc/0x240
[  352.210917][T14864]  ? bio_chain_endio+0xf0/0xf0
[  352.216609][T14864]  ? bdev_write_page+0xd3/0x1d0
[  352.222415][T14864]  __mpage_writepage+0x1004/0x1890
[  352.227508][T14864]  ? rmap_walk+0xd0/0xd0
[  352.231829][T14864]  ? mpage_writepages+0x2f0/0x2f0
[  352.236836][T14864]  ? page_mkclean+0x330/0x330
[  352.241521][T14864]  ? percpu_counter_add_batch+0x12d/0x150
[  352.247234][T14864]  ? wait_on_page_writeback+0x200/0x200
[  352.252772][T14864]  ? stack_trace_save+0x123/0x1f0
[  352.257866][T14864]  ? __rcu_read_lock+0x50/0x50
[  352.262611][T14864]  write_cache_pages+0x912/0xdc0
[  352.267556][T14864]  ? mpage_writepages+0x2f0/0x2f0
[  352.272570][T14864]  ? tag_pages_for_writeback+0x580/0x580
[  352.278204][T14864]  ? avc_has_perm_noaudit+0x400/0x400
[  352.284167][T14864]  mpage_writepages+0x155/0x2f0
[  352.289031][T14864]  ? fat_block_truncate_page+0x50/0x50
[  352.294491][T14864]  ? clean_buffers+0x230/0x230
[  352.299241][T14864]  ? arch_stack_walk+0xb8/0x120
[  352.304181][T14864]  ? fat_block_truncate_page+0x50/0x50
[  352.309623][T14864]  ? unwind_get_return_address_ptr+0x130/0x130
[  352.315782][T14864]  ? memset+0x1f/0x40
[  352.319741][T14864]  ? fat_readpage+0x20/0x20
[  352.324316][T14864]  do_writepages+0x13a/0x280
[  352.328892][T14864]  ? __writepage+0xc0/0xc0
[  352.333295][T14864]  ? __rcu_read_lock+0x50/0x50
[  352.338059][T14864]  ? unwind_get_return_address_ptr+0x130/0x130
[  352.344548][T14864]  filemap_write_and_wait_range+0x3b2/0x460
[  352.350447][T14864]  ? filemap_write_and_wait+0x420/0x420
[  352.356002][T14864]  ? unwind_get_return_address+0x48/0x90
[  352.361753][T14864]  ? timespec64_trunc+0x67/0xa0
[  352.366625][T14864]  ? fat_truncate_time+0x402/0x520
[  352.371875][T14864]  generic_file_direct_write+0x18b/0x6d0
[  352.377518][T14864]  ? pagecache_write_end+0xa0/0xa0
[  352.383726][T14864]  ? file_update_time+0x398/0x3f0
[  352.388751][T14864]  ? file_remove_privs+0x640/0x640
[  352.394136][T14864]  ? __kasan_slab_free+0x1f2/0x230
[  352.399229][T14864]  ? down_write+0xd8/0x150
[  352.403626][T14864]  __generic_file_write_iter+0x25f/0x440
[  352.409258][T14864]  ? get_pid_task+0x86/0x90
[  352.413810][T14864]  generic_file_write_iter+0x4a6/0x650
[  352.419308][T14864]  __vfs_write+0x59d/0x720
[  352.423721][T14864]  ? __kernel_write+0x340/0x340
[  352.428757][T14864]  ? avc_policy_seqno+0x17/0x70
[  352.433710][T14864]  ? security_file_permission+0x128/0x300
[  352.439738][T14864]  vfs_write+0x217/0x4f0
[  352.444066][T14864]  ksys_write+0x18c/0x2c0
[  352.448522][T14864]  ? file_open_root+0x450/0x450
[  352.453371][T14864]  ? __ia32_sys_read+0x80/0x80
[  352.458682][T14864]  do_syscall_64+0xcb/0x150
[  352.463175][T14864]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  352.469344][T14864] RIP: 0033:0x45ca69
[  352.473284][T14864] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  352.493138][T14864] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  352.502024][T14864] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  352.510025][T14864] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  352.518434][T14864] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  352.526389][T14864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  352.535269][T14864] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
[  352.617537][T10034] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  352.817498][  T140] usb 6-1: device descriptor read/64, error 18
[  352.857520][T10034] usb 4-1: Using ep0 maxpacket: 8
[  352.977578][T10034] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247
[  352.987752][T10034] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 564
[  352.997964][T10034] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  353.087569][  T140] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  353.167579][T10034] usb 4-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice= 0.40
[  353.176941][T10034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.186006][T10034] usb 4-1: Product: syz
[  353.190463][T10034] usb 4-1: Manufacturer: syz
[  353.195223][T10034] usb 4-1: SerialNumber: syz
[  353.217619][T14854] raw-gadget gadget: fail, usb_ep_enable returned -22
[  353.224419][T14854] raw-gadget gadget: fail, usb_ep_enable returned -22
[  353.237985][T10034] usb 4-1: bad CDC descriptors
[  353.242982][T10034] smsc95xx v1.0.6
[  353.377538][  T140] usb 6-1: device descriptor read/64, error 18
[  353.438156][T14854] raw-gadget gadget: fail, usb_ep_enable returned -22
[  353.445221][T14854] raw-gadget gadget: fail, usb_ep_enable returned -22
[  353.687535][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  353.698302][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  353.767497][  T140] usb 6-1: device descriptor read/64, error 18
[  353.887563][  T140] usb usb6-port1: attempt power cycle
22:45:52 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1300)

