duct=0, SerialNumber=0
[  886.984230][ T3684] wacom 0003:056A:0331.0104: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0
[  886.997562][ T3686] wacom 0003:056A:0331.0105: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0
[  887.181109][T13504] usb 1-1: USB disconnect, device number 96
[  887.185929][ T3686] usb 5-1: USB disconnect, device number 71
[  887.580020][ T3686] usb 4-1: USB disconnect, device number 53
16:09:59 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b004000"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:09:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:09:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:09:59 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x400, 0x0, 0x9, 0xec5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb77, 0x0, 0x4000004, 0xb28], 0x3000, 0x4800})
syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:09:59 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:09:59 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:09:59 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  888.376782][ T3679] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  888.386780][ T3686] usb 5-1: new high-speed USB device number 72 using dummy_hcd
16:10:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  888.486797][T23068] usb 4-1: new high-speed USB device number 54 using dummy_hcd
16:10:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  888.627631][ T3684] usb 2-1: new high-speed USB device number 119 using dummy_hcd
16:10:00 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  888.756707][ T3679] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  888.768212][ T3686] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  888.783424][ T3686] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  888.794558][ T3679] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  888.804791][ T3686] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  888.814780][ T3679] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  888.829090][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.841580][ T3679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.887226][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  888.916778][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  888.931299][T23068] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  888.944821][T23068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.026791][ T3684] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  889.038573][ T3684] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  889.048945][ T3684] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  889.058225][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.331888][ T3679] wacom 0003:056A:0331.0106: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0
[  889.406880][ T3686] usbhid 5-1:1.0: can't add hid device: -71
[  889.415107][ T3686] usbhid: probe of 5-1:1.0 failed with error -71
[  889.425949][ T3686] usb 5-1: USB disconnect, device number 72
[  889.444813][T23068] wacom 0003:056A:0331.0107: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  889.540374][ T3736] usb 1-1: USB disconnect, device number 97
[  889.552996][ T3684] wacom 0003:056A:0331.0108: hidraw2: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  890.719356][ T3684] usb 4-1: reset high-speed USB device number 54 using dummy_hcd
[  890.886774][T23068] usb 2-1: reset high-speed USB device number 119 using dummy_hcd
16:10:02 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b005c00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:02 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:02 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:03 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  891.546658][ T3736] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  891.554342][T13504] usb 1-1: new high-speed USB device number 98 using dummy_hcd
16:10:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  891.683500][ T3684] usb 4-1: device descriptor read/64, error -71
16:10:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  891.839498][T23068] usb 2-1: device descriptor read/64, error -71
16:10:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  891.926930][T13504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  891.938080][ T3736] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  891.972290][ T3736] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  891.972495][T13504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  891.986603][ T3684] usb 4-1: reset high-speed USB device number 54 using dummy_hcd
[  892.000796][ T3736] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  892.019263][ T3736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.042485][T13504] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  892.084991][T13504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.130429][T23068] usb 2-1: reset high-speed USB device number 119 using dummy_hcd
[  892.617113][ T3736] usbhid 5-1:1.0: can't add hid device: -71
[  892.623143][ T3736] usbhid: probe of 5-1:1.0 failed with error -71
[  892.632608][ T3736] usb 5-1: USB disconnect, device number 73
[  892.666764][T13504] usbhid 1-1:1.0: can't add hid device: -71
[  892.672775][T13504] usbhid: probe of 1-1:1.0 failed with error -71
[  892.681756][T13504] usb 1-1: USB disconnect, device number 98
[  893.107919][T23068] usb 4-1: USB disconnect, device number 54
[  893.212801][ T3679] usb 2-1: USB disconnect, device number 119
16:10:05 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000100"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:05 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:05 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:05 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  893.916769][ T3679] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  893.926725][T13504] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  893.976670][ T3736] usb 4-1: new high-speed USB device number 55 using dummy_hcd
16:10:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  894.068323][   T14] usb 2-1: new high-speed USB device number 120 using dummy_hcd
16:10:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  894.287090][ T3679] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  894.300900][ T3679] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  894.311150][ T3679] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  894.331583][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.367616][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  894.378639][T13504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  894.389807][T13504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  894.399644][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  894.409537][T13504] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  894.418718][ T3736] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  894.427840][ T3736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.436632][T13504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.444932][   T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  894.479300][   T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  894.490018][   T14] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  894.499722][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.896789][ T3679] usbhid 5-1:1.0: can't add hid device: -71
[  894.903027][ T3679] usbhid: probe of 5-1:1.0 failed with error -71
[  894.911523][ T3679] usb 5-1: USB disconnect, device number 74
[  894.932610][ T3736] wacom 0003:056A:0331.0109: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  894.990564][   T14] wacom 0003:056A:0331.010A: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  895.014703][T13504] usbhid 1-1:1.0: can't add hid device: -71
[  895.024096][T13504] usbhid: probe of 1-1:1.0 failed with error -71
[  895.058058][T13504] usb 1-1: USB disconnect, device number 99
[  895.398188][   T14] usb 4-1: USB disconnect, device number 55
16:10:07 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000200"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:07 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:07 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:07 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  896.186615][   T14] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  896.216756][T13504] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  896.227650][ T3736] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  896.246652][ T3679] usb 2-1: reset high-speed USB device number 120 using dummy_hcd
[  896.546741][   T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  896.558104][   T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  896.568494][   T14] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  896.578019][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.586981][T13504] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  896.598760][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  896.620959][T13504] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  896.631366][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  896.642061][ T3736] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  896.651633][T13504] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  896.660813][T13504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  896.668857][ T3736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:10:08 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:08 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  897.126671][   T14] usbhid 1-1:1.0: can't add hid device: -71
[  897.132930][   T14] usbhid: probe of 1-1:1.0 failed with error -71
[  897.166824][   T14] usb 1-1: USB disconnect, device number 100
[  897.176682][ T3679] usb 2-1: device descriptor read/64, error -71
[  897.178667][ T3736] wacom 0003:056A:0331.010B: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
16:10:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  897.226900][T13504] usbhid 5-1:1.0: can't add hid device: -71
[  897.234821][T13504] usbhid: probe of 5-1:1.0 failed with error -71
[  897.258997][T13504] usb 5-1: USB disconnect, device number 75
[  897.446935][ T3679] usb 2-1: reset high-speed USB device number 120 using dummy_hcd
[  897.639053][T13502] usb 4-1: USB disconnect, device number 56
16:10:09 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000300"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:09 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:09 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:09 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  898.268308][ T3686] usb 2-1: USB disconnect, device number 120
[  898.426804][ T3683] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  898.434633][T23068] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  898.486783][T13502] usb 4-1: new high-speed USB device number 57 using dummy_hcd
16:10:10 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  898.789266][ T3683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  898.800458][T23068] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  898.855299][T23068] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  898.868277][ T3683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  898.887751][ T3683] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  898.896745][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  898.897355][T23068] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  898.911701][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  898.926803][T13502] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  898.930293][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.936133][T13502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.962161][T23068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:10:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  899.266669][ T3686] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  899.462520][T13502] wacom 0003:056A:0331.010C: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  899.516760][ T3683] usbhid 1-1:1.0: can't add hid device: -71
[  899.524050][ T3683] usbhid: probe of 1-1:1.0 failed with error -71
[  899.531030][T23068] usbhid 5-1:1.0: can't add hid device: -71
[  899.537527][T23068] usbhid: probe of 5-1:1.0 failed with error -71
[  899.569829][T23068] usb 5-1: USB disconnect, device number 76
[  899.576892][ T3683] usb 1-1: USB disconnect, device number 101
[  899.636881][ T3686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  899.675571][ T3686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
16:10:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  899.701011][ T3686] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  899.738814][ T3686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:10:11 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:11 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  899.918606][T13502] usb 4-1: USB disconnect, device number 57
16:10:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  900.253346][ T3686] wacom 0003:056A:0331.010D: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  900.264685][ T3683] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  900.297353][T13504] usb 1-1: new high-speed USB device number 102 using dummy_hcd
16:10:12 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000400"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  900.458813][T13502] usb 2-1: USB disconnect, device number 121
16:10:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  900.637622][ T3683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  900.657701][ T3683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  900.699333][ T3683] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  900.716847][T13504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  900.722931][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  900.732503][T13504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  900.767820][T13504] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  900.786129][ T3680] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  900.793995][T13504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:10:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:12 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  901.176854][ T3680] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  901.192542][ T3680] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  901.215359][ T3680] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  901.226143][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.286697][ T3683] usbhid 5-1:1.0: can't add hid device: -71
[  901.286712][ T3736] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  901.292700][ T3683] usbhid: probe of 5-1:1.0 failed with error -71
[  901.323229][ T3683] usb 5-1: USB disconnect, device number 77
16:10:13 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  901.366703][T13504] usbhid 1-1:1.0: can't add hid device: -71
[  901.372738][T13504] usbhid: probe of 1-1:1.0 failed with error -71
[  901.384350][T13504] usb 1-1: USB disconnect, device number 102
16:10:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:13 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:13 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  901.696962][ T3736] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  901.709058][ T3736] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  901.728577][ T3736] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
16:10:13 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:13 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  901.742632][ T3736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.757961][ T3680] wacom 0003:056A:0331.010E: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  902.096860][T13504] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  902.211322][   T40] usb 4-1: USB disconnect, device number 58
[  902.292531][ T3736] wacom 0003:056A:0331.010F: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  902.489655][ T3736] usb 2-1: USB disconnect, device number 122
[  902.497040][T13504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  902.508247][T13504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  902.521331][T13504] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  902.534069][T13504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:10:14 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000500"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:14 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:14 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  903.076872][ T3736] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  903.097214][T13504] usbhid 1-1:1.0: can't add hid device: -71
[  903.108580][T13504] usbhid: probe of 1-1:1.0 failed with error -71
16:10:14 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  903.157559][T13504] usb 1-1: USB disconnect, device number 103
16:10:14 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:15 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  903.366839][ T3686] usb 2-1: new high-speed USB device number 123 using dummy_hcd
16:10:15 executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  903.486761][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  903.497969][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  903.514911][ T3736] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  903.524403][ T3736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.727032][ T3686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  903.738062][ T3686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  903.748311][ T3686] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  903.757465][ T3686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.043306][ T3736] wacom 0003:056A:0331.0110: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  904.298110][ T3686] wacom 0003:056A:0331.0111: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  904.451201][ T3736] usb 2-1: USB disconnect, device number 123
[  904.508747][ T3686] usb 4-1: USB disconnect, device number 59
16:10:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:16 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000600"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:16 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:16 executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:16 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  905.306777][T13502] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  905.316822][ T3683] usb 4-1: new high-speed USB device number 60 using dummy_hcd
16:10:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:17 executing program 0:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  905.687388][T13502] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  905.703465][T13502] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  905.706946][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  905.721524][T13502] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  905.735031][T13502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.738578][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  905.760122][ T3683] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  905.770108][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.234316][T13502] wacom 0003:056A:0331.0112: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  906.262101][ T3683] wacom 0003:056A:0331.0113: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  906.438786][ T3680] usb 2-1: USB disconnect, device number 124
[  907.526922][ T3683] usb 4-1: reset high-speed USB device number 60 using dummy_hcd
16:10:19 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000700"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:19 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:19 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:19 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  908.377003][   T14] usb 2-1: new high-speed USB device number 125 using dummy_hcd
16:10:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  908.494305][ T3683] usb 4-1: device descriptor read/64, error -71
16:10:20 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:20 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  908.776898][ T3683] usb 4-1: reset high-speed USB device number 60 using dummy_hcd
[  908.806980][   T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  908.825216][   T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  908.835647][   T14] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  908.845627][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  909.406975][   T14] usbhid 2-1:1.0: can't add hid device: -71
[  909.413756][   T14] usbhid: probe of 2-1:1.0 failed with error -71
[  909.430779][   T14] usb 2-1: USB disconnect, device number 125
[  909.870018][   T14] usb 4-1: USB disconnect, device number 60
16:10:22 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000800"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16:10:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

16:10:22 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:22 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:22 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

16:10:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  910.666701][ T3680] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  910.696629][T13504] usb 4-1: new high-speed USB device number 61 using dummy_hcd
16:10:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

16:10:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

16:10:22 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:22 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  911.047653][ T3680] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  911.060933][ T3680] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  911.071361][ T3680] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  911.080965][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.097883][T13504] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  911.115365][T13504] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  911.126366][T13504] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  911.136488][T13504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  911.286643][ T3686] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  911.296334][   T14] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  911.496670][ T3686] usb 1-1: device descriptor read/64, error 18
[  911.503057][   T14] usb 5-1: device descriptor read/64, error 18
[  911.646854][ T3680] usbhid 2-1:1.0: can't add hid device: -71
[  911.652870][ T3680] usbhid: probe of 2-1:1.0 failed with error -71
[  911.669986][ T3680] usb 2-1: USB disconnect, device number 126
[  911.676823][T13504] wacom 0003:056A:0331.0114: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  911.796759][ T3686] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  911.804602][   T14] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  912.006869][ T3686] usb 1-1: device descriptor read/64, error 18
[  912.026711][   T14] usb 5-1: device descriptor read/64, error 18
[  912.127028][ T3686] usb usb1-port1: attempt power cycle
[  912.138504][ T3736] usb 4-1: USB disconnect, device number 61
[  912.147179][   T14] usb usb5-port1: attempt power cycle
[  912.546620][ T3686] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  912.576816][   T14] usb 5-1: new high-speed USB device number 80 using dummy_hcd
16:10:24 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000900"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:24 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:24 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

16:10:24 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  912.716795][ T3686] usb 1-1: device descriptor read/8, error -61
[  912.746824][   T14] usb 5-1: device descriptor read/8, error -61
16:10:24 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000400"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  912.936682][T23068] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  912.946998][ T3683] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  912.957305][ T3680] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  912.987609][ T3686] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  913.026649][   T14] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  913.126795][ T3736] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  913.166790][ T3686] usb 1-1: device descriptor read/8, error -61
[  913.196813][   T14] usb 5-1: device descriptor read/8, error -61
[  913.287212][ T3686] usb usb1-port1: unable to enumerate USB device
[  913.296870][T23068] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  913.308405][ T3683] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  913.320047][   T14] usb usb5-port1: unable to enumerate USB device
[  913.326713][T23068] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  913.337551][ T3683] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  913.347763][T23068] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  913.356992][ T3680] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  913.357224][ T3683] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  913.374888][ T3680] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  913.377451][T23068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.401776][ T3680] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  913.406273][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.424470][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.516967][ T3736] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  913.528260][ T3736] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  913.538253][ T3736] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  913.547566][ T3736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.883236][T23068] wacom 0003:056A:0331.0115: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0
16:10:25 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:25 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  913.969779][ T3680] wacom 0003:056A:0331.0116: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  914.046861][ T3683] usbhid 2-1:1.0: can't add hid device: -71
[  914.049744][ T3736] wacom 0003:056A:0331.0117: hidraw2: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0
[  914.053166][ T3683] usbhid: probe of 2-1:1.0 failed with error -71
[  914.084742][ T3683] usb 2-1: USB disconnect, device number 127
[  914.112242][   T40] usb 3-1: USB disconnect, device number 28
16:10:26 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  914.456754][T13504] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  914.516781][ T3736] usb 1-1: new high-speed USB device number 108 using dummy_hcd
16:10:26 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  914.676680][T13504] usb 5-1: device descriptor read/64, error 18
[  914.706724][ T3736] usb 1-1: device descriptor read/64, error 18
[  914.797081][   T40] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  914.936780][T23068] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  914.956822][T13504] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  914.986783][ T3736] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  915.177859][T13504] usb 5-1: device descriptor read/64, error 18
[  915.184242][   T40] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  915.195407][ T3736] usb 1-1: device descriptor read/64, error 18
[  915.201729][ T3680] usb 4-1: reset high-speed USB device number 62 using dummy_hcd
[  915.222510][   T40] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  915.237728][   T40] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  915.247859][   T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  915.296854][T23068] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  915.313868][T23068] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  915.333146][T23068] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  915.344865][T23068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  915.346896][ T3736] usb usb1-port1: attempt power cycle
[  915.359287][T13504] usb usb5-port1: attempt power cycle
[  915.376720][ T3687] usb 6-1: reset high-speed USB device number 10 using dummy_hcd
16:10:27 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000a00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  915.796881][T13504] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  915.804644][ T3736] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  915.826951][   T40] usbhid 2-1:1.0: can't add hid device: -71
[  915.833105][   T40] usbhid: probe of 2-1:1.0 failed with error -71
[  915.853085][   T40] usb 2-1: USB disconnect, device number 2
16:10:27 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x20000000000, 0xfff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  915.916929][T23068] usbhid 3-1:1.0: can't add hid device: -71
[  915.925519][T23068] usbhid: probe of 3-1:1.0 failed with error -71
[  915.948588][T23068] usb 3-1: USB disconnect, device number 29
[  915.987837][T13504] usb 5-1: device descriptor read/8, error -61
[  915.994338][ T3736] usb 1-1: device descriptor read/8, error -61
16:10:27 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000380)="660f38815002eaf4ff0c000f72e3000f781e410066b9800000c00f326635000800000f3066b8010000000f01d9bad00466b877fe000066ef66b8e60000000f23c80f21f86635040010000f23f8b8cd008ed8660f38816e01", 0x58}], 0x1, 0x2, &(0x7f0000000400)=[@cstype0={0x4, 0x1}, @dstype0={0x6, 0xa}], 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  916.196857][ T3680] usb 4-1: device descriptor read/64, error -71
16:10:27 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:27 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  916.258931][  T144] usb 6-1: USB disconnect, device number 10
[  916.276775][T13504] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  916.284482][ T3736] usb 1-1: new high-speed USB device number 111 using dummy_hcd
16:10:28 executing program 2:
r0 = syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})
syz_read_part_table(0x9, 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)="56b2194fe894fa6c7ffe4533bbcbfe716c12a59b6a9e27176b436067c2a54ad8295fd7c4e273d1d0f67b69b03e30a0ac58be52ca3feafd47", 0x38, 0x934d}, {&(0x7f0000000140)="7f07ae901cb70a0d2ba6f9210f", 0xd, 0x1}])
fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0x82)

[  916.412091][T26651] loop2: detected capacity change from 0 to 16
[  916.429976][T26651] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  916.441020][T26651] NILFS (loop2): mounting unchecked fs
[  916.450318][T26651] NILFS (loop2): invalid segment: Magic number mismatch
[  916.457472][T26651] NILFS (loop2): unable to fall back to spare super block
[  916.464739][T26651] NILFS (loop2): error -22 while searching super root
[  916.484681][ T3680] usb 4-1: reset high-speed USB device number 62 using dummy_hcd
[  916.496852][ T3736] usb 1-1: device descriptor read/8, error -61
[  916.503139][T13504] usb 5-1: device descriptor read/8, error -61
16:10:28 executing program 2:
r0 = syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})
syz_read_part_table(0x9, 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)="56b2194fe894fa6c7ffe4533bbcbfe716c12a59b6a9e27176b436067c2a54ad8295fd7c4e273d1d0f67b69b03e30a0ac58be52ca3feafd47", 0x38, 0x934d}, {&(0x7f0000000140)="7f07ae901cb70a0d2ba6f9210f", 0xd, 0x1}])
fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0x82)

[  916.569209][T26659] loop2: detected capacity change from 0 to 16
[  916.583886][T26659] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  916.613743][T26659] NILFS (loop2): mounting unchecked fs
[  916.620327][T26659] NILFS (loop2): invalid segment: Magic number mismatch
[  916.628740][T13504] usb usb5-port1: unable to enumerate USB device
[  916.635413][ T3736] usb usb1-port1: unable to enumerate USB device
[  916.643246][T26659] NILFS (loop2): unable to fall back to spare super block
[  916.651817][T26659] NILFS (loop2): error -22 while searching super root
16:10:28 executing program 2:
r0 = syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})
syz_read_part_table(0x9, 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)="56b2194fe894fa6c7ffe4533bbcbfe716c12a59b6a9e27176b436067c2a54ad8295fd7c4e273d1d0f67b69b03e30a0ac58be52ca3feafd47", 0x38, 0x934d}, {&(0x7f0000000140)="7f07ae901cb70a0d2ba6f9210f", 0xd, 0x1}])
fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0x82)

[  916.682739][T26601] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  916.762540][T26668] loop2: detected capacity change from 0 to 16
[  916.780217][T26668] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  916.792246][T26668] NILFS (loop2): mounting unchecked fs
[  916.799575][T26668] NILFS (loop2): invalid segment: Magic number mismatch
[  916.807589][  T144] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  916.815844][T26668] NILFS (loop2): unable to fall back to spare super block
[  916.824166][T26668] NILFS (loop2): error -22 while searching super root
16:10:28 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:28 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:28 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})
syz_read_part_table(0x9, 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)="56b2194fe894fa6c7ffe4533bbcbfe716c12a59b6a9e27176b436067c2a54ad8295fd7c4e273d1d0f67b69b03e30a0ac58be52ca3feafd47", 0x38, 0x934d}, {&(0x7f0000000140)="7f07ae901cb70a0d2ba6f9210f", 0xd, 0x1}])

[  917.057500][T26683] loop2: detected capacity change from 0 to 16
[  917.073374][T26683] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  917.086256][T26683] NILFS (loop2): mounting unchecked fs
[  917.095709][T26683] NILFS (loop2): invalid segment: Magic number mismatch
[  917.097063][T26601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  917.103192][T26683] NILFS (loop2): unable to fall back to spare super block
[  917.121064][T26683] NILFS (loop2): error -22 while searching super root
[  917.131743][T26601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.143003][T26601] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  917.152546][T26601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:10:28 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  917.196939][  T144] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  917.210706][  T144] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.230420][  T144] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  917.249848][  T144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.269856][T26696] loop2: detected capacity change from 0 to 16
[  917.306837][T26696] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  917.322788][T26696] NILFS (loop2): mounting unchecked fs
[  917.330097][T26696] NILFS (loop2): invalid segment: Magic number mismatch
[  917.337722][T26696] NILFS (loop2): unable to fall back to spare super block
[  917.345594][T26696] NILFS (loop2): error -22 while searching super root
[  917.556699][T13504] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  917.564439][T13502] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  917.576062][T23068] usb 4-1: USB disconnect, device number 62
[  917.717030][T26601] usbhid 2-1:1.0: can't add hid device: -71
[  917.723220][T26601] usbhid: probe of 2-1:1.0 failed with error -71
[  917.737447][T26601] usb 2-1: USB disconnect, device number 3
[  917.752977][  T144] wacom 0003:056A:0331.0118: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0
[  917.766771][T13502] usb 1-1: device descriptor read/64, error 18
[  917.773015][T13504] usb 5-1: device descriptor read/64, error 18
16:10:29 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000b00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:29 executing program 2:
syz_mount_image$nilfs2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  918.036743][T13502] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  918.056686][T13504] usb 5-1: new high-speed USB device number 87 using dummy_hcd
16:10:29 executing program 2:
syz_mount_image$nilfs2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  918.105390][T26725] loop2: detected capacity change from 0 to 16
16:10:29 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  918.244352][ T8595] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  918.254111][T13502] usb 1-1: device descriptor read/64, error 18
[  918.260398][T13504] usb 5-1: device descriptor read/64, error 18
[  918.275906][T26738] loop2: detected capacity change from 0 to 16
[  918.376883][T23068] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  918.390444][T13502] usb usb1-port1: attempt power cycle
[  918.396081][T13504] usb usb5-port1: attempt power cycle
[  918.413969][ T8595] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  918.466670][  T144] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  918.736759][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  918.753222][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  918.766330][T23068] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  918.783621][T23068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.816717][T13502] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  918.824487][T13504] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  918.836767][  T144] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  918.852924][  T144] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  918.863191][  T144] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  918.872925][  T144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.996912][T13504] usb 5-1: device descriptor read/8, error -61
[  919.003414][T13502] usb 1-1: device descriptor read/8, error -61
[  919.047613][T26601] usb 6-1: reset high-speed USB device number 11 using dummy_hcd
[  919.278987][T13502] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  919.286794][T13504] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  919.294968][T23068] wacom 0003:056A:0331.0119: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  919.436878][  T144] usbhid 2-1:1.0: can't add hid device: -71
[  919.442881][  T144] usbhid: probe of 2-1:1.0 failed with error -71
[  919.460515][  T144] usb 2-1: USB disconnect, device number 4
[  919.496735][T13502] usb 1-1: device descriptor read/8, error -61
[  919.503045][T13504] usb 5-1: device descriptor read/8, error -61
16:10:31 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:31 executing program 2:
syz_mount_image$nilfs2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:31 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  919.604101][T26759] loop2: detected capacity change from 0 to 16
[  919.628053][T13502] usb usb1-port1: unable to enumerate USB device
[  919.634561][T13504] usb usb5-port1: unable to enumerate USB device
16:10:31 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  919.742534][ T8595] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  919.769819][T26770] loop2: detected capacity change from 0 to 16
[  919.829490][T26774] loop2: detected capacity change from 0 to 16
16:10:31 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:31 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:31 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:31 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  920.026948][T26601] usb 6-1: device descriptor read/64, error -71
[  920.071242][T26788] loop2: detected capacity change from 0 to 16
[  920.326681][T26601] usb 6-1: reset high-speed USB device number 11 using dummy_hcd
[  920.516617][T23068] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  920.526821][   T14] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  920.556888][ T3686] usb 4-1: reset high-speed USB device number 63 using dummy_hcd
[  920.706660][T23068] usb 5-1: device descriptor read/64, error 18
[  920.716925][   T14] usb 1-1: device descriptor read/64, error 18
[  920.976891][T23068] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  920.986792][   T14] usb 1-1: new high-speed USB device number 117 using dummy_hcd
16:10:32 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000c00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:32 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:32 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:32 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  921.166707][T23068] usb 5-1: device descriptor read/64, error 18
[  921.176841][   T14] usb 1-1: device descriptor read/64, error 18
[  921.288147][T23068] usb usb5-port1: attempt power cycle
[  921.297267][   T14] usb usb1-port1: attempt power cycle
[  921.389612][ T3684] usb 6-1: USB disconnect, device number 11
[  921.496646][ T3686] usb 4-1: device descriptor read/64, error -71
[  921.696663][T23068] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  921.716619][   T14] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  921.776823][ T3686] usb 4-1: reset high-speed USB device number 63 using dummy_hcd
16:10:33 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:33 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:33 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  921.876779][T23068] usb 5-1: device descriptor read/8, error -61
[  921.886978][   T14] usb 1-1: device descriptor read/8, error -61
16:10:33 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  921.998903][T26832] loop2: detected capacity change from 0 to 5
[  922.027634][T26832] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  922.047837][T26832] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  922.059812][T26832] NILFS (loop2): mounting unchecked fs
[  922.065773][T26832] NILFS (loop2): I/O error reading segment
[  922.071961][T26832] NILFS (loop2): error -5 while searching super root
[  922.146660][T23068] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  922.166636][   T14] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  922.216792][T13504] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  922.316830][T23068] usb 5-1: device descriptor read/8, error -61
[  922.336899][   T14] usb 1-1: device descriptor read/8, error -61
[  922.436839][T23068] usb usb5-port1: unable to enumerate USB device
[  922.466230][   T14] usb usb1-port1: unable to enumerate USB device
[  922.620980][T13504] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  922.631902][T13504] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  922.641755][T13504] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  922.650905][T13504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.821588][ T3686] usb 4-1: USB disconnect, device number 63
16:10:34 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:34 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:34 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:34 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  923.105481][T26855] loop2: detected capacity change from 0 to 4
[  923.140042][T26855] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  923.156963][T26855] NILFS (loop2): couldn't find nilfs on the device
[  923.164950][T13504] wacom 0003:056A:0331.011A: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0
16:10:34 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000d00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:34 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  923.345182][T26872] loop2: detected capacity change from 0 to 4
[  923.390496][T26872] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  923.413722][T26872] NILFS (loop2): couldn't find nilfs on the device
16:10:35 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  923.521498][T26884] loop2: detected capacity change from 0 to 4
[  923.540695][T26884] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  923.546668][ T3686] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  923.550871][T26884] NILFS (loop2): couldn't find nilfs on the device
16:10:35 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {0x0, 0x0, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:35 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  923.576696][  T144] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  923.646703][ T3682] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  923.656349][T26890] loop2: detected capacity change from 0 to 5
[  923.690256][T26890] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  923.713852][T26890] NILFS (loop2): couldn't find nilfs on the device
[  923.756835][ T3686] usb 5-1: device descriptor read/64, error 18
[  923.776826][  T144] usb 1-1: device descriptor read/64, error 18
[  924.007045][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  924.018739][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  924.029067][ T3686] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  924.036918][ T3682] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  924.046045][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  924.056885][  T144] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  924.226754][ T3686] usb 5-1: device descriptor read/64, error 18
[  924.266676][  T144] usb 1-1: device descriptor read/64, error 18
[  924.346962][ T3686] usb usb5-port1: attempt power cycle
[  924.376719][T13504] usb 6-1: reset high-speed USB device number 12 using dummy_hcd
[  924.387434][  T144] usb usb1-port1: attempt power cycle
[  924.554344][ T3682] wacom 0003:056A:0331.011B: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  924.756770][ T3686] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  924.826976][  T144] usb 1-1: new high-speed USB device number 122 using dummy_hcd
16:10:36 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:36 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {0x0, 0x0, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:36 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  924.926715][ T3686] usb 5-1: device descriptor read/8, error -61
[  924.940481][T26914] loop2: detected capacity change from 0 to 5
[  924.955088][T26914] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  924.969224][T26914] NILFS (loop2): couldn't find nilfs on the device
[  925.006844][  T144] usb 1-1: device descriptor read/8, error -61
[  925.196634][ T3686] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  925.286842][  T144] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  925.316684][T13504] usb 6-1: device descriptor read/64, error -71
[  925.366823][ T3686] usb 5-1: device descriptor read/8, error -61
[  925.476768][  T144] usb 1-1: device descriptor read/8, error -61
[  925.487862][ T3686] usb usb5-port1: unable to enumerate USB device
[  925.596842][  T144] usb usb1-port1: unable to enumerate USB device
[  925.603295][T13504] usb 6-1: reset high-speed USB device number 12 using dummy_hcd
[  925.816739][ T3686] usb 4-1: reset high-speed USB device number 64 using dummy_hcd
16:10:37 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:37 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {0x0, 0x0, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:37 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:37 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  926.166221][T26931] loop2: detected capacity change from 0 to 5
[  926.199786][T26931] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  926.216151][T26931] NILFS (loop2): couldn't find nilfs on the device
16:10:37 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000e00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:37 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100), 0x0, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:38 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100), 0x0, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  926.363886][T26944] loop2: detected capacity change from 0 to 5
[  926.383323][T26944] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  926.398732][T26944] NILFS (loop2): couldn't find nilfs on the device
[  926.468766][T26601] usb 6-1: USB disconnect, device number 12
[  926.481675][T26955] loop2: detected capacity change from 0 to 5
16:10:38 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100), 0x0, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  926.517418][T26955] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  926.526088][T26955] NILFS (loop2): couldn't find nilfs on the device
[  926.556707][ T3684] usb 5-1: new high-speed USB device number 98 using dummy_hcd
16:10:38 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  926.616620][   T14] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  926.625625][T26969] loop2: detected capacity change from 0 to 5
[  926.647740][T26969] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  926.656102][T26969] NILFS (loop2): couldn't find nilfs on the device
[  926.746889][ T3686] usb 4-1: device descriptor read/64, error -71
[  926.753318][ T3684] usb 5-1: device descriptor read/64, error 18
[  926.826728][   T14] usb 1-1: device descriptor read/64, error 18
16:10:38 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:38 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00', 0x5, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  926.982943][T26979] loop2: detected capacity change from 0 to 5
[  927.008805][T26979] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
16:10:38 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00', 0x5, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  927.026689][ T3686] usb 4-1: reset high-speed USB device number 64 using dummy_hcd
[  927.034551][ T3684] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  927.046802][T26979] NILFS (loop2): couldn't find nilfs on the device
[  927.106663][   T14] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  927.113806][T26987] loop2: detected capacity change from 0 to 5
[  927.145289][T26987] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  927.163986][T26987] NILFS (loop2): couldn't find nilfs on the device
[  927.247362][ T3684] usb 5-1: device descriptor read/64, error 18
[  927.296903][   T14] usb 1-1: device descriptor read/64, error 18
[  927.326952][T13504] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  927.371784][ T3684] usb usb5-port1: attempt power cycle
[  927.417261][   T14] usb usb1-port1: attempt power cycle
[  927.716735][T13504] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  927.728935][T13504] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  927.739224][T13504] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  927.749346][T13504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.787153][ T3684] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  927.826793][   T14] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  927.956793][ T3684] usb 5-1: device descriptor read/8, error -61
[  927.996723][   T14] usb 1-1: device descriptor read/8, error -61
[  928.077098][ T3686] usb 4-1: USB disconnect, device number 64
[  928.226705][ T3684] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  928.243798][T13504] wacom 0003:056A:0331.011C: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0
[  928.266787][   T14] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  928.396885][ T3684] usb 5-1: device descriptor read/8, error -61
[  928.436844][   T14] usb 1-1: device descriptor read/8, error -61
[  928.443994][ T3686] usb 6-1: USB disconnect, device number 13
[  928.517027][ T3684] usb usb5-port1: unable to enumerate USB device
[  928.556728][   T14] usb usb1-port1: unable to enumerate USB device
16:10:40 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:40 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:40 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, 0x0)

16:10:40 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00', 0x5, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:40 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000001000"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:40 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  929.208578][T27030] loop2: detected capacity change from 0 to 5
[  929.244994][T27030] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  929.260931][T27030] NILFS (loop2): couldn't find nilfs on the device
16:10:40 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  929.354068][T27046] loop2: detected capacity change from 0 to 5
16:10:41 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  929.397473][T27046] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  929.406326][T27046] NILFS (loop2): couldn't find nilfs on the device
16:10:41 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  929.474903][T27053] loop2: detected capacity change from 0 to 5
[  929.476901][   T14] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  929.498020][T27053] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  929.507006][T13502] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  929.508720][T27053] NILFS (loop2): couldn't find nilfs on the device
[  929.596703][T13504] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  929.616341][T27060] loop2: detected capacity change from 0 to 5
[  929.631444][T27060] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
16:10:41 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  929.640887][T27060] NILFS (loop2): couldn't find nilfs on the device
[  929.646739][ T3686] usb 1-1: new high-speed USB device number 2 using dummy_hcd
16:10:41 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, 0x0)

[  929.742041][T27067] loop2: detected capacity change from 0 to 5
16:10:41 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  929.782663][T27067] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  929.805542][T27067] NILFS (loop2): couldn't find nilfs on the device
[  929.856879][   T14] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  929.888359][   T14] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  929.890884][T27077] loop2: detected capacity change from 0 to 5
[  929.901266][   T14] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  929.914056][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  929.937674][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  929.938121][T27077] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  929.953166][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  929.964582][T27077] NILFS (loop2): couldn't find nilfs on the device
[  929.991296][T13502] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  930.006821][ T3686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  930.018160][ T3686] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  930.027250][T13504] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  930.027274][T13504] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  930.038171][ T3686] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  930.056094][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.056557][T13502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.075101][T13504] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  930.093956][T13504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.422328][   T14] wacom 0003:056A:0331.011D: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0
[  930.592872][T13502] wacom 0003:056A:0331.011E: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  930.624475][   T14] usb 6-1: USB disconnect, device number 14
[  931.207688][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[  931.214039][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
[  931.806741][T13502] usb 4-1: reset high-speed USB device number 65 using dummy_hcd
16:10:43 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  932.121129][   T14] usb 5-1: USB disconnect, device number 102
16:10:43 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:43 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:43 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, 0x0)

[  932.225616][ T3736] usb 1-1: USB disconnect, device number 2
[  932.262466][T27125] loop2: detected capacity change from 0 to 5
16:10:43 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:44 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000001100"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  932.294426][T27125] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  932.303548][T27125] NILFS (loop2): couldn't find nilfs on the device
16:10:44 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:44 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  932.417676][T27146] loop2: detected capacity change from 0 to 4
[  932.443059][T27146] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  932.455246][T27146] NILFS (loop2): couldn't find nilfs on the device
16:10:44 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  932.520952][T27151] loop2: detected capacity change from 0 to 4
[  932.526772][   T14] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  932.549886][T27151] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  932.559555][T27151] NILFS (loop2): couldn't find nilfs on the device
[  932.624345][T27160] loop2: detected capacity change from 0 to 4
[  932.636700][T13504] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  932.650593][T27160] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  932.660282][ T3736] usb 1-1: new high-speed USB device number 3 using dummy_hcd
16:10:44 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  932.669664][T27160] NILFS (loop2): couldn't find nilfs on the device
16:10:44 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x0, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:44 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  932.733144][T27165] loop2: detected capacity change from 0 to 5
[  932.739601][T13502] usb 4-1: device descriptor read/64, error -71
[  932.752233][T27165] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  932.762371][T27165] NILFS (loop2): couldn't find nilfs on the device
[  932.896812][   T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  932.910815][   T14] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  932.920567][   T14] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  932.929740][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.026763][T13504] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  933.038007][ T3736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  933.048290][T13502] usb 4-1: reset high-speed USB device number 65 using dummy_hcd
[  933.056482][ T3736] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  933.067239][T13504] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  933.077530][ T3736] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  933.086803][T13504] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  933.095935][ T3736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.104505][T13504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.623004][T13504] wacom 0003:056A:0331.011F: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0
[  933.825702][   T14] usb 6-1: USB disconnect, device number 15
[  934.128959][   T14] usb 4-1: USB disconnect, device number 65
16:10:46 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  935.155552][   T14] usb 5-1: USB disconnect, device number 103
16:10:46 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:46 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:46 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x0, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:46 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:46 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000001200"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  935.270704][T13504] usb 1-1: USB disconnect, device number 3
[  935.307425][T27229] loop2: detected capacity change from 0 to 5
[  935.347632][T27229] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  935.356012][T27229] NILFS (loop2): couldn't find nilfs on the device
16:10:47 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  935.453974][T27242] loop2: detected capacity change from 0 to 5
[  935.473283][T27242] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  935.498623][T27242] NILFS (loop2): couldn't find nilfs on the device
16:10:47 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  935.566765][T26601] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  935.594183][T27249] loop2: detected capacity change from 0 to 5
[  935.608485][T27249] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
16:10:47 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  935.623314][T27249] NILFS (loop2): couldn't find nilfs on the device
[  935.631021][   T14] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  935.639403][ T3686] usb 6-1: new high-speed USB device number 16 using dummy_hcd
16:10:47 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  935.705587][T27253] loop2: detected capacity change from 0 to 5
[  935.716837][T13504] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  935.719000][T27253] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  935.739616][T27253] NILFS (loop2): couldn't find nilfs on the device
16:10:47 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x0, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:47 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  935.813488][T27262] loop2: detected capacity change from 0 to 5
[  935.835546][T27262] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  935.845079][T27262] NILFS (loop2): couldn't find nilfs on the device
[  935.941707][T27272] loop2: detected capacity change from 0 to 5
[  935.948353][T26601] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  935.962617][T26601] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  935.979285][T27272] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  935.997345][T27272] NILFS (loop2): couldn't find nilfs on the device
[  936.005157][T26601] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  936.030634][T26601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.047885][ T3686] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  936.059175][   T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  936.073591][   T14] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  936.076928][T13504] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  936.102630][T13504] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  936.109977][ T3686] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  936.112879][T13504] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  936.131063][T13504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.142518][   T14] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  936.154906][ T3686] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  936.164088][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.172533][ T3686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.542793][T26601] wacom 0003:056A:0331.0120: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  936.746711][ T3686] usbhid 6-1:1.0: can't add hid device: -71
[  936.753282][ T3686] usbhid: probe of 6-1:1.0 failed with error -71
[  936.766954][ T3686] usb 6-1: USB disconnect, device number 16
[  937.003658][ T3686] usb 4-1: USB disconnect, device number 66
16:10:49 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  938.188311][ T3684] usb 5-1: USB disconnect, device number 104
16:10:49 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:49 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:49 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000a00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:49 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:49 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000001800"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  938.315132][T13504] usb 1-1: USB disconnect, device number 4
[  938.359604][T27331] loop2: detected capacity change from 0 to 5
[  938.387447][T27331] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  938.410293][T27331] NILFS (loop2): couldn't find nilfs on the device
16:10:50 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e0030000", 0x54, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  938.546306][T27342] loop2: detected capacity change from 0 to 5
[  938.567686][T27342] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  938.576689][T27342] NILFS (loop2): couldn't find nilfs on the device
16:10:50 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e0030000", 0x54, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  938.596659][ T3686] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  938.606698][ T3684] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  938.627590][T26601] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  938.635384][T13502] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  938.648485][T27347] loop2: detected capacity change from 0 to 5
[  938.672383][T27347] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  938.681053][T27347] NILFS (loop2): couldn't find nilfs on the device
16:10:50 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e0030000", 0x54, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:50 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f0000", 0x7e, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  938.766676][T13504] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  938.772501][T27358] loop2: detected capacity change from 0 to 5
[  938.795653][T27358] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  938.806351][T27358] NILFS (loop2): couldn't find nilfs on the device
16:10:50 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f0000", 0x7e, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  938.887937][T27366] loop2: detected capacity change from 0 to 5
[  938.913033][T27366] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  938.929505][T27366] NILFS (loop2): couldn't find nilfs on the device
[  938.960215][ T3686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  938.971493][ T3684] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  939.002486][ T3684] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  939.018114][ T3686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  939.034331][T27373] loop2: detected capacity change from 0 to 5
[  939.041120][ T3686] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  939.047014][T26601] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  939.052409][ T3684] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  939.061311][T13502] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  939.070451][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.093388][T27373] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  939.096573][T26601] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  939.104789][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.130126][T13502] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  939.134285][T27373] NILFS (loop2): couldn't find nilfs on the device
[  939.154884][T26601] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  939.164634][T13502] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  939.185426][T26601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.194094][T13502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:10:50 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f0000", 0x7e, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  939.209194][ T3684] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  939.218221][T13504] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  939.240708][T13504] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  939.280108][T13504] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  939.301584][T13504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.317604][T27390] loop2: detected capacity change from 0 to 5
[  939.345510][T27390] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  939.354558][T27390] NILFS (loop2): couldn't find nilfs on the device
[  939.369316][T13504] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  939.576832][T26601] usbhid 6-1:1.0: can't add hid device: -71
[  939.582964][T26601] usbhid: probe of 6-1:1.0 failed with error -71
[  939.598120][T26601] usb 6-1: USB disconnect, device number 17
[  939.630226][ T3686] wacom 0003:056A:0331.0121: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  939.719611][T13502] wacom 0003:056A:0331.0122: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  940.088136][   T14] usb 4-1: USB disconnect, device number 67
[  940.886722][T26601] usb 2-1: reset high-speed USB device number 5 using dummy_hcd
16:10:52 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  941.221836][T13504] usb 5-1: USB disconnect, device number 105
16:10:53 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:53 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b000000800020", 0x93, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  941.371733][   T14] usb 1-1: USB disconnect, device number 5
[  941.403084][T27443] loop2: detected capacity change from 0 to 5
16:10:53 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"}) (fail_nth: 1)