22:45:52 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:52 executing program 2 (fault-call:12 fault-nth:12):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
r5 = open$dir(&(0x7f0000000000)='./file1\x00', 0x1, 0xe0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)
sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000013070103000000000000650a000000010900010073797a3100000000000000000fff"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
execveat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000200)='fd/3\x00', &(0x7f0000000240)='{,\'/:\x00'], &(0x7f0000000400)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='fd/3\x00', &(0x7f0000000380)='){\x00', &(0x7f00000003c0)='&\x00'], 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:52 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
write$P9_RVERSION(r1, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x7f, 0x8, '9P2000.L'}, 0x15)
r2 = socket$inet(0x10, 0x80802, 0x0)
ioctl$sock_ifreq(r2, 0x8926, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000001c0)={0x2, {{0x2, 0x4e22, @multicast1}}}, 0x88)
r4 = accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x0)
getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000000c0)={@remote, @loopback}, &(0x7f0000000100)=0x8)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

[  354.167536][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  354.267241][T14879] FAULT_INJECTION: forcing a failure.
[  354.267241][T14879] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  354.280624][T14879] CPU: 1 PID: 14879 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  354.290767][T14879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  354.301341][T14879] Call Trace:
[  354.304626][T14879]  dump_stack+0x14a/0x1ce
[  354.308952][T14879]  ? devkmsg_release+0x11c/0x11c
[  354.313892][T14879]  ? show_regs_print_info+0x12/0x12
[  354.319086][T14879]  should_fail+0x6fb/0x860
[  354.323501][T14879]  ? setup_fault_attr+0x3d0/0x3d0
[  354.328694][T14879]  ? blk_mq_sched_dispatch_requests+0x600/0x600
[  354.335027][T14879]  __alloc_pages_nodemask+0x1ee/0x7c0
[  354.340403][T14879]  ? _raw_spin_lock_irqsave+0x1e0/0x1e0
[  354.345950][T14879]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  354.351498][T14879]  ? __rcu_read_lock+0x50/0x50
[  354.356397][T14879]  __get_free_pages+0xa/0x30
[  354.360988][T14879]  __tlb_remove_page_size+0x167/0x2f0
[  354.366360][T14879]  unmap_page_range+0xd80/0x16e0
[  354.371396][T14879]  ? copy_page_range+0x1710/0x1710
[  354.376540][T14879]  ? tlb_gather_mmu+0x26e/0x330
[  354.381393][T14879]  zap_page_range_single+0x3c4/0x440
[  354.386801][T14879]  ? zap_vma_ptes+0xf0/0xf0
[  354.391396][T14879]  ? vma_interval_tree_iter_first+0x251/0x270
[  354.397459][T14879]  unmap_mapping_pages+0x365/0x3e0
[  354.402573][T14879]  ? finish_mkwrite_fault+0x2f0/0x2f0
[  354.407931][T14879]  ? page_mapped+0xcc/0x2e0
[  354.412432][T14879]  invalidate_inode_pages2_range+0x609/0xd50
[  354.418394][T14879]  ? invalidate_mapping_pages+0x710/0x710
[  354.424091][T14879]  ? filemap_check_errors+0xcf/0x110
[  354.430688][T14879]  ? timespec64_trunc+0x67/0xa0
[  354.435524][T14879]  ? fat_truncate_time+0x402/0x520
[  354.440633][T14879]  generic_file_direct_write+0x3dc/0x6d0
[  354.446346][T14879]  ? pagecache_write_end+0xa0/0xa0
[  354.451619][T14879]  ? file_update_time+0x398/0x3f0
[  354.456659][T14879]  ? file_remove_privs+0x640/0x640
[  354.461781][T14879]  ? __kasan_slab_free+0x1f2/0x230
[  354.469840][T14879]  ? down_write+0xd8/0x150
[  354.474260][T14879]  __generic_file_write_iter+0x25f/0x440
[  354.479878][T14879]  ? get_pid_task+0x86/0x90
[  354.484456][T14879]  generic_file_write_iter+0x4a6/0x650
[  354.489898][T14879]  __vfs_write+0x59d/0x720
[  354.494285][T14879]  ? __kernel_write+0x340/0x340
[  354.499110][T14879]  ? avc_policy_seqno+0x17/0x70
[  354.504027][T14879]  ? security_file_permission+0x128/0x300
[  354.510061][T14879]  vfs_write+0x217/0x4f0
[  354.514279][T14879]  ksys_write+0x18c/0x2c0
[  354.518579][T14879]  ? file_open_root+0x450/0x450
[  354.523421][T14879]  ? __ia32_sys_read+0x80/0x80
[  354.528154][T14879]  do_syscall_64+0xcb/0x150
[  354.532645][T14879]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  354.538508][T14879] RIP: 0033:0x45ca69
[  354.542392][T14879] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
22:45:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x109900, 0x4c)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000000)='./file0\x00', r1}, 0x10)
ftruncate(r0, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
write$FUSE_STATFS(r0, &(0x7f00000001c0)={0x60, 0x0, 0x2, {{0x3, 0x0, 0x0, 0x0, 0x6, 0x7, 0x6, 0x542}}}, 0x60)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

[  354.562059][T14879] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  354.570525][T14879] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  354.578467][T14879] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  354.586410][T14879] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  354.594443][T14879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  354.602513][T14879] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
22:45:53 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  354.627545][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000114: -32
[  354.646680][T14895] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  354.651652][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): Error reading MII_ACCESS
22:45:53 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:53 executing program 2 (fault-call:12 fault-nth:13):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:53 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2000)

[  354.673467][T10034] smsc95xx 4-1:1.0 (unnamed net_device) (uninitialized): MII is busy in smsc95xx_mdio_read
[  354.685621][T14895] FAT-fs (loop0): Filesystem has been set read-only
22:45:53 executing program 1:
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  354.727782][T10034] smsc95xx 4-1:1.0 eth1: Failed to read reg index 0x00000130: -32
[  354.737672][T10034] smsc95xx 4-1:1.0 eth1: set_features() failed (-32); wanted 0x0000008000004002, left 0x0000008000004802
[  354.756162][T10034] smsc95xx 4-1:1.0 eth1: register 'smsc95xx' at usb-dummy_hcd.3-1, smsc95xx USB 2.0 Ethernet, 0e:6d:80:01:fe:1b
[  354.863574][T14926] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  354.873006][T14926] FAT-fs (loop0): Filesystem has been set read-only
[  354.876072][T14928] FAULT_INJECTION: forcing a failure.
[  354.876072][T14928] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  354.880531][T14926] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  354.893216][T14928] CPU: 1 PID: 14928 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  354.893226][T14928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  354.905623][T14926] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  354.911156][T14928] Call Trace:
[  354.911173][T14928]  dump_stack+0x14a/0x1ce
[  354.911182][T14928]  ? devkmsg_release+0x11c/0x11c
[  354.911189][T14928]  ? show_regs_print_info+0x12/0x12
[  354.911197][T14928]  ? _raw_spin_unlock_irq+0x5/0x20
[  354.911209][T14928]  ? finish_task_switch+0x235/0x4c0
[  354.921878][T14930] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  354.929132][T14928]  should_fail+0x6fb/0x860
[  354.929141][T14928]  ? setup_fault_attr+0x3d0/0x3d0
[  354.929151][T14928]  __alloc_pages_nodemask+0x1ee/0x7c0
[  354.929161][T14928]  ? _raw_spin_lock_irqsave+0x1e0/0x1e0
[  354.929168][T14928]  ? gfp_pfmemalloc_allowed+0x130/0x130
[  354.929183][T14928]  ? __rcu_read_lock+0x50/0x50
[  354.995834][T14928]  __get_free_pages+0xa/0x30
[  355.000419][T14928]  __tlb_remove_page_size+0x167/0x2f0
[  355.005785][T14928]  unmap_page_range+0xd80/0x16e0
[  355.010843][T14928]  ? copy_page_range+0x1710/0x1710
[  355.015955][T14928]  ? tlb_gather_mmu+0x26e/0x330
[  355.020824][T14928]  zap_page_range_single+0x3c4/0x440
[  355.026126][T14928]  ? zap_vma_ptes+0xf0/0xf0
[  355.030628][T14928]  ? vma_interval_tree_iter_first+0x251/0x270
[  355.036700][T14928]  unmap_mapping_pages+0x365/0x3e0
[  355.041806][T14928]  ? finish_mkwrite_fault+0x2f0/0x2f0
[  355.047371][T14928]  ? page_mapped+0xcc/0x2e0
[  355.051878][T14928]  invalidate_inode_pages2_range+0x609/0xd50
[  355.057838][T14928]  ? invalidate_mapping_pages+0x710/0x710
[  355.063536][T14928]  ? filemap_check_errors+0xcf/0x110
[  355.068799][T14928]  ? timespec64_trunc+0x67/0xa0
[  355.073627][T14928]  ? fat_truncate_time+0x402/0x520
[  355.078749][T14928]  generic_file_direct_write+0x3dc/0x6d0
[  355.084370][T14928]  ? pagecache_write_end+0xa0/0xa0
[  355.089457][T14928]  ? file_update_time+0x398/0x3f0
[  355.094463][T14928]  ? file_remove_privs+0x640/0x640
[  355.099570][T14928]  ? __kasan_slab_free+0x1f2/0x230
[  355.104659][T14928]  ? down_write+0xd8/0x150
[  355.109051][T14928]  __generic_file_write_iter+0x25f/0x440
[  355.114679][T14928]  ? get_pid_task+0x86/0x90
[  355.119177][T14928]  generic_file_write_iter+0x4a6/0x650
[  355.124755][T14928]  __vfs_write+0x59d/0x720
[  355.129170][T14928]  ? __kernel_write+0x340/0x340
[  355.134020][T14928]  ? avc_policy_seqno+0x17/0x70
[  355.138865][T14928]  ? security_file_permission+0x128/0x300
[  355.144558][T14928]  vfs_write+0x217/0x4f0
[  355.148776][T14928]  ksys_write+0x18c/0x2c0
[  355.153097][T14928]  ? file_open_root+0x450/0x450
[  355.158113][T14928]  ? __ia32_sys_read+0x80/0x80
[  355.162858][T14928]  do_syscall_64+0xcb/0x150
[  355.167332][T14928]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  355.173230][T14928] RIP: 0033:0x45ca69
[  355.177116][T14928] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  355.196805][T14928] RSP: 002b:00007f640222dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  355.205197][T14928] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  355.213152][T14928] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
[  355.221106][T14928] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
[  355.229074][T14928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  355.237022][T14928] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640222e6d4
[  355.307488][  T140] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  355.397479][  T140] usb 6-1: Using ep0 maxpacket: 16
[  355.517498][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.528403][  T140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.538777][  T140] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  355.548263][  T140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.556807][  T140] usb 6-1: config 0 descriptor??
[  355.798004][T14897] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  356.047934][  T140] hid (null): unknown global tag 0xc
[  356.056586][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.064563][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.072222][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.079835][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.086737][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.094873][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.102664][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.110262][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.117116][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.125322][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.132909][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.140617][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.148343][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.155205][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.163511][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.171227][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.178929][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.185799][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.193943][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.201845][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.209547][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.216401][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.224602][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.232198][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.239413][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.246555][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.253956][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.260992][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.268005][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.274864][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.281803][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.288726][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.295602][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.302480][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.309373][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.316307][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.323184][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.330092][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.337693][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.344642][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.351538][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.358444][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.365301][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.372180][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.379196][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.386036][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.392985][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.399897][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.407025][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.413908][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.420801][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.427673][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.435590][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.442500][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.449406][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.456248][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.463133][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.470022][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.476947][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x1
[  356.483816][  T140] wacom 0003:056A:0023.001B: unknown main item tag 0x0
[  356.490728][  T140] wacom 0003:056A:0023.001B: unknown global tag 0xc
[  356.497319][  T140] wacom 0003:056A:0023.001B: item 0 1 1 12 parsing failed
[  356.504515][  T140] wacom 0003:056A:0023.001B: parse failed
[  356.510294][  T140] wacom: probe of 0003:056A:0023.001B failed with error -22
[  356.518745][  T140] usb 6-1: USB disconnect, device number 40
22:45:55 executing program 3:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="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", 0x600)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
sendfile(r2, r1, 0x0, 0x1c5c2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x6004001)