16:10:53 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:53 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000002500"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:10:53 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b000000800020", 0x93, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  941.433669][T27443] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  941.446989][T27443] NILFS (loop2): couldn't find nilfs on the device
[  941.494803][T27456] FAULT_INJECTION: forcing a failure.
[  941.494803][T27456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  941.510191][T27456] CPU: 0 PID: 27456 Comm: syz-executor.1 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  941.520715][T27456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  941.530778][T27456] Call Trace:
[  941.534065][T27456]  <TASK>
[  941.536995][T27456]  dump_stack_lvl+0x1e3/0x2cb
[  941.541670][T27456]  ? bfq_pos_tree_add_move+0x436/0x436
[  941.547113][T27456]  ? panic+0x76e/0x76e
[  941.551174][T27456]  ? snprintf+0xd6/0x120
[  941.555422][T27456]  should_fail+0x384/0x4b0
[  941.559828][T27456]  _copy_to_user+0x2b/0x130
[  941.564328][T27456]  simple_read_from_buffer+0xd9/0x160
[  941.569721][T27456]  proc_fail_nth_read+0x1af/0x220
[  941.574768][T27456]  ? proc_fault_inject_write+0x3a0/0x3a0
[  941.580417][T27456]  ? security_file_permission+0x45f/0x5c0
[  941.586147][T27456]  ? proc_fault_inject_write+0x3a0/0x3a0
[  941.591781][T27456]  vfs_read+0x2ea/0xd10
[  941.596010][T27456]  ? __fdget_pos+0x247/0x2e0
[  941.600586][T27456]  ? kernel_read+0x1f0/0x1f0
[  941.605193][T27456]  ? mutex_lock_nested+0x17/0x20
[  941.610117][T27456]  ? __fdget_pos+0x247/0x2e0
[  941.614690][T27456]  ? ksys_read+0x77/0x2c0
[  941.619010][T27456]  ksys_read+0x19b/0x2c0
[  941.623268][T27456]  ? print_irqtrace_events+0x220/0x220
[  941.628738][T27456]  ? vfs_write+0xd40/0xd40
[  941.633165][T27456]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  941.639160][T27456]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  941.645153][T27456]  do_syscall_64+0x2b/0x70
[  941.649556][T27456]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  941.655437][T27456] RIP: 0033:0x7f76b583bbfc
[  941.659838][T27456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  941.679435][T27456] RSP: 002b:00007f76b6a57160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  941.687861][T27456] RAX: ffffffffffffffda RBX: 00007f76b599bf60 RCX: 00007f76b583bbfc
[  941.695821][T27456] RDX: 000000000000000f RSI: 00007f76b6a571e0 RDI: 0000000000000003
[  941.703780][T27456] RBP: 00007f76b6a571d0 R08: 0000000000000000 R09: 0000000000000000
[  941.711735][T27456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  941.719696][T27456] R13: 00007fff119367af R14: 00007f76b6a57300 R15: 0000000000022000
[  941.727693][T27456]  </TASK>
[  941.737614][T13504] usb 5-1: new high-speed USB device number 106 using dummy_hcd
16:10:53 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  941.761359][T27460] loop2: detected capacity change from 0 to 5
[  941.790601][T27460] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  941.796721][  T144] usb 6-1: new high-speed USB device number 18 using dummy_hcd
16:10:53 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b000000800020", 0x93, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  941.808436][T27460] NILFS (loop2): couldn't find nilfs on the device
[  941.808672][ T3736] usb 2-1: USB disconnect, device number 5
[  941.880984][T27477] loop2: detected capacity change from 0 to 5
[  941.886749][ T3684] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  941.892894][T27477] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  941.909099][T27477] NILFS (loop2): couldn't find nilfs on the device
16:10:53 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee", 0x9e, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  941.986888][   T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  942.020595][T27484] loop2: detected capacity change from 0 to 5
[  942.041684][T27484] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  942.065082][T27484] NILFS (loop2): couldn't find nilfs on the device
16:10:53 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee", 0x9e, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  942.167032][T13504] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  942.202615][T13504] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  942.210294][T27492] loop2: detected capacity change from 0 to 5
[  942.228115][  T144] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  942.228557][T27492] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  942.248217][T27492] NILFS (loop2): couldn't find nilfs on the device
[  942.257435][  T144] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
16:10:53 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010700229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  942.267552][ T3684] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  942.267586][ T3684] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  942.279139][T13504] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  942.297000][ T3684] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  942.308619][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.356348][  T144] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  942.365627][T13504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.366937][   T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  942.374948][  T144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.396957][   T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  942.429957][   T14] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  942.448924][T13504] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  942.464168][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.528687][   T14] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  942.776749][  T144] usbhid 6-1:1.0: can't add hid device: -71
[  942.782933][  T144] usbhid: probe of 6-1:1.0 failed with error -71
[  942.805542][  T144] usb 6-1: USB disconnect, device number 18
[  942.815944][ T3684] wacom 0003:056A:0331.0123: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  943.269574][ T3684] usb 4-1: USB disconnect, device number 68
16:10:56 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  944.362953][ T3686] usb 5-1: USB disconnect, device number 106
16:10:56 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:56 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee", 0x9e, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:56 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010007229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:56 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:56 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000004000"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  944.439850][  T144] usb 1-1: USB disconnect, device number 6
16:10:56 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea07289", 0xa3, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  944.480088][T27552] loop2: detected capacity change from 0 to 5
[  944.496387][T27552] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  944.514859][T27552] NILFS (loop2): couldn't find nilfs on the device
16:10:56 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea07289", 0xa3, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  944.576358][T27564] loop2: detected capacity change from 0 to 5
[  944.597444][T27564] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  944.615949][T27564] NILFS (loop2): couldn't find nilfs on the device
16:10:56 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea07289", 0xa3, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  944.682756][T27573] loop2: detected capacity change from 0 to 5
[  944.706178][T27573] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  944.715717][T27573] NILFS (loop2): couldn't find nilfs on the device
[  944.776730][T13502] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  944.776730][   T14] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  944.786792][ T3686] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  944.820314][T27580] loop2: detected capacity change from 0 to 5
[  944.839007][T27580] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  944.863142][T27580] NILFS (loop2): couldn't find nilfs on the device
[  944.870607][  T144] usb 1-1: new high-speed USB device number 7 using dummy_hcd
16:10:56 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77", 0xa6, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:56 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010007229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  945.017659][T27589] loop2: detected capacity change from 0 to 5
[  945.038587][T27589] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  945.057192][T27589] NILFS (loop2): couldn't find nilfs on the device
16:10:56 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77", 0xa6, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  945.137637][   T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  945.152093][   T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  945.175476][T27597] loop2: detected capacity change from 0 to 5
[  945.182538][   T14] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  945.192697][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.197075][T13502] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  945.201315][ T3686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  945.222961][ T3686] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  945.224478][T27597] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  945.238586][ T3686] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  945.257010][  T144] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  945.265736][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.272721][  T144] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  945.289251][T13502] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  945.304022][T13502] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  945.313532][  T144] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  945.316135][T27597] NILFS (loop2): couldn't find nilfs on the device
[  945.323130][T13502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.338474][  T144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.338788][ T3686] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  945.399454][  T144] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  945.716791][T13502] usbhid 6-1:1.0: can't add hid device: -71
[  945.723237][T13502] usbhid: probe of 6-1:1.0 failed with error -71
[  945.723925][   T14] wacom 0003:056A:0331.0124: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  945.738049][T13502] usb 6-1: USB disconnect, device number 19
[  946.178655][  T144] usb 4-1: USB disconnect, device number 69
16:10:59 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  947.394392][ T3686] usb 5-1: USB disconnect, device number 107
16:10:59 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:59 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77", 0xa6, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:10:59 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa07c660f7497351ac1d8d11cef8013b00"})

16:10:59 executing program 5:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:10:59 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000005c00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  947.491989][   T14] usb 1-1: USB disconnect, device number 7
[  947.544245][T27657] loop2: detected capacity change from 0 to 5
[  947.586788][T27657] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  947.595298][T27657] NILFS (loop2): couldn't find nilfs on the device
16:10:59 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc", 0xa7, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  947.697823][T27668] loop2: detected capacity change from 0 to 5
[  947.726086][T27668] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  947.735864][T27668] NILFS (loop2): couldn't find nilfs on the device
16:10:59 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc", 0xa7, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  947.797609][T23068] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  947.816618][ T3686] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  947.863288][T27676] loop2: detected capacity change from 0 to 5
[  947.878254][T27676] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  947.896938][T27676] NILFS (loop2): couldn't find nilfs on the device
16:10:59 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc", 0xa7, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  947.916726][   T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd
16:10:59 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0700"})

16:10:59 executing program 5:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  948.011252][T27684] loop2: detected capacity change from 0 to 5
[  948.038802][T27684] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  948.095471][T27684] NILFS (loop2): couldn't find nilfs on the device
[  948.176775][ T3686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  948.195146][ T3686] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
16:10:59 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  948.217505][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  948.231672][ T3686] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  948.247646][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  948.252121][T27698] loop2: detected capacity change from 0 to 5
[  948.262052][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.279700][T23068] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  948.301997][T23068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.302483][T27698] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  948.310502][   T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  948.331793][   T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  948.336155][T27698] NILFS (loop2): couldn't find nilfs on the device
[  948.348262][ T3686] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  948.373892][   T14] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  948.385475][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.469050][   T14] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  948.820716][T23068] wacom 0003:056A:0331.0125: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  949.289758][T26601] usb 4-1: USB disconnect, device number 70
16:11:02 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  950.428450][T26601] usb 5-1: USB disconnect, device number 108
16:11:02 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:02 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:11:02 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000700"})

16:11:02 executing program 5:
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:02 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000100"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  950.559891][T23068] usb 1-1: USB disconnect, device number 8
[  950.585780][T27744] loop2: detected capacity change from 0 to 5
[  950.637583][T27744] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  950.646087][T27744] NILFS (loop2): couldn't find nilfs on the device
16:11:02 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:11:02 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, 0x0)

[  950.748860][T27763] loop2: detected capacity change from 0 to 5
[  950.761593][T27763] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  950.771318][T27763] NILFS (loop2): couldn't find nilfs on the device
16:11:02 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, 0x0)

[  950.873412][T27770] loop2: detected capacity change from 0 to 5
[  950.876649][T26601] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  950.888098][T13502] usb 4-1: new high-speed USB device number 71 using dummy_hcd
16:11:02 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, 0x0)

[  950.996672][T23068] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  951.025008][ T8595] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  951.034864][T27777] loop2: detected capacity change from 0 to 5
16:11:02 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:02 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000700"})

[  951.099382][T27781] loop2: detected capacity change from 0 to 5
[  951.233907][ T8595] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  951.316975][T26601] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  951.327459][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  951.349376][T26601] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  951.356815][T23068] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  951.362983][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  951.385255][T23068] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  951.398528][T26601] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  951.398560][T26601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.411639][T13502] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  951.425641][T23068] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  951.435028][T23068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.445943][T13502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.458726][T26601] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  951.499240][T23068] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  951.970638][T13502] wacom 0003:056A:0331.0126: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  952.430290][T13504] usb 4-1: USB disconnect, device number 71
16:11:05 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  953.457666][T23068] usb 5-1: USB disconnect, device number 109
16:11:05 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:05 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}]})

16:11:05 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:05 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000700"})

16:11:05 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000100"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  953.612353][T13504] usb 1-1: USB disconnect, device number 9
[  953.657515][T27842] loop2: detected capacity change from 0 to 5
[  953.680336][T27842] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  953.692506][T27842] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  953.704661][T27842] NILFS (loop2): mounting unchecked fs
[  953.712339][T27842] NILFS (loop2): I/O error reading segment
[  953.718708][T27842] NILFS (loop2): error -5 while searching super root
16:11:05 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}]})

[  953.839515][T27853] loop2: detected capacity change from 0 to 5
[  953.861680][T27853] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  953.876751][T27853] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  953.888455][T27853] NILFS (loop2): mounting unchecked fs
[  953.902627][T27853] NILFS (loop2): I/O error reading segment
[  953.906627][T23068] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  953.912796][T27853] NILFS (loop2): error -5 while searching super root
16:11:05 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}]})

[  953.936825][ T3682] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  954.011790][T27861] loop2: detected capacity change from 0 to 5
[  954.028118][T27861] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  954.039459][T27861] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  954.046625][T13504] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  954.053575][T27861] NILFS (loop2): mounting unchecked fs
[  954.065162][T27861] NILFS (loop2): I/O error reading segment
[  954.071310][T27861] NILFS (loop2): error -5 while searching super root
16:11:05 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@discard}]})

16:11:05 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:05 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000700"})

[  954.190499][T27869] loop2: detected capacity change from 0 to 5
[  954.233447][T27869] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  954.243718][T27869] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  954.255891][T27869] NILFS (loop2): mounting unchecked fs
[  954.262592][T27869] NILFS (loop2): I/O error reading segment
[  954.273229][T27869] NILFS (loop2): error -5 while searching super root
[  954.316868][T23068] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  954.327712][T23068] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  954.337002][T23068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:11:06 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@discard}]})

[  954.366800][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  954.382754][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  954.392973][ T3682] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  954.417611][T13504] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  954.425217][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.439509][T13504] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  954.458940][T27886] loop2: detected capacity change from 0 to 5
[  954.480966][T27886] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  954.486214][T13504] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  954.492753][T27886] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  954.509213][T13504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.524252][T27886] NILFS (loop2): mounting unchecked fs
[  954.530967][T27886] NILFS (loop2): I/O error reading segment
[  954.537719][T27886] NILFS (loop2): error -5 while searching super root
[  954.559017][T13504] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  954.962954][ T3682] wacom 0003:056A:0331.0127: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  955.420759][T26601] usb 4-1: USB disconnect, device number 72
16:11:08 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  956.491782][T13504] usb 5-1: USB disconnect, device number 110
16:11:08 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000700"})

16:11:08 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@discard}]})

16:11:08 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:08 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:08 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000200"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  956.668238][ T3682] usb 1-1: USB disconnect, device number 10
[  956.710606][T27935] loop2: detected capacity change from 0 to 5
[  956.738088][T27935] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  956.752445][T27935] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  956.764755][T27935] NILFS (loop2): mounting unchecked fs
[  956.771001][T27935] NILFS (loop2): I/O error reading segment
[  956.778246][T27935] NILFS (loop2): error -5 while searching super root
16:11:08 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@order_strict}, {@discard}]})

[  956.903128][T27947] loop2: detected capacity change from 0 to 5
[  956.906941][T13504] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  956.935154][T27947] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  956.944088][T27947] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  956.955613][T27947] NILFS (loop2): mounting unchecked fs
[  956.962873][T27947] NILFS (loop2): I/O error reading segment
[  956.967408][T26601] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  956.970380][T27947] NILFS (loop2): error -5 while searching super root
[  956.983942][T23068] usb 4-1: new high-speed USB device number 73 using dummy_hcd
16:11:08 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@order_strict}, {@discard}]})

[  957.106648][ T3682] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  957.109498][T27956] loop2: detected capacity change from 0 to 5
[  957.135323][T27956] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
16:11:08 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000700"})

[  957.154707][T27956] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  957.168887][T27956] NILFS (loop2): mounting unchecked fs
[  957.174868][T27956] NILFS (loop2): I/O error reading segment
[  957.181213][T27956] NILFS (loop2): error -5 while searching super root
[  957.186607][T26601] usb 6-1: device descriptor read/64, error 18
16:11:08 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@order_strict}, {@discard}]})

[  957.307028][T13504] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  957.324871][T13504] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  957.327165][T27966] loop2: detected capacity change from 0 to 5
[  957.340840][T13504] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  957.350459][T13504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.386914][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  957.398675][T27966] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  957.409162][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  957.423667][T27966] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  957.434137][T23068] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  957.445562][T27966] NILFS (loop2): mounting unchecked fs
[  957.451980][T23068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.461064][T27966] NILFS (loop2): I/O error reading segment
[  957.466713][T26601] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  957.467662][T27966] NILFS (loop2): error -5 while searching super root
[  957.486877][ T3682] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  957.497617][ T3682] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  957.510867][ T3682] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  957.520636][ T3682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:11:09 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee", 0x9e, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[  957.579174][ T3682] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
16:11:09 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 1)

[  957.627464][T27981] loop2: detected capacity change from 0 to 5
[  957.651466][T27981] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  957.660176][T27981] NILFS (loop2): couldn't find nilfs on the device
[  957.666969][T26601] usb 6-1: device descriptor read/64, error 18
[  957.733447][T27985] FAULT_INJECTION: forcing a failure.
[  957.733447][T27985] name failslab, interval 1, probability 0, space 0, times 0
[  957.749459][T27985] CPU: 0 PID: 27985 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  957.759996][T27985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  957.770062][T27985] Call Trace:
[  957.773348][T27985]  <TASK>
[  957.776286][T27985]  dump_stack_lvl+0x1e3/0x2cb
[  957.780996][T27985]  ? bfq_pos_tree_add_move+0x436/0x436
[  957.786477][T27985]  ? panic+0x76e/0x76e
[  957.786921][T26601] usb usb6-port1: attempt power cycle
[  957.790567][T27985]  ? __might_sleep+0xc0/0xc0
[  957.800520][T27985]  should_fail+0x384/0x4b0
[  957.804955][T27985]  ? __se_sys_memfd_create+0xe9/0x450
[  957.810411][T27985]  should_failslab+0x5/0x20
[  957.814928][T27985]  __kmalloc+0x8b/0x370
[  957.819101][T27985]  ? strnlen_user+0x187/0x240
[  957.823858][T27985]  __se_sys_memfd_create+0xe9/0x450
[  957.829077][T27985]  do_syscall_64+0x2b/0x70
[  957.833506][T27985]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  957.839391][T27985] RIP: 0033:0x7f94af289049
[  957.843812][T27985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  957.863426][T27985] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  957.871938][T27985] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af289049
[  957.879899][T27985] RDX: 0000000000000a00 RSI: 0000000000000000 RDI: 00007f94af2e21e0
[  957.887874][T27985] RBP: 0000000000000002 R08: 0000000000000500 R09: 00007f94b03031d0
[  957.895843][T27985] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000
[  957.903800][T27985] R13: 0000000020000100 R14: 0000000000000a00 R15: 0000000020000040
[  957.911780][T27985]  </TASK>
[  958.112301][T23068] wacom 0003:056A:0331.0128: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  958.216761][T26601] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  958.386718][T26601] usb 6-1: device descriptor read/8, error -61
[  958.580917][T13502] usb 4-1: USB disconnect, device number 73
[  958.656622][T26601] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  958.837227][T26601] usb 6-1: device descriptor read/8, error -61
[  958.965213][T26601] usb usb6-port1: unable to enumerate USB device
16:11:11 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:11 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000700"})

16:11:11 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 2)

[  959.530102][ T3682] usb 5-1: USB disconnect, device number 111
[  959.560670][T28015] FAULT_INJECTION: forcing a failure.
[  959.560670][T28015] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  959.574376][T28015] CPU: 0 PID: 28015 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  959.584899][T28015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  959.594974][T28015] Call Trace:
[  959.598270][T28015]  <TASK>
[  959.601214][T28015]  dump_stack_lvl+0x1e3/0x2cb
[  959.605922][T28015]  ? bfq_pos_tree_add_move+0x436/0x436
[  959.611392][T28015]  ? panic+0x76e/0x76e
[  959.615475][T28015]  ? __virt_addr_valid+0x21b/0x2d0
[  959.620601][T28015]  should_fail+0x384/0x4b0
[  959.625035][T28015]  _copy_from_user+0x2b/0x160
[  959.629729][T28015]  __se_sys_memfd_create+0x125/0x450
[  959.635034][T28015]  do_syscall_64+0x2b/0x70
[  959.639465][T28015]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  959.645394][T28015] RIP: 0033:0x7f94af289049
[  959.649802][T28015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  959.669422][T28015] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  959.677861][T28015] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af289049
[  959.685848][T28015] RDX: 0000000000000a00 RSI: 0000000000000000 RDI: 00007f94af2e21e0
[  959.693820][T28015] RBP: 0000000000000002 R08: 0000000000000500 R09: 00007f94b03031d0
[  959.701809][T28015] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000
[  959.709795][T28015] R13: 0000000020000100 R14: 0000000000000a00 R15: 0000000020000040
[  959.717809][T28015]  </TASK>
16:11:11 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:11 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000300"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:11:11 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:11 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 3)

[  959.742152][T26601] usb 1-1: USB disconnect, device number 11
[  959.818075][T28034] FAULT_INJECTION: forcing a failure.
[  959.818075][T28034] name failslab, interval 1, probability 0, space 0, times 0
[  959.856078][T28034] CPU: 1 PID: 28034 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  959.866595][T28034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  959.876661][T28034] Call Trace:
[  959.879941][T28034]  <TASK>
[  959.882865][T28034]  dump_stack_lvl+0x1e3/0x2cb
[  959.887558][T28034]  ? bfq_pos_tree_add_move+0x436/0x436
[  959.893033][T28034]  ? panic+0x76e/0x76e
[  959.897106][T28034]  ? __might_sleep+0xc0/0xc0
[  959.901718][T28034]  should_fail+0x384/0x4b0
[  959.906147][T28034]  ? shmem_alloc_inode+0x21/0x40
[  959.911092][T28034]  should_failslab+0x5/0x20
[  959.915585][T28034]  kmem_cache_alloc_lru+0x75/0x2d0
[  959.920684][T28034]  ? alloc_fd+0x5ae/0x650
[  959.925002][T28034]  shmem_alloc_inode+0x21/0x40
[  959.929774][T28034]  ? shmem_match+0x150/0x150
[  959.934367][T28034]  new_inode_pseudo+0x61/0x210
[  959.939141][T28034]  new_inode+0x25/0x1d0
[  959.943285][T28034]  ? do_raw_spin_unlock+0x134/0x8a0
[  959.948564][T28034]  shmem_get_inode+0x2ff/0xae0
[  959.953322][T28034]  __shmem_file_setup+0x11e/0x270
[  959.958365][T28034]  __se_sys_memfd_create+0x1d5/0x450
[  959.963697][T28034]  do_syscall_64+0x2b/0x70
[  959.968102][T28034]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  959.973982][T28034] RIP: 0033:0x7f94af289049
[  959.978385][T28034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  959.997973][T28034] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  960.006375][T28034] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af289049
16:11:11 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 4)

[  960.014351][T28034] RDX: 0000000000000a00 RSI: 0000000000000000 RDI: 00007f94af2e21e0
[  960.022324][T28034] RBP: 0000000000000002 R08: 0000000000000500 R09: 00007f94b03031d0
[  960.030302][T28034] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000
[  960.038268][T28034] R13: 0000000020000100 R14: 0000000000000a00 R15: 0000000020000040
[  960.046264][T28034]  </TASK>
[  960.090924][T28040] FAULT_INJECTION: forcing a failure.
[  960.090924][T28040] name failslab, interval 1, probability 0, space 0, times 0
[  960.120608][T28040] CPU: 1 PID: 28040 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  960.131191][T28040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  960.141259][T28040] Call Trace:
[  960.144535][T28040]  <TASK>
[  960.147486][T28040]  dump_stack_lvl+0x1e3/0x2cb
[  960.152178][T28040]  ? bfq_pos_tree_add_move+0x436/0x436
[  960.157626][T28040]  ? panic+0x76e/0x76e
[  960.161685][T28040]  ? __might_sleep+0xc0/0xc0
[  960.166264][T28040]  should_fail+0x384/0x4b0
[  960.166711][ T3682] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  960.170682][T28040]  ? security_inode_alloc+0x24/0x130
[  960.170716][T28040]  should_failslab+0x5/0x20
[  960.170739][T28040]  kmem_cache_alloc+0x69/0x2f0
[  960.170768][T28040]  security_inode_alloc+0x24/0x130
[  960.170792][T28040]  inode_init_always+0x3e2/0xa50
[  960.204123][T28040]  ? shmem_match+0x150/0x150
[  960.208724][T28040]  new_inode_pseudo+0x98/0x210
[  960.213489][T28040]  new_inode+0x25/0x1d0
[  960.217637][T28040]  ? do_raw_spin_unlock+0x134/0x8a0
[  960.222836][T28040]  shmem_get_inode+0x2ff/0xae0
[  960.227605][T28040]  __shmem_file_setup+0x11e/0x270
[  960.232622][T28040]  __se_sys_memfd_create+0x1d5/0x450
[  960.237901][T28040]  do_syscall_64+0x2b/0x70
[  960.242310][T28040]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  960.248222][T28040] RIP: 0033:0x7f94af289049
[  960.252630][T28040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  960.272223][T28040] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  960.280628][T28040] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af289049
16:11:11 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000700"})

[  960.288589][T28040] RDX: 0000000000000a00 RSI: 0000000000000000 RDI: 00007f94af2e21e0
[  960.296547][T28040] RBP: 0000000000000002 R08: 0000000000000500 R09: 00007f94b03031d0
[  960.304508][T28040] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000
[  960.312465][T28040] R13: 0000000020000100 R14: 0000000000000a00 R15: 0000000020000040
[  960.320440][T28040]  </TASK>
16:11:12 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 5)

[  960.396644][T13502] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  960.416258][T28046] FAULT_INJECTION: forcing a failure.
[  960.416258][T28046] name failslab, interval 1, probability 0, space 0, times 0
[  960.431452][T28046] CPU: 0 PID: 28046 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  960.441974][T28046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  960.452025][T28046] Call Trace:
[  960.455310][T28046]  <TASK>
[  960.458247][T28046]  dump_stack_lvl+0x1e3/0x2cb
[  960.462964][T28046]  ? bfq_pos_tree_add_move+0x436/0x436
[  960.468421][T28046]  ? panic+0x76e/0x76e
[  960.472510][T28046]  ? __rwlock_init+0x40/0x140
[  960.477201][T28046]  should_fail+0x384/0x4b0
[  960.481620][T28046]  ? __d_alloc+0x31/0x700
[  960.485954][T28046]  should_failslab+0x5/0x20
[  960.490471][T28046]  kmem_cache_alloc_lru+0x75/0x2d0
[  960.495597][T28046]  ? __lock_acquire+0x1f80/0x1f80
[  960.500629][T28046]  __d_alloc+0x31/0x700
[  960.504791][T28046]  d_alloc_pseudo+0x19/0x70
[  960.509298][T28046]  alloc_file_pseudo+0x137/0x300
[  960.514259][T28046]  ? alloc_empty_file_noaccount+0x70/0x70
[  960.519991][T28046]  ? shmem_get_inode+0x912/0xae0
[  960.524938][T28046]  __shmem_file_setup+0x194/0x270
[  960.529960][T28046]  __se_sys_memfd_create+0x1d5/0x450
[  960.535247][T28046]  do_syscall_64+0x2b/0x70
[  960.539755][T28046]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  960.545646][T28046] RIP: 0033:0x7f94af289049
[  960.550065][T28046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  960.569663][T28046] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  960.578076][T28046] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af289049
[  960.586034][T28046] RDX: 0000000000000a00 RSI: 0000000000000000 RDI: 00007f94af2e21e0
16:11:12 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 6)

[  960.593995][T28046] RBP: 0000000000000002 R08: 0000000000000500 R09: 00007f94b03031d0
[  960.601951][T28046] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000
[  960.609909][T28046] R13: 0000000020000100 R14: 0000000000000a00 R15: 0000000020000040
[  960.617882][T28046]  </TASK>
[  960.675480][T28049] FAULT_INJECTION: forcing a failure.
[  960.675480][T28049] name failslab, interval 1, probability 0, space 0, times 0
[  960.686813][T13504] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  960.688626][T28049] CPU: 0 PID: 28049 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  960.696679][T26601] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  960.706128][T28049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  960.723703][T28049] Call Trace:
[  960.726987][T28049]  <TASK>
[  960.729922][T28049]  dump_stack_lvl+0x1e3/0x2cb
[  960.734609][T28049]  ? bfq_pos_tree_add_move+0x436/0x436
[  960.740056][T28049]  ? panic+0x76e/0x76e
[  960.744138][T28049]  ? __might_sleep+0xc0/0xc0
[  960.748741][T28049]  should_fail+0x384/0x4b0
[  960.753155][T28049]  ? __alloc_file+0x26/0x230
[  960.757733][T28049]  should_failslab+0x5/0x20
[  960.762228][T28049]  kmem_cache_alloc+0x69/0x2f0
[  960.766982][T28049]  ? alloc_file_pseudo+0x24f/0x300
[  960.772083][T28049]  ? do_raw_spin_lock+0x148/0x360
[  960.777100][T28049]  __alloc_file+0x26/0x230
[  960.781509][T28049]  alloc_empty_file+0xa9/0x1b0
[  960.786277][T28049]  alloc_file+0x58/0x4e0
[  960.790514][T28049]  alloc_file_pseudo+0x260/0x300
[  960.795447][T28049]  ? alloc_empty_file_noaccount+0x70/0x70
[  960.801159][T28049]  ? shmem_get_inode+0x912/0xae0
[  960.806095][T28049]  __shmem_file_setup+0x194/0x270
[  960.811111][T28049]  __se_sys_memfd_create+0x1d5/0x450
[  960.816394][T28049]  do_syscall_64+0x2b/0x70
[  960.820805][T28049]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  960.826697][T28049] RIP: 0033:0x7f94af289049
[  960.831104][T28049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  960.850701][T28049] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  960.859104][T28049] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af289049
[  960.867065][T28049] RDX: 0000000000000a00 RSI: 0000000000000000 RDI: 00007f94af2e21e0
16:11:12 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 7)

[  960.875023][T28049] RBP: 0000000000000002 R08: 0000000000000500 R09: 00007f94b03031d0
[  960.882979][T28049] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000
[  960.890939][T28049] R13: 0000000020000100 R14: 0000000000000a00 R15: 0000000020000040
[  960.898911][T28049]  </TASK>
[  960.942350][T28052] FAULT_INJECTION: forcing a failure.
[  960.942350][T28052] name failslab, interval 1, probability 0, space 0, times 0
[  960.964359][T28052] CPU: 0 PID: 28052 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  960.974884][T28052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  960.976665][T13504] usb 6-1: device descriptor read/64, error 18
[  960.984936][T28052] Call Trace:
[  960.984948][T28052]  <TASK>
[  960.984957][T28052]  dump_stack_lvl+0x1e3/0x2cb
[  960.984989][T28052]  ? bfq_pos_tree_add_move+0x436/0x436
[  960.985011][T28052]  ? panic+0x76e/0x76e
[  960.985036][T28052]  ? __might_sleep+0xc0/0xc0
[  960.997267][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  960.997397][T28052]  should_fail+0x384/0x4b0
[  961.002969][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  961.007519][T28052]  ? security_file_alloc+0x24/0x140
[  961.007552][T28052]  should_failslab+0x5/0x20
[  961.007575][T28052]  kmem_cache_alloc+0x69/0x2f0
[  961.007604][T28052]  ? __alloc_file+0x26/0x230
[  961.007627][T28052]  security_file_alloc+0x24/0x140
[  961.007649][T28052]  __alloc_file+0xc2/0x230
[  961.007671][T28052]  alloc_empty_file+0xa9/0x1b0
[  961.007691][T28052]  alloc_file+0x58/0x4e0
[  961.007715][T28052]  alloc_file_pseudo+0x260/0x300
[  961.007741][T28052]  ? alloc_empty_file_noaccount+0x70/0x70
[  961.007766][T28052]  ? shmem_get_inode+0x912/0xae0
[  961.007794][T28052]  __shmem_file_setup+0x194/0x270
[  961.007818][T28052]  __se_sys_memfd_create+0x1d5/0x450
[  961.016154][T13502] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  961.016447][T28052]  do_syscall_64+0x2b/0x70
[  961.031804][T13502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.041358][T28052]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  961.041388][T28052] RIP: 0033:0x7f94af289049
[  961.041408][T28052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  961.041426][T28052] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  961.041449][T28052] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af289049
[  961.041463][T28052] RDX: 0000000000000a00 RSI: 0000000000000000 RDI: 00007f94af2e21e0
[  961.041476][T28052] RBP: 0000000000000002 R08: 0000000000000500 R09: 00007f94b03031d0
[  961.041489][T28052] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000008100000
[  961.041502][T28052] R13: 0000000020000100 R14: 0000000000000a00 R15: 0000000020000040
[  961.041529][T28052]  </TASK>
[  961.246877][T26601] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  961.257309][T13504] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  961.269459][T26601] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  961.279159][T26601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.406803][ T3682] usb 5-1: unable to read config index 0 descriptor/start: -61
[  961.414889][ T3682] usb 5-1: can't read configurations, error -61
[  961.456736][T13504] usb 6-1: device descriptor read/64, error 18
[  961.576631][ T3682] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  961.576915][T13504] usb usb6-port1: attempt power cycle
[  961.630600][T13502] wacom 0003:056A:0331.0129: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  961.996779][ T3682] usb 5-1: unable to read config index 0 descriptor/start: -61
[  962.004375][ T3682] usb 5-1: can't read configurations, error -61
[  962.010805][T13504] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  962.019310][ T3682] usb usb5-port1: attempt power cycle
[  962.100176][T13502] usb 4-1: USB disconnect, device number 74
[  962.176737][T13504] usb 6-1: device descriptor read/8, error -61
[  962.446615][T13504] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  962.446761][ T3682] usb 5-1: new high-speed USB device number 114 using dummy_hcd
16:11:14 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:14 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000700"})

16:11:14 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 8)

[  962.616126][T28081] FAULT_INJECTION: forcing a failure.
[  962.616126][T28081] name failslab, interval 1, probability 0, space 0, times 0
[  962.628244][T13504] usb 6-1: device descriptor read/8, error -61
[  962.632830][T28081] CPU: 0 PID: 28081 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  962.645795][T28081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  962.655861][T28081] Call Trace:
[  962.659153][T28081]  <TASK>
[  962.662090][T28081]  dump_stack_lvl+0x1e3/0x2cb
[  962.666782][T28081]  ? bfq_pos_tree_add_move+0x436/0x436
[  962.672253][T28081]  ? panic+0x76e/0x76e
[  962.676390][T28081]  ? __might_sleep+0xc0/0xc0
[  962.680995][T28081]  ? rcu_read_lock_sched_held+0x89/0x130
[  962.686645][T28081]  should_fail+0x384/0x4b0
[  962.691078][T28081]  ? tomoyo_realpath_from_path+0xd8/0x5f0
[  962.696809][T28081]  should_failslab+0x5/0x20
[  962.701328][T28081]  __kmalloc+0x8b/0x370
[  962.705488][T28081]  ? kfree+0x2f/0x210
[  962.709472][T28081]  tomoyo_realpath_from_path+0xd8/0x5f0
[  962.715036][T28081]  tomoyo_path_perm+0x270/0x6b0
[  962.719891][T28081]  ? tomoyo_path_permission+0x360/0x360
[  962.725497][T28081]  ? rcu_read_lock_any_held+0xb3/0x150
[  962.730970][T28081]  ? rcu_read_lock_bh_held+0x110/0x110
[  962.736450][T28081]  security_path_truncate+0xc0/0x140
[  962.741753][T28081]  do_sys_ftruncate+0x257/0x380
[  962.746628][T28081]  do_syscall_64+0x2b/0x70
[  962.746813][T13504] usb usb6-port1: unable to enumerate USB device
[  962.751048][T28081]  entry_SYSCALL_64_after_hwframe+0x44/0xae
16:11:14 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:14 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000400"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  962.751075][T28081] RIP: 0033:0x7f94af289007
[  962.751094][T28081] Code: 48 89 e7 e8 cb e5 ff ff 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 1a 00 00 90 b8 4d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[  962.751113][T28081] RSP: 002b:00007f94b0302f28 EFLAGS: 00000217 ORIG_RAX: 000000000000004d
[  962.751137][T28081] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af289007
[  962.803682][T28081] RDX: 0000000000000a00 RSI: 0000000000000a00 RDI: 0000000000000004
[  962.811670][T28081] RBP: 0000000000000002 R08: 0000000000000500 R09: 00007f94b03031d0
[  962.819656][T28081] R10: 0000000000000002 R11: 0000000000000217 R12: 0000000000000004
[  962.827637][T28081] R13: 0000000000000004 R14: 0000000000000a00 R15: 0000000020000040
[  962.835639][T28081]  </TASK>
[  962.844304][ T3682] usb 5-1: device descriptor read/8, error -71
[  962.873543][T28081] ERROR: Out of memory at tomoyo_realpath_from_path.
[  962.886843][T28081] loop2: detected capacity change from 0 to 5
[  962.899331][T28081] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  962.908098][T28081] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  962.929743][T28081] NILFS (loop2): mounting unchecked fs
[  962.935731][T28081] NILFS (loop2): I/O error reading segment
[  962.948259][T28081] NILFS (loop2): error -5 while searching super root
[  963.096667][  T144] usb 4-1: new high-speed USB device number 75 using dummy_hcd
16:11:14 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 9)

16:11:14 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:14 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000700"})

[  963.241916][T13502] usb 1-1: USB disconnect, device number 12
[  963.274615][T28104] FAULT_INJECTION: forcing a failure.
[  963.274615][T28104] name failslab, interval 1, probability 0, space 0, times 0
[  963.293374][T13504] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  963.333700][T28104] CPU: 1 PID: 28104 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  963.344226][T28104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  963.354273][T28104] Call Trace:
[  963.357548][T28104]  <TASK>
[  963.360469][T28104]  dump_stack_lvl+0x1e3/0x2cb
[  963.365146][T28104]  ? bfq_pos_tree_add_move+0x436/0x436
[  963.370618][T28104]  ? panic+0x76e/0x76e
[  963.374696][T28104]  should_fail+0x384/0x4b0
[  963.379127][T28104]  ? tomoyo_encode+0x26f/0x540
[  963.383892][T28104]  should_failslab+0x5/0x20
[  963.386808][ T3682] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  963.388383][T28104]  __kmalloc+0x8b/0x370
[  963.388412][T28104]  ? copy_from_kernel_nofault_allowed+0x74/0xe0
[  963.388439][T28104]  tomoyo_encode+0x26f/0x540
[  963.411024][T28104]  ? dynamic_dname+0x1a0/0x1a0
[  963.415789][T28104]  tomoyo_realpath_from_path+0x5b4/0x5f0
[  963.421418][T28104]  tomoyo_path_perm+0x270/0x6b0
[  963.426273][T28104]  ? tomoyo_path_permission+0x360/0x360
[  963.431880][T28104]  ? rcu_read_lock_any_held+0xb3/0x150
[  963.437354][T28104]  ? rcu_read_lock_bh_held+0x110/0x110
[  963.442837][T28104]  security_path_truncate+0xc0/0x140
[  963.448138][T28104]  do_sys_ftruncate+0x257/0x380
[  963.452978][T28104]  do_syscall_64+0x2b/0x70
[  963.457391][T28104]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  963.463295][T28104] RIP: 0033:0x7f94af289007
[  963.467714][T28104] Code: 48 89 e7 e8 cb e5 ff ff 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 1a 00 00 90 b8 4d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[  963.487313][T28104] RSP: 002b:00007f94b0302f28 EFLAGS: 00000217 ORIG_RAX: 000000000000004d
[  963.495756][T28104] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af289007
[  963.503715][T28104] RDX: 0000000000000a00 RSI: 0000000000000a00 RDI: 0000000000000004
[  963.511674][T28104] RBP: 0000000000000002 R08: 0000000000000500 R09: 00007f94b03031d0
[  963.519639][T28104] R10: 0000000000000002 R11: 0000000000000217 R12: 0000000000000004
[  963.527611][T28104] R13: 0000000000000004 R14: 0000000000000a00 R15: 0000000020000040
[  963.535581][T28104]  </TASK>
[  963.566824][T28104] ERROR: Out of memory at tomoyo_realpath_from_path.
[  963.574364][T28104] loop2: detected capacity change from 0 to 5
[  963.589252][T28104] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  963.616689][T28104] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  963.628261][T28104] NILFS (loop2): mounting unchecked fs
[  963.634256][T28104] NILFS (loop2): I/O error reading segment
[  963.640172][T28104] NILFS (loop2): error -5 while searching super root
[  963.666927][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  963.686801][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  963.696849][T13504] usb 6-1: device descriptor read/64, error 18
[  963.706788][  T144] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
16:11:15 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 10)

[  963.715831][  T144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.762477][ T3682] usb 5-1: unable to read config index 0 descriptor/start: -61
[  963.777637][ T3682] usb 5-1: can't read configurations, error -61
[  963.798131][ T3682] usb usb5-port1: unable to enumerate USB device
[  963.814181][T28119] FAULT_INJECTION: forcing a failure.
[  963.814181][T28119] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  963.828557][T28119] CPU: 1 PID: 28119 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  963.839082][T28119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  963.849140][T28119] Call Trace:
[  963.852407][T28119]  <TASK>
[  963.855330][T28119]  dump_stack_lvl+0x1e3/0x2cb
[  963.860006][T28119]  ? bfq_pos_tree_add_move+0x436/0x436
[  963.865459][T28119]  ? panic+0x76e/0x76e
[  963.869541][T28119]  should_fail+0x384/0x4b0
[  963.873953][T28119]  prepare_alloc_pages+0x1d7/0x5a0
[  963.879116][T28119]  __alloc_pages+0x14d/0x5f0
[  963.883694][T28119]  ? __rmqueue_pcplist+0x1cb0/0x1cb0
[  963.888995][T28119]  alloc_pages_vma+0x620/0xb40
[  963.893797][T28119]  ? mpol_shared_policy_lookup+0x15e/0x200
[  963.899619][T28119]  shmem_alloc_and_acct_page+0x4a3/0x1240
[  963.905356][T28119]  ? shmem_replace_page+0x1b90/0x1b90
[  963.910756][T28119]  ? __filemap_get_folio+0xe20/0x11f0
[  963.916193][T28119]  ? page_cache_prev_miss+0x500/0x500
[  963.921561][T28119]  ? pagecache_get_page+0x81/0x240
[  963.926659][T28119]  shmem_getpage_gfp+0x15a3/0x3030
[  963.931776][T28119]  ? shmem_getpage+0xa0/0xa0
[  963.936351][T28119]  ? fault_in_safe_writeable+0x240/0x240
[  963.941979][T28119]  ? __vfs_getxattr+0x3de/0x410
[  963.946854][T28119]  shmem_write_begin+0xcc/0x1a0
[  963.951721][T28119]  generic_perform_write+0x318/0x610
[  963.957022][T28119]  ? generic_file_direct_write+0x460/0x460
[  963.962813][T28119]  ? file_remove_privs+0x6a0/0x6a0
[  963.967921][T28119]  ? down_write+0x10d/0x170
[  963.972412][T28119]  __generic_file_write_iter+0x176/0x400
[  963.978036][T28119]  generic_file_write_iter+0xa7/0x1b0
[  963.983395][T28119]  vfs_write+0xa22/0xd40
[  963.987628][T28119]  ? __lock_acquire+0x1f80/0x1f80
[  963.992668][T28119]  ? file_end_write+0x230/0x230
[  963.997534][T28119]  ? read_lock_is_recursive+0x10/0x10
[  964.002923][T28119]  ? __fget_files+0x3d0/0x440
[  964.007710][T28119]  ? __fdget+0x189/0x210
[  964.011951][T28119]  __x64_sys_pwrite64+0x1af/0x240
[  964.016966][T28119]  ? vtime_user_exit+0x2b2/0x3e0
[  964.021959][T28119]  ? ksys_pwrite64+0x1d0/0x1d0
[  964.026729][T28119]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  964.032699][T28119]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  964.038676][T28119]  do_syscall_64+0x2b/0x70
[  964.043101][T28119]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  964.049004][T28119] RIP: 0033:0x7f94af23c017
[  964.053430][T28119] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[  964.073173][T28119] RSP: 002b:00007f94b0302f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[  964.081591][T28119] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af23c017
[  964.089558][T28119] RDX: 00000000000000a8 RSI: 0000000020010000 RDI: 0000000000000004
[  964.097539][T28119] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007f94b03031d0
[  964.105525][T28119] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004
16:11:15 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000700"})

[  964.113499][T28119] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
[  964.121471][T28119]  </TASK>
[  964.141699][T28119] loop2: detected capacity change from 0 to 5
[  964.163261][T28119] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  964.203388][T28119] NILFS (loop2): couldn't find nilfs on the device
[  964.210831][T13502] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  964.218635][T13504] usb 6-1: new high-speed USB device number 29 using dummy_hcd
16:11:15 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 11)

[  964.362444][  T144] wacom 0003:056A:0331.012A: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  964.382578][T28131] FAULT_INJECTION: forcing a failure.
[  964.382578][T28131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  964.395787][T28131] CPU: 0 PID: 28131 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  964.406299][T28131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  964.416363][T28131] Call Trace:
[  964.416597][T13504] usb 6-1: device descriptor read/64, error 18
[  964.419646][T28131]  <TASK>
[  964.419691][T28131]  dump_stack_lvl+0x1e3/0x2cb
[  964.433442][T28131]  ? bfq_pos_tree_add_move+0x436/0x436
[  964.438910][T28131]  ? panic+0x76e/0x76e
[  964.442985][T28131]  ? shmem_getpage_gfp+0x2de5/0x3030
[  964.448268][T28131]  should_fail+0x384/0x4b0
[  964.452681][T28131]  copy_page_from_iter_atomic+0x2fd/0x1070
[  964.458490][T28131]  ? pipe_zero+0x4d0/0x4d0
[  964.462892][T28131]  ? __vfs_getxattr+0x3de/0x410
[  964.467749][T28131]  generic_perform_write+0x38c/0x610
[  964.473040][T28131]  ? generic_file_direct_write+0x460/0x460
[  964.478836][T28131]  ? file_remove_privs+0x6a0/0x6a0
[  964.483940][T28131]  ? down_write+0x10d/0x170
[  964.488439][T28131]  __generic_file_write_iter+0x176/0x400
[  964.494067][T28131]  generic_file_write_iter+0xa7/0x1b0
[  964.499430][T28131]  vfs_write+0xa22/0xd40
[  964.503664][T28131]  ? __lock_acquire+0x1f80/0x1f80
[  964.508685][T28131]  ? file_end_write+0x230/0x230
[  964.513529][T28131]  ? read_lock_is_recursive+0x10/0x10
[  964.518898][T28131]  ? __fget_files+0x3d0/0x440
[  964.523571][T28131]  ? __fdget+0x189/0x210
[  964.527805][T28131]  __x64_sys_pwrite64+0x1af/0x240
[  964.532819][T28131]  ? vtime_user_exit+0x2b2/0x3e0
[  964.537751][T28131]  ? ksys_pwrite64+0x1d0/0x1d0
[  964.542505][T28131]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  964.548481][T28131]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  964.554454][T28131]  do_syscall_64+0x2b/0x70
[  964.558861][T28131]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  964.564745][T28131] RIP: 0033:0x7f94af23c017
[  964.569151][T28131] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[  964.588744][T28131] RSP: 002b:00007f94b0302f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[  964.597150][T28131] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af23c017
[  964.605111][T28131] RDX: 00000000000000a8 RSI: 0000000020010000 RDI: 0000000000000004
[  964.613068][T28131] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007f94b03031d0
[  964.621028][T28131] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004
[  964.628986][T28131] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
[  964.636959][T28131]  </TASK>
[  964.655906][T13504] usb usb6-port1: attempt power cycle
[  964.740259][T28131] loop2: detected capacity change from 0 to 5
[  964.756851][T13502] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  964.773627][T13502] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  964.805364][T28131] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  964.825680][T13502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:11:16 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000700"})

[  964.859950][T28131] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  964.919722][ T3736] usb 4-1: USB disconnect, device number 75
[  964.975305][T28131] NILFS (loop2): mounting unchecked fs
[  964.984045][T28131] NILFS (loop2): I/O error reading segment
[  964.996909][T28131] NILFS (loop2): error -5 while searching super root
[  965.076696][T13504] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  965.256889][T13504] usb 6-1: device descriptor read/8, error -61
[  965.526759][T13504] usb 6-1: new high-speed USB device number 31 using dummy_hcd
16:11:17 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:17 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 12)

16:11:17 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000700"})

[  965.632786][T28163] FAULT_INJECTION: forcing a failure.
[  965.632786][T28163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  965.646114][T28163] CPU: 0 PID: 28163 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  965.656626][T28163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  965.666682][T28163] Call Trace:
[  965.669955][T28163]  <TASK>
[  965.672878][T28163]  dump_stack_lvl+0x1e3/0x2cb
[  965.677554][T28163]  ? bfq_pos_tree_add_move+0x436/0x436
[  965.683005][T28163]  ? panic+0x76e/0x76e
[  965.687072][T28163]  ? PageUptodate+0xe7/0x2b0
[  965.691654][T28163]  ? shmem_getpage_gfp+0x2dff/0x3030
[  965.696934][T28163]  should_fail+0x384/0x4b0
[  965.701342][T28163]  copy_page_from_iter_atomic+0x2fd/0x1070
[  965.707148][T28163]  ? pipe_zero+0x4d0/0x4d0
[  965.711566][T28163]  generic_perform_write+0x38c/0x610
[  965.716853][T28163]  ? generic_file_direct_write+0x460/0x460
[  965.722650][T28163]  ? file_remove_privs+0x6a0/0x6a0
[  965.727758][T28163]  ? down_write+0x10d/0x170
[  965.732261][T28163]  __generic_file_write_iter+0x176/0x400
[  965.737899][T28163]  generic_file_write_iter+0xa7/0x1b0
[  965.743264][T28163]  vfs_write+0xa22/0xd40
[  965.747497][T28163]  ? __lock_acquire+0x1f80/0x1f80
[  965.752522][T28163]  ? file_end_write+0x230/0x230
[  965.757365][T28163]  ? read_lock_is_recursive+0x10/0x10
[  965.762727][T28163]  ? __fget_files+0x3d0/0x440
[  965.767398][T28163]  ? __fdget+0x189/0x210
[  965.771633][T28163]  __x64_sys_pwrite64+0x1af/0x240
[  965.776647][T28163]  ? vtime_user_exit+0x2b2/0x3e0
[  965.781573][T28163]  ? ksys_pwrite64+0x1d0/0x1d0
[  965.786327][T28163]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  965.792299][T28163]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  965.798272][T28163]  do_syscall_64+0x2b/0x70
[  965.802679][T28163]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  965.808564][T28163] RIP: 0033:0x7f94af23c017
[  965.812972][T28163] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[  965.832569][T28163] RSP: 002b:00007f94b0302f00 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[  965.840976][T28163] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af23c017
[  965.848937][T28163] RDX: 0000000000000009 RSI: 0000000020010100 RDI: 0000000000000004
[  965.856925][T28163] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007f94b03031d0
[  965.864887][T28163] R10: 0000000000000500 R11: 0000000000000293 R12: 0000000000000004
[  965.872851][T28163] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001
[  965.880826][T28163]  </TASK>
16:11:17 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:17 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000500"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  965.896549][    C1] raw-gadget gadget: ignoring, device is not running
[  965.903837][T13504] usb 6-1: device descriptor read/8, error -32
[  965.927141][T28163] loop2: detected capacity change from 0 to 5
[  965.991082][T28163] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  966.000804][T28163] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  966.013643][T28163] NILFS (loop2): mounting unchecked fs
[  966.023655][T28163] NILFS (loop2): I/O error reading segment
[  966.027023][T13504] usb usb6-port1: unable to enumerate USB device
[  966.033553][T28163] NILFS (loop2): error -5 while searching super root
16:11:17 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 13)

[  966.160519][T28182] FAULT_INJECTION: forcing a failure.
[  966.160519][T28182] name failslab, interval 1, probability 0, space 0, times 0
[  966.173801][T28182] CPU: 1 PID: 28182 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  966.184321][T28182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  966.194378][T28182] Call Trace:
[  966.197665][T28182]  <TASK>
[  966.200598][T28182]  dump_stack_lvl+0x1e3/0x2cb
[  966.205273][T28182]  ? bfq_pos_tree_add_move+0x436/0x436
[  966.210738][T28182]  ? panic+0x76e/0x76e
[  966.214800][T28182]  ? mark_lock+0x98/0x350
[  966.219128][T28182]  should_fail+0x384/0x4b0
[  966.223555][T28182]  ? getname_flags+0xb8/0x4e0
[  966.227099][ T3682] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  966.228226][T28182]  should_failslab+0x5/0x20
[  966.240346][T28182]  kmem_cache_alloc+0x69/0x2f0
[  966.245134][T28182]  getname_flags+0xb8/0x4e0
[  966.249662][T28182]  do_sys_openat2+0xd2/0x500
[  966.254259][T28182]  ? read_lock_is_recursive+0x10/0x10
[  966.259636][T28182]  ? __context_tracking_exit+0x4d/0x80
[  966.265089][T28182]  ? do_sys_open+0x220/0x220
[  966.269675][T28182]  __x64_sys_openat+0x243/0x290
[  966.274582][T28182]  ? __ia32_sys_open+0x270/0x270
[  966.279539][T28182]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  966.285524][T28182]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  966.291499][T28182]  do_syscall_64+0x2b/0x70
[  966.295906][T28182]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  966.301794][T28182] RIP: 0033:0x7f94af23bf64
[  966.306200][T28182] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[  966.325810][T28182] RSP: 002b:00007f94b0302eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  966.334216][T28182] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af23bf64
[  966.342177][T28182] RDX: 0000000000000002 RSI: 00007f94b0302fe0 RDI: 00000000ffffff9c
[  966.350142][T28182] RBP: 00007f94b0302fe0 R08: 0000000000000000 R09: 00007f94b03031d0
[  966.358107][T28182] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  966.366067][T28182] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  966.374042][T28182]  </TASK>
[  966.381522][T13502] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  966.586631][T13504] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  966.746736][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  966.760217][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  966.770623][T13502] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  966.776782][ T3682] usb 5-1: unable to read config index 0 descriptor/start: -61
[  966.780063][T13504] usb 6-1: device descriptor read/64, error 18
[  966.793739][T13502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.795330][ T3682] usb 5-1: can't read configurations, error -61
16:11:18 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 14)

16:11:18 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000700"})

16:11:18 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  966.929272][  T144] usb 1-1: USB disconnect, device number 13
[  966.977331][ T3682] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  967.011262][T28195] FAULT_INJECTION: forcing a failure.
[  967.011262][T28195] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  967.024623][T28195] CPU: 1 PID: 28195 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  967.035166][T28195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  967.045309][T28195] Call Trace:
[  967.048584][T28195]  <TASK>
[  967.051509][T28195]  dump_stack_lvl+0x1e3/0x2cb
[  967.056201][T28195]  ? bfq_pos_tree_add_move+0x436/0x436
[  967.061656][T28195]  ? panic+0x76e/0x76e
[  967.065751][T28195]  ? __lock_acquire+0x1f80/0x1f80
[  967.070771][T28195]  ? rcu_read_lock_sched_held+0x89/0x130
[  967.076412][T28195]  should_fail+0x384/0x4b0
[  967.080836][T28195]  strncpy_from_user+0x32/0x330
[  967.085728][T28195]  getname_flags+0xf5/0x4e0
[  967.090265][T28195]  do_sys_openat2+0xd2/0x500
[  967.094890][T28195]  ? read_lock_is_recursive+0x10/0x10
[  967.100278][T28195]  ? __context_tracking_exit+0x4d/0x80
[  967.105740][T28195]  ? do_sys_open+0x220/0x220
[  967.110344][T28195]  __x64_sys_openat+0x243/0x290
[  967.115198][T28195]  ? __ia32_sys_open+0x270/0x270
[  967.120286][T28195]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  967.126269][T28195]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  967.132269][T28195]  do_syscall_64+0x2b/0x70
[  967.136690][T28195]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  967.142583][T28195] RIP: 0033:0x7f94af23bf64
[  967.147009][T28195] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[  967.166608][T28195] RSP: 002b:00007f94b0302eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  967.175021][T28195] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af23bf64
[  967.182986][T28195] RDX: 0000000000000002 RSI: 00007f94b0302fe0 RDI: 00000000ffffff9c
[  967.190950][T28195] RBP: 00007f94b0302fe0 R08: 0000000000000000 R09: 00007f94b03031d0
[  967.198915][T28195] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  967.206886][T28195] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  967.214885][T28195]  </TASK>
16:11:18 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 15)

[  967.221200][T13504] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  967.272749][T28200] FAULT_INJECTION: forcing a failure.
[  967.272749][T28200] name failslab, interval 1, probability 0, space 0, times 0
[  967.286158][T28200] CPU: 0 PID: 28200 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  967.296681][T28200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  967.306752][T28200] Call Trace:
[  967.310045][T28200]  <TASK>
[  967.312986][T28200]  dump_stack_lvl+0x1e3/0x2cb
[  967.317685][T28200]  ? bfq_pos_tree_add_move+0x436/0x436
[  967.323162][T28200]  ? panic+0x76e/0x76e
[  967.327250][T28200]  ? __might_sleep+0xc0/0xc0
[  967.331851][T28200]  ? deref_stack_reg+0xbd/0x110
[  967.336725][T28200]  should_fail+0x384/0x4b0
[  967.341160][T28200]  ? __alloc_file+0x26/0x230
[  967.345849][T28200]  should_failslab+0x5/0x20
[  967.350371][T28200]  kmem_cache_alloc+0x69/0x2f0
[  967.355144][T28200]  ? is_bpf_text_address+0x253/0x270
[  967.360516][T28200]  __alloc_file+0x26/0x230
[  967.364946][T28200]  alloc_empty_file+0xa9/0x1b0
[  967.369707][T28200]  path_openat+0x105/0x2ec0
[  967.374256][T28200]  ? mark_lock+0x98/0x350
[  967.378601][T28200]  ? do_filp_open+0x4f0/0x4f0
[  967.383289][T28200]  ? alloc_fd+0x5ae/0x650
[  967.387628][T28200]  ? rcu_read_lock_sched_held+0x89/0x130
[  967.393285][T28200]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  967.399289][T28200]  do_filp_open+0x277/0x4f0
[  967.403809][T28200]  ? vfs_tmpfile+0x230/0x230
[  967.408436][T28200]  ? alloc_fd+0x5ae/0x650
[  967.412775][T28200]  do_sys_openat2+0x13b/0x500
[  967.416699][T13504] usb 6-1: device descriptor read/64, error 18
[  967.417442][T28200]  ? read_lock_is_recursive+0x10/0x10
[  967.417468][T28200]  ? __context_tracking_exit+0x4d/0x80
[  967.417496][T28200]  ? do_sys_open+0x220/0x220
[  967.417533][T28200]  __x64_sys_openat+0x243/0x290
[  967.443863][T28200]  ? __ia32_sys_open+0x270/0x270
[  967.448807][T28200]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  967.454806][T28200]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  967.460807][T28200]  do_syscall_64+0x2b/0x70
[  967.465248][T28200]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  967.471132][T28200] RIP: 0033:0x7f94af23bf64
[  967.475551][T28200] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[  967.495166][T28200] RSP: 002b:00007f94b0302eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  967.501801][T13502] wacom 0003:056A:0331.012B: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  967.503585][T28200] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af23bf64
16:11:19 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 16)

[  967.503605][T28200] RDX: 0000000000000002 RSI: 00007f94b0302fe0 RDI: 00000000ffffff9c
[  967.503620][T28200] RBP: 00007f94b0302fe0 R08: 0000000000000000 R09: 00007f94b03031d0
[  967.503634][T28200] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  967.503648][T28200] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  967.503683][T28200]  </TASK>
[  967.526628][  T144] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  967.569886][T13504] usb usb6-port1: attempt power cycle
[  967.609626][T28205] FAULT_INJECTION: forcing a failure.
[  967.609626][T28205] name failslab, interval 1, probability 0, space 0, times 0
[  967.623878][T28205] CPU: 0 PID: 28205 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  967.634397][T28205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  967.644454][T28205] Call Trace:
[  967.647728][T28205]  <TASK>
[  967.650666][T28205]  dump_stack_lvl+0x1e3/0x2cb
[  967.655357][T28205]  ? bfq_pos_tree_add_move+0x436/0x436
[  967.660809][T28205]  ? panic+0x76e/0x76e
[  967.664888][T28205]  ? __might_sleep+0xc0/0xc0
[  967.669480][T28205]  should_fail+0x384/0x4b0
[  967.673906][T28205]  ? security_file_alloc+0x24/0x140
[  967.679096][T28205]  should_failslab+0x5/0x20
[  967.683609][T28205]  kmem_cache_alloc+0x69/0x2f0
[  967.688372][T28205]  ? __alloc_file+0x26/0x230
[  967.692977][T28205]  security_file_alloc+0x24/0x140
[  967.698015][T28205]  __alloc_file+0xc2/0x230
[  967.702448][T28205]  alloc_empty_file+0xa9/0x1b0
[  967.707221][T28205]  path_openat+0x105/0x2ec0
[  967.711759][T28205]  ? mark_lock+0x98/0x350
[  967.716091][T28205]  ? do_filp_open+0x4f0/0x4f0
[  967.720758][T28205]  ? alloc_fd+0x5ae/0x650
[  967.725092][T28205]  ? rcu_read_lock_sched_held+0x89/0x130
[  967.730716][T28205]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  967.736720][T28205]  do_filp_open+0x277/0x4f0
[  967.741240][T28205]  ? vfs_tmpfile+0x230/0x230
[  967.745859][T28205]  ? alloc_fd+0x5ae/0x650
[  967.750202][T28205]  do_sys_openat2+0x13b/0x500
[  967.754895][T28205]  ? read_lock_is_recursive+0x10/0x10
[  967.760364][T28205]  ? __context_tracking_exit+0x4d/0x80
[  967.765841][T28205]  ? do_sys_open+0x220/0x220
[  967.770462][T28205]  __x64_sys_openat+0x243/0x290
[  967.775335][T28205]  ? __ia32_sys_open+0x270/0x270
[  967.780289][T28205]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  967.786278][T28205]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  967.792252][T28205]  do_syscall_64+0x2b/0x70
[  967.796687][T28205]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  967.802586][T28205] RIP: 0033:0x7f94af23bf64
[  967.807013][T28205] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[  967.826627][T28205] RSP: 002b:00007f94b0302eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  967.835042][T28205] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af23bf64
[  967.842997][T28205] RDX: 0000000000000002 RSI: 00007f94b0302fe0 RDI: 00000000ffffff9c
[  967.850961][T28205] RBP: 00007f94b0302fe0 R08: 0000000000000000 R09: 00007f94b03031d0
16:11:19 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000700"})

[  967.858948][T28205] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  967.866928][T28205] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  967.874937][T28205]  </TASK>
[  967.953158][  T144] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  967.963542][  T144] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  967.973591][  T144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.986652][T13504] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  968.006723][ T3682] usb 5-1: unable to read config index 0 descriptor/start: -61
[  968.014604][ T3682] usb 5-1: can't read configurations, error -61
[  968.021767][ T3682] usb usb5-port1: attempt power cycle
[  968.039962][ T3736] usb 4-1: USB disconnect, device number 76
[  968.186751][T13504] usb 6-1: device descriptor read/8, error -61
[  968.456775][T13504] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  968.476777][ T3682] usb 5-1: new high-speed USB device number 118 using dummy_hcd
16:11:20 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:20 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 17)

16:11:20 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000700"})

[  968.626700][T13504] usb 6-1: device descriptor read/8, error -61
[  968.658482][T28232] FAULT_INJECTION: forcing a failure.
[  968.658482][T28232] name failslab, interval 1, probability 0, space 0, times 0
[  968.672329][T28232] CPU: 0 PID: 28232 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  968.682861][T28232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  968.692932][T28232] Call Trace:
[  968.696228][T28232]  <TASK>
[  968.699168][T28232]  dump_stack_lvl+0x1e3/0x2cb
[  968.703873][T28232]  ? bfq_pos_tree_add_move+0x436/0x436
[  968.709353][T28232]  ? panic+0x76e/0x76e
[  968.713441][T28232]  ? __might_sleep+0xc0/0xc0
[  968.718049][T28232]  ? rcu_read_lock_sched_held+0x89/0x130
[  968.723698][T28232]  should_fail+0x384/0x4b0
[  968.728119][T28232]  ? tomoyo_realpath_from_path+0xd8/0x5f0
[  968.733852][T28232]  should_failslab+0x5/0x20
[  968.738368][T28232]  __kmalloc+0x8b/0x370
[  968.742532][T28232]  ? kfree+0x2f/0x210
[  968.746514][T28232]  tomoyo_realpath_from_path+0xd8/0x5f0
[  968.746985][T13504] usb usb6-port1: unable to enumerate USB device
[  968.752066][T28232]  ? memset+0x1f/0x40
[  968.762352][T28232]  tomoyo_check_open_permission+0x22f/0x490
[  968.768264][T28232]  ? tomoyo_check_path_number_acl+0x270/0x270
[  968.774341][T28232]  ? do_dentry_open+0x36/0xfd0
[  968.779112][T28232]  ? rcu_read_lock_sched_held+0x89/0x130
[  968.784781][T28232]  ? __lock_acquire+0x1f80/0x1f80
[  968.789804][T28232]  ? hook_file_open+0xea/0x220
[  968.794640][T28232]  ? tomoyo_file_open+0xe6/0x170
[  968.799576][T28232]  security_file_open+0x50/0x560
[  968.804622][T28232]  do_dentry_open+0x347/0xfd0
[  968.809340][T28232]  path_openat+0x26c0/0x2ec0
[  968.813976][T28232]  ? do_filp_open+0x4f0/0x4f0
[  968.818667][T28232]  ? alloc_fd+0x5ae/0x650
[  968.823018][T28232]  ? rcu_read_lock_sched_held+0x89/0x130
[  968.828658][T28232]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  968.834664][T28232]  do_filp_open+0x277/0x4f0
[  968.839185][T28232]  ? vfs_tmpfile+0x230/0x230
[  968.843791][T28232]  ? alloc_fd+0x5ae/0x650
[  968.848119][T28232]  do_sys_openat2+0x13b/0x500
[  968.852808][T28232]  ? read_lock_is_recursive+0x10/0x10
[  968.858191][T28232]  ? __context_tracking_exit+0x4d/0x80
[  968.863686][T28232]  ? do_sys_open+0x220/0x220
[  968.868306][T28232]  __x64_sys_openat+0x243/0x290
[  968.873174][T28232]  ? __ia32_sys_open+0x270/0x270
[  968.878128][T28232]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  968.884130][T28232]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  968.890126][T28232]  do_syscall_64+0x2b/0x70
[  968.894545][T28232]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  968.900430][T28232] RIP: 0033:0x7f94af23bf64
[  968.904853][T28232] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
16:11:20 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:20 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000600"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  968.924459][T28232] RSP: 002b:00007f94b0302eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  968.932867][T28232] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af23bf64
[  968.940868][T28232] RDX: 0000000000000002 RSI: 00007f94b0302fe0 RDI: 00000000ffffff9c
[  968.948855][T28232] RBP: 00007f94b0302fe0 R08: 0000000000000000 R09: 00007f94b03031d0
[  968.956841][T28232] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  968.964827][T28232] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  968.972833][T28232]  </TASK>
[  968.996710][ T3682] usb 5-1: unable to read config index 0 descriptor/start: -71
[  969.008028][ T3682] usb 5-1: can't read configurations, error -71
[  969.025071][T28232] ERROR: Out of memory at tomoyo_realpath_from_path.
[  969.033741][T28232] loop2: detected capacity change from 0 to 5
[  969.053171][T28232] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  969.072891][T28232] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  969.101611][T28232] NILFS (loop2): mounting unchecked fs
[  969.108506][T28232] NILFS (loop2): I/O error reading segment
[  969.115670][T28232] NILFS (loop2): error -5 while searching super root
16:11:20 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 18)

16:11:20 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000700"})

[  969.223191][T28254] FAULT_INJECTION: forcing a failure.
[  969.223191][T28254] name failslab, interval 1, probability 0, space 0, times 0
[  969.237086][T28254] CPU: 0 PID: 28254 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  969.247609][T28254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  969.257683][T28254] Call Trace:
[  969.260971][T28254]  <TASK>
[  969.263900][T28254]  dump_stack_lvl+0x1e3/0x2cb
[  969.268596][T28254]  ? bfq_pos_tree_add_move+0x436/0x436
[  969.274062][T28254]  ? panic+0x76e/0x76e
[  969.276709][ T3736] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  969.278145][T28254]  should_fail+0x384/0x4b0
[  969.290085][T28254]  ? tomoyo_encode+0x26f/0x540
[  969.294859][T28254]  should_failslab+0x5/0x20
[  969.299372][T28254]  __kmalloc+0x8b/0x370
[  969.303680][T28254]  ? prepend_path+0xb70/0xb70
[  969.308361][T28254]  tomoyo_encode+0x26f/0x540
[  969.312967][T28254]  tomoyo_realpath_from_path+0x5b4/0x5f0
[  969.318610][T28254]  ? memset+0x1f/0x40
[  969.322616][T28254]  tomoyo_check_open_permission+0x22f/0x490
[  969.328507][T28254]  ? tomoyo_check_path_number_acl+0x270/0x270
[  969.334568][T28254]  ? do_dentry_open+0x36/0xfd0
[  969.339325][T28254]  ? rcu_read_lock_sched_held+0x89/0x130
[  969.344974][T28254]  ? __lock_acquire+0x1f80/0x1f80
[  969.349992][T28254]  ? hook_file_open+0xea/0x220
[  969.354750][T28254]  ? tomoyo_file_open+0xe6/0x170
[  969.359682][T28254]  security_file_open+0x50/0x560
[  969.364616][T28254]  do_dentry_open+0x347/0xfd0
[  969.369292][T28254]  path_openat+0x26c0/0x2ec0
[  969.373899][T28254]  ? do_filp_open+0x4f0/0x4f0
[  969.378562][T28254]  ? alloc_fd+0x5ae/0x650
[  969.382882][T28254]  ? rcu_read_lock_sched_held+0x89/0x130
[  969.388504][T28254]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  969.394489][T28254]  do_filp_open+0x277/0x4f0
[  969.398985][T28254]  ? vfs_tmpfile+0x230/0x230
[  969.403587][T28254]  ? alloc_fd+0x5ae/0x650
[  969.407912][T28254]  do_sys_openat2+0x13b/0x500
[  969.412583][T28254]  ? read_lock_is_recursive+0x10/0x10
[  969.417948][T28254]  ? __context_tracking_exit+0x4d/0x80
[  969.423411][T28254]  ? do_sys_open+0x220/0x220
[  969.428007][T28254]  __x64_sys_openat+0x243/0x290
[  969.432855][T28254]  ? __ia32_sys_open+0x270/0x270
[  969.437787][T28254]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  969.443763][T28254]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  969.449744][T28254]  do_syscall_64+0x2b/0x70
[  969.454152][T28254]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  969.460035][T28254] RIP: 0033:0x7f94af23bf64
[  969.464445][T28254] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[  969.484040][T28254] RSP: 002b:00007f94b0302eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  969.492445][T28254] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af23bf64
[  969.500411][T28254] RDX: 0000000000000002 RSI: 00007f94b0302fe0 RDI: 00000000ffffff9c
[  969.508373][T28254] RBP: 00007f94b0302fe0 R08: 0000000000000000 R09: 00007f94b03031d0
[  969.516332][T28254] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  969.524290][T28254] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  969.532261][T28254]  </TASK>
[  969.541026][T28254] ERROR: Out of memory at tomoyo_realpath_from_path.
[  969.551212][T28254] loop2: detected capacity change from 0 to 5
[  969.569023][T28254] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  969.582134][T28254] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  969.595751][T28254] NILFS (loop2): mounting unchecked fs
[  969.601846][T28254] NILFS (loop2): I/O error reading segment
[  969.607904][T13504] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  969.615558][T28254] NILFS (loop2): error -5 while searching super root
[  969.616884][ T3682] usb 5-1: new high-speed USB device number 119 using dummy_hcd
16:11:21 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 19)

[  969.705830][T28261] FAULT_INJECTION: forcing a failure.
[  969.705830][T28261] name failslab, interval 1, probability 0, space 0, times 0
[  969.720500][T28261] CPU: 0 PID: 28261 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  969.731022][T28261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  969.741085][T28261] Call Trace:
[  969.744373][T28261]  <TASK>
[  969.747308][T28261]  dump_stack_lvl+0x1e3/0x2cb
[  969.752002][T28261]  ? bfq_pos_tree_add_move+0x436/0x436
[  969.757472][T28261]  ? panic+0x76e/0x76e
[  969.761559][T28261]  ? __might_sleep+0xc0/0xc0
[  969.766159][T28261]  ? rcu_read_lock_sched_held+0x89/0x130
[  969.771792][T28261]  should_fail+0x384/0x4b0
[  969.776234][T28261]  ? tomoyo_realpath_from_path+0xd8/0x5f0
[  969.776775][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  969.781945][T28261]  should_failslab+0x5/0x20
[  969.781976][T28261]  __kmalloc+0x8b/0x370
[  969.781996][T28261]  ? kfree+0x2f/0x210
[  969.782021][T28261]  tomoyo_realpath_from_path+0xd8/0x5f0
[  969.796687][T13504] usb 6-1: device descriptor read/64, error 18
[  969.797349][T28261]  tomoyo_path_number_perm+0x219/0x7b0
[  969.810694][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  969.810992][T28261]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  969.824189][ T3736] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  969.832290][T28261]  ? __fget_files+0x3d0/0x440
[  969.832325][T28261]  security_file_ioctl+0x55/0xb0
[  969.832352][T28261]  __se_sys_ioctl+0x48/0x170
[  969.832376][T28261]  do_syscall_64+0x2b/0x70
[  969.832399][T28261]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  969.832420][T28261] RIP: 0033:0x7f94af288e07
[  969.832438][T28261] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  969.832454][T28261] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  969.832476][T28261] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  969.832490][T28261] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  969.832504][T28261] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  969.832517][T28261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  969.832529][T28261] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  969.832560][T28261]  </TASK>
[  969.889252][T28261] ERROR: Out of memory at tomoyo_realpath_from_path.
[  969.896784][ T3736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.905839][T28261] loop2: detected capacity change from 0 to 5
[  969.991564][T28261] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
16:11:21 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  970.006689][  T144] usb 1-1: USB disconnect, device number 14
[  970.007367][T28261] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  970.025339][ T3682] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  970.048220][T28261] NILFS (loop2): mounting unchecked fs
16:11:21 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000700"})

[  970.054490][T28261] NILFS (loop2): I/O error reading segment
[  970.057666][ T3682] usb 5-1: config 0 has no interfaces?
[  970.066324][T28261] NILFS (loop2): error -5 while searching super root
[  970.073317][ T3682] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  970.073704][T13504] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  970.093590][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:11:21 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 20)

[  970.136716][ T3682] usb 5-1: config 0 descriptor??
[  970.194039][T28282] FAULT_INJECTION: forcing a failure.
[  970.194039][T28282] name failslab, interval 1, probability 0, space 0, times 0
[  970.209016][T28282] CPU: 1 PID: 28282 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  970.219550][T28282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  970.229612][T28282] Call Trace:
[  970.232899][T28282]  <TASK>
[  970.235840][T28282]  dump_stack_lvl+0x1e3/0x2cb
[  970.240535][T28282]  ? bfq_pos_tree_add_move+0x436/0x436
[  970.246008][T28282]  ? panic+0x76e/0x76e
[  970.250087][T28282]  should_fail+0x384/0x4b0
[  970.254491][T28282]  ? tomoyo_encode+0x26f/0x540
[  970.259235][T28282]  should_failslab+0x5/0x20
[  970.263728][T28282]  __kmalloc+0x8b/0x370
[  970.267873][T28282]  ? prepend_path+0xb70/0xb70
[  970.272572][T28282]  tomoyo_encode+0x26f/0x540
[  970.277184][T28282]  tomoyo_realpath_from_path+0x5b4/0x5f0
[  970.282828][T28282]  tomoyo_path_number_perm+0x219/0x7b0
[  970.288283][T28282]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  970.293760][T28282]  ? __fget_files+0x3d0/0x440
[  970.298428][T28282]  security_file_ioctl+0x55/0xb0
[  970.303368][T28282]  __se_sys_ioctl+0x48/0x170
[  970.307953][T28282]  do_syscall_64+0x2b/0x70
[  970.312359][T28282]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  970.318245][T28282] RIP: 0033:0x7f94af288e07
[  970.322675][T28282] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  970.342289][T28282] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  970.350720][T28282] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  970.358713][T28282] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  970.366676][T28282] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  970.374665][T28282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  970.382683][T28282] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  970.390719][T28282]  </TASK>
[  970.399095][T28282] ERROR: Out of memory at tomoyo_realpath_from_path.
[  970.406712][T28282] loop2: detected capacity change from 0 to 5
[  970.420742][T28282] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  970.436252][ T3736] wacom 0003:056A:0331.012C: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  970.450687][T28282] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  970.462215][T28282] NILFS (loop2): mounting unchecked fs
[  970.467980][T13504] usb 6-1: device descriptor read/64, error 18
[  970.468679][T28282] NILFS (loop2): I/O error reading segment
[  970.489300][T28282] NILFS (loop2): error -5 while searching super root
16:11:22 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 21)