22:45:55 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x83)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x3c)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x3c)
r6 = syz_open_procfs(r5, &(0x7f0000000000)='net/sockstat6\x00')
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2500)

22:45:55 executing program 2 (fault-call:12 fault-nth:14):
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  356.714075][  T240] usb 4-1: USB disconnect, device number 37
[  356.734036][  T240] smsc95xx 4-1:1.0 eth1: unregister 'smsc95xx' usb-dummy_hcd.3-1, smsc95xx USB 2.0 Ethernet
[  356.737423][  T140] smsc95xx 4-1:1.0 eth1: Failed to read reg index 0x00000114: -19
[  356.784052][T14962] FAULT_INJECTION: forcing a failure.
[  356.784052][T14962] name failslab, interval 1, probability 0, space 0, times 0
[  356.799101][T14958] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  356.822254][  T140] ==================================================================
[  356.830349][  T140] BUG: KASAN: use-after-free in smsc95xx_mdio_read+0x635/0x870
[  356.837864][  T140] Read of size 8 at addr ffff8881cafd29c8 by task kworker/1:2/140
[  356.845644][  T140] 
[  356.847963][  T140] CPU: 1 PID: 140 Comm: kworker/1:2 Not tainted 5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  356.857640][  T140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  356.867673][  T140] Workqueue: events check_carrier
[  356.872682][  T140] Call Trace:
[  356.875959][  T140]  dump_stack+0x14a/0x1ce
[  356.880259][  T140]  ? show_regs_print_info+0x12/0x12
[  356.885427][  T140]  ? printk+0xd2/0x114
[  356.889469][  T140]  print_address_description+0x93/0x620
[  356.894999][  T140]  ? netdev_warn+0x124/0x16b
[  356.899576][  T140]  ? smsc95xx_mdio_read+0x14d/0x870
[  356.904745][  T140]  ? netdev_crit+0x16b/0x16b
[  356.909305][  T140]  __kasan_report+0x16d/0x1e0
[  356.913952][  T140]  ? smsc95xx_mdio_read+0x635/0x870
[  356.919133][  T140]  kasan_report+0x34/0x60
[  356.923432][  T140]  smsc95xx_mdio_read+0x635/0x870
[  356.928443][  T140]  ? smsc95xx_set_multicast+0x880/0x880
[  356.934120][  T140]  ? _raw_spin_unlock_irq+0x5/0x20
[  356.939217][  T140]  ? finish_task_switch+0x235/0x4c0
[  356.944401][  T140]  check_carrier+0xd1/0x2e0
[  356.948893][  T140]  process_one_work+0x777/0xf90
[  356.953714][  T140]  worker_thread+0xa8f/0x1430
[  356.958389][  T140]  kthread+0x2df/0x300
[  356.962427][  T140]  ? process_one_work+0xf90/0xf90
[  356.967435][  T140]  ? kthread_destroy_worker+0x280/0x280
[  356.972951][  T140]  ret_from_fork+0x1f/0x30
[  356.977336][  T140] 
[  356.979635][  T140] Allocated by task 10034:
[  356.984038][  T140]  __kasan_kmalloc+0x12c/0x1c0
[  356.988789][  T140]  __kmalloc+0xf7/0x2d0
[  356.992915][  T140]  kvmalloc_node+0xc2/0x120
[  356.997413][  T140]  alloc_netdev_mqs+0x85/0xc60
[  357.002173][  T140]  usbnet_probe+0x1ae/0x2770
[  357.006732][  T140]  usb_probe_interface+0x631/0xad0
[  357.011816][  T140]  really_probe+0x764/0xf70
[  357.016307][  T140]  driver_probe_device+0xe6/0x230
[  357.021302][  T140]  bus_for_each_drv+0x17a/0x200
[  357.026135][  T140]  __device_attach+0x27b/0x420
[  357.030870][  T140]  bus_probe_device+0xbb/0x200
[  357.035617][  T140]  device_add+0x105a/0x1750
[  357.040366][  T140]  usb_set_configuration+0x197f/0x1f00
[  357.045888][  T140]  generic_probe+0x82/0x140
[  357.050366][  T140]  really_probe+0x764/0xf70
[  357.054859][  T140]  driver_probe_device+0xe6/0x230
[  357.059882][  T140]  bus_for_each_drv+0x17a/0x200
[  357.064719][  T140]  __device_attach+0x27b/0x420
[  357.069453][  T140]  bus_probe_device+0xbb/0x200
[  357.074201][  T140]  device_add+0x105a/0x1750
[  357.078673][  T140]  usb_new_device+0xda7/0x1710
[  357.083406][  T140]  hub_event+0x2963/0x4fa0
[  357.087789][  T140]  process_one_work+0x777/0xf90
[  357.092609][  T140]  worker_thread+0xa8f/0x1430
[  357.097272][  T140]  kthread+0x2df/0x300
[  357.101323][  T140]  ret_from_fork+0x1f/0x30
[  357.105705][  T140] 
[  357.108004][  T140] Freed by task 240:
[  357.111870][  T140]  __kasan_slab_free+0x181/0x230
[  357.116777][  T140]  slab_free_freelist_hook+0xd0/0x150
[  357.122135][  T140]  kfree+0x12b/0x600
[  357.126001][  T140]  device_release+0x70/0x1a0
[  357.130577][  T140]  kobject_put+0x1a9/0x250
[  357.134962][  T140]  usb_unbind_interface+0x1d8/0x850
[  357.140154][  T140]  device_release_driver_internal+0x515/0x7b0
[  357.146200][  T140]  bus_remove_device+0x2e7/0x350
[  357.151115][  T140]  device_del+0x7bc/0x1200
[  357.155522][  T140]  usb_disable_device+0x3fe/0xc90
[  357.160522][  T140]  usb_disconnect+0x341/0x880
[  357.165181][  T140]  hub_event+0x1c6c/0x4fa0
[  357.169565][  T140]  process_one_work+0x777/0xf90
[  357.174383][  T140]  worker_thread+0xa8f/0x1430
[  357.179028][  T140]  kthread+0x2df/0x300
[  357.183088][  T140]  ret_from_fork+0x1f/0x30
[  357.187481][  T140] 
[  357.189788][  T140] The buggy address belongs to the object at ffff8881cafd2000
[  357.189788][  T140]  which belongs to the cache kmalloc-4k of size 4096
[  357.204701][  T140] The buggy address is located 2504 bytes inside of
[  357.204701][  T140]  4096-byte region [ffff8881cafd2000, ffff8881cafd3000)
[  357.218124][  T140] The buggy address belongs to the page:
[  357.223730][  T140] page:ffffea00072bf400 refcount:1 mapcount:0 mapping:ffff8881da80c280 index:0x0 compound_mapcount: 0