[  970.587193][T13504] usb usb6-port1: attempt power cycle
[  970.597020][  T144] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  970.611310][T28295] FAULT_INJECTION: forcing a failure.
[  970.611310][T28295] name failslab, interval 1, probability 0, space 0, times 0
[  970.624356][T28295] CPU: 0 PID: 28295 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  970.634846][T28295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  970.644904][T28295] Call Trace:
[  970.648177][T28295]  <TASK>
[  970.651113][T28295]  dump_stack_lvl+0x1e3/0x2cb
[  970.655806][T28295]  ? bfq_pos_tree_add_move+0x436/0x436
[  970.661261][T28295]  ? panic+0x76e/0x76e
[  970.665339][T28295]  ? __might_sleep+0xc0/0xc0
[  970.669945][T28295]  should_fail+0x384/0x4b0
[  970.674372][T28295]  ? alloc_workqueue+0x18d/0x1460
[  970.679451][T28295]  should_failslab+0x5/0x20
[  970.683952][T28295]  __kmalloc+0x8b/0x370
[  970.688107][T28295]  alloc_workqueue+0x18d/0x1460
[  970.692958][T28295]  ? _raw_spin_unlock+0x24/0x40
[  970.697800][T28295]  ? bd_prepare_to_claim+0x388/0x420
[  970.703130][T28295]  ? loop_attr_do_show_dio+0xc0/0xc0
[  970.708461][T28295]  ? mutex_lock_io_nested+0x60/0x60
[  970.713652][T28295]  ? loop_configure+0x4f6/0x1200
[  970.718582][T28295]  ? apply_workqueue_attrs+0x700/0x700
[  970.724032][T28295]  ? loop_set_status_from_info+0x12e/0x240
[  970.729833][T28295]  loop_configure+0x5a4/0x1200
[  970.734594][T28295]  ? reacquire_held_locks+0x680/0x680
[  970.739961][T28295]  lo_ioctl+0x89e/0x1eb0
[  970.744222][T28295]  ? mark_lock+0x98/0x350
[  970.748539][T28295]  ? lo_release+0x1f0/0x1f0
[  970.753037][T28295]  ? rcu_lock_release+0x5/0x20
[  970.757827][T28295]  ? rcu_read_lock_sched_held+0x89/0x130
[  970.763453][T28295]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  970.769438][T28295]  ? read_lock_is_recursive+0x10/0x10
[  970.774795][T28295]  ? rcu_lock_release+0x5/0x20
[  970.779550][T28295]  ? __lock_acquire+0x1f80/0x1f80
[  970.784574][T28295]  ? deref_stack_reg+0xbd/0x110
[  970.789514][T28295]  ? stack_trace_save+0x1f0/0x1f0
[  970.794583][T28295]  ? is_bpf_text_address+0x253/0x270
[  970.799862][T28295]  ? stack_trace_save+0x1f0/0x1f0
[  970.804877][T28295]  ? kernel_text_address+0x9e/0xd0
[  970.810008][T28295]  ? __kernel_text_address+0x9/0x40
[  970.815192][T28295]  ? unwind_get_return_address+0x48/0x80
[  970.820811][T28295]  ? arch_stack_walk+0xf8/0x140
[  970.825675][T28295]  ? stack_trace_save+0x12d/0x1f0
[  970.830689][T28295]  ? stack_trace_snprint+0xf0/0xf0
[  970.835793][T28295]  ? __stack_depot_save+0x33/0x490
[  970.840899][T28295]  ? kfree+0xc6/0x210
[  970.844872][T28295]  ? kasan_set_track+0x5e/0x70
[  970.849627][T28295]  ? kasan_set_track+0x4c/0x70
[  970.854379][T28295]  ? kasan_set_free_info+0x1f/0x40
[  970.859477][T28295]  ? ____kasan_slab_free+0xd8/0x110
[  970.864661][T28295]  ? slab_free_freelist_hook+0x12e/0x1a0
[  970.870282][T28295]  ? kfree+0xc6/0x210
[  970.874257][T28295]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  970.879880][T28295]  ? security_file_ioctl+0x55/0xb0
[  970.884980][T28295]  ? __se_sys_ioctl+0x48/0x170
[  970.889731][T28295]  ? do_syscall_64+0x2b/0x70
[  970.894312][T28295]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  970.900381][T28295]  ? rcu_lock_release+0x5/0x20
[  970.905144][T28295]  ? rcu_read_lock_sched_held+0x89/0x130
[  970.910763][T28295]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  970.916732][T28295]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  970.922704][T28295]  ? do_vfs_ioctl+0xc71/0x2a70
[  970.927482][T28295]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  970.932917][T28295]  ? blkdev_bszset+0x250/0x250
[  970.937690][T28295]  ? memset+0x1f/0x40
[  970.941662][T28295]  ? smack_file_ioctl+0x298/0x3a0
[  970.946683][T28295]  ? smack_file_alloc_security+0xd0/0xd0
[  970.952305][T28295]  ? lo_release+0x1f0/0x1f0
[  970.956803][T28295]  blkdev_ioctl+0x3a6/0x760
[  970.961299][T28295]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  970.966751][T28295]  ? bpf_lsm_file_ioctl+0x5/0x10
[  970.971680][T28295]  ? security_file_ioctl+0x9d/0xb0
[  970.976788][T28295]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  970.982240][T28295]  __se_sys_ioctl+0xfb/0x170
[  970.986829][T28295]  do_syscall_64+0x2b/0x70
[  970.991237][T28295]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  970.997124][T28295] RIP: 0033:0x7f94af288e07
[  971.001530][T28295] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  971.021125][T28295] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  971.029531][T28295] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  971.037490][T28295] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  971.045451][T28295] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  971.053425][T28295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  971.061399][T28295] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  971.069380][T28295]  </TASK>
[  971.347861][ T3736] usb 4-1: USB disconnect, device number 77
[  971.366643][T13504] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  971.386706][  T144] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  971.397280][  T144] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  971.410420][  T144] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  971.420193][  T144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.483272][  T144] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  971.546772][T13504] usb 6-1: device descriptor read/8, error -61
[  971.816629][T13504] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  971.997062][T13504] usb 6-1: device descriptor read/8, error -61
[  972.117608][T13504] usb usb6-port1: unable to enumerate USB device
16:11:24 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:24 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 22)

16:11:24 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:24 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000700"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:11:24 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000700"})

[  972.461216][T13504] usb 5-1: USB disconnect, device number 119
[  972.485856][T28325] FAULT_INJECTION: forcing a failure.
[  972.485856][T28325] name failslab, interval 1, probability 0, space 0, times 0
[  972.504427][T28325] CPU: 1 PID: 28325 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  972.514962][T28325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  972.525024][T28325] Call Trace:
[  972.528292][T28325]  <TASK>
[  972.531210][T28325]  dump_stack_lvl+0x1e3/0x2cb
[  972.535878][T28325]  ? bfq_pos_tree_add_move+0x436/0x436
[  972.541322][T28325]  ? panic+0x76e/0x76e
[  972.545390][T28325]  ? __might_sleep+0xc0/0xc0
[  972.549996][T28325]  should_fail+0x384/0x4b0
[  972.554411][T28325]  ? alloc_workqueue+0x207/0x1460
[  972.559445][T28325]  should_failslab+0x5/0x20
[  972.563960][T28325]  kmem_cache_alloc_trace+0x68/0x310
[  972.569261][T28325]  alloc_workqueue+0x207/0x1460
[  972.574116][T28325]  ? _raw_spin_unlock+0x24/0x40
[  972.578959][T28325]  ? bd_prepare_to_claim+0x388/0x420
[  972.584245][T28325]  ? loop_attr_do_show_dio+0xc0/0xc0
[  972.589515][T28325]  ? mutex_lock_io_nested+0x60/0x60
[  972.594703][T28325]  ? loop_configure+0x4f6/0x1200
[  972.599645][T28325]  ? apply_workqueue_attrs+0x700/0x700
[  972.605090][T28325]  ? loop_set_status_from_info+0x12e/0x240
[  972.610897][T28325]  loop_configure+0x5a4/0x1200
[  972.615679][T28325]  ? reacquire_held_locks+0x680/0x680
[  972.621059][T28325]  ? reacquire_held_locks+0x680/0x680
[  972.626438][T28325]  lo_ioctl+0x89e/0x1eb0
[  972.630675][T28325]  ? reacquire_held_locks+0x680/0x680
[  972.636045][T28325]  ? mark_lock+0x98/0x350
[  972.640359][T28325]  ? lo_release+0x1f0/0x1f0
[  972.644846][T28325]  ? rcu_lock_release+0x5/0x20
[  972.649590][T28325]  ? rcu_read_lock_sched_held+0x89/0x130
[  972.655206][T28325]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  972.661193][T28325]  ? read_lock_is_recursive+0x10/0x10
[  972.666571][T28325]  ? rcu_lock_release+0x5/0x20
[  972.671335][T28325]  ? finish_lock_switch+0x1bb/0x350
[  972.676525][T28325]  ? __lock_acquire+0x1f80/0x1f80
[  972.681532][T28325]  ? deref_stack_reg+0xbd/0x110
[  972.686376][T28325]  ? stack_trace_save+0x1f0/0x1f0
[  972.691382][T28325]  ? is_bpf_text_address+0x253/0x270
[  972.696659][T28325]  ? stack_trace_save+0x1f0/0x1f0
[  972.701688][T28325]  ? kernel_text_address+0x9e/0xd0
[  972.706790][T28325]  ? __kernel_text_address+0x9/0x40
[  972.712004][T28325]  ? unwind_get_return_address+0x48/0x80
[  972.717647][T28325]  ? arch_stack_walk+0xf8/0x140
[  972.722521][T28325]  ? stack_trace_save+0x12d/0x1f0
[  972.727548][T28325]  ? stack_trace_snprint+0xf0/0xf0
[  972.732648][T28325]  ? __stack_depot_save+0x33/0x490
[  972.737752][T28325]  ? kfree+0xc6/0x210
[  972.741724][T28325]  ? kasan_set_track+0x5e/0x70
[  972.746490][T28325]  ? kasan_set_track+0x4c/0x70
[  972.751256][T28325]  ? kasan_set_free_info+0x1f/0x40
[  972.756351][T28325]  ? ____kasan_slab_free+0xd8/0x110
[  972.761554][T28325]  ? slab_free_freelist_hook+0x12e/0x1a0
[  972.767194][T28325]  ? kfree+0xc6/0x210
[  972.771173][T28325]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  972.776789][T28325]  ? security_file_ioctl+0x55/0xb0
[  972.781884][T28325]  ? __se_sys_ioctl+0x48/0x170
[  972.786632][T28325]  ? do_syscall_64+0x2b/0x70
[  972.791224][T28325]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  972.797302][T28325]  ? rcu_lock_release+0x5/0x20
[  972.802084][T28325]  ? rcu_read_lock_sched_held+0x89/0x130
[  972.806833][ T3686] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  972.807703][T28325]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  972.807730][T28325]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  972.807758][T28325]  ? do_vfs_ioctl+0xc71/0x2a70
[  972.831977][T28325]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  972.837366][T28325]  ? blkdev_bszset+0x250/0x250
[  972.842149][T28325]  ? memset+0x1f/0x40
[  972.846115][T28325]  ? smack_file_ioctl+0x298/0x3a0
[  972.851132][T28325]  ? smack_file_alloc_security+0xd0/0xd0
[  972.856773][T28325]  ? lo_release+0x1f0/0x1f0
[  972.861284][T28325]  blkdev_ioctl+0x3a6/0x760
[  972.865800][T28325]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  972.871270][T28325]  ? bpf_lsm_file_ioctl+0x5/0x10
[  972.876217][T28325]  ? security_file_ioctl+0x9d/0xb0
[  972.881328][T28325]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  972.886766][T28325]  __se_sys_ioctl+0xfb/0x170
[  972.891342][T28325]  do_syscall_64+0x2b/0x70
[  972.895745][T28325]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  972.901622][T28325] RIP: 0033:0x7f94af288e07
[  972.906028][T28325] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  972.925617][T28325] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  972.934017][T28325] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  972.941975][T28325] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  972.949926][T28325] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
16:11:24 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 23)

16:11:24 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000700"})

[  972.957885][T28325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  972.965857][T28325] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  972.973855][T28325]  </TASK>
[  973.031172][T28336] FAULT_INJECTION: forcing a failure.
[  973.031172][T28336] name failslab, interval 1, probability 0, space 0, times 0
[  973.050579][T28336] CPU: 1 PID: 28336 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  973.061112][T28336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  973.071290][T28336] Call Trace:
[  973.074559][T28336]  <TASK>
[  973.077481][T28336]  dump_stack_lvl+0x1e3/0x2cb
[  973.082150][T28336]  ? bfq_pos_tree_add_move+0x436/0x436
[  973.087600][T28336]  ? panic+0x76e/0x76e
[  973.091656][T28336]  ? __might_sleep+0xc0/0xc0
[  973.096242][T28336]  ? vsnprintf+0x1c35/0x1ce0
[  973.100812][T28336]  ? __stack_depot_save+0x33/0x490
[  973.105912][T28336]  should_fail+0x384/0x4b0
[  973.110329][T28336]  ? kasprintf+0xd1/0x120
[  973.114666][T28336]  should_failslab+0x5/0x20
[  973.119183][T28336]  __kmalloc_track_caller+0x89/0x350
[  973.124473][T28336]  ? number+0xd9b/0x1040
[  973.128708][T28336]  kvasprintf+0xd6/0x180
[  973.132949][T28336]  ? bust_spinlocks+0xd0/0xd0
[  973.137615][T28336]  ? lockdep_unlock+0x163/0x300
[  973.142452][T28336]  ? lockdep_lock+0x2a0/0x2a0
[  973.147127][T28336]  ? __is_module_percpu_address+0x29e/0x3d0
[  973.153093][T28336]  kasprintf+0xd1/0x120
[  973.157377][T28336]  ? kvasprintf_const+0x170/0x170
[  973.163706][T28336]  ? __raw_spin_lock_init+0x41/0x100
[  973.169019][T28336]  alloc_workqueue+0x5ed/0x1460
[  973.173899][T28336]  ? mutex_lock_io_nested+0x60/0x60
[  973.179104][T28336]  ? loop_configure+0x4f6/0x1200
[  973.184159][T28336]  ? apply_workqueue_attrs+0x700/0x700
[  973.189624][T28336]  ? loop_set_status_from_info+0x12e/0x240
[  973.195461][T28336]  loop_configure+0x5a4/0x1200
[  973.200251][T28336]  ? reacquire_held_locks+0x680/0x680
[  973.205641][T28336]  lo_ioctl+0x89e/0x1eb0
[  973.209894][T28336]  ? mark_lock+0x98/0x350
[  973.214228][T28336]  ? lo_release+0x1f0/0x1f0
[  973.218728][T28336]  ? rcu_lock_release+0x5/0x20
[  973.223491][T28336]  ? rcu_read_lock_sched_held+0x89/0x130
[  973.229128][T28336]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  973.235116][T28336]  ? read_lock_is_recursive+0x10/0x10
[  973.240475][T28336]  ? rcu_lock_release+0x5/0x20
[  973.245231][T28336]  ? __lock_acquire+0x1f80/0x1f80
[  973.250259][T28336]  ? deref_stack_reg+0xbd/0x110
[  973.255110][T28336]  ? stack_trace_save+0x1f0/0x1f0
[  973.260127][T28336]  ? is_bpf_text_address+0x253/0x270
[  973.265407][T28336]  ? stack_trace_save+0x1f0/0x1f0
[  973.270419][T28336]  ? kernel_text_address+0x9e/0xd0
[  973.275523][T28336]  ? __kernel_text_address+0x9/0x40
[  973.280713][T28336]  ? unwind_get_return_address+0x48/0x80
[  973.286355][T28336]  ? arch_stack_walk+0xf8/0x140
[  973.291233][T28336]  ? stack_trace_save+0x12d/0x1f0
[  973.296272][T28336]  ? stack_trace_snprint+0xf0/0xf0
[  973.301385][T28336]  ? __stack_depot_save+0x33/0x490
[  973.306497][T28336]  ? kfree+0xc6/0x210
[  973.310475][T28336]  ? kasan_set_track+0x5e/0x70
[  973.315230][T28336]  ? kasan_set_track+0x4c/0x70
[  973.319979][T28336]  ? kasan_set_free_info+0x1f/0x40
[  973.325077][T28336]  ? ____kasan_slab_free+0xd8/0x110
[  973.330272][T28336]  ? slab_free_freelist_hook+0x12e/0x1a0
[  973.335891][T28336]  ? kfree+0xc6/0x210
[  973.339862][T28336]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  973.345486][T28336]  ? security_file_ioctl+0x55/0xb0
[  973.350589][T28336]  ? __se_sys_ioctl+0x48/0x170
[  973.355338][T28336]  ? do_syscall_64+0x2b/0x70
[  973.359915][T28336]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  973.365992][T28336]  ? rcu_lock_release+0x5/0x20
[  973.370746][T28336]  ? rcu_read_lock_sched_held+0x89/0x130
[  973.376364][T28336]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  973.382335][T28336]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  973.388307][T28336]  ? do_vfs_ioctl+0xc71/0x2a70
[  973.393084][T28336]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  973.398451][T28336]  ? blkdev_bszset+0x250/0x250
[  973.403225][T28336]  ? memset+0x1f/0x40
[  973.407196][T28336]  ? smack_file_ioctl+0x298/0x3a0
[  973.412213][T28336]  ? smack_file_alloc_security+0xd0/0xd0
[  973.417835][T28336]  ? lo_release+0x1f0/0x1f0
[  973.422326][T28336]  blkdev_ioctl+0x3a6/0x760
[  973.426822][T28336]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  973.432278][T28336]  ? bpf_lsm_file_ioctl+0x5/0x10
[  973.437209][T28336]  ? security_file_ioctl+0x9d/0xb0
[  973.442319][T28336]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  973.447765][T28336]  __se_sys_ioctl+0xfb/0x170
[  973.452348][T28336]  do_syscall_64+0x2b/0x70
[  973.456756][T28336]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  973.462643][T28336] RIP: 0033:0x7f94af288e07
[  973.467051][T28336] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  973.486644][T28336] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  973.495055][T28336] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  973.503017][T28336] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  973.510974][T28336] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  973.518931][T28336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  973.526888][T28336] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  973.534867][T28336]  </TASK>
[  973.551919][T28336] loop2: detected capacity change from 0 to 5
16:11:25 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  973.575947][T28336] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  973.577562][  T144] usb 1-1: USB disconnect, device number 15
[  973.612616][T28336] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  973.616931][ T3736] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  973.645862][T28336] NILFS (loop2): mounting unchecked fs
[  973.654113][T28336] NILFS (loop2): I/O error reading segment
[  973.660159][T28336] NILFS (loop2): error -5 while searching super root
16:11:25 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 24)

[  973.676875][ T3686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  973.688377][ T3686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  973.698272][ T3686] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  973.707619][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.797206][T13504] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  973.808552][T28355] FAULT_INJECTION: forcing a failure.
[  973.808552][T28355] name failslab, interval 1, probability 0, space 0, times 0
[  973.824687][T28355] CPU: 0 PID: 28355 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  973.826755][ T3736] usb 6-1: device descriptor read/64, error 18
[  973.835186][T28355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  973.835202][T28355] Call Trace:
[  973.835210][T28355]  <TASK>
[  973.835221][T28355]  dump_stack_lvl+0x1e3/0x2cb
[  973.835252][T28355]  ? bfq_pos_tree_add_move+0x436/0x436
[  973.867721][T28355]  ? panic+0x76e/0x76e
[  973.871810][T28355]  ? __might_sleep+0xc0/0xc0
[  973.876405][T28355]  ? vsnprintf+0x1c35/0x1ce0
[  973.880999][T28355]  ? __stack_depot_save+0x33/0x490
[  973.886120][T28355]  should_fail+0x384/0x4b0
[  973.890531][T28355]  ? kasprintf+0xd1/0x120
[  973.894870][T28355]  should_failslab+0x5/0x20
[  973.899388][T28355]  __kmalloc_track_caller+0x89/0x350
[  973.904675][T28355]  ? number+0xd9b/0x1040
[  973.908927][T28355]  kvasprintf+0xd6/0x180
[  973.913182][T28355]  ? bust_spinlocks+0xd0/0xd0
[  973.917867][T28355]  ? lockdep_unlock+0x163/0x300
[  973.922721][T28355]  ? lockdep_lock+0x2a0/0x2a0
[  973.927405][T28355]  ? __is_module_percpu_address+0x29e/0x3d0
[  973.933319][T28355]  kasprintf+0xd1/0x120
[  973.937497][T28355]  ? kvasprintf_const+0x170/0x170
[  973.942538][T28355]  ? __raw_spin_lock_init+0x41/0x100
[  973.947839][T28355]  alloc_workqueue+0x5ed/0x1460
[  973.952716][T28355]  ? mutex_lock_io_nested+0x60/0x60
[  973.957926][T28355]  ? loop_configure+0x4f6/0x1200
[  973.962874][T28355]  ? apply_workqueue_attrs+0x700/0x700
[  973.968339][T28355]  ? loop_set_status_from_info+0x12e/0x240
[  973.974171][T28355]  loop_configure+0x5a4/0x1200
[  973.978951][T28355]  ? reacquire_held_locks+0x680/0x680
[  973.984336][T28355]  lo_ioctl+0x89e/0x1eb0
[  973.988583][T28355]  ? mark_lock+0x98/0x350
[  973.992921][T28355]  ? lo_release+0x1f0/0x1f0
[  973.997436][T28355]  ? rcu_lock_release+0x5/0x20
[  974.002206][T28355]  ? rcu_read_lock_sched_held+0x89/0x130
[  974.007843][T28355]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  974.013852][T28355]  ? read_lock_is_recursive+0x10/0x10
[  974.019233][T28355]  ? rcu_lock_release+0x5/0x20
[  974.024001][T28355]  ? __lock_acquire+0x1f80/0x1f80
[  974.029019][T28355]  ? deref_stack_reg+0xbd/0x110
[  974.033897][T28355]  ? stack_trace_save+0x1f0/0x1f0
[  974.036748][  T144] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  974.038922][T28355]  ? is_bpf_text_address+0x253/0x270
[  974.051715][T28355]  ? stack_trace_save+0x1f0/0x1f0
[  974.056751][T28355]  ? kernel_text_address+0x9e/0xd0
[  974.061887][T28355]  ? __kernel_text_address+0x9/0x40
[  974.067097][T28355]  ? unwind_get_return_address+0x48/0x80
[  974.072745][T28355]  ? arch_stack_walk+0xf8/0x140
[  974.077627][T28355]  ? stack_trace_save+0x12d/0x1f0
[  974.082667][T28355]  ? stack_trace_snprint+0xf0/0xf0
[  974.087804][T28355]  ? __stack_depot_save+0x33/0x490
[  974.092930][T28355]  ? kfree+0xc6/0x210
[  974.096927][T28355]  ? kasan_set_track+0x5e/0x70
[  974.101700][T28355]  ? kasan_set_track+0x4c/0x70
[  974.106467][T28355]  ? kasan_set_free_info+0x1f/0x40
[  974.111572][T28355]  ? ____kasan_slab_free+0xd8/0x110
[  974.116783][T28355]  ? slab_free_freelist_hook+0x12e/0x1a0
[  974.116860][ T3736] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  974.122414][T28355]  ? kfree+0xc6/0x210
[  974.122435][T28355]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  974.122458][T28355]  ? security_file_ioctl+0x55/0xb0
[  974.122480][T28355]  ? __se_sys_ioctl+0x48/0x170
[  974.149411][T28355]  ? do_syscall_64+0x2b/0x70
[  974.154018][T28355]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  974.160098][T28355]  ? rcu_lock_release+0x5/0x20
[  974.164878][T28355]  ? rcu_read_lock_sched_held+0x89/0x130
[  974.170517][T28355]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  974.176504][T28355]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  974.182499][T28355]  ? do_vfs_ioctl+0xc71/0x2a70
[  974.187312][T28355]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  974.192725][T28355]  ? blkdev_bszset+0x250/0x250
[  974.197527][T28355]  ? memset+0x1f/0x40
[  974.201520][T28355]  ? smack_file_ioctl+0x298/0x3a0
[  974.206557][T28355]  ? smack_file_alloc_security+0xd0/0xd0
[  974.212198][T28355]  ? lo_release+0x1f0/0x1f0
[  974.216716][T28355]  blkdev_ioctl+0x3a6/0x760
[  974.221236][T28355]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  974.226712][T28355]  ? bpf_lsm_file_ioctl+0x5/0x10
[  974.231657][T28355]  ? security_file_ioctl+0x9d/0xb0
[  974.236783][T28355]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  974.242256][T28355]  __se_sys_ioctl+0xfb/0x170
[  974.246858][T28355]  do_syscall_64+0x2b/0x70
[  974.251281][T28355]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  974.257187][T28355] RIP: 0033:0x7f94af288e07
[  974.261612][T28355] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  974.266803][T13504] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  974.281220][T28355] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  974.281247][T28355] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  974.281267][T28355] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  974.281280][T28355] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  974.281293][T28355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  974.281307][T28355] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  974.281336][T28355]  </TASK>
[  974.289326][T28355] loop2: detected capacity change from 0 to 5
[  974.326941][ T3736] usb 6-1: device descriptor read/64, error 18
[  974.360773][T28355] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  974.370203][T13504] usb 5-1: config 0 has no interfaces?
[  974.382993][T13504] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
16:11:26 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000700"})

[  974.383853][T28355] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  974.392841][T13504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.415905][  T144] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  974.421975][T28355] NILFS (loop2): mounting unchecked fs
[  974.433177][  T144] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  974.451911][T28355] NILFS (loop2): I/O error reading segment
[  974.465857][T13504] usb 5-1: config 0 descriptor??
[  974.474910][T28355] NILFS (loop2): error -5 while searching super root
[  974.480392][  T144] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  974.491378][  T144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.500188][ T3736] usb usb6-port1: attempt power cycle
16:11:26 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 25)

[  974.548740][ T3686] wacom 0003:056A:0331.012D: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  974.558685][  T144] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  974.597171][T28371] FAULT_INJECTION: forcing a failure.
[  974.597171][T28371] name failslab, interval 1, probability 0, space 0, times 0
[  974.630489][T28371] CPU: 0 PID: 28371 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  974.641126][T28371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  974.651197][T28371] Call Trace:
[  974.654489][T28371]  <TASK>
[  974.657431][T28371]  dump_stack_lvl+0x1e3/0x2cb
[  974.662131][T28371]  ? bfq_pos_tree_add_move+0x436/0x436
[  974.667600][T28371]  ? panic+0x76e/0x76e
[  974.671687][T28371]  should_fail+0x384/0x4b0
[  974.676093][T28371]  ? apply_wqattrs_prepare+0xe8/0xc20
[  974.681458][T28371]  should_failslab+0x5/0x20
[  974.685973][T28371]  kmem_cache_alloc_trace+0x68/0x310
[  974.691265][T28371]  apply_wqattrs_prepare+0xe8/0xc20
[  974.696448][T28371]  ? mutex_lock_io_nested+0x60/0x60
[  974.701674][T28371]  apply_workqueue_attrs+0xf2/0x700
[  974.706897][T28371]  alloc_workqueue+0xeb3/0x1460
[  974.711765][T28371]  ? mutex_lock_io_nested+0x60/0x60
[  974.716974][T28371]  ? loop_configure+0x4f6/0x1200
[  974.721922][T28371]  ? apply_workqueue_attrs+0x700/0x700
[  974.727396][T28371]  ? loop_set_status_from_info+0x12e/0x240
[  974.733228][T28371]  loop_configure+0x5a4/0x1200
[  974.737995][T28371]  ? reacquire_held_locks+0x680/0x680
[  974.743390][T28371]  lo_ioctl+0x89e/0x1eb0
[  974.747659][T28371]  ? mark_lock+0x98/0x350
[  974.751991][T28371]  ? lo_release+0x1f0/0x1f0
[  974.756492][T28371]  ? rcu_lock_release+0x5/0x20
[  974.761263][T28371]  ? rcu_read_lock_sched_held+0x89/0x130
[  974.767422][T28371]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  974.773436][T28371]  ? read_lock_is_recursive+0x10/0x10
[  974.778828][T28371]  ? rcu_lock_release+0x5/0x20
[  974.783614][T28371]  ? __lock_acquire+0x1f80/0x1f80
[  974.788651][T28371]  ? deref_stack_reg+0xbd/0x110
[  974.793524][T28371]  ? stack_trace_save+0x1f0/0x1f0
[  974.798549][T28371]  ? is_bpf_text_address+0x253/0x270
[  974.803846][T28371]  ? stack_trace_save+0x1f0/0x1f0
[  974.808883][T28371]  ? kernel_text_address+0x9e/0xd0
[  974.814009][T28371]  ? __kernel_text_address+0x9/0x40
[  974.819216][T28371]  ? unwind_get_return_address+0x48/0x80
[  974.824864][T28371]  ? arch_stack_walk+0xf8/0x140
[  974.829724][T28371]  ? stack_trace_save+0x12d/0x1f0
[  974.834755][T28371]  ? stack_trace_snprint+0xf0/0xf0
[  974.839864][T28371]  ? __stack_depot_save+0x33/0x490
[  974.844998][T28371]  ? kfree+0xc6/0x210
[  974.848994][T28371]  ? kasan_set_track+0x5e/0x70
[  974.853767][T28371]  ? kasan_set_track+0x4c/0x70
[  974.858539][T28371]  ? kasan_set_free_info+0x1f/0x40
[  974.863651][T28371]  ? ____kasan_slab_free+0xd8/0x110
[  974.868838][T28371]  ? slab_free_freelist_hook+0x12e/0x1a0
[  974.874475][T28371]  ? kfree+0xc6/0x210
[  974.878450][T28371]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  974.884092][T28371]  ? security_file_ioctl+0x55/0xb0
[  974.889199][T28371]  ? __se_sys_ioctl+0x48/0x170
[  974.893972][T28371]  ? do_syscall_64+0x2b/0x70
[  974.898550][T28371]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  974.904631][T28371]  ? rcu_lock_release+0x5/0x20
[  974.906684][ T3736] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  974.909383][T28371]  ? rcu_read_lock_sched_held+0x89/0x130
[  974.922561][T28371]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  974.928557][T28371]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  974.934561][T28371]  ? do_vfs_ioctl+0xc71/0x2a70
[  974.939380][T28371]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  974.944773][T28371]  ? blkdev_bszset+0x250/0x250
[  974.949575][T28371]  ? memset+0x1f/0x40
[  974.953565][T28371]  ? smack_file_ioctl+0x298/0x3a0
[  974.958585][T28371]  ? smack_file_alloc_security+0xd0/0xd0
[  974.964245][T28371]  ? lo_release+0x1f0/0x1f0
[  974.968761][T28371]  blkdev_ioctl+0x3a6/0x760
[  974.973288][T28371]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  974.978764][T28371]  ? bpf_lsm_file_ioctl+0x5/0x10
[  974.983707][T28371]  ? security_file_ioctl+0x9d/0xb0
[  974.988834][T28371]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  974.994302][T28371]  __se_sys_ioctl+0xfb/0x170
[  974.998906][T28371]  do_syscall_64+0x2b/0x70
[  975.003336][T28371]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  975.009246][T28371] RIP: 0033:0x7f94af288e07
[  975.013673][T28371] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  975.033324][T28371] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
16:11:26 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000700"})

[  975.041737][T28371] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  975.049723][T28371] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  975.057709][T28371] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  975.065703][T28371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  975.073686][T28371] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  975.081694][T28371]  </TASK>
[  975.086822][ T3736] usb 6-1: device descriptor read/8, error -61
[  975.353176][T13504] usb 4-1: USB disconnect, device number 78
[  975.376822][ T3736] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  975.506681][ T3736] usb 6-1: device descriptor read/8, error -71
[  975.637590][ T3736] usb usb6-port1: unable to enumerate USB device
[  976.649914][ T3686] usb 1-1: USB disconnect, device number 16
16:11:28 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:28 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 26)

16:11:28 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:28 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000700"})

16:11:28 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000800"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:11:28 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  976.804211][ T3684] usb 5-1: USB disconnect, device number 120
[  976.846704][T28408] FAULT_INJECTION: forcing a failure.
[  976.846704][T28408] name failslab, interval 1, probability 0, space 0, times 0
[  976.862590][T28408] CPU: 0 PID: 28408 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  976.873121][T28408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  976.883191][T28408] Call Trace:
[  976.886476][T28408]  <TASK>
[  976.889410][T28408]  dump_stack_lvl+0x1e3/0x2cb
[  976.894106][T28408]  ? bfq_pos_tree_add_move+0x436/0x436
[  976.899582][T28408]  ? panic+0x76e/0x76e
[  976.903668][T28408]  should_fail+0x384/0x4b0
[  976.908081][T28408]  ? apply_wqattrs_prepare+0x17d/0xc20
[  976.913557][T28408]  should_failslab+0x5/0x20
[  976.918073][T28408]  kmem_cache_alloc_trace+0x68/0x310
[  976.923365][T28408]  ? apply_wqattrs_prepare+0xe8/0xc20
[  976.928739][T28408]  apply_wqattrs_prepare+0x17d/0xc20
[  976.934030][T28408]  ? mutex_lock_io_nested+0x60/0x60
[  976.939258][T28408]  apply_workqueue_attrs+0xf2/0x700
[  976.944459][T28408]  alloc_workqueue+0xeb3/0x1460
[  976.949316][T28408]  ? mutex_lock_io_nested+0x60/0x60
[  976.954508][T28408]  ? loop_configure+0x4f6/0x1200
[  976.959437][T28408]  ? apply_workqueue_attrs+0x700/0x700
[  976.964887][T28408]  ? loop_set_status_from_info+0x12e/0x240
[  976.970694][T28408]  loop_configure+0x5a4/0x1200
[  976.975458][T28408]  ? reacquire_held_locks+0x680/0x680
[  976.980827][T28408]  lo_ioctl+0x89e/0x1eb0
[  976.985068][T28408]  ? mark_lock+0x98/0x350
[  976.989386][T28408]  ? lo_release+0x1f0/0x1f0
[  976.993887][T28408]  ? rcu_lock_release+0x5/0x20
[  976.998657][T28408]  ? rcu_read_lock_sched_held+0x89/0x130
[  977.004300][T28408]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  977.010292][T28408]  ? read_lock_is_recursive+0x10/0x10
[  977.015663][T28408]  ? rcu_lock_release+0x5/0x20
[  977.020421][T28408]  ? __lock_acquire+0x1f80/0x1f80
[  977.025436][T28408]  ? deref_stack_reg+0xbd/0x110
[  977.030297][T28408]  ? stack_trace_save+0x1f0/0x1f0
[  977.035316][T28408]  ? is_bpf_text_address+0x253/0x270
[  977.040602][T28408]  ? stack_trace_save+0x1f0/0x1f0
[  977.045622][T28408]  ? kernel_text_address+0x9e/0xd0
[  977.050729][T28408]  ? __kernel_text_address+0x9/0x40
[  977.055921][T28408]  ? unwind_get_return_address+0x48/0x80
[  977.061564][T28408]  ? arch_stack_walk+0xf8/0x140
[  977.066440][T28408]  ? stack_trace_save+0x12d/0x1f0
[  977.071474][T28408]  ? stack_trace_snprint+0xf0/0xf0
[  977.076593][T28408]  ? __stack_depot_save+0x33/0x490
[  977.081707][T28408]  ? kfree+0xc6/0x210
[  977.085687][T28408]  ? kasan_set_track+0x5e/0x70
[  977.090446][T28408]  ? kasan_set_track+0x4c/0x70
[  977.095204][T28408]  ? kasan_set_free_info+0x1f/0x40
[  977.100304][T28408]  ? ____kasan_slab_free+0xd8/0x110
[  977.105498][T28408]  ? slab_free_freelist_hook+0x12e/0x1a0
[  977.111129][T28408]  ? kfree+0xc6/0x210
[  977.115103][T28408]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  977.120728][T28408]  ? security_file_ioctl+0x55/0xb0
[  977.125889][T28408]  ? __se_sys_ioctl+0x48/0x170
[  977.130644][T28408]  ? do_syscall_64+0x2b/0x70
[  977.135225][T28408]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  977.141301][T28408]  ? rcu_lock_release+0x5/0x20
[  977.146055][T28408]  ? rcu_read_lock_sched_held+0x89/0x130
[  977.151678][T28408]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  977.157645][T28408]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  977.163624][T28408]  ? do_vfs_ioctl+0xc71/0x2a70
[  977.168405][T28408]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  977.173777][T28408]  ? blkdev_bszset+0x250/0x250
[  977.178550][T28408]  ? memset+0x1f/0x40
[  977.182519][T28408]  ? smack_file_ioctl+0x298/0x3a0
[  977.187536][T28408]  ? smack_file_alloc_security+0xd0/0xd0
[  977.193173][T28408]  ? lo_release+0x1f0/0x1f0
[  977.197682][T28408]  blkdev_ioctl+0x3a6/0x760
[  977.202187][T28408]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  977.207643][T28408]  ? bpf_lsm_file_ioctl+0x5/0x10
[  977.212581][T28408]  ? security_file_ioctl+0x9d/0xb0
[  977.217693][T28408]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  977.223145][T28408]  __se_sys_ioctl+0xfb/0x170
[  977.227731][T28408]  do_syscall_64+0x2b/0x70
[  977.232140][T28408]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  977.238025][T28408] RIP: 0033:0x7f94af288e07
[  977.242432][T28408] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  977.262031][T28408] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  977.270883][T28408] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  977.278846][T28408] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  977.286806][T28408] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
16:11:29 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 27)

[  977.294778][T28408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  977.302753][T28408] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  977.310736][T28408]  </TASK>
[  977.382478][T28423] FAULT_INJECTION: forcing a failure.
[  977.382478][T28423] name failslab, interval 1, probability 0, space 0, times 0
[  977.386634][ T3736] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  977.395499][T28423] CPU: 0 PID: 28423 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  977.413145][T28423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  977.423207][T28423] Call Trace:
[  977.426490][T28423]  <TASK>
[  977.429426][T28423]  dump_stack_lvl+0x1e3/0x2cb
[  977.434117][T28423]  ? bfq_pos_tree_add_move+0x436/0x436
[  977.439569][T28423]  ? panic+0x76e/0x76e
[  977.443647][T28423]  ? __might_sleep+0xc0/0xc0
[  977.448236][T28423]  should_fail+0x384/0x4b0
[  977.452658][T28423]  ? alloc_unbound_pwq+0x5df/0xf90
[  977.457779][T28423]  should_failslab+0x5/0x20
[  977.462281][T28423]  kmem_cache_alloc_node+0x6c/0x340
[  977.467481][T28423]  alloc_unbound_pwq+0x5df/0xf90
[  977.472424][T28423]  apply_wqattrs_prepare+0x3d4/0xc20
[  977.477720][T28423]  apply_workqueue_attrs+0xf2/0x700
[  977.482914][T28423]  alloc_workqueue+0xeb3/0x1460
[  977.487778][T28423]  ? mutex_lock_io_nested+0x60/0x60
[  977.492972][T28423]  ? loop_configure+0x4f6/0x1200
[  977.497901][T28423]  ? apply_workqueue_attrs+0x700/0x700
[  977.503353][T28423]  ? loop_set_status_from_info+0x12e/0x240
[  977.509159][T28423]  loop_configure+0x5a4/0x1200
[  977.513928][T28423]  ? reacquire_held_locks+0x680/0x680
[  977.519299][T28423]  lo_ioctl+0x89e/0x1eb0
[  977.523544][T28423]  ? mark_lock+0x98/0x350
[  977.527862][T28423]  ? lo_release+0x1f0/0x1f0
[  977.532358][T28423]  ? rcu_lock_release+0x5/0x20
[  977.537112][T28423]  ? rcu_read_lock_sched_held+0x89/0x130
[  977.542732][T28423]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  977.548715][T28423]  ? read_lock_is_recursive+0x10/0x10
[  977.554075][T28423]  ? rcu_lock_release+0x5/0x20
[  977.558825][T28423]  ? __lock_acquire+0x1f80/0x1f80
[  977.563838][T28423]  ? deref_stack_reg+0xbd/0x110
[  977.568690][T28423]  ? stack_trace_save+0x1f0/0x1f0
[  977.573708][T28423]  ? is_bpf_text_address+0x253/0x270
[  977.578985][T28423]  ? stack_trace_save+0x1f0/0x1f0
[  977.583999][T28423]  ? kernel_text_address+0x9e/0xd0
[  977.589100][T28423]  ? __kernel_text_address+0x9/0x40
[  977.594288][T28423]  ? unwind_get_return_address+0x48/0x80
[  977.599911][T28423]  ? arch_stack_walk+0xf8/0x140
[  977.604763][T28423]  ? stack_trace_save+0x12d/0x1f0
[  977.609780][T28423]  ? stack_trace_snprint+0xf0/0xf0
[  977.614887][T28423]  ? __stack_depot_save+0x33/0x490
[  977.619998][T28423]  ? kfree+0xc6/0x210
[  977.623973][T28423]  ? kasan_set_track+0x5e/0x70
[  977.628731][T28423]  ? kasan_set_track+0x4c/0x70
[  977.633482][T28423]  ? kasan_set_free_info+0x1f/0x40
[  977.638582][T28423]  ? ____kasan_slab_free+0xd8/0x110
[  977.643769][T28423]  ? slab_free_freelist_hook+0x12e/0x1a0
[  977.649388][T28423]  ? kfree+0xc6/0x210
[  977.653356][T28423]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  977.658981][T28423]  ? security_file_ioctl+0x55/0xb0
[  977.664084][T28423]  ? __se_sys_ioctl+0x48/0x170
[  977.668838][T28423]  ? do_syscall_64+0x2b/0x70
[  977.673416][T28423]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  977.679491][T28423]  ? rcu_lock_release+0x5/0x20
[  977.684248][T28423]  ? rcu_read_lock_sched_held+0x89/0x130
[  977.689872][T28423]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  977.695843][T28423]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  977.701817][T28423]  ? do_vfs_ioctl+0xc71/0x2a70
[  977.706603][T28423]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  977.711974][T28423]  ? blkdev_bszset+0x250/0x250
[  977.716752][T28423]  ? memset+0x1f/0x40
[  977.720725][T28423]  ? smack_file_ioctl+0x298/0x3a0
[  977.725744][T28423]  ? smack_file_alloc_security+0xd0/0xd0
[  977.731368][T28423]  ? lo_release+0x1f0/0x1f0
[  977.735861][T28423]  blkdev_ioctl+0x3a6/0x760
[  977.740360][T28423]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  977.745817][T28423]  ? bpf_lsm_file_ioctl+0x5/0x10
[  977.750751][T28423]  ? security_file_ioctl+0x9d/0xb0
[  977.755857][T28423]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  977.761305][T28423]  __se_sys_ioctl+0xfb/0x170
[  977.765887][T28423]  do_syscall_64+0x2b/0x70
[  977.770299][T28423]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  977.776184][T28423] RIP: 0033:0x7f94af288e07
[  977.780594][T28423] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  977.800190][T28423] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  977.808603][T28423] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  977.816583][T28423] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  977.824549][T28423] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
16:11:29 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 28)

[  977.832512][T28423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  977.840478][T28423] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  977.848456][T28423]  </TASK>
[  977.852392][  T144] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  977.932247][T28426] FAULT_INJECTION: forcing a failure.
[  977.932247][T28426] name failslab, interval 1, probability 0, space 0, times 0
[  977.946184][T28426] CPU: 1 PID: 28426 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  977.956712][T28426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  977.966848][T28426] Call Trace:
[  977.970116][T28426]  <TASK>
[  977.973039][T28426]  dump_stack_lvl+0x1e3/0x2cb
[  977.977718][T28426]  ? bfq_pos_tree_add_move+0x436/0x436
[  977.983166][T28426]  ? panic+0x76e/0x76e
[  977.987314][T28426]  ? __might_sleep+0xc0/0xc0
[  977.991896][T28426]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  977.997787][T28426]  should_fail+0x384/0x4b0
[  978.002223][T28426]  ? kobject_uevent_env+0x33a/0x8e0
[  978.007435][T28426]  should_failslab+0x5/0x20
[  978.011949][T28426]  kmem_cache_alloc_trace+0x68/0x310
[  978.017247][T28426]  kobject_uevent_env+0x33a/0x8e0
[  978.022271][T28426]  disk_force_media_change+0x19c/0x2a0
[  978.027741][T28426]  ? bdev_check_media_change+0x4e0/0x4e0
[  978.033377][T28426]  ? loop_set_status_from_info+0x12e/0x240
[  978.039191][T28426]  loop_configure+0x600/0x1200
[  978.043954][T28426]  ? reacquire_held_locks+0x680/0x680
[  978.049323][T28426]  lo_ioctl+0x89e/0x1eb0
[  978.053580][T28426]  ? mark_lock+0x98/0x350
[  978.057902][T28426]  ? lo_release+0x1f0/0x1f0
[  978.062398][T28426]  ? rcu_lock_release+0x5/0x20
[  978.067154][T28426]  ? rcu_read_lock_sched_held+0x89/0x130
[  978.072781][T28426]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  978.078765][T28426]  ? read_lock_is_recursive+0x10/0x10
[  978.084127][T28426]  ? rcu_lock_release+0x5/0x20
[  978.088884][T28426]  ? __lock_acquire+0x1f80/0x1f80
[  978.093897][T28426]  ? deref_stack_reg+0xbd/0x110
[  978.098754][T28426]  ? stack_trace_save+0x1f0/0x1f0
[  978.103774][T28426]  ? is_bpf_text_address+0x253/0x270
[  978.109051][T28426]  ? stack_trace_save+0x1f0/0x1f0
[  978.114067][T28426]  ? kernel_text_address+0x9e/0xd0
[  978.119174][T28426]  ? __kernel_text_address+0x9/0x40
[  978.124368][T28426]  ? unwind_get_return_address+0x48/0x80
[  978.129999][T28426]  ? arch_stack_walk+0xf8/0x140
[  978.134856][T28426]  ? stack_trace_save+0x12d/0x1f0
[  978.139875][T28426]  ? stack_trace_snprint+0xf0/0xf0
[  978.144982][T28426]  ? __stack_depot_save+0x33/0x490
[  978.150092][T28426]  ? kfree+0xc6/0x210
[  978.154070][T28426]  ? kasan_set_track+0x5e/0x70
[  978.158824][T28426]  ? kasan_set_track+0x4c/0x70
[  978.163577][T28426]  ? kasan_set_free_info+0x1f/0x40
[  978.168936][T28426]  ? ____kasan_slab_free+0xd8/0x110
[  978.174123][T28426]  ? slab_free_freelist_hook+0x12e/0x1a0
[  978.179743][T28426]  ? kfree+0xc6/0x210
[  978.183711][T28426]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  978.189335][T28426]  ? security_file_ioctl+0x55/0xb0
[  978.194434][T28426]  ? __se_sys_ioctl+0x48/0x170
[  978.199186][T28426]  ? do_syscall_64+0x2b/0x70
[  978.203763][T28426]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  978.209833][T28426]  ? rcu_lock_release+0x5/0x20
[  978.214605][T28426]  ? rcu_read_lock_sched_held+0x89/0x130
[  978.220229][T28426]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  978.226201][T28426]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  978.232183][T28426]  ? do_vfs_ioctl+0xc71/0x2a70
[  978.236966][T28426]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  978.242336][T28426]  ? blkdev_bszset+0x250/0x250
[  978.247115][T28426]  ? memset+0x1f/0x40
[  978.251090][T28426]  ? smack_file_ioctl+0x298/0x3a0
[  978.256112][T28426]  ? smack_file_alloc_security+0xd0/0xd0
[  978.261740][T28426]  ? lo_release+0x1f0/0x1f0
[  978.266236][T28426]  blkdev_ioctl+0x3a6/0x760
[  978.270734][T28426]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  978.276194][T28426]  ? bpf_lsm_file_ioctl+0x5/0x10
[  978.281136][T28426]  ? security_file_ioctl+0x9d/0xb0
[  978.286269][T28426]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  978.291740][T28426]  __se_sys_ioctl+0xfb/0x170
[  978.296333][T28426]  do_syscall_64+0x2b/0x70
[  978.300742][T28426]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  978.306627][T28426] RIP: 0033:0x7f94af288e07
[  978.311076][T28426] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  978.330670][T28426] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  978.339078][T28426] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  978.347040][T28426] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  978.354998][T28426] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  978.362957][T28426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  978.370914][T28426] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  978.378885][T28426]  </TASK>
16:11:30 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000700"})

[  978.385249][T28426] loop2: detected capacity change from 0 to 5
[  978.438305][T28426] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  978.456785][ T3684] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  978.464609][ T3686] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  978.464999][T28426] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  978.484273][T28426] NILFS (loop2): mounting unchecked fs
[  978.491783][T28426] NILFS (loop2): I/O error reading segment
[  978.498076][T28426] NILFS (loop2): error -5 while searching super root
[  978.527011][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
16:11:30 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 29)

[  978.539046][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  978.549425][ T3736] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  978.558825][ T3736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  978.626879][  T144] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  978.656001][  T144] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  978.667439][T28439] FAULT_INJECTION: forcing a failure.
[  978.667439][T28439] name failslab, interval 1, probability 0, space 0, times 0
[  978.667582][  T144] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  978.690122][  T144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  978.693040][T28439] CPU: 0 PID: 28439 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  978.708606][T28439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  978.718668][T28439] Call Trace:
[  978.721941][T28439]  <TASK>
[  978.724862][T28439]  dump_stack_lvl+0x1e3/0x2cb
[  978.729547][T28439]  ? bfq_pos_tree_add_move+0x436/0x436
[  978.735008][T28439]  ? panic+0x76e/0x76e
[  978.739091][T28439]  ? __might_sleep+0xc0/0xc0
[  978.743680][T28439]  should_fail+0x384/0x4b0
[  978.748099][T28439]  ? kobject_get_path+0xbb/0x1f0
[  978.753056][T28439]  should_failslab+0x5/0x20
[  978.757573][T28439]  __kmalloc+0x8b/0x370
[  978.761729][T28439]  kobject_get_path+0xbb/0x1f0
[  978.766481][T28439]  kobject_uevent_env+0x355/0x8e0
[  978.771517][T28439]  disk_force_media_change+0x19c/0x2a0
[  978.776965][T28439]  ? bdev_check_media_change+0x4e0/0x4e0
[  978.782584][T28439]  ? loop_set_status_from_info+0x12e/0x240
[  978.788494][T28439]  loop_configure+0x600/0x1200
[  978.793257][T28439]  ? reacquire_held_locks+0x680/0x680
[  978.798622][T28439]  lo_ioctl+0x89e/0x1eb0
[  978.802857][T28439]  ? mark_lock+0x98/0x350
[  978.807200][T28439]  ? lo_release+0x1f0/0x1f0
[  978.811723][T28439]  ? rcu_lock_release+0x5/0x20
[  978.816480][T28439]  ? rcu_read_lock_sched_held+0x89/0x130
[  978.822123][T28439]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  978.828116][T28439]  ? read_lock_is_recursive+0x10/0x10
[  978.833477][T28439]  ? rcu_lock_release+0x5/0x20
[  978.838251][T28439]  ? __lock_acquire+0x1f80/0x1f80
[  978.843283][T28439]  ? deref_stack_reg+0xbd/0x110
[  978.848128][T28439]  ? stack_trace_save+0x1f0/0x1f0
[  978.853146][T28439]  ? is_bpf_text_address+0x253/0x270
[  978.858425][T28439]  ? stack_trace_save+0x1f0/0x1f0
[  978.863473][T28439]  ? kernel_text_address+0x9e/0xd0
[  978.868595][T28439]  ? __kernel_text_address+0x9/0x40
[  978.873785][T28439]  ? unwind_get_return_address+0x48/0x80
[  978.879428][T28439]  ? arch_stack_walk+0xf8/0x140
[  978.884274][T28439]  ? stack_trace_save+0x12d/0x1f0
[  978.889297][T28439]  ? stack_trace_snprint+0xf0/0xf0
[  978.894433][T28439]  ? __stack_depot_save+0x33/0x490
[  978.899552][T28439]  ? kfree+0xc6/0x210
[  978.903525][T28439]  ? kasan_set_track+0x5e/0x70
[  978.908273][T28439]  ? kasan_set_track+0x4c/0x70
[  978.913023][T28439]  ? kasan_set_free_info+0x1f/0x40
[  978.918118][T28439]  ? ____kasan_slab_free+0xd8/0x110
[  978.923304][T28439]  ? slab_free_freelist_hook+0x12e/0x1a0
[  978.928922][T28439]  ? kfree+0xc6/0x210
[  978.932894][T28439]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  978.938520][T28439]  ? security_file_ioctl+0x55/0xb0
[  978.943620][T28439]  ? __se_sys_ioctl+0x48/0x170
[  978.948375][T28439]  ? do_syscall_64+0x2b/0x70
[  978.952950][T28439]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  978.959038][T28439]  ? rcu_lock_release+0x5/0x20
[  978.963796][T28439]  ? rcu_read_lock_sched_held+0x89/0x130
[  978.969766][T28439]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  978.975740][T28439]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  978.981714][T28439]  ? do_vfs_ioctl+0xc71/0x2a70
[  978.986484][T28439]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  978.991864][T28439]  ? blkdev_bszset+0x250/0x250
[  978.996642][T28439]  ? memset+0x1f/0x40
[  979.000652][T28439]  ? smack_file_ioctl+0x298/0x3a0
[  979.005685][T28439]  ? smack_file_alloc_security+0xd0/0xd0
[  979.011303][T28439]  ? lo_release+0x1f0/0x1f0
[  979.015795][T28439]  blkdev_ioctl+0x3a6/0x760
[  979.020302][T28439]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  979.025768][T28439]  ? bpf_lsm_file_ioctl+0x5/0x10
[  979.030706][T28439]  ? security_file_ioctl+0x9d/0xb0
[  979.035815][T28439]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  979.041278][T28439]  __se_sys_ioctl+0xfb/0x170
[  979.045863][T28439]  do_syscall_64+0x2b/0x70
[  979.050272][T28439]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  979.056157][T28439] RIP: 0033:0x7f94af288e07
[  979.060577][T28439] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  979.080181][T28439] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  979.082914][ T3736] wacom 0003:056A:0331.012E: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  979.088608][T28439] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  979.088627][T28439] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  979.088641][T28439] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  979.088654][T28439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  979.088666][T28439] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  979.088695][T28439]  </TASK>
[  979.095253][T28439] loop2: detected capacity change from 0 to 5
[  979.159999][T28439] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  979.174899][T28439] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  979.186355][T28439] NILFS (loop2): mounting unchecked fs
[  979.194470][T28439] NILFS (loop2): I/O error reading segment
[  979.204464][T28439] NILFS (loop2): error -5 while searching super root
16:11:30 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 30)

16:11:30 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000700"})

[  979.296935][ T3686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  979.307553][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  979.341099][ T3684] usb 5-1: config 0 has no interfaces?
[  979.347479][ T3686] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  979.368255][T28454] FAULT_INJECTION: forcing a failure.
[  979.368255][T28454] name failslab, interval 1, probability 0, space 0, times 0
[  979.381452][ T3684] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  979.393170][ T3686] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  979.403063][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.412109][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.420807][T28454] CPU: 0 PID: 28454 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  979.431320][T28454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  979.441383][T28454] Call Trace:
[  979.444669][T28454]  <TASK>
[  979.447615][T28454]  dump_stack_lvl+0x1e3/0x2cb
[  979.452309][T28454]  ? bfq_pos_tree_add_move+0x436/0x436
[  979.457789][T28454]  ? panic+0x76e/0x76e
[  979.461886][T28454]  ? __might_sleep+0xc0/0xc0
[  979.466492][T28454]  should_fail+0x384/0x4b0
[  979.470925][T28454]  ? __alloc_skb+0xd2/0x590
[  979.475488][T28454]  should_failslab+0x5/0x20
[  979.479985][T28454]  kmem_cache_alloc_node+0x6c/0x340
[  979.485204][T28454]  __alloc_skb+0xd2/0x590
[  979.489556][T28454]  alloc_uevent_skb+0x73/0x220
[  979.494336][T28454]  kobject_uevent_net_broadcast+0x2f3/0x570
[  979.500249][T28454]  kobject_uevent_env+0x6b1/0x8e0
[  979.505293][T28454]  disk_force_media_change+0x19c/0x2a0
[  979.510741][T28454]  ? bdev_check_media_change+0x4e0/0x4e0
[  979.516381][T28454]  ? loop_set_status_from_info+0x12e/0x240
[  979.522184][T28454]  loop_configure+0x600/0x1200
[  979.526953][T28454]  ? reacquire_held_locks+0x680/0x680
[  979.532328][T28454]  lo_ioctl+0x89e/0x1eb0
[  979.536567][T28454]  ? mark_lock+0x98/0x350
[  979.540886][T28454]  ? lo_release+0x1f0/0x1f0
[  979.545380][T28454]  ? rcu_lock_release+0x5/0x20
[  979.550139][T28454]  ? rcu_read_lock_sched_held+0x89/0x130
[  979.555762][T28454]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  979.561748][T28454]  ? read_lock_is_recursive+0x10/0x10
[  979.567113][T28454]  ? rcu_lock_release+0x5/0x20
[  979.571866][T28454]  ? __lock_acquire+0x1f80/0x1f80
[  979.576883][T28454]  ? deref_stack_reg+0xbd/0x110
[  979.581733][T28454]  ? stack_trace_save+0x1f0/0x1f0
[  979.586745][T28454]  ? is_bpf_text_address+0x253/0x270
[  979.592023][T28454]  ? stack_trace_save+0x1f0/0x1f0
[  979.597039][T28454]  ? kernel_text_address+0x9e/0xd0
[  979.602141][T28454]  ? __kernel_text_address+0x9/0x40
[  979.607329][T28454]  ? unwind_get_return_address+0x48/0x80
[  979.612971][T28454]  ? arch_stack_walk+0xf8/0x140
[  979.617822][T28454]  ? stack_trace_save+0x12d/0x1f0
[  979.622839][T28454]  ? stack_trace_snprint+0xf0/0xf0
[  979.627947][T28454]  ? __stack_depot_save+0x33/0x490
[  979.633048][T28454]  ? kfree+0xc6/0x210
[  979.637029][T28454]  ? kasan_set_track+0x5e/0x70
[  979.641780][T28454]  ? kasan_set_track+0x4c/0x70
[  979.646539][T28454]  ? kasan_set_free_info+0x1f/0x40
[  979.651635][T28454]  ? ____kasan_slab_free+0xd8/0x110
[  979.656818][T28454]  ? slab_free_freelist_hook+0x12e/0x1a0
[  979.662441][T28454]  ? kfree+0xc6/0x210
[  979.666409][T28454]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  979.672031][T28454]  ? security_file_ioctl+0x55/0xb0
[  979.677129][T28454]  ? __se_sys_ioctl+0x48/0x170
[  979.681880][T28454]  ? do_syscall_64+0x2b/0x70
[  979.686457][T28454]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  979.692529][T28454]  ? rcu_lock_release+0x5/0x20
[  979.697281][T28454]  ? rcu_read_lock_sched_held+0x89/0x130
[  979.702903][T28454]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  979.708872][T28454]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  979.714847][T28454]  ? do_vfs_ioctl+0xc71/0x2a70
[  979.719629][T28454]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  979.724995][T28454]  ? blkdev_bszset+0x250/0x250
[  979.729765][T28454]  ? memset+0x1f/0x40
[  979.733751][T28454]  ? smack_file_ioctl+0x298/0x3a0
[  979.738764][T28454]  ? smack_file_alloc_security+0xd0/0xd0
[  979.744382][T28454]  ? lo_release+0x1f0/0x1f0
[  979.748874][T28454]  blkdev_ioctl+0x3a6/0x760
[  979.753368][T28454]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  979.758819][T28454]  ? bpf_lsm_file_ioctl+0x5/0x10
[  979.763745][T28454]  ? security_file_ioctl+0x9d/0xb0
[  979.768845][T28454]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  979.774294][T28454]  __se_sys_ioctl+0xfb/0x170
[  979.778873][T28454]  do_syscall_64+0x2b/0x70
[  979.783279][T28454]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  979.789159][T28454] RIP: 0033:0x7f94af288e07
[  979.793564][T28454] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  979.813160][T28454] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  979.821568][T28454] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  979.829528][T28454] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  979.837486][T28454] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  979.845444][T28454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  979.853488][T28454] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  979.861476][T28454]  </TASK>
16:11:31 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:31 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  979.912461][ T3684] usb 5-1: config 0 descriptor??
[  979.912666][  T144] usb 4-1: USB disconnect, device number 79
[  979.942347][T28454] loop2: detected capacity change from 0 to 5
[  979.949276][ T3686] usb 1-1: can't set config #1, error -71
[  979.966716][ T3684] usb 5-1: can't set config #0, error -71
[  979.973801][ T3686] usb 1-1: USB disconnect, device number 17
[  980.007833][ T3684] usb 5-1: USB disconnect, device number 121
[  980.047900][T28454] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  980.079476][T28454] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  980.091978][T28454] NILFS (loop2): mounting unchecked fs
[  980.098379][T28454] NILFS (loop2): I/O error reading segment
[  980.104355][T28454] NILFS (loop2): error -5 while searching super root
16:11:31 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:31 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 31)

[  980.315160][  T144] usb 6-1: USB disconnect, device number 44
[  980.343398][T28493] FAULT_INJECTION: forcing a failure.
[  980.343398][T28493] name failslab, interval 1, probability 0, space 0, times 0
[  980.370216][T28493] CPU: 1 PID: 28493 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  980.380725][T28493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  980.390776][T28493] Call Trace:
[  980.394052][T28493]  <TASK>
[  980.396982][T28493]  dump_stack_lvl+0x1e3/0x2cb
[  980.401653][T28493]  ? bfq_pos_tree_add_move+0x436/0x436
[  980.407116][T28493]  ? panic+0x76e/0x76e
[  980.411174][T28493]  ? rcu_read_lock_sched_held+0x89/0x130
[  980.416797][T28493]  should_fail+0x384/0x4b0
[  980.421221][T28493]  ? alloc_uevent_skb+0x73/0x220
[  980.426164][T28493]  should_failslab+0x5/0x20
[  980.429750][ T3684] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  980.430652][T28493]  __kmalloc_node_track_caller+0x8c/0x3f0
[  980.443974][T28493]  ? trace_kmem_cache_alloc_node+0x2d/0xe0
[  980.449779][T28493]  ? kmem_cache_alloc_node+0x22a/0x340
[  980.455230][T28493]  ? __alloc_skb+0xd2/0x590
[  980.459732][T28493]  ? alloc_uevent_skb+0x73/0x220
[  980.464702][T28493]  __alloc_skb+0x11a/0x590
[  980.469145][T28493]  alloc_uevent_skb+0x73/0x220
[  980.473913][T28493]  kobject_uevent_net_broadcast+0x2f3/0x570
[  980.479796][T28493]  kobject_uevent_env+0x6b1/0x8e0
[  980.484814][T28493]  disk_force_media_change+0x19c/0x2a0
[  980.490260][T28493]  ? bdev_check_media_change+0x4e0/0x4e0
[  980.495878][T28493]  ? loop_set_status_from_info+0x12e/0x240
[  980.501673][T28493]  loop_configure+0x600/0x1200
[  980.506437][T28493]  ? reacquire_held_locks+0x680/0x680
[  980.511814][T28493]  lo_ioctl+0x89e/0x1eb0
[  980.516059][T28493]  ? mark_lock+0x98/0x350
[  980.520389][T28493]  ? lo_release+0x1f0/0x1f0
[  980.524881][T28493]  ? rcu_lock_release+0x5/0x20
[  980.527067][ T3686] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  980.529632][T28493]  ? rcu_read_lock_sched_held+0x89/0x130
[  980.529658][T28493]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  980.529699][T28493]  ? read_lock_is_recursive+0x10/0x10
[  980.554134][T28493]  ? rcu_lock_release+0x5/0x20
[  980.558902][T28493]  ? __lock_acquire+0x1f80/0x1f80
[  980.563907][T28493]  ? deref_stack_reg+0xbd/0x110
[  980.568757][T28493]  ? stack_trace_save+0x1f0/0x1f0
[  980.573787][T28493]  ? is_bpf_text_address+0x253/0x270
[  980.579083][T28493]  ? stack_trace_save+0x1f0/0x1f0
[  980.584116][T28493]  ? kernel_text_address+0x9e/0xd0
[  980.589215][T28493]  ? __kernel_text_address+0x9/0x40
[  980.594402][T28493]  ? unwind_get_return_address+0x48/0x80
[  980.600044][T28493]  ? arch_stack_walk+0xf8/0x140
[  980.604917][T28493]  ? stack_trace_save+0x12d/0x1f0
[  980.609924][T28493]  ? stack_trace_snprint+0xf0/0xf0
[  980.615032][T28493]  ? __stack_depot_save+0x33/0x490
[  980.620147][T28493]  ? kfree+0xc6/0x210
[  980.624116][T28493]  ? kasan_set_track+0x5e/0x70
[  980.628864][T28493]  ? kasan_set_track+0x4c/0x70
[  980.633613][T28493]  ? kasan_set_free_info+0x1f/0x40
[  980.638705][T28493]  ? ____kasan_slab_free+0xd8/0x110
[  980.643896][T28493]  ? slab_free_freelist_hook+0x12e/0x1a0
[  980.649514][T28493]  ? kfree+0xc6/0x210
[  980.653484][T28493]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  980.659128][T28493]  ? security_file_ioctl+0x55/0xb0
[  980.664243][T28493]  ? __se_sys_ioctl+0x48/0x170
[  980.668985][T28493]  ? do_syscall_64+0x2b/0x70
[  980.673557][T28493]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  980.679632][T28493]  ? rcu_lock_release+0x5/0x20
[  980.684405][T28493]  ? rcu_read_lock_sched_held+0x89/0x130
[  980.690041][T28493]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  980.696017][T28493]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  980.702002][T28493]  ? do_vfs_ioctl+0xc71/0x2a70
[  980.706797][T28493]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  980.712179][T28493]  ? blkdev_bszset+0x250/0x250
[  980.716957][T28493]  ? memset+0x1f/0x40
[  980.720942][T28493]  ? smack_file_ioctl+0x298/0x3a0
[  980.725970][T28493]  ? smack_file_alloc_security+0xd0/0xd0
[  980.731615][T28493]  ? lo_release+0x1f0/0x1f0
[  980.736133][T28493]  blkdev_ioctl+0x3a6/0x760
[  980.740659][T28493]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  980.746129][T28493]  ? bpf_lsm_file_ioctl+0x5/0x10
[  980.751068][T28493]  ? security_file_ioctl+0x9d/0xb0
[  980.756169][T28493]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  980.761610][T28493]  __se_sys_ioctl+0xfb/0x170
[  980.766186][T28493]  do_syscall_64+0x2b/0x70
[  980.770587][T28493]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  980.776470][T28493] RIP: 0033:0x7f94af288e07
[  980.780877][T28493] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  980.800472][T28493] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  980.808890][T28493] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
16:11:32 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000900"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:11:32 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000700"})

[  980.816854][T28493] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  980.824827][T28493] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  980.832783][T28493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  980.840744][T28493] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  980.848718][T28493]  </TASK>
[  980.861717][T28493] loop2: detected capacity change from 0 to 5
[  980.889763][T28493] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  980.901513][T28493] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  980.913248][T28493] NILFS (loop2): mounting unchecked fs
[  980.919905][T28493] NILFS (loop2): I/O error reading segment
[  980.931931][T28493] NILFS (loop2): error -5 while searching super root
16:11:32 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 32)

[  980.971354][ T3684] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  980.982655][ T3684] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  980.998183][ T3684] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  981.007645][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  981.066889][T28512] FAULT_INJECTION: forcing a failure.
[  981.066889][T28512] name failslab, interval 1, probability 0, space 0, times 0
[  981.087679][T28512] CPU: 1 PID: 28512 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  981.098205][T28512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  981.108263][T28512] Call Trace:
[  981.111543][T28512]  <TASK>
[  981.114479][T28512]  dump_stack_lvl+0x1e3/0x2cb
[  981.119146][T28512]  ? bfq_pos_tree_add_move+0x436/0x436
[  981.124591][T28512]  ? panic+0x76e/0x76e
[  981.128659][T28512]  ? rcu_read_lock_sched_held+0x89/0x130
[  981.134305][T28512]  should_fail+0x384/0x4b0
[  981.138725][T28512]  ? alloc_uevent_skb+0x73/0x220
[  981.143651][T28512]  should_failslab+0x5/0x20
[  981.148144][T28512]  __kmalloc_node_track_caller+0x8c/0x3f0
[  981.153886][T28512]  ? trace_kmem_cache_alloc_node+0x2d/0xe0
[  981.159682][T28512]  ? kmem_cache_alloc_node+0x22a/0x340
[  981.165130][T28512]  ? __alloc_skb+0xd2/0x590
[  981.169637][T28512]  ? alloc_uevent_skb+0x73/0x220
[  981.174563][T28512]  __alloc_skb+0x11a/0x590
[  981.178972][T28512]  alloc_uevent_skb+0x73/0x220
[  981.183726][T28512]  kobject_uevent_net_broadcast+0x2f3/0x570
[  981.189618][T28512]  kobject_uevent_env+0x6b1/0x8e0
[  981.194644][T28512]  disk_force_media_change+0x19c/0x2a0
[  981.200098][T28512]  ? bdev_check_media_change+0x4e0/0x4e0
[  981.205727][T28512]  ? loop_set_status_from_info+0x12e/0x240
[  981.211530][T28512]  loop_configure+0x600/0x1200
[  981.216289][T28512]  ? reacquire_held_locks+0x680/0x680
[  981.221668][T28512]  lo_ioctl+0x89e/0x1eb0
[  981.225931][T28512]  ? mark_lock+0x98/0x350
[  981.230347][T28512]  ? lo_release+0x1f0/0x1f0
[  981.234846][T28512]  ? rcu_lock_release+0x5/0x20
[  981.239615][T28512]  ? rcu_read_lock_sched_held+0x89/0x130
[  981.245254][T28512]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  981.251252][T28512]  ? read_lock_is_recursive+0x10/0x10
[  981.256628][T28512]  ? rcu_lock_release+0x5/0x20
[  981.261390][T28512]  ? __lock_acquire+0x1f80/0x1f80
[  981.266405][T28512]  ? deref_stack_reg+0xbd/0x110
[  981.271271][T28512]  ? stack_trace_save+0x1f0/0x1f0
[  981.276292][T28512]  ? is_bpf_text_address+0x253/0x270
[  981.281573][T28512]  ? stack_trace_save+0x1f0/0x1f0
[  981.286614][T28512]  ? kernel_text_address+0x9e/0xd0
[  981.291737][T28512]  ? __kernel_text_address+0x9/0x40
[  981.296936][T28512]  ? unwind_get_return_address+0x48/0x80
[  981.302575][T28512]  ? arch_stack_walk+0xf8/0x140
[  981.307434][T28512]  ? stack_trace_save+0x12d/0x1f0
[  981.312459][T28512]  ? stack_trace_snprint+0xf0/0xf0
[  981.317571][T28512]  ? __stack_depot_save+0x33/0x490
[  981.322676][T28512]  ? kfree+0xc6/0x210
[  981.326646][T28512]  ? kasan_set_track+0x5e/0x70
[  981.331398][T28512]  ? kasan_set_track+0x4c/0x70
[  981.336152][T28512]  ? kasan_set_free_info+0x1f/0x40
[  981.341249][T28512]  ? ____kasan_slab_free+0xd8/0x110
[  981.346437][T28512]  ? slab_free_freelist_hook+0x12e/0x1a0
[  981.352058][T28512]  ? kfree+0xc6/0x210
[  981.356028][T28512]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  981.361651][T28512]  ? security_file_ioctl+0x55/0xb0
[  981.366750][T28512]  ? __se_sys_ioctl+0x48/0x170
[  981.371498][T28512]  ? do_syscall_64+0x2b/0x70
[  981.376084][T28512]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  981.382157][T28512]  ? rcu_lock_release+0x5/0x20
[  981.386913][T28512]  ? rcu_read_lock_sched_held+0x89/0x130
[  981.392535][T28512]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  981.398510][T28512]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  981.404492][T28512]  ? do_vfs_ioctl+0xc71/0x2a70
[  981.409276][T28512]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  981.414645][T28512]  ? blkdev_bszset+0x250/0x250
[  981.419416][T28512]  ? memset+0x1f/0x40
[  981.423387][T28512]  ? smack_file_ioctl+0x298/0x3a0
[  981.428405][T28512]  ? smack_file_alloc_security+0xd0/0xd0
[  981.434028][T28512]  ? lo_release+0x1f0/0x1f0
[  981.438524][T28512]  blkdev_ioctl+0x3a6/0x760
[  981.443024][T28512]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  981.448479][T28512]  ? bpf_lsm_file_ioctl+0x5/0x10
[  981.453406][T28512]  ? security_file_ioctl+0x9d/0xb0
[  981.458510][T28512]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  981.463958][T28512]  __se_sys_ioctl+0xfb/0x170
[  981.468542][T28512]  do_syscall_64+0x2b/0x70
[  981.472962][T28512]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  981.478841][T28512] RIP: 0033:0x7f94af288e07
[  981.483253][T28512] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  981.502844][T28512] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  981.511247][T28512] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  981.519207][T28512] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  981.527162][T28512] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  981.535118][T28512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  981.543073][T28512] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  981.551045][T28512]  </TASK>
[  981.567573][T28512] loop2: detected capacity change from 0 to 5
[  981.581718][T28512] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  981.597178][T28512] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  981.609922][T28512] NILFS (loop2): mounting unchecked fs
[  981.616078][T28512] NILFS (loop2): I/O error reading segment
[  981.622431][T28512] NILFS (loop2): error -5 while searching super root
[  981.629455][T13504] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  981.637196][  T144] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  981.670023][ T3686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  981.680632][ T3686] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  981.695116][ T3686] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  981.706254][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:11:33 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 33)

[  981.781917][ T3686] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  981.824819][T28524] FAULT_INJECTION: forcing a failure.
[  981.824819][T28524] name failslab, interval 1, probability 0, space 0, times 0
[  981.838189][  T144] usb 6-1: device descriptor read/64, error 18
[  981.841258][T28524] CPU: 0 PID: 28524 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  981.854847][T28524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  981.864906][T28524] Call Trace:
[  981.868188][T28524]  <TASK>
[  981.871119][T28524]  dump_stack_lvl+0x1e3/0x2cb
[  981.875802][T28524]  ? bfq_pos_tree_add_move+0x436/0x436
[  981.881252][T28524]  ? panic+0x76e/0x76e
[  981.885322][T28524]  ? add_uevent_var+0x269/0x440
[  981.890171][T28524]  should_fail+0x384/0x4b0
[  981.894581][T28524]  ? call_usermodehelper_setup+0x8a/0x260
[  981.900293][T28524]  should_failslab+0x5/0x20
[  981.904785][T28524]  kmem_cache_alloc_trace+0x68/0x310
[  981.910061][T28524]  ? memcpy+0x3c/0x60
[  981.914035][T28524]  call_usermodehelper_setup+0x8a/0x260
[  981.919568][T28524]  ? init_uevent_argv+0x1f0/0x1f0
[  981.924589][T28524]  kobject_uevent_env+0x7c1/0x8e0
[  981.929614][T28524]  disk_force_media_change+0x19c/0x2a0
[  981.935064][T28524]  ? bdev_check_media_change+0x4e0/0x4e0
[  981.940692][T28524]  ? loop_set_status_from_info+0x12e/0x240
[  981.946501][T28524]  loop_configure+0x600/0x1200
[  981.951275][T28524]  ? reacquire_held_locks+0x680/0x680
[  981.956645][T28524]  lo_ioctl+0x89e/0x1eb0
[  981.960888][T28524]  ? mark_lock+0x98/0x350
[  981.965205][T28524]  ? lo_release+0x1f0/0x1f0
[  981.969700][T28524]  ? rcu_lock_release+0x5/0x20
[  981.974455][T28524]  ? rcu_read_lock_sched_held+0x89/0x130
[  981.980075][T28524]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  981.986062][T28524]  ? read_lock_is_recursive+0x10/0x10
[  981.991426][T28524]  ? rcu_lock_release+0x5/0x20
[  981.996182][T28524]  ? __lock_acquire+0x1f80/0x1f80
[  982.001193][T28524]  ? deref_stack_reg+0xbd/0x110
[  982.006052][T28524]  ? stack_trace_save+0x1f0/0x1f0
[  982.011070][T28524]  ? is_bpf_text_address+0x253/0x270
[  982.016357][T28524]  ? stack_trace_save+0x1f0/0x1f0
[  982.021373][T28524]  ? kernel_text_address+0x9e/0xd0
[  982.026475][T28524]  ? __kernel_text_address+0x9/0x40
[  982.031670][T28524]  ? unwind_get_return_address+0x48/0x80
[  982.037295][T28524]  ? arch_stack_walk+0xf8/0x140
[  982.042144][T28524]  ? stack_trace_save+0x12d/0x1f0
[  982.047156][T28524]  ? stack_trace_snprint+0xf0/0xf0
[  982.052261][T28524]  ? __stack_depot_save+0x33/0x490
[  982.057366][T28524]  ? kfree+0xc6/0x210
[  982.061338][T28524]  ? kasan_set_track+0x5e/0x70
[  982.066095][T28524]  ? kasan_set_track+0x4c/0x70
[  982.070844][T28524]  ? kasan_set_free_info+0x1f/0x40
[  982.075943][T28524]  ? ____kasan_slab_free+0xd8/0x110
[  982.081132][T28524]  ? slab_free_freelist_hook+0x12e/0x1a0
[  982.086750][T28524]  ? kfree+0xc6/0x210
[  982.090718][T28524]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  982.096344][T28524]  ? security_file_ioctl+0x55/0xb0
[  982.101441][T28524]  ? __se_sys_ioctl+0x48/0x170
[  982.106188][T28524]  ? do_syscall_64+0x2b/0x70
[  982.110765][T28524]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  982.116833][T28524]  ? rcu_lock_release+0x5/0x20
[  982.121585][T28524]  ? rcu_read_lock_sched_held+0x89/0x130
[  982.127205][T28524]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  982.133171][T28524]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  982.139145][T28524]  ? do_vfs_ioctl+0xc71/0x2a70
[  982.143924][T28524]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  982.149289][T28524]  ? blkdev_bszset+0x250/0x250
[  982.154058][T28524]  ? memset+0x1f/0x40
[  982.158028][T28524]  ? smack_file_ioctl+0x298/0x3a0
[  982.163045][T28524]  ? smack_file_alloc_security+0xd0/0xd0
[  982.168664][T28524]  ? lo_release+0x1f0/0x1f0
[  982.173156][T28524]  blkdev_ioctl+0x3a6/0x760
[  982.177650][T28524]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  982.183189][T28524]  ? bpf_lsm_file_ioctl+0x5/0x10
[  982.188114][T28524]  ? security_file_ioctl+0x9d/0xb0
[  982.193217][T28524]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  982.198662][T28524]  __se_sys_ioctl+0xfb/0x170
[  982.203258][T28524]  do_syscall_64+0x2b/0x70
[  982.207668][T28524]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  982.213550][T28524] RIP: 0033:0x7f94af288e07
[  982.217952][T28524] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  982.237552][T28524] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  982.245957][T28524] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  982.253917][T28524] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  982.261876][T28524] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
16:11:33 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000000000700"})

[  982.269849][T28524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  982.277804][T28524] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  982.285777][T28524]  </TASK>
[  982.330506][T28524] loop2: detected capacity change from 0 to 5
[  982.363385][T28524] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  982.373370][T28524] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  982.387356][T28524] NILFS (loop2): mounting unchecked fs
[  982.393577][T28524] NILFS (loop2): I/O error reading segment
[  982.403505][T28524] NILFS (loop2): error -5 while searching super root
[  982.437060][T13504] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  982.450457][T13504] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  982.460811][T13504] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  982.470550][T13504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:11:34 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 34)

[  982.554400][T28537] FAULT_INJECTION: forcing a failure.
[  982.554400][T28537] name failslab, interval 1, probability 0, space 0, times 0
[  982.567545][  T144] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  982.572969][T28537] CPU: 0 PID: 28537 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  982.585604][T28537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  982.595679][T28537] Call Trace:
[  982.598976][T28537]  <TASK>
[  982.601911][T28537]  dump_stack_lvl+0x1e3/0x2cb
[  982.606591][T28537]  ? bfq_pos_tree_add_move+0x436/0x436
[  982.612051][T28537]  ? panic+0x76e/0x76e
[  982.616123][T28537]  ? add_uevent_var+0x269/0x440
[  982.620974][T28537]  should_fail+0x384/0x4b0
[  982.625388][T28537]  ? call_usermodehelper_setup+0x8a/0x260
[  982.631101][T28537]  should_failslab+0x5/0x20
[  982.635603][T28537]  kmem_cache_alloc_trace+0x68/0x310
[  982.640878][T28537]  ? memcpy+0x3c/0x60
[  982.644852][T28537]  call_usermodehelper_setup+0x8a/0x260
[  982.650386][T28537]  ? init_uevent_argv+0x1f0/0x1f0
[  982.655406][T28537]  kobject_uevent_env+0x7c1/0x8e0
[  982.660430][T28537]  disk_force_media_change+0x19c/0x2a0
[  982.665881][T28537]  ? bdev_check_media_change+0x4e0/0x4e0
[  982.671505][T28537]  ? loop_set_status_from_info+0x12e/0x240
[  982.677313][T28537]  loop_configure+0x600/0x1200
[  982.682083][T28537]  ? reacquire_held_locks+0x680/0x680
[  982.687456][T28537]  lo_ioctl+0x89e/0x1eb0
[  982.691698][T28537]  ? mark_lock+0x98/0x350
[  982.696021][T28537]  ? lo_release+0x1f0/0x1f0
[  982.700518][T28537]  ? rcu_lock_release+0x5/0x20
[  982.705273][T28537]  ? rcu_read_lock_sched_held+0x89/0x130
[  982.710897][T28537]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  982.716884][T28537]  ? read_lock_is_recursive+0x10/0x10
[  982.722246][T28537]  ? rcu_lock_release+0x5/0x20
[  982.726997][T28537]  ? __lock_acquire+0x1f80/0x1f80
[  982.732012][T28537]  ? deref_stack_reg+0xbd/0x110
[  982.736865][T28537]  ? stack_trace_save+0x1f0/0x1f0
[  982.741890][T28537]  ? is_bpf_text_address+0x253/0x270
[  982.747169][T28537]  ? stack_trace_save+0x1f0/0x1f0
[  982.752190][T28537]  ? kernel_text_address+0x9e/0xd0
[  982.757295][T28537]  ? __kernel_text_address+0x9/0x40
[  982.762486][T28537]  ? unwind_get_return_address+0x48/0x80
[  982.768114][T28537]  ? arch_stack_walk+0xf8/0x140
[  982.772972][T28537]  ? stack_trace_save+0x12d/0x1f0
[  982.777988][T28537]  ? stack_trace_snprint+0xf0/0xf0
[  982.783098][T28537]  ? __stack_depot_save+0x33/0x490
[  982.788205][T28537]  ? kfree+0xc6/0x210
[  982.792179][T28537]  ? kasan_set_track+0x5e/0x70
[  982.796936][T28537]  ? kasan_set_track+0x4c/0x70
[  982.801698][T28537]  ? kasan_set_free_info+0x1f/0x40
[  982.806798][T28537]  ? ____kasan_slab_free+0xd8/0x110
[  982.811987][T28537]  ? slab_free_freelist_hook+0x12e/0x1a0
[  982.817609][T28537]  ? kfree+0xc6/0x210
[  982.821578][T28537]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  982.827202][T28537]  ? security_file_ioctl+0x55/0xb0
[  982.832392][T28537]  ? __se_sys_ioctl+0x48/0x170
[  982.837145][T28537]  ? do_syscall_64+0x2b/0x70
[  982.841725][T28537]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  982.847805][T28537]  ? rcu_lock_release+0x5/0x20
[  982.852558][T28537]  ? rcu_read_lock_sched_held+0x89/0x130
[  982.858178][T28537]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  982.864148][T28537]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  982.870131][T28537]  ? do_vfs_ioctl+0xc71/0x2a70
[  982.874911][T28537]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  982.880281][T28537]  ? blkdev_bszset+0x250/0x250
[  982.885048][T28537]  ? memset+0x1f/0x40
[  982.889019][T28537]  ? smack_file_ioctl+0x298/0x3a0
[  982.894032][T28537]  ? smack_file_alloc_security+0xd0/0xd0
[  982.899653][T28537]  ? lo_release+0x1f0/0x1f0
[  982.904157][T28537]  blkdev_ioctl+0x3a6/0x760
[  982.908652][T28537]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  982.914103][T28537]  ? bpf_lsm_file_ioctl+0x5/0x10
[  982.919030][T28537]  ? security_file_ioctl+0x9d/0xb0
[  982.924134][T28537]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  982.929588][T28537]  __se_sys_ioctl+0xfb/0x170
[  982.934172][T28537]  do_syscall_64+0x2b/0x70
[  982.938578][T28537]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  982.944461][T28537] RIP: 0033:0x7f94af288e07
[  982.948869][T28537] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  982.968461][T28537] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  982.976860][T28537] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  982.984818][T28537] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  982.992775][T28537] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
16:11:34 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  983.000736][T28537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  983.008692][T28537] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  983.016756][T28537]  </TASK>
[  983.035377][ T3684] usb 5-1: USB disconnect, device number 122
[  983.048279][T28537] loop2: detected capacity change from 0 to 5
[  983.087270][T28537] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  983.107635][T28537] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  983.118848][T28537] NILFS (loop2): mounting unchecked fs
[  983.124891][T28537] NILFS (loop2): I/O error reading segment
[  983.131698][T28537] NILFS (loop2): error -5 while searching super root
16:11:34 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 35)