[  357.234641][  T140] flags: 0x8000000000010200(slab|head)
[  357.240071][  T140] raw: 8000000000010200 0000000000000000 0000000100000001 ffff8881da80c280
[  357.248790][  T140] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  357.257365][  T140] page dumped because: kasan: bad access detected
[  357.264531][  T140] 
[  357.266831][  T140] Memory state around the buggy address:
[  357.272453][  T140]  ffff8881cafd2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  357.280500][  T140]  ffff8881cafd2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  357.288530][  T140] >ffff8881cafd2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  357.296560][  T140]                                               ^
[  357.302947][  T140]  ffff8881cafd2a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  357.310978][  T140]  ffff8881cafd2a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  357.319018][  T140] ==================================================================
[  357.327236][  T140] Disabling lock debugging due to kernel taint
[  357.344155][T14958] FAT-fs (loop0): Filesystem has been set read-only
[  357.357627][T14962] CPU: 0 PID: 14962 Comm: syz-executor.2 Tainted: G    B             5.4.46-syzkaller-00098-g91d2b0a4c0ab #0
[  357.369275][T14962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  357.379325][T14962] Call Trace:
[  357.382625][T14962]  dump_stack+0x14a/0x1ce
[  357.386956][T14962]  ? devkmsg_release+0x11c/0x11c
[  357.392068][T14962]  ? show_regs_print_info+0x12/0x12
[  357.397264][T14962]  should_fail+0x6fb/0x860
[  357.401679][T14962]  ? setup_fault_attr+0x3d0/0x3d0
[  357.406707][T14962]  ? mempool_alloc_slab+0x16/0x30
[  357.411732][T14962]  ? mempool_free+0x380/0x380
[  357.416503][T14962]  should_failslab+0x5/0x20
[  357.421012][T14962]  kmem_cache_alloc+0x36/0x260
[  357.425774][T14962]  ? mempool_free+0x380/0x380
[  357.430449][T14962]  mempool_alloc_slab+0x16/0x30
[  357.435297][T14962]  mempool_alloc+0x116/0x690
[  357.439885][T14962]  ? mempool_resize+0x910/0x910
[  357.444736][T14962]  ? fat_get_block+0x52a/0xba0
[  357.449496][T14962]  bio_alloc_bioset+0x209/0x690
[  357.454344][T14962]  ? fat_block_truncate_page+0x50/0x50
[  357.459797][T14962]  ? mem_cgroup_charge_statistics+0x137/0x830
[  357.465858][T14962]  ? bio_chain_endio+0xf0/0xf0
[  357.470647][T14962]  ? mem_cgroup_commit_charge+0x1a1/0x2a0
[  357.476365][T14962]  ? bdev_read_page+0xd6/0x190
[  357.479685][  T140] usb @��ف���2' (unnamed net_device) (released): Error reading MII_ACCESS
[  357.481148][T14962]  do_mpage_readpage+0x14e2/0x1af0
[  357.481162][T14962]  ? mpage_readpages+0x500/0x500
[  357.489895][  T140] usb @��ف���2' (unnamed net_device) (released): MII is busy in smsc95xx_mdio_read
[  357.495003][T14962]  ? fat_block_truncate_page+0x50/0x50
[  357.495010][T14962]  mpage_readpage+0xf7/0x1a0
[  357.495022][T14962]  ? mpage_bio_submit+0x500/0x500
[  357.503944][  T140] usb @��ف���2' (unnamed net_device) (released): Failed to read MII_BMSR
[  357.509285][T14962]  ? fat_block_truncate_page+0x50/0x50
[  357.509295][T14962]  ? __down_read+0x240/0x240
[  357.509304][T14962]  ? pagecache_get_page+0x78e/0x880
[  357.509316][T14962]  ? filemap_map_pages+0x10ca/0x1140
[  357.516814][T14972] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  357.519331][T14962]  filemap_fault+0x1377/0x19d0
[  357.519341][T14962]  ? generic_file_read_iter+0x20b0/0x20b0
[  357.519351][T14962]  handle_mm_fault+0x2837/0x40a0
[  357.519361][T14962]  ? finish_fault+0x230/0x230
[  357.519371][T14962]  ? __up_read+0x1b0/0x1b0
[  357.519383][T14962]  ? vmacache_find+0x205/0x4b0
[  357.590130][T14962]  do_user_addr_fault+0x48a/0x9f0
[  357.595149][T14962]  page_fault+0x2f/0x40
[  357.599293][T14962] RIP: 0010:iov_iter_fault_in_readable+0x1c8/0x630
[  357.605761][T14962] Code: ce 8b 4a ff 85 db 0f 84 81 01 00 00 48 63 c3 4d 8d 7c 04 ff 4d 39 e7 0f 82 7a 01 00 00 e8 10 88 4a ff 0f 1f 00 0f ae e8 31 db <45> 8a 2c 24 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06
[  357.623697][T14972] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  357.625354][T14962] RSP: 0018:ffff8881c7a17940 EFLAGS: 00010246
[  357.625360][T14962] RAX: ffffffff81f772b0 RBX: 0000000000000000 RCX: 0000000000040000
[  357.625370][T14962] RDX: ffffc90003041000 RSI: 000000000000240b RDI: 000000000000240c
[  357.656201][T14962] RBP: ffff8881c7a179f0 R08: ffffffff81f77292 R09: ffffffff83d3f3ef
[  357.664169][T14962] R10: ffff88819fc43e00 R11: 0000000000000002 R12: 0000000020000000
[  357.672142][T14962] R13: ffff8881c7a17cc0 R14: 1ffff11038f42f32 R15: 0000000020000fff
[  357.680095][T14962]  ? xas_find+0x11f/0x6f0
[  357.685475][T14962]  ? iov_iter_fault_in_readable+0x1a2/0x630
[  357.691458][T14962]  ? iov_iter_fault_in_readable+0x1c0/0x630
[  357.697348][T14962]  ? uuid_parse+0x3e0/0x3e0
[  357.701834][T14962]  ? fat_direct_IO+0x132/0x2f0
[  357.706607][T14962]  generic_perform_write+0x1f6/0x5a0
[  357.711881][T14962]  ? pagecache_write_end+0xa0/0xa0
[  357.716975][T14962]  ? grab_cache_page_write_begin+0x90/0x90
[  357.722757][T14962]  ? file_remove_privs+0x640/0x640
[  357.727843][T14962]  ? __kasan_slab_free+0x1f2/0x230
[  357.732937][T14962]  ? down_write+0xd8/0x150
[  357.737340][T14962]  __generic_file_write_iter+0x2fe/0x440
22:45:56 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)
fallocate(r1, 0x3, 0x0, 0x24000)

22:45:56 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x20000, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:56 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  357.742957][T14962]  generic_file_write_iter+0x4a6/0x650
[  357.748386][T14962]  __vfs_write+0x59d/0x720
[  357.752785][T14962]  ? __kernel_write+0x340/0x340
[  357.757692][T14962]  ? avc_policy_seqno+0x17/0x70
[  357.762546][T14962]  ? security_file_permission+0x128/0x300
[  357.768303][T14962]  vfs_write+0x217/0x4f0
[  357.772549][T14962]  ksys_write+0x18c/0x2c0
[  357.776879][T14962]  ? file_open_root+0x450/0x450
[  357.781731][T14962]  ? __ia32_sys_read+0x80/0x80
[  357.786498][T14962]  do_syscall_64+0xcb/0x150
22:45:56 executing program 1:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:56 executing program 1:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  357.791001][T14962]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  357.796886][T14962] RIP: 0033:0x45ca69
[  357.800772][T14962] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  357.820454][T14962] RSP: 002b:00007f640224ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  357.828862][T14962] RAX: ffffffffffffffda RBX: 000000000050b8c0 RCX: 000000000045ca69
[  357.837089][T14962] RDX: 000000000000fde0 RSI: 0000000020000000 RDI: 0000000000000004
22:45:56 executing program 1:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='systemem0md5sum$\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:56 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0)
ptrace$cont(0x18, 0xffffffffffffffff, 0x7fff, 0x7f)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200082, 0x0)
ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f00000001c0)={0x1, 0x1, 0x5})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)="9905d94c310874da6bfd49e783023f048af6d3d16d99f472cedf63d8a59241e937f8431080a3aa7f853fe39b81e3024cda0c7cc31287fc7c8448c5d0748b5679453b8496fa6808ea9a0e9b4325f57bb7af0a38f83945647b55018cc1f7f4eb0a58c0e48f7f56da4c59892690b2b1b009c0dd6ee0e84a7075e13a8746f4b4fe824fca3eedad7c88755baf196dcffca513186d0102cfa0fe2c0601dc43a9e8377a2eb3256a67b5d4035c00f2b93e18dec64c000ae460d892116c9e7f814bbd7f26fb868bf4242e31e88bb9d29b9a42092cfb42a718b630c818058581fd1ec510183931d86f8cc6cfeb5e7939dde42fc4d6d418cd1e8d171120a1", 0xf9}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000100)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)

22:45:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000)