[  983.166754][  T144] usb 6-1: device descriptor read/64, error 18
16:11:34 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000700"})

[  983.256937][T28551] FAULT_INJECTION: forcing a failure.
[  983.256937][T28551] name failslab, interval 1, probability 0, space 0, times 0
[  983.270588][T13504] wacom 0003:056A:0331.012F: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  983.286844][  T144] usb usb6-port1: attempt power cycle
[  983.287539][T28551] CPU: 0 PID: 28551 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  983.302726][T28551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  983.312783][T28551] Call Trace:
[  983.316057][T28551]  <TASK>
[  983.318971][T28551]  dump_stack_lvl+0x1e3/0x2cb
[  983.323640][T28551]  ? bfq_pos_tree_add_move+0x436/0x436
[  983.329097][T28551]  ? panic+0x76e/0x76e
[  983.333180][T28551]  ? __might_sleep+0xc0/0xc0
[  983.337795][T28551]  should_fail+0x384/0x4b0
[  983.342210][T28551]  ? __kernfs_new_node+0xdb/0x730
[  983.347245][T28551]  should_failslab+0x5/0x20
[  983.351735][T28551]  kmem_cache_alloc+0x69/0x2f0
[  983.356497][T28551]  __kernfs_new_node+0xdb/0x730
[  983.361354][T28551]  ? __kernfs_new_node+0xdb/0x730
[  983.366374][T28551]  ? kernfs_new_node+0x160/0x160
[  983.371330][T28551]  ? up_write+0x131/0x4d0
[  983.375764][T28551]  ? __up_read+0x690/0x690
[  983.380198][T28551]  kernfs_new_node+0x95/0x160
[  983.384891][T28551]  __kernfs_create_file+0x45/0x2e0
[  983.390033][T28551]  sysfs_add_file_mode_ns+0x21d/0x330
[  983.395497][T28551]  internal_create_group+0x55c/0xf50
[  983.400886][T28551]  ? sysfs_create_group+0x20/0x20
[  983.405922][T28551]  ? loop_rootcg_workfn+0x20/0x20
[  983.410966][T28551]  ? __loop_update_dio+0x248/0x530
[  983.416098][T28551]  loop_configure+0xc55/0x1200
[  983.420891][T28551]  lo_ioctl+0x89e/0x1eb0
[  983.425161][T28551]  ? mark_lock+0x98/0x350
[  983.429501][T28551]  ? lo_release+0x1f0/0x1f0
[  983.434020][T28551]  ? rcu_lock_release+0x5/0x20
[  983.438795][T28551]  ? rcu_read_lock_sched_held+0x89/0x130
[  983.444438][T28551]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  983.450456][T28551]  ? read_lock_is_recursive+0x10/0x10
[  983.455845][T28551]  ? rcu_lock_release+0x5/0x20
[  983.460632][T28551]  ? __lock_acquire+0x1f80/0x1f80
[  983.465663][T28551]  ? deref_stack_reg+0xbd/0x110
[  983.470535][T28551]  ? stack_trace_save+0x1f0/0x1f0
[  983.475547][T28551]  ? is_bpf_text_address+0x253/0x270
[  983.480818][T28551]  ? stack_trace_save+0x1f0/0x1f0
[  983.485832][T28551]  ? kernel_text_address+0x9e/0xd0
[  983.490950][T28551]  ? __kernel_text_address+0x9/0x40
[  983.496158][T28551]  ? unwind_get_return_address+0x48/0x80
[  983.501774][T28551]  ? arch_stack_walk+0xf8/0x140
[  983.506616][T28551]  ? stack_trace_save+0x12d/0x1f0
[  983.511633][T28551]  ? stack_trace_snprint+0xf0/0xf0
[  983.516778][T28551]  ? __stack_depot_save+0x33/0x490
[  983.521892][T28551]  ? kfree+0xc6/0x210
[  983.525863][T28551]  ? kasan_set_track+0x5e/0x70
[  983.530630][T28551]  ? kasan_set_track+0x4c/0x70
[  983.535396][T28551]  ? kasan_set_free_info+0x1f/0x40
[  983.540491][T28551]  ? ____kasan_slab_free+0xd8/0x110
[  983.545677][T28551]  ? slab_free_freelist_hook+0x12e/0x1a0
[  983.551295][T28551]  ? kfree+0xc6/0x210
[  983.555260][T28551]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  983.560879][T28551]  ? security_file_ioctl+0x55/0xb0
[  983.565995][T28551]  ? __se_sys_ioctl+0x48/0x170
[  983.570747][T28551]  ? do_syscall_64+0x2b/0x70
[  983.575344][T28551]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  983.581432][T28551]  ? rcu_lock_release+0x5/0x20
[  983.586187][T28551]  ? rcu_read_lock_sched_held+0x89/0x130
[  983.591803][T28551]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  983.597774][T28551]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  983.603759][T28551]  ? do_vfs_ioctl+0xc71/0x2a70
[  983.608529][T28551]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  983.613891][T28551]  ? blkdev_bszset+0x250/0x250
[  983.618668][T28551]  ? memset+0x1f/0x40
[  983.622649][T28551]  ? smack_file_ioctl+0x298/0x3a0
[  983.627663][T28551]  ? smack_file_alloc_security+0xd0/0xd0
[  983.633283][T28551]  ? lo_release+0x1f0/0x1f0
[  983.637782][T28551]  blkdev_ioctl+0x3a6/0x760
[  983.642302][T28551]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  983.647770][T28551]  ? bpf_lsm_file_ioctl+0x5/0x10
[  983.652691][T28551]  ? security_file_ioctl+0x9d/0xb0
[  983.657793][T28551]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  983.663234][T28551]  __se_sys_ioctl+0xfb/0x170
[  983.667809][T28551]  do_syscall_64+0x2b/0x70
[  983.672215][T28551]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  983.678096][T28551] RIP: 0033:0x7f94af288e07
[  983.682496][T28551] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  983.702099][T28551] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  983.710501][T28551] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  983.718467][T28551] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  983.719997][ T3736] usb 4-1: USB disconnect, device number 80
[  983.726439][T28551] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  983.740294][T28551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  983.748285][T28551] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  983.756287][T28551]  </TASK>
[  983.761595][T28551] loop2: detected capacity change from 0 to 5
[  983.799071][T28551] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  983.813531][T28551] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  983.824685][T28551] NILFS (loop2): mounting unchecked fs
[  983.831897][T28551] NILFS (loop2): I/O error reading segment
[  983.838960][T28551] NILFS (loop2): error -5 while searching super root
[  983.926726][ T3684] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[  984.346807][ T3684] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  984.357177][ T3684] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  984.366160][ T3684] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  984.376293][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:11:36 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:36 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:36 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000700"})

16:11:36 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 36)

16:11:36 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000a00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  984.770666][  T144] usb 1-1: USB disconnect, device number 18
[  984.817172][T28593] FAULT_INJECTION: forcing a failure.
[  984.817172][T28593] name failslab, interval 1, probability 0, space 0, times 0
[  984.841091][T28593] CPU: 1 PID: 28593 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  984.851622][T28593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  984.861686][T28593] Call Trace:
[  984.864975][T28593]  <TASK>
[  984.867909][T28593]  dump_stack_lvl+0x1e3/0x2cb
[  984.872586][T28593]  ? bfq_pos_tree_add_move+0x436/0x436
[  984.878035][T28593]  ? panic+0x76e/0x76e
[  984.882104][T28593]  ? __might_sleep+0xc0/0xc0
[  984.886820][T28593]  should_fail+0x384/0x4b0
[  984.891231][T28593]  ? __kernfs_new_node+0xdb/0x730
[  984.896254][T28593]  should_failslab+0x5/0x20
[  984.900768][T28593]  kmem_cache_alloc+0x69/0x2f0
[  984.905551][T28593]  __kernfs_new_node+0xdb/0x730
[  984.910506][T28593]  ? up_write+0x131/0x4d0
[  984.914861][T28593]  ? kernfs_new_node+0x160/0x160
[  984.919788][T28593]  ? __up_read+0x690/0x690
[  984.924193][T28593]  ? kernfs_activate+0x502/0x520
[  984.929129][T28593]  kernfs_new_node+0x95/0x160
[  984.933816][T28593]  __kernfs_create_file+0x45/0x2e0
[  984.938918][T28593]  sysfs_add_file_mode_ns+0x21d/0x330
[  984.944351][T28593]  internal_create_group+0x55c/0xf50
[  984.949662][T28593]  ? sysfs_create_group+0x20/0x20
[  984.954695][T28593]  ? loop_rootcg_workfn+0x20/0x20
[  984.959733][T28593]  ? __loop_update_dio+0x248/0x530
[  984.964853][T28593]  loop_configure+0xc55/0x1200
[  984.969616][T28593]  lo_ioctl+0x89e/0x1eb0
[  984.973861][T28593]  ? mark_lock+0x98/0x350
[  984.978193][T28593]  ? lo_release+0x1f0/0x1f0
[  984.982690][T28593]  ? rcu_lock_release+0x5/0x20
[  984.987469][T28593]  ? rcu_read_lock_sched_held+0x89/0x130
[  984.993102][T28593]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  984.999110][T28593]  ? read_lock_is_recursive+0x10/0x10
[  985.004495][T28593]  ? rcu_lock_release+0x5/0x20
[  985.009270][T28593]  ? __lock_acquire+0x1f80/0x1f80
[  985.014301][T28593]  ? deref_stack_reg+0xbd/0x110
[  985.019172][T28593]  ? stack_trace_save+0x1f0/0x1f0
[  985.024193][T28593]  ? is_bpf_text_address+0x253/0x270
[  985.029482][T28593]  ? stack_trace_save+0x1f0/0x1f0
[  985.034496][T28593]  ? kernel_text_address+0x9e/0xd0
[  985.039616][T28593]  ? __kernel_text_address+0x9/0x40
[  985.044800][T28593]  ? unwind_get_return_address+0x48/0x80
[  985.050430][T28593]  ? arch_stack_walk+0xf8/0x140
[  985.055309][T28593]  ? stack_trace_save+0x12d/0x1f0
[  985.060353][T28593]  ? stack_trace_snprint+0xf0/0xf0
[  985.065481][T28593]  ? __stack_depot_save+0x33/0x490
[  985.070591][T28593]  ? kfree+0xc6/0x210
[  985.074584][T28593]  ? kasan_set_track+0x5e/0x70
[  985.079328][T28593]  ? kasan_set_track+0x4c/0x70
[  985.084078][T28593]  ? kasan_set_free_info+0x1f/0x40
[  985.089191][T28593]  ? ____kasan_slab_free+0xd8/0x110
[  985.094383][T28593]  ? slab_free_freelist_hook+0x12e/0x1a0
[  985.100009][T28593]  ? kfree+0xc6/0x210
[  985.104002][T28593]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  985.109641][T28593]  ? security_file_ioctl+0x55/0xb0
[  985.114759][T28593]  ? __se_sys_ioctl+0x48/0x170
[  985.119505][T28593]  ? do_syscall_64+0x2b/0x70
[  985.124100][T28593]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  985.130200][T28593]  ? rcu_lock_release+0x5/0x20
[  985.134956][T28593]  ? rcu_read_lock_sched_held+0x89/0x130
[  985.140570][T28593]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  985.146543][T28593]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  985.152532][T28593]  ? do_vfs_ioctl+0xc71/0x2a70
[  985.157342][T28593]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  985.162728][T28593]  ? blkdev_bszset+0x250/0x250
[  985.167491][T28593]  ? memset+0x1f/0x40
[  985.171456][T28593]  ? smack_file_ioctl+0x298/0x3a0
[  985.176465][T28593]  ? smack_file_alloc_security+0xd0/0xd0
[  985.182087][T28593]  ? lo_release+0x1f0/0x1f0
[  985.186585][T28593]  blkdev_ioctl+0x3a6/0x760
[  985.191101][T28593]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  985.196562][T28593]  ? bpf_lsm_file_ioctl+0x5/0x10
[  985.201509][T28593]  ? security_file_ioctl+0x9d/0xb0
[  985.206642][T28593]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  985.212110][T28593]  __se_sys_ioctl+0xfb/0x170
[  985.216706][T28593]  do_syscall_64+0x2b/0x70
[  985.221111][T28593]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  985.227000][T28593] RIP: 0033:0x7f94af288e07
[  985.231417][T28593] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  985.251008][T28593] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  985.259444][T28593] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  985.267425][T28593] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  985.275381][T28593] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  985.283339][T28593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  985.291301][T28593] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  985.299296][T28593]  </TASK>
[  985.309356][T28593] loop2: detected capacity change from 0 to 5
16:11:36 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000700"})

[  985.329572][T28593] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  985.354383][T28593] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  985.366294][T28593] NILFS (loop2): mounting unchecked fs
[  985.381688][T28593] NILFS (loop2): I/O error reading segment
[  985.389182][T28593] NILFS (loop2): error -5 while searching super root
16:11:37 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 37)

[  985.465230][T13502] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  985.473008][T13504] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  985.509118][T28614] FAULT_INJECTION: forcing a failure.
[  985.509118][T28614] name failslab, interval 1, probability 0, space 0, times 0
[  985.522257][T28614] CPU: 0 PID: 28614 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  985.532787][T28614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  985.542848][T28614] Call Trace:
[  985.546217][T28614]  <TASK>
[  985.549135][T28614]  dump_stack_lvl+0x1e3/0x2cb
[  985.553807][T28614]  ? bfq_pos_tree_add_move+0x436/0x436
[  985.559273][T28614]  ? panic+0x76e/0x76e
[  985.563330][T28614]  ? __might_sleep+0xc0/0xc0
[  985.567908][T28614]  should_fail+0x384/0x4b0
[  985.572307][T28614]  ? __kernfs_new_node+0xdb/0x730
[  985.577312][T28614]  should_failslab+0x5/0x20
[  985.581797][T28614]  kmem_cache_alloc+0x69/0x2f0
[  985.586552][T28614]  __kernfs_new_node+0xdb/0x730
[  985.591417][T28614]  ? up_write+0x131/0x4d0
[  985.595743][T28614]  ? kernfs_new_node+0x160/0x160
[  985.600681][T28614]  ? __up_read+0x690/0x690
[  985.605108][T28614]  ? kernfs_activate+0x502/0x520
[  985.610036][T28614]  kernfs_new_node+0x95/0x160
[  985.614703][T28614]  __kernfs_create_file+0x45/0x2e0
[  985.619975][T28614]  sysfs_add_file_mode_ns+0x21d/0x330
[  985.625334][T28614]  internal_create_group+0x55c/0xf50
[  985.630681][T28614]  ? sysfs_create_group+0x20/0x20
[  985.635696][T28614]  ? loop_rootcg_workfn+0x20/0x20
[  985.640714][T28614]  ? __loop_update_dio+0x248/0x530
[  985.645815][T28614]  loop_configure+0xc55/0x1200
[  985.650571][T28614]  lo_ioctl+0x89e/0x1eb0
[  985.654802][T28614]  ? mark_lock+0x98/0x350
[  985.659112][T28614]  ? lo_release+0x1f0/0x1f0
[  985.663597][T28614]  ? rcu_lock_release+0x5/0x20
[  985.668343][T28614]  ? rcu_read_lock_sched_held+0x89/0x130
[  985.673969][T28614]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  985.676703][  T144] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  985.679951][T28614]  ? read_lock_is_recursive+0x10/0x10
[  985.687657][T13502] usb 6-1: device descriptor read/64, error 18
[  985.692821][T28614]  ? rcu_lock_release+0x5/0x20
[  985.703705][T28614]  ? __lock_acquire+0x1f80/0x1f80
[  985.708721][T28614]  ? deref_stack_reg+0xbd/0x110
[  985.713589][T28614]  ? stack_trace_save+0x1f0/0x1f0
[  985.718600][T28614]  ? is_bpf_text_address+0x253/0x270
[  985.723884][T28614]  ? stack_trace_save+0x1f0/0x1f0
[  985.728893][T28614]  ? kernel_text_address+0x9e/0xd0
[  985.733986][T28614]  ? __kernel_text_address+0x9/0x40
[  985.739175][T28614]  ? unwind_get_return_address+0x48/0x80
[  985.744792][T28614]  ? arch_stack_walk+0xf8/0x140
[  985.749634][T28614]  ? stack_trace_save+0x12d/0x1f0
[  985.754642][T28614]  ? stack_trace_snprint+0xf0/0xf0
[  985.759741][T28614]  ? __stack_depot_save+0x33/0x490
[  985.764841][T28614]  ? kfree+0xc6/0x210
[  985.768803][T28614]  ? kasan_set_track+0x5e/0x70
[  985.773552][T28614]  ? kasan_set_track+0x4c/0x70
[  985.778299][T28614]  ? kasan_set_free_info+0x1f/0x40
[  985.783396][T28614]  ? ____kasan_slab_free+0xd8/0x110
[  985.788588][T28614]  ? slab_free_freelist_hook+0x12e/0x1a0
[  985.794203][T28614]  ? kfree+0xc6/0x210
[  985.798168][T28614]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  985.803784][T28614]  ? security_file_ioctl+0x55/0xb0
[  985.808883][T28614]  ? __se_sys_ioctl+0x48/0x170
[  985.813630][T28614]  ? do_syscall_64+0x2b/0x70
[  985.818201][T28614]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  985.824267][T28614]  ? rcu_lock_release+0x5/0x20
[  985.829019][T28614]  ? rcu_read_lock_sched_held+0x89/0x130
[  985.834721][T28614]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  985.840680][T28614]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  985.846653][T28614]  ? do_vfs_ioctl+0xc71/0x2a70
[  985.851433][T28614]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  985.856813][T28614]  ? blkdev_bszset+0x250/0x250
[  985.861571][T28614]  ? memset+0x1f/0x40
[  985.865537][T28614]  ? smack_file_ioctl+0x298/0x3a0
[  985.866832][T13504] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  985.870551][T28614]  ? smack_file_alloc_security+0xd0/0xd0
[  985.881537][T13504] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  985.886986][T28614]  ? lo_release+0x1f0/0x1f0
[  985.887013][T28614]  blkdev_ioctl+0x3a6/0x760
[  985.887039][T28614]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  985.887065][T28614]  ? bpf_lsm_file_ioctl+0x5/0x10
[  985.887085][T28614]  ? security_file_ioctl+0x9d/0xb0
[  985.900523][T13504] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  985.901263][T28614]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  985.907553][T13504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.911174][T28614]  __se_sys_ioctl+0xfb/0x170
[  985.948103][T28614]  do_syscall_64+0x2b/0x70
[  985.952512][T28614]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  985.958398][T28614] RIP: 0033:0x7f94af288e07
[  985.962817][T28614] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  985.966809][T13502] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  985.982414][T28614] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  985.982443][T28614] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  985.982457][T28614] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  985.982470][T28614] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  985.982482][T28614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  985.982493][T28614] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  985.982521][T28614]  </TASK>
[  985.987694][T28614] loop2: detected capacity change from 0 to 5
[  986.058087][T28614] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  986.075863][T28614] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  986.086252][  T144] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  986.091828][T28614] NILFS (loop2): mounting unchecked fs
[  986.097132][  T144] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  986.116826][  T144] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  986.122930][T28614] NILFS (loop2): I/O error reading segment
[  986.126190][  T144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.139555][T28614] NILFS (loop2): error -5 while searching super root
16:11:37 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 38)

[  986.180097][  T144] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  986.206604][T13502] usb 6-1: device descriptor read/64, error 18
[  986.254696][T28626] FAULT_INJECTION: forcing a failure.
[  986.254696][T28626] name failslab, interval 1, probability 0, space 0, times 0
[  986.272099][T28626] CPU: 0 PID: 28626 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  986.282717][T28626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  986.292787][T28626] Call Trace:
[  986.296180][T28626]  <TASK>
[  986.299186][T28626]  dump_stack_lvl+0x1e3/0x2cb
[  986.303885][T28626]  ? bfq_pos_tree_add_move+0x436/0x436
[  986.309359][T28626]  ? panic+0x76e/0x76e
[  986.313449][T28626]  ? __might_sleep+0xc0/0xc0
[  986.318064][T28626]  should_fail+0x384/0x4b0
[  986.322497][T28626]  ? __kernfs_new_node+0xdb/0x730
[  986.326978][T13502] usb usb6-port1: attempt power cycle
[  986.327527][T28626]  should_failslab+0x5/0x20
[  986.327557][T28626]  kmem_cache_alloc+0x69/0x2f0
[  986.342159][T28626]  __kernfs_new_node+0xdb/0x730
[  986.347030][T28626]  ? up_write+0x131/0x4d0
[  986.351374][T28626]  ? kernfs_new_node+0x160/0x160
[  986.356325][T28626]  ? __up_read+0x690/0x690
[  986.360741][T28626]  ? kernfs_activate+0x502/0x520
[  986.365707][T28626]  kernfs_new_node+0x95/0x160
[  986.370383][T28626]  __kernfs_create_file+0x45/0x2e0
[  986.375504][T28626]  sysfs_add_file_mode_ns+0x21d/0x330
[  986.380883][T28626]  internal_create_group+0x55c/0xf50
[  986.386184][T28626]  ? sysfs_create_group+0x20/0x20
[  986.391204][T28626]  ? loop_rootcg_workfn+0x20/0x20
[  986.396237][T28626]  ? __loop_update_dio+0x248/0x530
16:11:38 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  986.401365][T28626]  loop_configure+0xc55/0x1200
[  986.406159][T28626]  lo_ioctl+0x89e/0x1eb0
[  986.407261][T13504] wacom 0003:056A:0331.0130: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  986.410413][T28626]  ? mark_lock+0x98/0x350
[  986.410439][T28626]  ? lo_release+0x1f0/0x1f0
[  986.410464][T28626]  ? rcu_lock_release+0x5/0x20
[  986.435099][T28626]  ? rcu_read_lock_sched_held+0x89/0x130
[  986.440752][T28626]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  986.446778][T28626]  ? read_lock_is_recursive+0x10/0x10
[  986.452165][T28626]  ? rcu_lock_release+0x5/0x20
[  986.456949][T28626]  ? __lock_acquire+0x1f80/0x1f80
[  986.461983][T28626]  ? deref_stack_reg+0xbd/0x110
[  986.466863][T28626]  ? stack_trace_save+0x1f0/0x1f0
[  986.469621][  T144] usb 5-1: USB disconnect, device number 123
[  986.471896][T28626]  ? is_bpf_text_address+0x253/0x270
[  986.471928][T28626]  ? stack_trace_save+0x1f0/0x1f0
[  986.471951][T28626]  ? kernel_text_address+0x9e/0xd0
[  986.471976][T28626]  ? __kernel_text_address+0x9/0x40
[  986.498498][T28626]  ? unwind_get_return_address+0x48/0x80
[  986.504147][T28626]  ? arch_stack_walk+0xf8/0x140
[  986.509024][T28626]  ? stack_trace_save+0x12d/0x1f0
[  986.514086][T28626]  ? stack_trace_snprint+0xf0/0xf0
[  986.519225][T28626]  ? __stack_depot_save+0x33/0x490
[  986.524359][T28626]  ? kfree+0xc6/0x210
[  986.528353][T28626]  ? kasan_set_track+0x5e/0x70
[  986.533126][T28626]  ? kasan_set_track+0x4c/0x70
[  986.537897][T28626]  ? kasan_set_free_info+0x1f/0x40
[  986.543015][T28626]  ? ____kasan_slab_free+0xd8/0x110
[  986.548225][T28626]  ? slab_free_freelist_hook+0x12e/0x1a0
[  986.553868][T28626]  ? kfree+0xc6/0x210
[  986.557860][T28626]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  986.563501][T28626]  ? security_file_ioctl+0x55/0xb0
[  986.568625][T28626]  ? __se_sys_ioctl+0x48/0x170
[  986.573400][T28626]  ? do_syscall_64+0x2b/0x70
[  986.578003][T28626]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  986.584106][T28626]  ? rcu_lock_release+0x5/0x20
[  986.588885][T28626]  ? rcu_read_lock_sched_held+0x89/0x130
[  986.594529][T28626]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  986.600528][T28626]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  986.606533][T28626]  ? do_vfs_ioctl+0xc71/0x2a70
[  986.611352][T28626]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  986.616746][T28626]  ? blkdev_bszset+0x250/0x250
[  986.621552][T28626]  ? memset+0x1f/0x40
[  986.625552][T28626]  ? smack_file_ioctl+0x298/0x3a0
[  986.630603][T28626]  ? smack_file_alloc_security+0xd0/0xd0
[  986.636249][T28626]  ? lo_release+0x1f0/0x1f0
[  986.640764][T28626]  blkdev_ioctl+0x3a6/0x760
[  986.645287][T28626]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  986.650761][T28626]  ? bpf_lsm_file_ioctl+0x5/0x10
[  986.655710][T28626]  ? security_file_ioctl+0x9d/0xb0
[  986.660836][T28626]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  986.666306][T28626]  __se_sys_ioctl+0xfb/0x170
[  986.670908][T28626]  do_syscall_64+0x2b/0x70
[  986.675336][T28626]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  986.681240][T28626] RIP: 0033:0x7f94af288e07
[  986.685656][T28626] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  986.705244][T28626] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  986.713654][T28626] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  986.721643][T28626] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  986.729629][T28626] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  986.736879][T13502] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  986.737603][T28626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
16:11:38 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000000000700"})

[  986.737620][T28626] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  986.737654][T28626]  </TASK>
[  986.752550][T28626] loop2: detected capacity change from 0 to 5
[  986.785171][T28626] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  986.795490][T28626] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  986.849249][T28626] NILFS (loop2): mounting unchecked fs
[  986.855167][T28626] NILFS (loop2): I/O error reading segment
[  986.866764][T28626] NILFS (loop2): error -5 while searching super root
[  986.878520][T13504] usb 4-1: USB disconnect, device number 81
16:11:38 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 39)

[  986.976875][T13502] usb 6-1: device descriptor read/8, error -61
[  986.981578][T28657] FAULT_INJECTION: forcing a failure.
[  986.981578][T28657] name failslab, interval 1, probability 0, space 0, times 0
[  986.998604][T28657] CPU: 0 PID: 28657 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  987.006813][  T144] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[  987.009126][T28657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  987.026793][T28657] Call Trace:
[  987.030072][T28657]  <TASK>
[  987.033007][T28657]  dump_stack_lvl+0x1e3/0x2cb
[  987.037682][T28657]  ? bfq_pos_tree_add_move+0x436/0x436
[  987.043160][T28657]  ? panic+0x76e/0x76e
[  987.047247][T28657]  ? __might_sleep+0xc0/0xc0
[  987.051866][T28657]  should_fail+0x384/0x4b0
[  987.056284][T28657]  ? __kernfs_new_node+0xdb/0x730
[  987.061296][T28657]  should_failslab+0x5/0x20
[  987.065806][T28657]  kmem_cache_alloc+0x69/0x2f0
[  987.070561][T28657]  __kernfs_new_node+0xdb/0x730
[  987.075403][T28657]  ? up_write+0x131/0x4d0
[  987.079727][T28657]  ? kernfs_new_node+0x160/0x160
[  987.084679][T28657]  ? __up_read+0x690/0x690
[  987.089110][T28657]  ? kernfs_activate+0x502/0x520
[  987.094058][T28657]  kernfs_new_node+0x95/0x160
[  987.098729][T28657]  __kernfs_create_file+0x45/0x2e0
[  987.103853][T28657]  sysfs_add_file_mode_ns+0x21d/0x330
[  987.109245][T28657]  internal_create_group+0x55c/0xf50
[  987.114537][T28657]  ? sysfs_create_group+0x20/0x20
[  987.119552][T28657]  ? loop_rootcg_workfn+0x20/0x20
[  987.124568][T28657]  ? __loop_update_dio+0x248/0x530
[  987.129673][T28657]  loop_configure+0xc55/0x1200
[  987.134443][T28657]  lo_ioctl+0x89e/0x1eb0
[  987.138687][T28657]  ? mark_lock+0x98/0x350
[  987.143009][T28657]  ? lo_release+0x1f0/0x1f0
[  987.147512][T28657]  ? rcu_lock_release+0x5/0x20
[  987.152273][T28657]  ? rcu_read_lock_sched_held+0x89/0x130
[  987.157892][T28657]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  987.163875][T28657]  ? read_lock_is_recursive+0x10/0x10
[  987.169235][T28657]  ? rcu_lock_release+0x5/0x20
[  987.174004][T28657]  ? __lock_acquire+0x1f80/0x1f80
[  987.179019][T28657]  ? deref_stack_reg+0xbd/0x110
[  987.183876][T28657]  ? stack_trace_save+0x1f0/0x1f0
[  987.188894][T28657]  ? is_bpf_text_address+0x253/0x270
[  987.194175][T28657]  ? stack_trace_save+0x1f0/0x1f0
[  987.199198][T28657]  ? kernel_text_address+0x9e/0xd0
[  987.204301][T28657]  ? __kernel_text_address+0x9/0x40
[  987.209487][T28657]  ? unwind_get_return_address+0x48/0x80
[  987.215115][T28657]  ? arch_stack_walk+0xf8/0x140
[  987.219969][T28657]  ? stack_trace_save+0x12d/0x1f0
[  987.224990][T28657]  ? stack_trace_snprint+0xf0/0xf0
[  987.230104][T28657]  ? __stack_depot_save+0x33/0x490
[  987.235235][T28657]  ? kfree+0xc6/0x210
[  987.239215][T28657]  ? kasan_set_track+0x5e/0x70
[  987.243985][T28657]  ? kasan_set_track+0x4c/0x70
[  987.248766][T28657]  ? kasan_set_free_info+0x1f/0x40
[  987.253881][T28657]  ? ____kasan_slab_free+0xd8/0x110
[  987.259081][T28657]  ? slab_free_freelist_hook+0x12e/0x1a0
[  987.264708][T28657]  ? kfree+0xc6/0x210
[  987.268684][T28657]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  987.274308][T28657]  ? security_file_ioctl+0x55/0xb0
[  987.279408][T28657]  ? __se_sys_ioctl+0x48/0x170
[  987.284158][T28657]  ? do_syscall_64+0x2b/0x70
[  987.288752][T28657]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  987.294848][T28657]  ? rcu_lock_release+0x5/0x20
[  987.299647][T28657]  ? rcu_read_lock_sched_held+0x89/0x130
[  987.305291][T28657]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  987.311280][T28657]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  987.317263][T28657]  ? do_vfs_ioctl+0xc71/0x2a70
[  987.322049][T28657]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  987.327422][T28657]  ? blkdev_bszset+0x250/0x250
[  987.332198][T28657]  ? memset+0x1f/0x40
[  987.336171][T28657]  ? smack_file_ioctl+0x298/0x3a0
[  987.341189][T28657]  ? smack_file_alloc_security+0xd0/0xd0
[  987.346983][T28657]  ? lo_release+0x1f0/0x1f0
[  987.351477][T28657]  blkdev_ioctl+0x3a6/0x760
[  987.355978][T28657]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  987.361435][T28657]  ? bpf_lsm_file_ioctl+0x5/0x10
[  987.366363][T28657]  ? security_file_ioctl+0x9d/0xb0
[  987.371470][T28657]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  987.376919][T28657]  __se_sys_ioctl+0xfb/0x170
[  987.381500][T28657]  do_syscall_64+0x2b/0x70
[  987.385907][T28657]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  987.391786][T28657] RIP: 0033:0x7f94af288e07
[  987.396190][T28657] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  987.415781][T28657] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  987.424206][T28657] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  987.432168][T28657] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  987.440126][T28657] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  987.448082][T28657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  987.456037][T28657] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  987.464007][T28657]  </TASK>
[  987.470106][T28657] loop2: detected capacity change from 0 to 5
[  987.514494][T28657] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  987.535722][T28657] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  987.546740][T13502] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  987.555315][T28657] NILFS (loop2): mounting unchecked fs
[  987.561454][T28657] NILFS (loop2): I/O error reading segment
[  987.567450][T28657] NILFS (loop2): error -5 while searching super root
16:11:39 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 40)

[  987.666407][T28665] FAULT_INJECTION: forcing a failure.
[  987.666407][T28665] name failslab, interval 1, probability 0, space 0, times 0
[  987.682417][T28665] CPU: 1 PID: 28665 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  987.692944][T28665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  987.702985][T28665] Call Trace:
[  987.706255][T28665]  <TASK>
[  987.709175][T28665]  dump_stack_lvl+0x1e3/0x2cb
[  987.713843][T28665]  ? bfq_pos_tree_add_move+0x436/0x436
[  987.719291][T28665]  ? panic+0x76e/0x76e
[  987.723348][T28665]  ? __might_sleep+0xc0/0xc0
[  987.727938][T28665]  should_fail+0x384/0x4b0
[  987.732359][T28665]  ? __kernfs_new_node+0xdb/0x730
[  987.737367][T28665]  should_failslab+0x5/0x20
[  987.741859][T28665]  kmem_cache_alloc+0x69/0x2f0
[  987.746623][T28665]  __kernfs_new_node+0xdb/0x730
[  987.751484][T28665]  ? up_write+0x131/0x4d0
[  987.755806][T28665]  ? kernfs_new_node+0x160/0x160
[  987.760729][T28665]  ? __up_read+0x690/0x690
[  987.765131][T28665]  ? kernfs_activate+0x502/0x520
[  987.770063][T28665]  kernfs_new_node+0x95/0x160
[  987.774733][T28665]  __kernfs_create_file+0x45/0x2e0
[  987.779832][T28665]  sysfs_add_file_mode_ns+0x21d/0x330
[  987.785196][T28665]  internal_create_group+0x55c/0xf50
[  987.790488][T28665]  ? sysfs_create_group+0x20/0x20
[  987.795522][T28665]  ? loop_rootcg_workfn+0x20/0x20
[  987.800533][T28665]  ? __loop_update_dio+0x248/0x530
[  987.805630][T28665]  loop_configure+0xc55/0x1200
[  987.810392][T28665]  lo_ioctl+0x89e/0x1eb0
[  987.814621][T28665]  ? mark_lock+0x98/0x350
[  987.818934][T28665]  ? lo_release+0x1f0/0x1f0
[  987.823427][T28665]  ? rcu_lock_release+0x5/0x20
[  987.828204][T28665]  ? rcu_read_lock_sched_held+0x89/0x130
[  987.833832][T28665]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  987.839809][T28665]  ? read_lock_is_recursive+0x10/0x10
[  987.845168][T28665]  ? rcu_lock_release+0x5/0x20
[  987.849919][T28665]  ? __lock_acquire+0x1f80/0x1f80
[  987.854947][T28665]  ? deref_stack_reg+0xbd/0x110
[  987.859791][T28665]  ? stack_trace_save+0x1f0/0x1f0
[  987.864802][T28665]  ? is_bpf_text_address+0x253/0x270
[  987.870078][T28665]  ? stack_trace_save+0x1f0/0x1f0
[  987.875108][T28665]  ? kernel_text_address+0x9e/0xd0
[  987.880217][T28665]  ? __kernel_text_address+0x9/0x40
[  987.885428][T28665]  ? unwind_get_return_address+0x48/0x80
[  987.891077][T28665]  ? arch_stack_walk+0xf8/0x140
[  987.895946][T28665]  ? stack_trace_save+0x12d/0x1f0
[  987.900984][T28665]  ? stack_trace_snprint+0xf0/0xf0
[  987.906084][T28665]  ? __stack_depot_save+0x33/0x490
[  987.911185][T28665]  ? kfree+0xc6/0x210
[  987.915150][T28665]  ? kasan_set_track+0x5e/0x70
[  987.919896][T28665]  ? kasan_set_track+0x4c/0x70
[  987.924640][T28665]  ? kasan_set_free_info+0x1f/0x40
[  987.929998][T28665]  ? ____kasan_slab_free+0xd8/0x110
[  987.935195][T28665]  ? slab_free_freelist_hook+0x12e/0x1a0
[  987.940815][T28665]  ? kfree+0xc6/0x210
[  987.944798][T28665]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  987.950413][T28665]  ? security_file_ioctl+0x55/0xb0
[  987.955509][T28665]  ? __se_sys_ioctl+0x48/0x170
[  987.960264][T28665]  ? do_syscall_64+0x2b/0x70
[  987.964847][T28665]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  987.970950][T28665]  ? rcu_lock_release+0x5/0x20
[  987.975704][T28665]  ? rcu_read_lock_sched_held+0x89/0x130
[  987.981325][T28665]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  987.987290][T28665]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  987.993256][T28665]  ? do_vfs_ioctl+0xc71/0x2a70
[  987.998031][T28665]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  988.003392][T28665]  ? blkdev_bszset+0x250/0x250
[  988.008153][T28665]  ? memset+0x1f/0x40
[  988.012118][T28665]  ? smack_file_ioctl+0x298/0x3a0
[  988.017143][T28665]  ? smack_file_alloc_security+0xd0/0xd0
[  988.022758][T28665]  ? lo_release+0x1f0/0x1f0
[  988.027253][T28665]  blkdev_ioctl+0x3a6/0x760
[  988.031771][T28665]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  988.037219][T28665]  ? bpf_lsm_file_ioctl+0x5/0x10
[  988.042144][T28665]  ? security_file_ioctl+0x9d/0xb0
[  988.047254][T28665]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  988.052697][T28665]  __se_sys_ioctl+0xfb/0x170
[  988.057279][T28665]  do_syscall_64+0x2b/0x70
[  988.061690][T28665]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  988.067571][T28665] RIP: 0033:0x7f94af288e07
[  988.071970][T28665] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  988.091575][T28665] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  988.099980][T28665] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  988.107952][T28665] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  988.115907][T28665] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  988.123864][T28665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  988.131827][T28665] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  988.139811][T28665]  </TASK>
[  988.159696][  T144] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  988.176270][T28665] loop2: detected capacity change from 0 to 5
[  988.182632][T13502] usb 6-1: device descriptor read/8, error -71
[  988.200614][  T144] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  988.218766][  T144] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  988.237021][T28665] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  988.250340][  T144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.277178][T28665] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  988.300407][T28665] NILFS (loop2): mounting unchecked fs
[  988.306246][T28665] NILFS (loop2): I/O error reading segment
[  988.313280][T13502] usb usb6-port1: unable to enumerate USB device
[  988.315021][T28665] NILFS (loop2): error -5 while searching super root
16:11:40 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:40 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000b00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:11:40 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000700"})

16:11:40 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:40 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 41)