22:45:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  357.845060][T14962] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  357.853054][T14962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  357.861021][T14962] R13: 0000000000000c9f R14: 00000000004cefaa R15: 00007f640224f6d4
22:45:56 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:56 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  357.995370][T15020] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  358.003526][T15020] FAT-fs (loop0): Filesystem has been set read-only
[  358.016138][T15020] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  358.054585][T15020] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  358.237333][    T5] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  358.477323][    T5] usb 6-1: Using ep0 maxpacket: 16
[  358.597378][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.608294][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.618706][    T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  358.628066][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.636622][    T5] usb 6-1: config 0 descriptor??
[  358.878134][T15011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  359.107848][    T5] hid (null): unknown global tag 0xc
[  359.116443][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.123358][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.130288][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.137139][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.144193][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.151170][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.158051][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.164897][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.171861][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.178769][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.185606][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.192494][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.199380][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.206220][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.213127][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.220216][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.227072][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.233958][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.240848][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.247736][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.254608][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.261487][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.268421][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.275263][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.282129][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.289067][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.295922][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.302974][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.309881][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.316741][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.323649][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.330542][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.337444][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.344296][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.351194][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.358106][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.364945][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.372110][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.378999][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.385856][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.392817][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.399726][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.406585][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.413467][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.420408][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.427317][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.434167][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.441044][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.447940][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.454825][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.461743][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.468871][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.475720][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.482584][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.489476][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.496334][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.503236][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.510120][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.516972][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x1
[  359.523924][    T5] wacom 0003:056A:0023.001C: unknown main item tag 0x0
[  359.530826][    T5] wacom 0003:056A:0023.001C: unknown global tag 0xc
[  359.537425][    T5] wacom 0003:056A:0023.001C: item 0 1 1 12 parsing failed
[  359.544620][    T5] wacom 0003:056A:0023.001C: parse failed
[  359.550380][    T5] wacom: probe of 0003:056A:0023.001C failed with error -22
[  359.558776][    T5] usb 6-1: USB disconnect, device number 41
[  360.077277][    T5] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  360.317264][    T5] usb 6-1: Using ep0 maxpacket: 16
[  360.447323][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.458224][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.467995][    T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  360.477005][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.485736][    T5] usb 6-1: config 0 descriptor??
[  360.728005][T15059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  360.787736][    T5] hid (null): unknown global tag 0xc
[  360.796271][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.804240][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.811808][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.819518][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.826465][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.835459][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.843286][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.851005][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.858689][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.865546][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.874609][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
22:45:59 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000b803", @ANYRES32=r1, @ANYBLOB="81d509a538b808258092c8a39369eebf1b36169dbeb58d8c4b1e2ba5324d76573080ef8611d0388a0f847a02b7b8c4418fbbe60f926eec48e83e1da3e89cbaa1611e0f35d70d4972215f6d41e81a455df87121960a2eab671ebd1edfdac434b3d4a1f101e9d6f87360d548562f3aa546df2dfc1e33f01e1e7ad818ef480e9833f1a1e0e95b0d550967e09df53d787a0df236e2b14b3492b61532907ec790817e37186298e51626c654053c543f3e461bc927a06bc8509f29bedf82d4da54d47d24bf"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:45:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4800)

22:45:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:45:59 executing program 3:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
r1 = memfd_create(&(0x7f0000000240)='\x00<\xd2\xc8\xf8\xb3!\xf2\x81\xc6\xaa\xbc\b\x9e\xd2\xd6\xe1\x10\xf0\x8c}\x8a\x10`\xa11\xcb\xaf\xf1\xe6\xe1d[\x12a\xde\x89[\xc2+Gx9\x9f\'\xb7\xbc\x1bw\xaf}QD#L\xaf\xe3\x00\xbb\xe1T\xad\x9d\xff\xfek\xc3X\xd6\x84\xc5\xb6Z}\x19f\x86\xbb#\xc0\x03_\xe4+\xa3T\x033X\x95\xc2v\x83\x93\x81\xc7n\xd8\x80\xa2\xa3M\xbaSN\xc3\xaa\xe9\xdd\x9bC$\xf0\xcc\xa7\x0e\x95\xffW\x7f\x17^\xed\xfa\x04\xa9`\xc6\xdf\xe26\x9f\x05\xed\xf4x2\x04\xa5\x16\xc5\xfe\xb6\tr[\x19\xce+\x8cx\xf7,z\xd7D\xadEvv6(\xf1n\x04y\xbbK{\r\"N\x7f\x9a\x19\xaa\xe1\xa3\x14\xec\x13\x7f\xc7e\x8cA\x7fT#)\x033V', 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x7)

22:45:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x2000)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r7, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(r6, 0x0, 0xffffffffffffff1e)

22:45:59 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  360.882292][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.890328][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.913963][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.927628][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
22:45:59 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  360.935869][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.952123][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  360.962011][T15072] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:59 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c000100000000000000000007", @ANYRES32], 0x28}}, 0x0)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000))
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

[  360.999362][T15072] FAT-fs (loop0): Filesystem has been set read-only
[  361.009259][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
22:45:59 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:45:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000000)=0x6)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

22:45:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

[  361.041940][T15088] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  361.046830][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.072300][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.074056][T15072] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:45:59 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  361.090027][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  361.092183][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.108102][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.120080][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.130677][T15097] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  361.144326][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.161471][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.181615][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.188778][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.196439][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.203992][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.210895][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.217785][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.224644][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.231513][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.238393][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.245232][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.252115][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.259015][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.265962][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.272831][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.279715][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.286559][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.293516][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.300428][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.307323][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.314170][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.321048][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.327961][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.334862][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.341955][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.348849][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.355694][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.362713][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.369610][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.376521][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.383532][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.390483][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.397357][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.404239][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.411125][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x1
[  361.418037][    T5] wacom 0003:056A:0023.001D: unknown main item tag 0x0
[  361.424910][    T5] wacom 0003:056A:0023.001D: unknown global tag 0xc
[  361.431519][    T5] wacom 0003:056A:0023.001D: item 0 1 1 12 parsing failed
[  361.439027][    T5] wacom 0003:056A:0023.001D: parse failed
[  361.444888][    T5] wacom: probe of 0003:056A:0023.001D failed with error -22
[  361.453442][    T5] usb 6-1: USB disconnect, device number 42
[  361.807273][    T5] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  362.047180][    T5] usb 6-1: Using ep0 maxpacket: 16
[  362.167253][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.178286][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.189596][    T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  362.198937][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.208108][    T5] usb 6-1: config 0 descriptor??
[  362.448937][T15078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  362.947222][    T5] usbhid 6-1:0.0: can't add hid device: -71
[  362.953273][    T5] usbhid: probe of 6-1:0.0 failed with error -71
[  362.961332][    T5] usb 6-1: USB disconnect, device number 43
[  363.657134][    T5] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  363.907149][    T5] usb 6-1: Using ep0 maxpacket: 16
[  364.027312][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.041775][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.053329][    T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  364.063168][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.072294][    T5] usb 6-1: config 0 descriptor??
22:46:02 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:46:02 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x4c00)