[  989.163460][T13502] usb 1-1: USB disconnect, device number 19
[  989.202409][T28685] loop2: detected capacity change from 0 to 5
[  989.214884][T28685] FAULT_INJECTION: forcing a failure.
[  989.214884][T28685] name failslab, interval 1, probability 0, space 0, times 0
[  989.230965][T28685] CPU: 0 PID: 28685 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  989.241596][T28685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  989.251667][T28685] Call Trace:
[  989.254958][T28685]  <TASK>
[  989.257894][T28685]  dump_stack_lvl+0x1e3/0x2cb
[  989.262589][T28685]  ? bfq_pos_tree_add_move+0x436/0x436
[  989.268049][T28685]  ? panic+0x76e/0x76e
[  989.272136][T28685]  ? __might_sleep+0xc0/0xc0
[  989.276748][T28685]  ? do_raw_spin_unlock+0x134/0x8a0
[  989.281966][T28685]  should_fail+0x384/0x4b0
[  989.286392][T28685]  ? kobject_uevent_env+0x33a/0x8e0
[  989.291589][T28685]  should_failslab+0x5/0x20
[  989.296099][T28685]  kmem_cache_alloc_trace+0x68/0x310
[  989.301405][T28685]  kobject_uevent_env+0x33a/0x8e0
[  989.306439][T28685]  ? loop_rootcg_workfn+0x20/0x20
[  989.311468][T28685]  loop_configure+0xd8d/0x1200
[  989.316250][T28685]  lo_ioctl+0x89e/0x1eb0
[  989.320496][T28685]  ? mark_lock+0x98/0x350
[  989.324832][T28685]  ? lo_release+0x1f0/0x1f0
[  989.329332][T28685]  ? rcu_lock_release+0x5/0x20
[  989.334103][T28685]  ? rcu_read_lock_sched_held+0x89/0x130
[  989.339741][T28685]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  989.345756][T28685]  ? read_lock_is_recursive+0x10/0x10
[  989.351149][T28685]  ? rcu_lock_release+0x5/0x20
[  989.355928][T28685]  ? __lock_acquire+0x1f80/0x1f80
[  989.360940][T28685]  ? deref_stack_reg+0xbd/0x110
[  989.365805][T28685]  ? stack_trace_save+0x1f0/0x1f0
[  989.370821][T28685]  ? is_bpf_text_address+0x253/0x270
[  989.376118][T28685]  ? stack_trace_save+0x1f0/0x1f0
[  989.381150][T28685]  ? kernel_text_address+0x9e/0xd0
[  989.386271][T28685]  ? __kernel_text_address+0x9/0x40
[  989.391458][T28685]  ? unwind_get_return_address+0x48/0x80
[  989.397106][T28685]  ? arch_stack_walk+0xf8/0x140
[  989.401988][T28685]  ? stack_trace_save+0x12d/0x1f0
[  989.407025][T28685]  ? stack_trace_snprint+0xf0/0xf0
[  989.412153][T28685]  ? __stack_depot_save+0x33/0x490
[  989.417283][T28685]  ? kfree+0xc6/0x210
[  989.421363][T28685]  ? kasan_set_track+0x5e/0x70
[  989.426129][T28685]  ? kasan_set_track+0x4c/0x70
[  989.430882][T28685]  ? kasan_set_free_info+0x1f/0x40
[  989.436000][T28685]  ? ____kasan_slab_free+0xd8/0x110
[  989.441186][T28685]  ? slab_free_freelist_hook+0x12e/0x1a0
[  989.446831][T28685]  ? kfree+0xc6/0x210
[  989.450819][T28685]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  989.456454][T28685]  ? security_file_ioctl+0x55/0xb0
[  989.461560][T28685]  ? __se_sys_ioctl+0x48/0x170
[  989.466326][T28685]  ? do_syscall_64+0x2b/0x70
[  989.466859][ T3687] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  989.470914][T28685]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  989.470961][T28685]  ? rcu_lock_release+0x5/0x20
[  989.470984][T28685]  ? rcu_read_lock_sched_held+0x89/0x130
[  989.471003][T28685]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  989.471024][T28685]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  989.487852][  T144] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  989.489336][T28685]  ? do_vfs_ioctl+0xc71/0x2a70
[  989.519168][T28685]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  989.524558][T28685]  ? blkdev_bszset+0x250/0x250
[  989.529341][T28685]  ? memset+0x1f/0x40
[  989.533332][T28685]  ? smack_file_ioctl+0x298/0x3a0
[  989.538370][T28685]  ? smack_file_alloc_security+0xd0/0xd0
[  989.544007][T28685]  ? lo_release+0x1f0/0x1f0
[  989.548502][T28685]  blkdev_ioctl+0x3a6/0x760
[  989.553017][T28685]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  989.558501][T28685]  ? bpf_lsm_file_ioctl+0x5/0x10
[  989.563446][T28685]  ? security_file_ioctl+0x9d/0xb0
[  989.568588][T28685]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  989.574053][T28685]  __se_sys_ioctl+0xfb/0x170
[  989.578658][T28685]  do_syscall_64+0x2b/0x70
[  989.583078][T28685]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  989.588961][T28685] RIP: 0033:0x7f94af288e07
[  989.593384][T28685] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  989.612999][T28685] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  989.621432][T28685] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  989.626619][T13502] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  989.629416][T28685] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  989.629435][T28685] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  989.629449][T28685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  989.629462][T28685] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  989.629493][T28685]  </TASK>
[  989.673068][ T3687] usb 6-1: device descriptor read/64, error 18
[  989.679455][T28685] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  989.679486][T28685] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  989.681633][T28685] NILFS (loop2): mounting unchecked fs
[  989.709899][T28685] NILFS (loop2): I/O error reading segment
[  989.715896][T28685] NILFS (loop2): error -5 while searching super root
16:11:41 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 42)

[  989.826349][T28705] FAULT_INJECTION: forcing a failure.
[  989.826349][T28705] name failslab, interval 1, probability 0, space 0, times 0
[  989.848030][T28705] CPU: 1 PID: 28705 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  989.858573][T28705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  989.868639][T28705] Call Trace:
[  989.871906][T28705]  <TASK>
[  989.874820][T28705]  dump_stack_lvl+0x1e3/0x2cb
[  989.879504][T28705]  ? bfq_pos_tree_add_move+0x436/0x436
[  989.884971][T28705]  ? panic+0x76e/0x76e
[  989.889055][T28705]  ? __might_sleep+0xc0/0xc0
[  989.893654][T28705]  should_fail+0x384/0x4b0
[  989.898070][T28705]  ? __kernfs_new_node+0xdb/0x730
[  989.903084][T28705]  should_failslab+0x5/0x20
[  989.907577][T28705]  kmem_cache_alloc+0x69/0x2f0
[  989.912359][T28705]  __kernfs_new_node+0xdb/0x730
[  989.917226][T28705]  ? up_write+0x131/0x4d0
[  989.921561][T28705]  ? kernfs_new_node+0x160/0x160
[  989.926511][T28705]  ? __up_read+0x690/0x690
[  989.930927][T28705]  ? kernfs_activate+0x502/0x520
[  989.935861][T28705]  kernfs_new_node+0x95/0x160
[  989.940526][T28705]  __kernfs_create_file+0x45/0x2e0
[  989.945630][T28705]  sysfs_add_file_mode_ns+0x21d/0x330
[  989.950995][T28705]  internal_create_group+0x55c/0xf50
[  989.956273][T28705]  ? sysfs_create_group+0x20/0x20
[  989.961288][T28705]  ? loop_rootcg_workfn+0x20/0x20
[  989.966327][T28705]  ? __loop_update_dio+0x248/0x530
[  989.971455][T28705]  loop_configure+0xc55/0x1200
[  989.976249][T28705]  lo_ioctl+0x89e/0x1eb0
[  989.980540][T28705]  ? mark_lock+0x98/0x350
[  989.984877][T28705]  ? lo_release+0x1f0/0x1f0
[  989.989369][T28705]  ? rcu_lock_release+0x5/0x20
[  989.994118][T28705]  ? rcu_read_lock_sched_held+0x89/0x130
[  989.999748][T28705]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  990.005749][T28705]  ? read_lock_is_recursive+0x10/0x10
[  990.011113][T28705]  ? rcu_lock_release+0x5/0x20
[  990.015885][T28705]  ? __lock_acquire+0x1f80/0x1f80
[  990.021003][T28705]  ? deref_stack_reg+0xbd/0x110
[  990.025883][T28705]  ? stack_trace_save+0x1f0/0x1f0
[  990.030907][T28705]  ? is_bpf_text_address+0x253/0x270
[  990.036179][T28705]  ? stack_trace_save+0x1f0/0x1f0
[  990.041197][T28705]  ? kernel_text_address+0x9e/0xd0
[  990.046319][T28705]  ? __kernel_text_address+0x9/0x40
[  990.051515][T28705]  ? unwind_get_return_address+0x48/0x80
[  990.057162][T28705]  ? arch_stack_walk+0xf8/0x140
[  990.062086][T28705]  ? stack_trace_save+0x12d/0x1f0
[  990.067138][T28705]  ? stack_trace_snprint+0xf0/0xf0
[  990.072265][T28705]  ? __stack_depot_save+0x33/0x490
[  990.077374][T28705]  ? kfree+0xc6/0x210
[  990.081359][T28705]  ? kasan_set_track+0x5e/0x70
[  990.086211][T28705]  ? kasan_set_track+0x4c/0x70
[  990.090974][T28705]  ? kasan_set_free_info+0x1f/0x40
[  990.096076][T28705]  ? ____kasan_slab_free+0xd8/0x110
[  990.101266][T28705]  ? slab_free_freelist_hook+0x12e/0x1a0
[  990.106914][T28705]  ? kfree+0xc6/0x210
[  990.110910][T28705]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  990.116554][T28705]  ? security_file_ioctl+0x55/0xb0
[  990.121676][T28705]  ? __se_sys_ioctl+0x48/0x170
[  990.126456][T28705]  ? do_syscall_64+0x2b/0x70
[  990.131036][T28705]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  990.137095][T28705]  ? rcu_lock_release+0x5/0x20
[  990.141845][T28705]  ? rcu_read_lock_sched_held+0x89/0x130
[  990.147478][T28705]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  990.153446][T28705]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  990.159434][T28705]  ? do_vfs_ioctl+0xc71/0x2a70
[  990.164247][T28705]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  990.169626][T28705]  ? blkdev_bszset+0x250/0x250
[  990.174389][T28705]  ? memset+0x1f/0x40
[  990.178352][T28705]  ? smack_file_ioctl+0x298/0x3a0
[  990.183377][T28705]  ? smack_file_alloc_security+0xd0/0xd0
[  990.189017][T28705]  ? lo_release+0x1f0/0x1f0
[  990.193513][T28705]  blkdev_ioctl+0x3a6/0x760
[  990.198011][T28705]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  990.203459][T28705]  ? bpf_lsm_file_ioctl+0x5/0x10
[  990.208398][T28705]  ? security_file_ioctl+0x9d/0xb0
[  990.213528][T28705]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  990.218995][T28705]  __se_sys_ioctl+0xfb/0x170
[  990.223597][T28705]  do_syscall_64+0x2b/0x70
[  990.228022][T28705]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  990.233918][T28705] RIP: 0033:0x7f94af288e07
[  990.238316][T28705] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  990.257908][T28705] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  990.266341][T28705] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  990.274324][T28705] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  990.282283][T28705] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  990.290240][T28705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  990.298195][T28705] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  990.306175][T28705]  </TASK>
16:11:41 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000700"})

[  990.331838][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  990.354378][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  990.366153][  T144] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  990.373480][T28705] loop2: detected capacity change from 0 to 5
[  990.375581][  T144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  990.406752][ T3687] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  990.421036][T28705] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  990.438656][T28705] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  990.451703][T28705] NILFS (loop2): mounting unchecked fs
[  990.459089][T28705] NILFS (loop2): I/O error reading segment
[  990.465121][T28705] NILFS (loop2): error -5 while searching super root
[  990.506864][T13502] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  990.518690][T13502] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  990.532409][T13502] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  990.541967][T13502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:11:42 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 43)

[  990.588860][T13502] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  990.606401][ T3687] usb 6-1: device descriptor read/64, error 18
16:11:42 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  990.648587][T28721] loop2: detected capacity change from 0 to 5
[  990.660702][ T3686] usb 5-1: USB disconnect, device number 124
[  990.689794][T28721] FAULT_INJECTION: forcing a failure.
[  990.689794][T28721] name failslab, interval 1, probability 0, space 0, times 0
[  990.704051][T28721] CPU: 0 PID: 28721 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  990.714569][T28721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  990.724619][T28721] Call Trace:
[  990.727905][T28721]  <TASK>
[  990.730840][T28721]  dump_stack_lvl+0x1e3/0x2cb
[  990.735532][T28721]  ? bfq_pos_tree_add_move+0x436/0x436
[  990.736960][ T3687] usb usb6-port1: attempt power cycle
[  990.740975][T28721]  ? panic+0x76e/0x76e
[  990.741010][T28721]  ? __might_sleep+0xc0/0xc0
[  990.741041][T28721]  should_fail+0x384/0x4b0
[  990.759410][T28721]  ? __alloc_skb+0xd2/0x590
[  990.763923][T28721]  should_failslab+0x5/0x20
[  990.768416][T28721]  kmem_cache_alloc_node+0x6c/0x340
[  990.773620][T28721]  __alloc_skb+0xd2/0x590
[  990.777945][T28721]  alloc_uevent_skb+0x73/0x220
[  990.782707][T28721]  kobject_uevent_net_broadcast+0x2f3/0x570
[  990.788598][T28721]  kobject_uevent_env+0x6b1/0x8e0
[  990.793620][T28721]  ? loop_rootcg_workfn+0x20/0x20
[  990.798643][T28721]  loop_configure+0xd8d/0x1200
[  990.803427][T28721]  lo_ioctl+0x89e/0x1eb0
[  990.807684][T28721]  ? mark_lock+0x98/0x350
[  990.812021][T28721]  ? lo_release+0x1f0/0x1f0
[  990.816533][T28721]  ? rcu_lock_release+0x5/0x20
[  990.821308][T28721]  ? rcu_read_lock_sched_held+0x89/0x130
[  990.826936][T28721]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  990.832924][T28721]  ? read_lock_is_recursive+0x10/0x10
[  990.838295][T28721]  ? rcu_lock_release+0x5/0x20
[  990.843048][T28721]  ? __lock_acquire+0x1f80/0x1f80
[  990.848066][T28721]  ? deref_stack_reg+0xbd/0x110
[  990.852915][T28721]  ? stack_trace_save+0x1f0/0x1f0
[  990.857931][T28721]  ? is_bpf_text_address+0x253/0x270
[  990.863208][T28721]  ? stack_trace_save+0x1f0/0x1f0
[  990.868222][T28721]  ? kernel_text_address+0x9e/0xd0
[  990.873327][T28721]  ? __kernel_text_address+0x9/0x40
[  990.878518][T28721]  ? unwind_get_return_address+0x48/0x80
[  990.884140][T28721]  ? arch_stack_walk+0xf8/0x140
[  990.888994][T28721]  ? stack_trace_save+0x12d/0x1f0
[  990.894013][T28721]  ? stack_trace_snprint+0xf0/0xf0
[  990.899126][T28721]  ? __stack_depot_save+0x33/0x490
[  990.904235][T28721]  ? kfree+0xc6/0x210
[  990.908208][T28721]  ? kasan_set_track+0x5e/0x70
[  990.912958][T28721]  ? kasan_set_track+0x4c/0x70
[  990.917711][T28721]  ? kasan_set_free_info+0x1f/0x40
[  990.922809][T28721]  ? ____kasan_slab_free+0xd8/0x110
[  990.928168][T28721]  ? slab_free_freelist_hook+0x12e/0x1a0
[  990.933790][T28721]  ? kfree+0xc6/0x210
[  990.937760][T28721]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  990.943384][T28721]  ? security_file_ioctl+0x55/0xb0
[  990.948489][T28721]  ? __se_sys_ioctl+0x48/0x170
[  990.953237][T28721]  ? do_syscall_64+0x2b/0x70
[  990.957812][T28721]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  990.963887][T28721]  ? rcu_lock_release+0x5/0x20
[  990.968640][T28721]  ? rcu_read_lock_sched_held+0x89/0x130
[  990.974261][T28721]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  990.980229][T28721]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  990.986223][T28721]  ? do_vfs_ioctl+0xc71/0x2a70
[  990.991019][T28721]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  990.996418][T28721]  ? blkdev_bszset+0x250/0x250
[  991.001198][T28721]  ? memset+0x1f/0x40
[  991.005176][T28721]  ? smack_file_ioctl+0x298/0x3a0
[  991.010197][T28721]  ? smack_file_alloc_security+0xd0/0xd0
[  991.015820][T28721]  ? lo_release+0x1f0/0x1f0
[  991.020313][T28721]  blkdev_ioctl+0x3a6/0x760
[  991.024812][T28721]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  991.030277][T28721]  ? bpf_lsm_file_ioctl+0x5/0x10
[  991.035217][T28721]  ? security_file_ioctl+0x9d/0xb0
[  991.040326][T28721]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  991.045783][T28721]  __se_sys_ioctl+0xfb/0x170
[  991.050380][T28721]  do_syscall_64+0x2b/0x70
[  991.054794][T28721]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  991.060682][T28721] RIP: 0033:0x7f94af288e07
[  991.065087][T28721] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  991.084681][T28721] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  991.093085][T28721] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  991.101046][T28721] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  991.109014][T28721] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  991.116987][T28721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  991.124959][T28721] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  991.132941][T28721]  </TASK>
[  991.181880][  T144] wacom 0003:056A:0331.0131: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  991.197785][T28721] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  991.214624][T28721] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  991.225381][T28721] NILFS (loop2): mounting unchecked fs
16:11:42 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000700"})

[  991.232104][T28721] NILFS (loop2): I/O error reading segment
[  991.238944][T28721] NILFS (loop2): error -5 while searching super root
16:11:42 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 44)

[  991.372442][T28744] loop2: detected capacity change from 0 to 5
[  991.383016][T28744] FAULT_INJECTION: forcing a failure.
[  991.383016][T28744] name failslab, interval 1, probability 0, space 0, times 0
[  991.395731][T28744] CPU: 1 PID: 28744 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  991.406247][T28744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  991.416300][T28744] Call Trace:
[  991.419572][T28744]  <TASK>
[  991.422492][T28744]  dump_stack_lvl+0x1e3/0x2cb
[  991.427173][T28744]  ? bfq_pos_tree_add_move+0x436/0x436
[  991.432623][T28744]  ? panic+0x76e/0x76e
[  991.436702][T28744]  ? rcu_read_lock_sched_held+0x89/0x130
[  991.442336][T28744]  should_fail+0x384/0x4b0
[  991.446753][T28744]  ? alloc_uevent_skb+0x73/0x220
[  991.451685][T28744]  should_failslab+0x5/0x20
[  991.456181][T28744]  __kmalloc_node_track_caller+0x8c/0x3f0
[  991.461893][T28744]  ? trace_kmem_cache_alloc_node+0x2d/0xe0
[  991.467716][T28744]  ? kmem_cache_alloc_node+0x22a/0x340
[  991.473164][T28744]  ? __alloc_skb+0xd2/0x590
[  991.477666][T28744]  ? alloc_uevent_skb+0x73/0x220
[  991.482594][T28744]  __alloc_skb+0x11a/0x590
[  991.487021][T28744]  alloc_uevent_skb+0x73/0x220
[  991.491783][T28744]  kobject_uevent_net_broadcast+0x2f3/0x570
[  991.497675][T28744]  kobject_uevent_env+0x6b1/0x8e0
[  991.502692][T28744]  ? loop_rootcg_workfn+0x20/0x20
[  991.507714][T28744]  loop_configure+0xd8d/0x1200
[  991.512483][T28744]  lo_ioctl+0x89e/0x1eb0
[  991.516722][T28744]  ? mark_lock+0x98/0x350
[  991.521040][T28744]  ? lo_release+0x1f0/0x1f0
[  991.525540][T28744]  ? rcu_lock_release+0x5/0x20
[  991.530297][T28744]  ? rcu_read_lock_sched_held+0x89/0x130
[  991.535917][T28744]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  991.541898][T28744]  ? read_lock_is_recursive+0x10/0x10
[  991.547261][T28744]  ? rcu_lock_release+0x5/0x20
[  991.552016][T28744]  ? __lock_acquire+0x1f80/0x1f80
[  991.557055][T28744]  ? deref_stack_reg+0xbd/0x110
[  991.561925][T28744]  ? stack_trace_save+0x1f0/0x1f0
[  991.566939][T28744]  ? is_bpf_text_address+0x253/0x270
[  991.572216][T28744]  ? stack_trace_save+0x1f0/0x1f0
[  991.577232][T28744]  ? kernel_text_address+0x9e/0xd0
[  991.582337][T28744]  ? __kernel_text_address+0x9/0x40
[  991.587530][T28744]  ? unwind_get_return_address+0x48/0x80
[  991.593154][T28744]  ? arch_stack_walk+0xf8/0x140
[  991.598005][T28744]  ? stack_trace_save+0x12d/0x1f0
[  991.603023][T28744]  ? stack_trace_snprint+0xf0/0xf0
[  991.608137][T28744]  ? __stack_depot_save+0x33/0x490
[  991.613245][T28744]  ? kfree+0xc6/0x210
[  991.617218][T28744]  ? kasan_set_track+0x5e/0x70
[  991.621969][T28744]  ? kasan_set_track+0x4c/0x70
[  991.626720][T28744]  ? kasan_set_free_info+0x1f/0x40
[  991.631819][T28744]  ? ____kasan_slab_free+0xd8/0x110
[  991.637009][T28744]  ? slab_free_freelist_hook+0x12e/0x1a0
[  991.642637][T28744]  ? kfree+0xc6/0x210
[  991.646605][T28744]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  991.652229][T28744]  ? security_file_ioctl+0x55/0xb0
[  991.657334][T28744]  ? __se_sys_ioctl+0x48/0x170
[  991.662086][T28744]  ? do_syscall_64+0x2b/0x70
[  991.666667][T28744]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  991.672739][T28744]  ? rcu_lock_release+0x5/0x20
[  991.677497][T28744]  ? rcu_read_lock_sched_held+0x89/0x130
[  991.683120][T28744]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  991.689091][T28744]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  991.695068][T28744]  ? do_vfs_ioctl+0xc71/0x2a70
[  991.699850][T28744]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  991.705220][T28744]  ? blkdev_bszset+0x250/0x250
[  991.709998][T28744]  ? memset+0x1f/0x40
[  991.714002][T28744]  ? smack_file_ioctl+0x298/0x3a0
[  991.719025][T28744]  ? smack_file_alloc_security+0xd0/0xd0
[  991.724655][T28744]  ? lo_release+0x1f0/0x1f0
[  991.729156][T28744]  blkdev_ioctl+0x3a6/0x760
[  991.733657][T28744]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  991.739122][T28744]  ? bpf_lsm_file_ioctl+0x5/0x10
[  991.744055][T28744]  ? security_file_ioctl+0x9d/0xb0
[  991.749164][T28744]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  991.754612][T28744]  __se_sys_ioctl+0xfb/0x170
[  991.759207][T28744]  do_syscall_64+0x2b/0x70
[  991.763618][T28744]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  991.769505][T28744] RIP: 0033:0x7f94af288e07
[  991.773923][T28744] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  991.793518][T28744] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  991.801931][T28744] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  991.809897][T28744] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  991.817856][T28744] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  991.825823][T28744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  991.833785][T28744] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  991.841771][T28744]  </TASK>
[  991.868990][T28744] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  991.878070][T28744] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  991.889422][T28744] NILFS (loop2): mounting unchecked fs
[  991.895757][T28744] NILFS (loop2): I/O error reading segment
[  991.902304][T28744] NILFS (loop2): error -5 while searching super root
[  991.926651][ T3686] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  991.926657][ T3687] usb 6-1: new high-speed USB device number 54 using dummy_hcd
16:11:43 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 45)

[  992.054276][T28753] loop2: detected capacity change from 0 to 5
[  992.061209][T28753] FAULT_INJECTION: forcing a failure.
[  992.061209][T28753] name failslab, interval 1, probability 0, space 0, times 0
[  992.074835][T28753] CPU: 1 PID: 28753 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  992.085354][T28753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  992.095399][T28753] Call Trace:
[  992.098675][T28753]  <TASK>
[  992.101609][T28753]  dump_stack_lvl+0x1e3/0x2cb
[  992.106278][T28753]  ? bfq_pos_tree_add_move+0x436/0x436
[  992.111727][T28753]  ? panic+0x76e/0x76e
[  992.115788][T28753]  ? rcu_read_lock_sched_held+0x89/0x130
[  992.121409][T28753]  should_fail+0x384/0x4b0
[  992.125816][T28753]  ? alloc_uevent_skb+0x73/0x220
[  992.130746][T28753]  should_failslab+0x5/0x20
[  992.135262][T28753]  __kmalloc_node_track_caller+0x8c/0x3f0
[  992.140992][T28753]  ? trace_kmem_cache_alloc_node+0x2d/0xe0
[  992.146816][T28753]  ? kmem_cache_alloc_node+0x22a/0x340
[  992.152292][T28753]  ? __alloc_skb+0xd2/0x590
[  992.156809][T28753]  ? alloc_uevent_skb+0x73/0x220
[  992.161753][T28753]  __alloc_skb+0x11a/0x590
[  992.166162][T28753]  alloc_uevent_skb+0x73/0x220
[  992.170920][T28753]  kobject_uevent_net_broadcast+0x2f3/0x570
[  992.176812][T28753]  kobject_uevent_env+0x6b1/0x8e0
[  992.181844][T28753]  ? loop_rootcg_workfn+0x20/0x20
[  992.186889][T28753]  loop_configure+0xd8d/0x1200
[  992.191683][T28753]  lo_ioctl+0x89e/0x1eb0
[  992.195934][T28753]  ? reacquire_held_locks+0x680/0x680
[  992.201320][T28753]  ? mark_lock+0x98/0x350
[  992.205639][T28753]  ? lo_release+0x1f0/0x1f0
[  992.210155][T28753]  ? rcu_lock_release+0x5/0x20
[  992.214904][T28753]  ? rcu_read_lock_sched_held+0x89/0x130
[  992.220518][T28753]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  992.226511][T28753]  ? read_lock_is_recursive+0x10/0x10
[  992.232413][T28753]  ? rcu_lock_release+0x5/0x20
[  992.237187][T28753]  ? __lock_acquire+0x1f80/0x1f80
[  992.242214][T28753]  ? deref_stack_reg+0xbd/0x110
[  992.247075][T28753]  ? stack_trace_save+0x1f0/0x1f0
[  992.252090][T28753]  ? is_bpf_text_address+0x253/0x270
[  992.257393][T28753]  ? stack_trace_save+0x1f0/0x1f0
[  992.262426][T28753]  ? kernel_text_address+0x9e/0xd0
[  992.267525][T28753]  ? __kernel_text_address+0x9/0x40
[  992.272725][T28753]  ? unwind_get_return_address+0x48/0x80
[  992.278347][T28753]  ? arch_stack_walk+0xf8/0x140
[  992.283237][T28753]  ? stack_trace_save+0x12d/0x1f0
[  992.288274][T28753]  ? stack_trace_snprint+0xf0/0xf0
[  992.293406][T28753]  ? __stack_depot_save+0x33/0x490
[  992.298541][T28753]  ? kfree+0xc6/0x210
[  992.302533][T28753]  ? kasan_set_track+0x5e/0x70
[  992.307290][T28753]  ? kasan_set_track+0x4c/0x70
[  992.312041][T28753]  ? kasan_set_free_info+0x1f/0x40
[  992.317138][T28753]  ? ____kasan_slab_free+0xd8/0x110
[  992.322324][T28753]  ? slab_free_freelist_hook+0x12e/0x1a0
[  992.327947][T28753]  ? kfree+0xc6/0x210
[  992.331935][T28753]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  992.337576][T28753]  ? security_file_ioctl+0x55/0xb0
[  992.342691][T28753]  ? __se_sys_ioctl+0x48/0x170
[  992.347457][T28753]  ? do_syscall_64+0x2b/0x70
[  992.352029][T28753]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  992.358093][T28753]  ? rcu_lock_release+0x5/0x20
[  992.362843][T28753]  ? rcu_read_lock_sched_held+0x89/0x130
[  992.368459][T28753]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  992.374423][T28753]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  992.380404][T28753]  ? do_vfs_ioctl+0xc71/0x2a70
[  992.385216][T28753]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  992.390605][T28753]  ? blkdev_bszset+0x250/0x250
[  992.395388][T28753]  ? memset+0x1f/0x40
[  992.399354][T28753]  ? smack_file_ioctl+0x298/0x3a0
[  992.404365][T28753]  ? smack_file_alloc_security+0xd0/0xd0
[  992.409988][T28753]  ? lo_release+0x1f0/0x1f0
[  992.414514][T28753]  blkdev_ioctl+0x3a6/0x760
[  992.419028][T28753]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  992.424485][T28753]  ? bpf_lsm_file_ioctl+0x5/0x10
[  992.429415][T28753]  ? security_file_ioctl+0x9d/0xb0
[  992.434546][T28753]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  992.440016][T28753]  __se_sys_ioctl+0xfb/0x170
[  992.444619][T28753]  do_syscall_64+0x2b/0x70
[  992.449050][T28753]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  992.454940][T28753] RIP: 0033:0x7f94af288e07
[  992.459347][T28753] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  992.479042][T28753] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  992.487475][T28753] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  992.495450][T28753] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  992.503429][T28753] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  992.511385][T28753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  992.519345][T28753] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  992.527014][ T3686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  992.527318][T28753]  </TASK>
[  992.553402][ T3686] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  992.578490][ T3686] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  992.588067][ T3687] usb 6-1: device descriptor read/8, error -71
[  992.597557][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.606147][T28753] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  992.619784][T28753] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  992.636772][T28753] NILFS (loop2): mounting unchecked fs
[  992.645361][T28753] NILFS (loop2): I/O error reading segment
[  992.652553][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[  992.652631][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
[  992.684755][T28753] NILFS (loop2): error -5 while searching super root
16:11:44 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902240001010000000904000001030100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:44 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000700"})

16:11:44 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:44 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 46)

16:11:44 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000c00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  993.215260][T26601] usb 1-1: USB disconnect, device number 20
[  993.250857][T28776] loop2: detected capacity change from 0 to 5
[  993.271519][T28776] FAULT_INJECTION: forcing a failure.
[  993.271519][T28776] name failslab, interval 1, probability 0, space 0, times 0
[  993.293476][T28776] CPU: 0 PID: 28776 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  993.304012][T28776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  993.314075][T28776] Call Trace:
[  993.317356][T28776]  <TASK>
[  993.320283][T28776]  dump_stack_lvl+0x1e3/0x2cb
[  993.325137][T28776]  ? bfq_pos_tree_add_move+0x436/0x436
[  993.330591][T28776]  ? panic+0x76e/0x76e
[  993.334658][T28776]  ? add_uevent_var+0x269/0x440
[  993.339504][T28776]  should_fail+0x384/0x4b0
[  993.343919][T28776]  ? call_usermodehelper_setup+0x8a/0x260
[  993.349637][T28776]  should_failslab+0x5/0x20
[  993.354144][T28776]  kmem_cache_alloc_trace+0x68/0x310
[  993.359455][T28776]  ? memcpy+0x3c/0x60
[  993.363449][T28776]  call_usermodehelper_setup+0x8a/0x260
[  993.369003][T28776]  ? init_uevent_argv+0x1f0/0x1f0
[  993.374027][T28776]  kobject_uevent_env+0x7c1/0x8e0
[  993.379047][T28776]  ? loop_rootcg_workfn+0x20/0x20
[  993.384080][T28776]  loop_configure+0xd8d/0x1200
[  993.388857][T28776]  lo_ioctl+0x89e/0x1eb0
[  993.393107][T28776]  ? mark_lock+0x98/0x350
[  993.397436][T28776]  ? lo_release+0x1f0/0x1f0
[  993.401937][T28776]  ? rcu_lock_release+0x5/0x20
[  993.406722][T28776]  ? rcu_read_lock_sched_held+0x89/0x130
[  993.412348][T28776]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  993.418361][T28776]  ? read_lock_is_recursive+0x10/0x10
[  993.423820][T28776]  ? rcu_lock_release+0x5/0x20
[  993.428570][T28776]  ? __lock_acquire+0x1f80/0x1f80
[  993.433580][T28776]  ? deref_stack_reg+0xbd/0x110
[  993.438431][T28776]  ? stack_trace_save+0x1f0/0x1f0
[  993.443455][T28776]  ? is_bpf_text_address+0x253/0x270
[  993.448734][T28776]  ? stack_trace_save+0x1f0/0x1f0
[  993.453746][T28776]  ? kernel_text_address+0x9e/0xd0
[  993.458858][T28776]  ? __kernel_text_address+0x9/0x40
[  993.464050][T28776]  ? unwind_get_return_address+0x48/0x80
[  993.469673][T28776]  ? arch_stack_walk+0xf8/0x140
[  993.474526][T28776]  ? stack_trace_save+0x12d/0x1f0
[  993.479540][T28776]  ? stack_trace_snprint+0xf0/0xf0
[  993.484647][T28776]  ? __stack_depot_save+0x33/0x490
[  993.489760][T28776]  ? kfree+0xc6/0x210
[  993.493732][T28776]  ? kasan_set_track+0x5e/0x70
[  993.498499][T28776]  ? kasan_set_track+0x4c/0x70
[  993.503254][T28776]  ? kasan_set_free_info+0x1f/0x40
[  993.508355][T28776]  ? ____kasan_slab_free+0xd8/0x110
[  993.513543][T28776]  ? slab_free_freelist_hook+0x12e/0x1a0
[  993.519162][T28776]  ? kfree+0xc6/0x210
[  993.523128][T28776]  ? tomoyo_path_number_perm+0x5ee/0x7b0
[  993.528753][T28776]  ? security_file_ioctl+0x55/0xb0
[  993.533850][T28776]  ? __se_sys_ioctl+0x48/0x170
[  993.538597][T28776]  ? do_syscall_64+0x2b/0x70
[  993.543175][T28776]  ? entry_SYSCALL_64_after_hwframe+0x44/0xae
[  993.549246][T28776]  ? rcu_lock_release+0x5/0x20
[  993.554000][T28776]  ? rcu_read_lock_sched_held+0x89/0x130
[  993.559620][T28776]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  993.565586][T28776]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[  993.571563][T28776]  ? do_vfs_ioctl+0xc71/0x2a70
[  993.576340][T28776]  ? blkdev_common_ioctl+0x6b0/0x1e90
[  993.581705][T28776]  ? blkdev_bszset+0x250/0x250
[  993.586476][T28776]  ? memset+0x1f/0x40
[  993.590456][T28776]  ? smack_file_ioctl+0x298/0x3a0
[  993.595471][T28776]  ? smack_file_alloc_security+0xd0/0xd0
[  993.601104][T28776]  ? lo_release+0x1f0/0x1f0
[  993.605595][T28776]  blkdev_ioctl+0x3a6/0x760
[  993.610090][T28776]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  993.615547][T28776]  ? bpf_lsm_file_ioctl+0x5/0x10
[  993.620474][T28776]  ? security_file_ioctl+0x9d/0xb0
[  993.625575][T28776]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  993.631020][T28776]  __se_sys_ioctl+0xfb/0x170
[  993.635604][T28776]  do_syscall_64+0x2b/0x70
[  993.640011][T28776]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  993.645894][T28776] RIP: 0033:0x7f94af288e07
[  993.650301][T28776] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  993.669895][T28776] RSP: 002b:00007f94b0302f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  993.678307][T28776] RAX: ffffffffffffffda RBX: 00007f94af2d29c8 RCX: 00007f94af288e07
[  993.686274][T28776] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  993.694238][T28776] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f94b03031d0
[  993.702202][T28776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  993.710164][T28776] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
[  993.718140][T28776]  </TASK>
[  993.735165][T28776] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  993.746901][T28776] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  993.761689][T28776] NILFS (loop2): mounting unchecked fs
[  993.768763][T28776] NILFS (loop2): I/O error reading segment
[  993.775033][T28776] NILFS (loop2): error -5 while searching super root
16:11:45 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 47)

[  993.893767][T28792] loop2: detected capacity change from 0 to 5
[  993.901643][T28792] FAULT_INJECTION: forcing a failure.
[  993.901643][T28792] name failslab, interval 1, probability 0, space 0, times 0
[  993.915048][T28792] CPU: 1 PID: 28792 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  993.925567][T28792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  993.935626][T28792] Call Trace:
[  993.938913][T28792]  <TASK>
[  993.941850][T28792]  dump_stack_lvl+0x1e3/0x2cb
[  993.946537][T28792]  ? bfq_pos_tree_add_move+0x436/0x436
[  993.951996][T28792]  ? panic+0x76e/0x76e
[  993.956053][T28792]  ? __might_sleep+0xc0/0xc0
[  993.960632][T28792]  should_fail+0x384/0x4b0
[  993.965034][T28792]  ? getname_flags+0xb8/0x4e0
[  993.969699][T28792]  should_failslab+0x5/0x20
[  993.974217][T28792]  kmem_cache_alloc+0x69/0x2f0
[  993.979086][T28792]  ? vtime_user_exit+0x2b2/0x3e0
[  993.984037][T28792]  getname_flags+0xb8/0x4e0
[  993.988558][T28792]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  993.994550][T28792]  ? lockdep_hardirqs_on+0x95/0x140
[  993.999758][T28792]  __x64_sys_mkdir+0x5b/0x80
[  994.004352][T28792]  do_syscall_64+0x2b/0x70
[  994.008753][T28792]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  994.014634][T28792] RIP: 0033:0x7f94af288157
[  994.019034][T28792] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  994.038634][T28792] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[  994.047039][T28792] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[  994.054998][T28792] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[  994.062954][T28792] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[  994.070913][T28792] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  994.078874][T28792] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[  994.086851][T28792]  </TASK>
16:11:45 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 48)

[  994.166980][T13502] usb 4-1: reset high-speed USB device number 82 using dummy_hcd
[  994.174932][ T3687] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  994.229222][T28800] loop2: detected capacity change from 0 to 5
[  994.235873][T28800] FAULT_INJECTION: forcing a failure.
[  994.235873][T28800] name failslab, interval 1, probability 0, space 0, times 0
[  994.249087][T26601] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  994.257308][T28800] CPU: 1 PID: 28800 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  994.267817][T28800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  994.278057][T28800] Call Trace:
[  994.281326][T28800]  <TASK>
[  994.284248][T28800]  dump_stack_lvl+0x1e3/0x2cb
[  994.288913][T28800]  ? bfq_pos_tree_add_move+0x436/0x436
[  994.294355][T28800]  ? panic+0x76e/0x76e
[  994.298412][T28800]  ? __might_sleep+0xc0/0xc0
[  994.302994][T28800]  should_fail+0x384/0x4b0
[  994.307417][T28800]  ? getname_flags+0xb8/0x4e0
[  994.312088][T28800]  should_failslab+0x5/0x20
[  994.316580][T28800]  kmem_cache_alloc+0x69/0x2f0
[  994.321344][T28800]  ? vtime_user_exit+0x2b2/0x3e0
[  994.326291][T28800]  getname_flags+0xb8/0x4e0
[  994.330800][T28800]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[  994.336764][T28800]  ? lockdep_hardirqs_on+0x95/0x140
[  994.341955][T28800]  __x64_sys_mkdir+0x5b/0x80
[  994.346553][T28800]  do_syscall_64+0x2b/0x70
[  994.350951][T28800]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  994.356823][T28800] RIP: 0033:0x7f94af288157
[  994.361220][T28800] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  994.380808][T28800] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[  994.389220][T28800] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[  994.397182][T28800] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[  994.405140][T28800] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[  994.413104][T28800] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  994.421064][T28800] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
16:11:46 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000700"})

[  994.429042][T28800]  </TASK>
16:11:46 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:46 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 49)

[  994.450642][  T144] usb 5-1: USB disconnect, device number 125
[  994.477580][ T3687] usb 6-1: no configurations
[  994.482364][ T3687] usb 6-1: can't read configurations, error -22
[  994.519318][ T3687] usb usb6-port1: unable to enumerate USB device
[  994.543424][T28816] loop2: detected capacity change from 0 to 5
[  994.551843][T28816] FAULT_INJECTION: forcing a failure.
[  994.551843][T28816] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  994.567770][T28816] CPU: 1 PID: 28816 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  994.578292][T28816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  994.588350][T28816] Call Trace:
[  994.591636][T28816]  <TASK>
[  994.594572][T28816]  dump_stack_lvl+0x1e3/0x2cb
[  994.599268][T28816]  ? bfq_pos_tree_add_move+0x436/0x436
[  994.604763][T28816]  ? panic+0x76e/0x76e
[  994.608852][T28816]  ? rcu_read_lock_sched_held+0x89/0x130
[  994.614501][T28816]  should_fail+0x384/0x4b0
[  994.618932][T28816]  strncpy_from_user+0x32/0x330
[  994.623793][T28816]  getname_flags+0xf5/0x4e0
[  994.628296][T28816]  ? lockdep_hardirqs_on+0x95/0x140
[  994.633511][T28816]  __x64_sys_mkdir+0x5b/0x80
[  994.638112][T28816]  do_syscall_64+0x2b/0x70
[  994.642529][T28816]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  994.648403][T28816] RIP: 0033:0x7f94af288157
[  994.652799][T28816] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  994.672381][T28816] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[  994.680778][T28816] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[  994.688834][T28816] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[  994.696784][T28816] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[  994.704734][T28816] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  994.712685][T28816] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[  994.720668][T28816]  </TASK>
16:11:46 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 50)

[  994.810821][T28824] loop2: detected capacity change from 0 to 5
[  994.820810][T28824] FAULT_INJECTION: forcing a failure.
[  994.820810][T28824] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  994.837908][T28824] CPU: 1 PID: 28824 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  994.848430][T28824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  994.858496][T28824] Call Trace:
[  994.861780][T28824]  <TASK>
[  994.864718][T28824]  dump_stack_lvl+0x1e3/0x2cb
[  994.869408][T28824]  ? bfq_pos_tree_add_move+0x436/0x436
[  994.874857][T28824]  ? panic+0x76e/0x76e
[  994.878915][T28824]  ? rcu_read_lock_sched_held+0x89/0x130
[  994.884532][T28824]  should_fail+0x384/0x4b0
[  994.888939][T28824]  strncpy_from_user+0x32/0x330
[  994.893779][T28824]  getname_flags+0xf5/0x4e0
[  994.898278][T28824]  ? lockdep_hardirqs_on+0x95/0x140
[  994.903497][T28824]  __x64_sys_mkdir+0x5b/0x80
[  994.908105][T28824]  do_syscall_64+0x2b/0x70
[  994.912524][T28824]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  994.918403][T28824] RIP: 0033:0x7f94af288157
[  994.922809][T28824] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  994.942410][T28824] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[  994.950805][T28824] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
16:11:46 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000700"})