22:46:02 executing program 3:
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400, 0x24)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x800}}, 0x18)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

22:46:02 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:46:02 executing program 5:
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xc5, 0xd0, 0xe0, 0x0, 0x5050, 0x1000, 0x39d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8a, 0xaa, 0x8f, 0x0, [], [{}, {}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="0000b803"], 0x0, 0x0, 0x0, 0x0}, 0x0)

22:46:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9353310000000000000001"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r3, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x25, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}}, 0xc8040)
ftruncate(r1, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = dup2(r4, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
clock_gettime(0x0, &(0x7f0000000240)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f0000000000)={0xffffffffffffff00, 0x3, 0x6, 0x4, 0x2, 0x1, 0x3, 0xfffffffffffffffd}, &(0x7f00000001c0)={0x2, 0x9e5, 0x1, 0x1f, 0x3, 0x6, 0x800, 0xf622}, &(0x7f0000000200)={0x8001, 0x2e, 0xffffffffffffff7c, 0x6, 0x5, 0xaa3, 0x80000001, 0x1}, &(0x7f0000000280)={r7, r8+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8})
getdents(r6, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
fadvise64(r1, 0xffffffff, 0x0, 0x4)

22:46:03 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:46:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r4, &(0x7f0000000100)=""/164, 0x20000118)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

[  364.215360][T15132] overlayfs: workdir and upperdir must be separate subtrees
[  364.236398][T15145] overlayfs: workdir and upperdir must be separate subtrees
[  364.238243][T15138] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:46:03 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x67, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}}, 0xfde0)

22:46:03 executing program 3:
perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ftruncate(r0, 0x200004)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r3, &(0x7f0000000100)=""/164, 0x20000118)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
sendfile(r0, r0, 0x0, 0x80001d00c0d3)

22:46:03 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x24df7ffff}, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  364.297167][    T5] usbhid 6-1:0.0: can't add hid device: -71
[  364.304204][    T5] usbhid: probe of 6-1:0.0 failed with error -71
22:46:03 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  364.347540][    T5] usb 6-1: USB disconnect, device number 44
[  364.354188][T15138] FAT-fs (loop0): Filesystem has been set read-only
[  364.365372][T15152] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:46:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16, 0xfffffffffffffffc}], 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x105581, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r1, &(0x7f0000000100)=""/164, 0x20000118)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
fchdir(r0)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x88e17736c98aa507)
ftruncate(r2, 0x8200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r5, &(0x7f0000000100)=""/164, 0x20000118)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
getdents(r7, &(0x7f0000000100)=""/164, 0x20000118)
getdents(r7, &(0x7f0000000440)=""/173, 0xad)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x80, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}}, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)

[  364.389957][T15138] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
22:46:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x6000)

22:46:03 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

22:46:03 executing program 1:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x8c}}, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000240)='net/llc/core\x00')

[  364.430414][T15167] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  364.517753][T15177] FAT-fs (loop4): bogus number of reserved sectors
[  364.542210][T15177] FAT-fs (loop4): Can't find a valid FAT filesystem
[  364.554730][T15184] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  364.574115][T15184] FAT-fs (loop0): Filesystem has been set read-only
[  364.584197][T15184] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  364.690378][T15190] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  364.698932][T15191] FAT-fs (loop0): error, invalid access to FAT (entry 0x000006c0)
[  364.707983][    T5] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  364.711606][T15177] FAT-fs (loop4): bogus number of reserved sectors
[  364.726709][T15177] FAT-fs (loop4): Can't find a valid FAT filesystem
[  365.067212][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  365.079164][    T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.091371][    T5] usb 6-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  365.102647][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.111981][    T5] usb 6-1: config 0 descriptor??
[  365.358157][T15137] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  365.587701][    T5] hid (null): unknown global tag 0xc
[  365.597212][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.604294][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.611524][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.618849][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.626263][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.633750][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.641193][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.648529][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.655916][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.663283][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.670559][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.677457][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.684325][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.692111][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.699260][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.706556][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.714058][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.721288][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.729976][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.737219][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.744506][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.751642][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.758733][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.766212][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.773467][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.780775][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.787782][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.794823][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.801807][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.808957][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.816530][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.823939][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.831438][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.838935][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.846004][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.853350][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.860507][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.868066][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.875170][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.882605][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.889967][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.898115][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.905409][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.912961][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.919914][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.927165][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.934794][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.941905][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.949304][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.956658][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.963988][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.972425][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.979775][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.986775][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  365.994003][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  366.001316][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  366.008494][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  366.015843][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  366.023121][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x1
[  366.030290][    T5] wacom 0003:056A:0023.001E: unknown main item tag 0x0
[  366.038176][    T5] wacom 0003:056A:0023.001E: unknown global tag 0xc
[  366.045199][    T5] wacom 0003:056A:0023.001E: item 0 1 1 12 parsing failed
[  366.052505][    T5] wacom 0003:056A:0023.001E: parse failed
[  366.058713][    T5] wacom: probe of 0003:056A:0023.001E failed with error -22
[  366.067713][    T5] usb 6-1: USB disconnect, device number 45
[  366.557037][    T5] usb 6-1: new full-speed USB device number 46 using dummy_hcd