[  994.958768][T28824] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[  994.966729][T28824] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[  994.974772][T28824] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  994.982731][T28824] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[  994.990702][T28824]  </TASK>
[  995.036871][T26601] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  995.048063][T26601] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  995.061414][T26601] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  995.070880][T26601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.119768][T26601] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  995.146767][  T144] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  995.506711][  T144] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  995.516877][  T144] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  995.525821][  T144] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  995.538802][  T144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.790143][  T144] usb 5-1: USB disconnect, device number 126
[  997.267872][ T3686] usb 4-1: USB disconnect, device number 82
16:11:49 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902240001010000000904000001030100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:49 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 51)

16:11:49 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000700"})

16:11:49 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:49 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000d00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:11:49 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[  997.455258][ T3736] usb 1-1: USB disconnect, device number 21
[  997.510026][T28871] loop2: detected capacity change from 0 to 5
[  997.518914][T28871] FAULT_INJECTION: forcing a failure.
[  997.518914][T28871] name failslab, interval 1, probability 0, space 0, times 0
[  997.543266][T28871] CPU: 0 PID: 28871 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  997.553796][T28871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  997.563845][T28871] Call Trace:
[  997.567137][T28871]  <TASK>
[  997.570074][T28871]  dump_stack_lvl+0x1e3/0x2cb
[  997.574767][T28871]  ? bfq_pos_tree_add_move+0x436/0x436
[  997.580222][T28871]  ? panic+0x76e/0x76e
[  997.584312][T28871]  ? __might_sleep+0xc0/0xc0
[  997.588913][T28871]  ? rcu_read_lock_sched_held+0x89/0x130
[  997.594553][T28871]  should_fail+0x384/0x4b0
[  997.598968][T28871]  ? tomoyo_realpath_from_path+0xd8/0x5f0
[  997.604702][T28871]  should_failslab+0x5/0x20
[  997.609240][T28871]  __kmalloc+0x8b/0x370
[  997.613399][T28871]  ? kfree+0x2f/0x210
[  997.617364][T28871]  ? __d_add+0x4aa/0x7e0
[  997.621615][T28871]  tomoyo_realpath_from_path+0xd8/0x5f0
[  997.627168][T28871]  tomoyo_path_number_perm+0x219/0x7b0
[  997.632620][T28871]  ? _raw_spin_unlock+0x24/0x40
[  997.637466][T28871]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  997.642911][T28871]  ? d_splice_alias+0x122/0x3b0
[  997.647754][T28871]  ? ext4_lookup+0x594/0xb20
[  997.652443][T28871]  ? _raw_spin_unlock+0x24/0x40
[  997.657283][T28871]  ? d_alloc+0x193/0x1d0
[  997.661515][T28871]  ? __lookup_hash+0x123/0x240
[  997.666269][T28871]  tomoyo_path_mkdir+0xe3/0x120
[  997.671119][T28871]  ? tomoyo_path_unlink+0x100/0x100
[  997.676308][T28871]  ? kern_path_create+0x180/0x180
[  997.681325][T28871]  ? __lock_acquire+0x1f80/0x1f80
[  997.686346][T28871]  security_path_mkdir+0xd5/0x160
[  997.691363][T28871]  do_mkdirat+0x19f/0x510
[  997.695684][T28871]  ? __check_object_size+0x15a/0x210
[  997.700962][T28871]  ? vfs_mkdir+0x4d0/0x4d0
[  997.705376][T28871]  ? getname_flags+0x1ea/0x4e0
[  997.710130][T28871]  ? lockdep_hardirqs_on+0x95/0x140
[  997.715323][T28871]  __x64_sys_mkdir+0x6a/0x80
[  997.719908][T28871]  do_syscall_64+0x2b/0x70
[  997.724314][T28871]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  997.730232][T28871] RIP: 0033:0x7f94af288157
[  997.734637][T28871] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  997.754228][T28871] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[  997.762634][T28871] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[  997.770594][T28871] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[  997.778552][T28871] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[  997.786514][T28871] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  997.794478][T28871] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[  997.802458][T28871]  </TASK>
[  997.814065][T28871] ERROR: Out of memory at tomoyo_realpath_from_path.
[  997.825431][T28871] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  997.834149][T28871] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  997.844591][T28871] NILFS (loop2): mounting unchecked fs
[  997.850769][T28871] NILFS (loop2): I/O error reading segment
[  997.857451][T28871] NILFS (loop2): error -5 while searching super root
16:11:49 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 52)

[  997.876615][T13502] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  997.947356][T28883] loop2: detected capacity change from 0 to 5
[  997.955491][T28883] FAULT_INJECTION: forcing a failure.
[  997.955491][T28883] name failslab, interval 1, probability 0, space 0, times 0
[  997.968870][  T144] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  997.976615][ T3686] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  997.979472][T28883] CPU: 1 PID: 28883 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  997.994761][T28883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  998.004830][T28883] Call Trace:
[  998.008129][T28883]  <TASK>
[  998.011069][T28883]  dump_stack_lvl+0x1e3/0x2cb
[  998.015858][T28883]  ? bfq_pos_tree_add_move+0x436/0x436
[  998.021332][T28883]  ? panic+0x76e/0x76e
[  998.025399][T28883]  should_fail+0x384/0x4b0
[  998.029810][T28883]  ? tomoyo_encode+0x26f/0x540
[  998.034559][T28883]  should_failslab+0x5/0x20
[  998.039055][T28883]  __kmalloc+0x8b/0x370
[  998.043222][T28883]  ? prepend_path+0xb70/0xb70
[  998.047917][T28883]  tomoyo_encode+0x26f/0x540
[  998.052539][T28883]  tomoyo_realpath_from_path+0x5b4/0x5f0
[  998.058195][T28883]  tomoyo_path_number_perm+0x219/0x7b0
[  998.063645][T28883]  ? _raw_spin_unlock+0x24/0x40
[  998.068494][T28883]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  998.073938][T28883]  ? d_splice_alias+0x122/0x3b0
[  998.078782][T28883]  ? ext4_lookup+0x594/0xb20
[  998.083379][T28883]  ? _raw_spin_unlock+0x24/0x40
[  998.088222][T28883]  ? d_alloc+0x193/0x1d0
[  998.092482][T28883]  ? __lookup_hash+0x123/0x240
[  998.097271][T28883]  tomoyo_path_mkdir+0xe3/0x120
[  998.102135][T28883]  ? tomoyo_path_unlink+0x100/0x100
[  998.107329][T28883]  ? kern_path_create+0x180/0x180
[  998.112347][T28883]  ? __lock_acquire+0x1f80/0x1f80
[  998.117372][T28883]  security_path_mkdir+0xd5/0x160
[  998.122389][T28883]  do_mkdirat+0x19f/0x510
[  998.126711][T28883]  ? __check_object_size+0x15a/0x210
[  998.131986][T28883]  ? vfs_mkdir+0x4d0/0x4d0
[  998.136395][T28883]  ? getname_flags+0x1ea/0x4e0
[  998.141148][T28883]  ? lockdep_hardirqs_on+0x95/0x140
[  998.146368][T28883]  __x64_sys_mkdir+0x6a/0x80
[  998.150970][T28883]  do_syscall_64+0x2b/0x70
[  998.155375][T28883]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  998.161256][T28883] RIP: 0033:0x7f94af288157
[  998.165674][T28883] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  998.185381][T28883] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[  998.193795][T28883] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[  998.201777][T28883] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[  998.209762][T28883] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[  998.217719][T28883] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  998.225795][T28883] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[  998.233798][T28883]  </TASK>
[  998.239459][ T3736] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  998.259600][T28883] ERROR: Out of memory at tomoyo_realpath_from_path.
[  998.270404][T28883] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[  998.279275][T28883] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  998.290125][T28883] NILFS (loop2): mounting unchecked fs
[  998.296349][T28883] NILFS (loop2): I/O error reading segment
[  998.306115][T28883] NILFS (loop2): error -5 while searching super root
16:11:50 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 53)

16:11:50 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000000000000000700"})

[  998.406713][T13502] usb 6-1: no configurations
[  998.411353][T13502] usb 6-1: can't read configurations, error -22
[  998.432447][T28890] loop2: detected capacity change from 0 to 5
[  998.457062][ T3686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  998.458290][T28890] FAULT_INJECTION: forcing a failure.
[  998.458290][T28890] name failslab, interval 1, probability 0, space 0, times 0
[  998.494044][ T3686] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  998.503225][T28890] CPU: 1 PID: 28890 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  998.503256][T28890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  998.503268][T28890] Call Trace:
[  998.503276][T28890]  <TASK>
[  998.503286][T28890]  dump_stack_lvl+0x1e3/0x2cb
[  998.503317][T28890]  ? bfq_pos_tree_add_move+0x436/0x436
[  998.503340][T28890]  ? panic+0x76e/0x76e
[  998.503367][T28890]  ? __might_sleep+0xc0/0xc0
[  998.503398][T28890]  should_fail+0x384/0x4b0
[  998.503421][T28890]  ? ext4_alloc_inode+0x27/0x570
[  998.503531][T28890]  should_failslab+0x5/0x20
[  998.503551][T28890]  kmem_cache_alloc_lru+0x75/0x2d0
[  998.503579][T28890]  ext4_alloc_inode+0x27/0x570
[  998.523709][ T3686] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  998.524088][T28890]  ? ext4_unregister_li_request+0x200/0x200
[  998.527851][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  998.530280][T28890]  new_inode_pseudo+0x61/0x210
[  998.530315][T28890]  new_inode+0x25/0x1d0
[  998.530342][T28890]  __ext4_new_inode+0x29a/0x4740
[  998.609249][T28890]  ? __dquot_initialize+0x241/0xe10
[  998.614446][T28890]  ? ext4_mark_inode_used+0xc00/0xc00
[  998.619838][T28890]  ? smack_inode_permission+0x29a/0x340
[  998.625421][T28890]  ext4_mkdir+0x41a/0xcf0
[  998.629766][T28890]  ? ext4_symlink+0xfe0/0xfe0
[  998.634435][T28890]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  998.639460][T28890]  ? security_inode_mkdir+0xdd/0x120
[  998.644822][T28890]  vfs_mkdir+0x2f6/0x4d0
[  998.649066][T28890]  do_mkdirat+0x267/0x510
[  998.653411][T28890]  ? __check_object_size+0x15a/0x210
[  998.658711][T28890]  ? vfs_mkdir+0x4d0/0x4d0
[  998.663118][T28890]  ? getname_flags+0x1ea/0x4e0
[  998.667864][T28890]  ? lockdep_hardirqs_on+0x95/0x140
[  998.673194][T28890]  __x64_sys_mkdir+0x6a/0x80
[  998.677794][T28890]  do_syscall_64+0x2b/0x70
[  998.682215][T28890]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  998.688129][T28890] RIP: 0033:0x7f94af288157
[  998.692537][T28890] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  998.712148][T28890] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[  998.720553][T28890] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[  998.728509][T28890] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[  998.736467][T28890] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[  998.744429][T28890] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  998.752387][T28890] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[  998.760356][T28890]  </TASK>
[  998.765927][T13502] usb 6-1: new high-speed USB device number 57 using dummy_hcd
16:11:50 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 54)

[  998.836740][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  998.856249][ T3686] usb 5-1: USB disconnect, device number 127
[  998.857113][ T3736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  998.887841][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  998.902606][ T3736] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  998.917005][  T144] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  998.926332][ T3736] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[  998.928378][T28906] loop2: detected capacity change from 0 to 5
[  998.936039][  T144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  998.950816][ T3736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  998.971329][T28906] FAULT_INJECTION: forcing a failure.
[  998.971329][T28906] name failslab, interval 1, probability 0, space 0, times 0
[  998.984463][T28906] CPU: 1 PID: 28906 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  998.994984][T28906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  999.005043][T28906] Call Trace:
[  999.008309][T28906]  <TASK>
[  999.011235][T28906]  dump_stack_lvl+0x1e3/0x2cb
[  999.015943][T28906]  ? bfq_pos_tree_add_move+0x436/0x436
[  999.021391][T28906]  ? panic+0x76e/0x76e
[  999.025464][T28906]  ? __might_sleep+0xc0/0xc0
[  999.030048][T28906]  should_fail+0x384/0x4b0
[  999.034449][T28906]  ? ext4_alloc_inode+0x27/0x570
[  999.039376][T28906]  should_failslab+0x5/0x20
[  999.043923][T28906]  kmem_cache_alloc_lru+0x75/0x2d0
[  999.049042][T28906]  ext4_alloc_inode+0x27/0x570
[  999.053802][T28906]  ? ext4_unregister_li_request+0x200/0x200
[  999.059696][T28906]  new_inode_pseudo+0x61/0x210
[  999.064465][T28906]  new_inode+0x25/0x1d0
[  999.068624][T28906]  __ext4_new_inode+0x29a/0x4740
[  999.073563][T28906]  ? __dquot_initialize+0x241/0xe10
[  999.078753][T28906]  ? ext4_mark_inode_used+0xc00/0xc00
[  999.084126][T28906]  ? smack_inode_permission+0x29a/0x340
[  999.089668][T28906]  ext4_mkdir+0x41a/0xcf0
[  999.094001][T28906]  ? ext4_symlink+0xfe0/0xfe0
[  999.098675][T28906]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  999.103687][T28906]  ? security_inode_mkdir+0xdd/0x120
[  999.108967][T28906]  vfs_mkdir+0x2f6/0x4d0
[  999.113210][T28906]  do_mkdirat+0x267/0x510
[  999.117530][T28906]  ? __check_object_size+0x15a/0x210
[  999.122810][T28906]  ? vfs_mkdir+0x4d0/0x4d0
[  999.127215][T28906]  ? getname_flags+0x1ea/0x4e0
[  999.131971][T28906]  ? lockdep_hardirqs_on+0x95/0x140
[  999.137165][T28906]  __x64_sys_mkdir+0x6a/0x80
[  999.141750][T28906]  do_syscall_64+0x2b/0x70
[  999.146156][T28906]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  999.152040][T28906] RIP: 0033:0x7f94af288157
[  999.156448][T28906] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  999.176044][T28906] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
16:11:50 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000700"})

[  999.184537][T28906] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[  999.192497][T28906] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[  999.200455][T28906] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[  999.208414][T28906] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  999.216373][T28906] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[  999.224344][T28906]  </TASK>
16:11:50 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 55)

[  999.249055][ T3736] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  999.266809][T13502] usb 6-1: no configurations
[  999.271632][T13502] usb 6-1: can't read configurations, error -22
[  999.284945][T13502] usb usb6-port1: attempt power cycle
[  999.350564][T28920] loop2: detected capacity change from 0 to 5
[  999.358542][T28920] FAULT_INJECTION: forcing a failure.
[  999.358542][T28920] name failslab, interval 1, probability 0, space 0, times 0
[  999.373139][T28920] CPU: 1 PID: 28920 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[  999.383661][T28920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  999.393716][T28920] Call Trace:
[  999.396988][T28920]  <TASK>
[  999.399927][T28920]  dump_stack_lvl+0x1e3/0x2cb
[  999.404625][T28920]  ? bfq_pos_tree_add_move+0x436/0x436
[  999.410094][T28920]  ? panic+0x76e/0x76e
[  999.414161][T28920]  ? __might_sleep+0xc0/0xc0
[  999.418776][T28920]  should_fail+0x384/0x4b0
[  999.423216][T28920]  ? smack_inode_init_security+0x3a5/0x470
[  999.429039][T28920]  should_failslab+0x5/0x20
[  999.433552][T28920]  __kmalloc_track_caller+0x89/0x350
[  999.438827][T28920]  ? mb_cache_destroy+0x350/0x350
[  999.443909][T28920]  kstrdup+0x31/0x70
[  999.447812][T28920]  smack_inode_init_security+0x3a5/0x470
[  999.453566][T28920]  security_inode_init_security+0x170/0x3f0
[  999.459458][T28920]  ? ext4_init_security+0x40/0x40
[  999.464532][T28920]  ? security_dentry_create_files_as+0xd0/0xd0
[  999.470699][T28920]  ? ext4_init_acl+0x3a7/0x410
[  999.475475][T28920]  ? ext4_has_metadata_csum+0x1c0/0x1c0
[  999.481028][T28920]  ? ext4_has_metadata_csum+0x134/0x1c0
[  999.486578][T28920]  __ext4_new_inode+0x38b9/0x4740
[  999.491625][T28920]  ? ext4_mark_inode_used+0xc00/0xc00
[  999.497005][T28920]  ? smack_inode_permission+0x29a/0x340
[  999.502548][T28920]  ext4_mkdir+0x41a/0xcf0
[  999.506880][T28920]  ? ext4_symlink+0xfe0/0xfe0
[  999.511551][T28920]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  999.516566][T28920]  ? security_inode_mkdir+0xdd/0x120
[  999.521857][T28920]  vfs_mkdir+0x2f6/0x4d0
[  999.526103][T28920]  do_mkdirat+0x267/0x510
[  999.530427][T28920]  ? __check_object_size+0x15a/0x210
[  999.535707][T28920]  ? vfs_mkdir+0x4d0/0x4d0
[  999.540115][T28920]  ? getname_flags+0x1ea/0x4e0
[  999.544872][T28920]  ? lockdep_hardirqs_on+0x95/0x140
[  999.550063][T28920]  __x64_sys_mkdir+0x6a/0x80
[  999.554641][T28920]  do_syscall_64+0x2b/0x70
[  999.559045][T28920]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  999.564930][T28920] RIP: 0033:0x7f94af288157
[  999.569332][T28920] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  999.588923][T28920] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[  999.597324][T28920] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[  999.605285][T28920] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[  999.613248][T28920] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[  999.621207][T28920] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[  999.629162][T28920] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[  999.637138][T28920]  </TASK>
[  999.801848][  T144] wacom 0003:056A:0331.0132: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  999.936745][T13502] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1000.066812][T13502] usb 6-1: no configurations
[ 1000.071547][T13502] usb 6-1: can't read configurations, error -22
[ 1000.226752][T13502] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1000.258031][  T144] usb 4-1: USB disconnect, device number 83
[ 1000.357038][T13502] usb 6-1: no configurations
[ 1000.361836][T13502] usb 6-1: can't read configurations, error -22
[ 1000.369389][T13502] usb usb6-port1: unable to enumerate USB device
16:11:53 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902240001010000000904000001030100"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:53 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 56)

16:11:53 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:53 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000700"})

16:11:53 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:53 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000e00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1001.360209][ T3684] usb 1-1: USB disconnect, device number 22
[ 1001.405724][T28955] loop2: detected capacity change from 0 to 5
[ 1001.433080][T28955] FAULT_INJECTION: forcing a failure.
[ 1001.433080][T28955] name failslab, interval 1, probability 0, space 0, times 0
[ 1001.463289][T28955] CPU: 0 PID: 28955 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1001.473827][T28955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1001.483896][T28955] Call Trace:
[ 1001.487184][T28955]  <TASK>
[ 1001.490122][T28955]  dump_stack_lvl+0x1e3/0x2cb
[ 1001.494907][T28955]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1001.500374][T28955]  ? panic+0x76e/0x76e
[ 1001.504556][T28955]  ? __might_sleep+0xc0/0xc0
[ 1001.509167][T28955]  should_fail+0x384/0x4b0
[ 1001.513682][T28955]  ? smack_inode_init_security+0x3a5/0x470
[ 1001.519484][T28955]  should_failslab+0x5/0x20
[ 1001.523999][T28955]  __kmalloc_track_caller+0x89/0x350
[ 1001.529300][T28955]  ? mb_cache_destroy+0x350/0x350
[ 1001.534335][T28955]  kstrdup+0x31/0x70
[ 1001.538261][T28955]  smack_inode_init_security+0x3a5/0x470
[ 1001.543916][T28955]  security_inode_init_security+0x170/0x3f0
[ 1001.549823][T28955]  ? ext4_init_security+0x40/0x40
[ 1001.554859][T28955]  ? security_dentry_create_files_as+0xd0/0xd0
[ 1001.561018][T28955]  ? ext4_init_acl+0x3a7/0x410
[ 1001.565800][T28955]  ? ext4_has_metadata_csum+0x1c0/0x1c0
[ 1001.571367][T28955]  ? ext4_has_metadata_csum+0x134/0x1c0
[ 1001.576932][T28955]  __ext4_new_inode+0x38b9/0x4740
[ 1001.581998][T28955]  ? ext4_mark_inode_used+0xc00/0xc00
[ 1001.587404][T28955]  ? smack_inode_permission+0x29a/0x340
[ 1001.592959][T28955]  ext4_mkdir+0x41a/0xcf0
[ 1001.597303][T28955]  ? ext4_symlink+0xfe0/0xfe0
[ 1001.601994][T28955]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1001.607026][T28955]  ? security_inode_mkdir+0xdd/0x120
[ 1001.612355][T28955]  vfs_mkdir+0x2f6/0x4d0
[ 1001.616624][T28955]  do_mkdirat+0x267/0x510
[ 1001.620961][T28955]  ? __check_object_size+0x15a/0x210
[ 1001.626263][T28955]  ? vfs_mkdir+0x4d0/0x4d0
[ 1001.630791][T28955]  ? getname_flags+0x1ea/0x4e0
[ 1001.635558][T28955]  ? lockdep_hardirqs_on+0x95/0x140
[ 1001.640757][T28955]  __x64_sys_mkdir+0x6a/0x80
[ 1001.645359][T28955]  do_syscall_64+0x2b/0x70
[ 1001.649869][T28955]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1001.655854][T28955] RIP: 0033:0x7f94af288157
[ 1001.660261][T28955] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1001.679874][T28955] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1001.686680][T13502] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1001.688304][T28955] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1001.688367][T28955] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1001.688382][T28955] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1001.719791][T28955] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1001.727947][T28955] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1001.735947][T28955]  </TASK>
16:11:53 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 57)

[ 1001.838027][T28973] loop2: detected capacity change from 0 to 5
[ 1001.850621][T28973] FAULT_INJECTION: forcing a failure.
[ 1001.850621][T28973] name failslab, interval 1, probability 0, space 0, times 0
[ 1001.868216][T28973] CPU: 0 PID: 28973 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1001.878745][T28973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1001.888810][T28973] Call Trace:
[ 1001.892100][T28973]  <TASK>
[ 1001.895038][T28973]  dump_stack_lvl+0x1e3/0x2cb
[ 1001.899740][T28973]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1001.905220][T28973]  ? panic+0x76e/0x76e
[ 1001.909323][T28973]  should_fail+0x384/0x4b0
[ 1001.913757][T28973]  ? ext4_find_extent+0x342/0xd90
[ 1001.918793][T28973]  should_failslab+0x5/0x20
[ 1001.923311][T28973]  __kmalloc+0x8b/0x370
[ 1001.927476][T28973]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1001.933118][T28973]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 1001.939111][T28973]  ext4_find_extent+0x342/0xd90
[ 1001.943968][T28973]  ? register_lock_class+0xfe/0x9d0
[ 1001.949165][T28973]  ? trace_ext4_ext_map_blocks_enter+0xea/0x280
[ 1001.955416][T28973]  ext4_ext_map_blocks+0x225/0x6890
[ 1001.960611][T28973]  ? print_irqtrace_events+0x220/0x220
[ 1001.966074][T28973]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1001.972222][T28973]  ? lockdep_hardirqs_on+0x95/0x140
[ 1001.977418][T28973]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 1001.983565][T28973]  ? ext4_ext_release+0x10/0x10
[ 1001.988411][T28973]  ? lock_acquire+0x21e/0x400
[ 1001.993088][T28973]  ? read_lock_is_recursive+0x10/0x10
[ 1001.998461][T28973]  ? ext4_es_lookup_extent+0x36c/0x720
[ 1002.003927][T28973]  ? __down_read_common+0x156/0x2a0
[ 1002.009128][T28973]  ext4_map_blocks+0x42e/0x1e20
[ 1002.013981][T28973]  ? ext4_issue_zeroout+0x260/0x260
[ 1002.019177][T28973]  ? __ext4_mark_inode_dirty+0x3d8/0x6a0
[ 1002.024838][T28973]  ext4_getblk+0x19c/0x710
[ 1002.029267][T28973]  ? ext4_get_block_unwritten+0x30/0x30
[ 1002.034817][T28973]  ? __brelse+0x54/0x90
[ 1002.039030][T28973]  ? __ext4_new_inode+0x3ae5/0x4740
[ 1002.044230][T28973]  ext4_bread+0x2a/0x170
[ 1002.048465][T28973]  ext4_append+0x1a6/0x370
[ 1002.052883][T28973]  ext4_init_new_dir+0x337/0xa10
[ 1002.057814][T28973]  ? ext4_init_dot_dotdot+0x4d0/0x4d0
[ 1002.063174][T28973]  ? smack_inode_permission+0x29a/0x340
[ 1002.068716][T28973]  ext4_mkdir+0x4fa/0xcf0
[ 1002.073041][T28973]  ? ext4_symlink+0xfe0/0xfe0
[ 1002.077708][T28973]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1002.082722][T28973]  ? security_inode_mkdir+0xdd/0x120
[ 1002.088001][T28973]  vfs_mkdir+0x2f6/0x4d0
[ 1002.092243][T28973]  do_mkdirat+0x267/0x510
[ 1002.096558][T28973]  ? __check_object_size+0x15a/0x210
[ 1002.101835][T28973]  ? vfs_mkdir+0x4d0/0x4d0
[ 1002.106243][T28973]  ? getname_flags+0x1ea/0x4e0
[ 1002.110999][T28973]  ? lockdep_hardirqs_on+0x95/0x140
[ 1002.116193][T28973]  __x64_sys_mkdir+0x6a/0x80
[ 1002.120773][T28973]  do_syscall_64+0x2b/0x70
[ 1002.125181][T28973]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1002.131064][T28973] RIP: 0033:0x7f94af288157
[ 1002.135477][T28973] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1002.155073][T28973] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1002.163485][T28973] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1002.171445][T28973] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1002.179405][T28973] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1002.187367][T28973] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1002.195326][T28973] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1002.203301][T28973]  </TASK>
[ 1002.207154][T13502] usb 6-1: no configurations
[ 1002.209533][T23068] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1002.211773][T13502] usb 6-1: can't read configurations, error -22
[ 1002.225701][ T3686] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1002.228661][T28973] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1002.241980][T28973] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1002.254863][T28973] NILFS (loop2): mounting unchecked fs
[ 1002.261475][T28973] NILFS (loop2): I/O error reading segment
[ 1002.267861][T28973] NILFS (loop2): error -5 while searching super root
16:11:54 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 58)

[ 1002.366717][T13502] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1002.377001][T28980] loop2: detected capacity change from 0 to 5
[ 1002.383632][T28980] FAULT_INJECTION: forcing a failure.
[ 1002.383632][T28980] name failslab, interval 1, probability 0, space 0, times 0
[ 1002.397309][ T3684] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1002.407202][T28980] CPU: 0 PID: 28980 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1002.417805][T28980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1002.427865][T28980] Call Trace:
[ 1002.431155][T28980]  <TASK>
[ 1002.434092][T28980]  dump_stack_lvl+0x1e3/0x2cb
[ 1002.438788][T28980]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1002.444255][T28980]  ? panic+0x76e/0x76e
[ 1002.448333][T28980]  should_fail+0x384/0x4b0
[ 1002.452757][T28980]  ? ext4_find_extent+0x342/0xd90
[ 1002.457771][T28980]  should_failslab+0x5/0x20
[ 1002.462294][T28980]  __kmalloc+0x8b/0x370
[ 1002.466464][T28980]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1002.472096][T28980]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 1002.478077][T28980]  ext4_find_extent+0x342/0xd90
[ 1002.482940][T28980]  ? register_lock_class+0xfe/0x9d0
[ 1002.488157][T28980]  ? trace_ext4_ext_map_blocks_enter+0xea/0x280
[ 1002.494407][T28980]  ext4_ext_map_blocks+0x225/0x6890
[ 1002.499618][T28980]  ? __lock_acquire+0x129a/0x1f80
[ 1002.504647][T28980]  ? ext4_ext_release+0x10/0x10
[ 1002.509510][T28980]  ? read_lock_is_recursive+0x10/0x10
[ 1002.514893][T28980]  ? ext4_es_lookup_extent+0x36c/0x720
[ 1002.520355][T28980]  ? __down_read_common+0x156/0x2a0
[ 1002.525557][T28980]  ext4_map_blocks+0x42e/0x1e20
[ 1002.530417][T28980]  ? ext4_issue_zeroout+0x260/0x260
[ 1002.535604][T28980]  ? __ext4_mark_inode_dirty+0x3d8/0x6a0
[ 1002.541239][T28980]  ext4_getblk+0x19c/0x710
[ 1002.545654][T28980]  ? ext4_get_block_unwritten+0x30/0x30
[ 1002.551190][T28980]  ? __brelse+0x54/0x90
[ 1002.555339][T28980]  ? __ext4_new_inode+0x3ae5/0x4740
[ 1002.560539][T28980]  ext4_bread+0x2a/0x170
[ 1002.564772][T28980]  ext4_append+0x1a6/0x370
[ 1002.569185][T28980]  ext4_init_new_dir+0x337/0xa10
[ 1002.574122][T28980]  ? ext4_init_dot_dotdot+0x4d0/0x4d0
[ 1002.579483][T28980]  ? smack_inode_permission+0x29a/0x340
[ 1002.585032][T28980]  ext4_mkdir+0x4fa/0xcf0
[ 1002.589364][T28980]  ? ext4_symlink+0xfe0/0xfe0
[ 1002.594036][T28980]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1002.599048][T28980]  ? security_inode_mkdir+0xdd/0x120
[ 1002.604332][T28980]  vfs_mkdir+0x2f6/0x4d0
[ 1002.608575][T28980]  do_mkdirat+0x267/0x510
[ 1002.612894][T28980]  ? __check_object_size+0x15a/0x210
[ 1002.618172][T28980]  ? vfs_mkdir+0x4d0/0x4d0
[ 1002.622582][T28980]  ? getname_flags+0x1ea/0x4e0
[ 1002.627334][T28980]  ? lockdep_hardirqs_on+0x95/0x140
[ 1002.632532][T28980]  __x64_sys_mkdir+0x6a/0x80
[ 1002.637111][T28980]  do_syscall_64+0x2b/0x70
[ 1002.641521][T28980]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1002.647407][T28980] RIP: 0033:0x7f94af288157
[ 1002.651812][T28980] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1002.671410][T28980] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1002.679814][T28980] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1002.687772][T28980] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1002.695732][T28980] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1002.703693][T28980] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
16:11:54 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000000000700"})

[ 1002.711651][T28980] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1002.719626][T28980]  </TASK>
[ 1002.790982][T28980] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1002.800770][T28980] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1002.812563][T28980] NILFS (loop2): mounting unchecked fs
[ 1002.819627][T28980] NILFS (loop2): I/O error reading segment
[ 1002.825536][T28980] NILFS (loop2): error -5 while searching super root
16:11:54 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 59)

[ 1002.886726][T13502] usb 6-1: no configurations
[ 1002.891603][T13502] usb 6-1: can't read configurations, error -22
[ 1002.898330][T13502] usb usb6-port1: attempt power cycle
[ 1002.906860][ T3686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1002.917654][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1002.956719][ T3686] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1002.962887][T28990] loop2: detected capacity change from 0 to 5
[ 1002.965712][ T3686] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1002.965743][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.967518][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1002.975571][T28990] FAULT_INJECTION: forcing a failure.
[ 1002.975571][T28990] name failslab, interval 1, probability 0, space 0, times 0
[ 1002.985861][T23068] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1003.014988][T28990] CPU: 1 PID: 28990 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1003.028165][T23068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1003.031674][T28990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1003.031689][T28990] Call Trace:
[ 1003.031697][T28990]  <TASK>
[ 1003.031707][T28990]  dump_stack_lvl+0x1e3/0x2cb
[ 1003.031740][T28990]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1003.066055][T28990]  ? panic+0x76e/0x76e
[ 1003.070145][T28990]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[ 1003.076152][T28990]  should_fail+0x384/0x4b0
[ 1003.080591][T28990]  ? ext4_find_extent+0x342/0xd90
[ 1003.085625][T28990]  should_failslab+0x5/0x20
[ 1003.090119][T28990]  __kmalloc+0x8b/0x370
[ 1003.094275][T28990]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1003.099922][T28990]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 1003.105921][T28990]  ext4_find_extent+0x342/0xd90
[ 1003.110777][T28990]  ? ext4_ext_map_blocks+0x24e6/0x6890
[ 1003.116249][T28990]  ? trace_ext4_ext_map_blocks_enter+0xea/0x280
[ 1003.122491][T28990]  ext4_ext_map_blocks+0x225/0x6890
[ 1003.127683][T28990]  ? __lock_acquire+0x129a/0x1f80
[ 1003.132716][T28990]  ? ext4_ext_release+0x10/0x10
[ 1003.137638][T28990]  ? read_lock_is_recursive+0x10/0x10
[ 1003.142995][T28990]  ? __might_sleep+0xc0/0xc0
[ 1003.147598][T28990]  ? ext4_es_lookup_extent+0x36c/0x720
[ 1003.153062][T28990]  ? __down_read_common+0x156/0x2a0
[ 1003.158266][T28990]  ext4_map_blocks+0xac7/0x1e20
[ 1003.163144][T28990]  ? ext4_issue_zeroout+0x260/0x260
[ 1003.168331][T28990]  ? __ext4_mark_inode_dirty+0x3d8/0x6a0
[ 1003.173971][T28990]  ext4_getblk+0x19c/0x710
[ 1003.178394][T28990]  ? ext4_get_block_unwritten+0x30/0x30
[ 1003.183948][T28990]  ? __brelse+0x54/0x90
[ 1003.188084][T28990]  ? __ext4_new_inode+0x3ae5/0x4740
[ 1003.193270][T28990]  ext4_bread+0x2a/0x170
[ 1003.197498][T28990]  ext4_append+0x1a6/0x370
[ 1003.201903][T28990]  ext4_init_new_dir+0x337/0xa10
[ 1003.206808][ T3684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1003.206839][T28990]  ? ext4_init_dot_dotdot+0x4d0/0x4d0
[ 1003.219813][ T3684] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1003.222240][T28990]  ? smack_inode_permission+0x29a/0x340
[ 1003.222279][T28990]  ext4_mkdir+0x4fa/0xcf0
[ 1003.222312][T28990]  ? ext4_symlink+0xfe0/0xfe0
[ 1003.238782][ T3684] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1003.240855][T28990]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1003.240884][T28990]  ? security_inode_mkdir+0xdd/0x120
[ 1003.240913][T28990]  vfs_mkdir+0x2f6/0x4d0
[ 1003.245339][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1003.249884][T28990]  do_mkdirat+0x267/0x510
[ 1003.249909][T28990]  ? __check_object_size+0x15a/0x210
[ 1003.249939][T28990]  ? vfs_mkdir+0x4d0/0x4d0
[ 1003.249963][T28990]  ? getname_flags+0x1ea/0x4e0
[ 1003.276713][ T3682] usb 5-1: USB disconnect, device number 2
[ 1003.281403][T28990]  ? lockdep_hardirqs_on+0x95/0x140
[ 1003.281440][T28990]  __x64_sys_mkdir+0x6a/0x80
[ 1003.281471][T28990]  do_syscall_64+0x2b/0x70
[ 1003.320221][T28990]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1003.326128][T28990] RIP: 0033:0x7f94af288157
[ 1003.330546][T28990] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1003.350133][T28990] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1003.358538][T28990] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1003.359541][ T3684] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1003.366505][T28990] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1003.366522][T28990] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1003.366536][T28990] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1003.366549][T28990] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1003.405627][T28990]  </TASK>
16:11:55 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 60)

[ 1003.507304][T29007] loop2: detected capacity change from 0 to 5
[ 1003.520192][T29007] FAULT_INJECTION: forcing a failure.
[ 1003.520192][T29007] name failslab, interval 1, probability 0, space 0, times 0
[ 1003.543517][T29007] CPU: 1 PID: 29007 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1003.554042][T29007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1003.564102][T29007] Call Trace:
[ 1003.567368][T29007]  <TASK>
[ 1003.570287][T29007]  dump_stack_lvl+0x1e3/0x2cb
[ 1003.574970][T29007]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1003.580415][T29007]  ? panic+0x76e/0x76e
[ 1003.584487][T29007]  ? __might_sleep+0xc0/0xc0
[ 1003.589080][T29007]  ? ext4_mb_initialize_context+0x58b/0xe30
[ 1003.594967][T29007]  should_fail+0x384/0x4b0
[ 1003.599381][T29007]  ? ext4_mb_new_blocks+0xdfb/0x3e20
[ 1003.602282][T23068] wacom 0003:056A:0331.0133: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1003.604679][T29007]  should_failslab+0x5/0x20
[ 1003.604708][T29007]  kmem_cache_alloc+0x69/0x2f0
[ 1003.604730][T29007]  ? ext4_mb_new_blocks+0x50b/0x3e20
[ 1003.630209][T29007]  ext4_mb_new_blocks+0xdfb/0x3e20
[ 1003.635344][T29007]  ? ext4_find_extent+0x342/0xd90
[ 1003.640368][T29007]  ? __kmalloc+0x223/0x370
[ 1003.644766][T29007]  ? ext4_find_extent+0x342/0xd90
[ 1003.649777][T29007]  ? ext4_mb_pa_callback+0xc0/0xc0
[ 1003.654877][T29007]  ? ext4_ext_search_right+0x4b8/0x890
[ 1003.660318][T29007]  ? ext4_ext_check_overlap+0x17a/0x5b0
[ 1003.665848][T29007]  ? ext4_inode_to_goal_block+0x31d/0x460
[ 1003.671551][T29007]  ext4_ext_map_blocks+0x18ec/0x6890
[ 1003.676862][T29007]  ? ext4_ext_release+0x10/0x10
[ 1003.681698][T29007]  ? read_lock_is_recursive+0x10/0x10
[ 1003.687057][T29007]  ? __might_sleep+0xc0/0xc0
[ 1003.691641][T29007]  ? ext4_es_lookup_extent+0x36c/0x720
[ 1003.697094][T29007]  ? __down_read_common+0x156/0x2a0
[ 1003.702307][T29007]  ext4_map_blocks+0xac7/0x1e20
[ 1003.707200][T29007]  ? ext4_issue_zeroout+0x260/0x260
[ 1003.712436][T29007]  ? __ext4_mark_inode_dirty+0x3d8/0x6a0
[ 1003.718104][T29007]  ext4_getblk+0x19c/0x710
[ 1003.722540][T29007]  ? ext4_get_block_unwritten+0x30/0x30
[ 1003.728096][T29007]  ? __brelse+0x54/0x90
[ 1003.732266][T29007]  ? __ext4_new_inode+0x3ae5/0x4740
[ 1003.737488][T29007]  ext4_bread+0x2a/0x170
[ 1003.741738][T29007]  ext4_append+0x1a6/0x370
[ 1003.746144][T29007]  ext4_init_new_dir+0x337/0xa10
[ 1003.751072][T29007]  ? ext4_init_dot_dotdot+0x4d0/0x4d0
[ 1003.756433][T29007]  ? smack_inode_permission+0x29a/0x340
[ 1003.761969][T29007]  ext4_mkdir+0x4fa/0xcf0
[ 1003.766293][T29007]  ? ext4_symlink+0xfe0/0xfe0
[ 1003.770955][T29007]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1003.775962][T29007]  ? security_inode_mkdir+0xdd/0x120
[ 1003.781251][T29007]  vfs_mkdir+0x2f6/0x4d0
[ 1003.785504][T29007]  do_mkdirat+0x267/0x510
[ 1003.789818][T29007]  ? __check_object_size+0x15a/0x210
[ 1003.795099][T29007]  ? vfs_mkdir+0x4d0/0x4d0
[ 1003.799527][T29007]  ? getname_flags+0x1ea/0x4e0
[ 1003.804299][T29007]  ? lockdep_hardirqs_on+0x95/0x140
[ 1003.809513][T29007]  __x64_sys_mkdir+0x6a/0x80
[ 1003.814109][T29007]  do_syscall_64+0x2b/0x70
[ 1003.818513][T29007]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1003.824393][T29007] RIP: 0033:0x7f94af288157
[ 1003.828802][T29007] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1003.848391][T29007] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
16:11:55 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1003.856813][T29007] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1003.864774][T29007] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1003.872746][T29007] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1003.880722][T29007] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1003.888682][T29007] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1003.896666][T29007]  </TASK>
[ 1003.982897][T13502] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1004.116919][T13502] usb 6-1: no configurations
[ 1004.121537][T13502] usb 6-1: can't read configurations, error -22
[ 1004.129607][T23068] usb 4-1: USB disconnect, device number 84
[ 1004.206739][  T144] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1004.286626][T13502] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1004.436927][T13502] usb 6-1: device descriptor read/all, error -71
[ 1004.451716][T13502] usb usb6-port1: unable to enumerate USB device
[ 1004.566843][  T144] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1004.577079][  T144] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1004.586087][  T144] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1004.595783][  T144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1004.840509][T13502] usb 5-1: USB disconnect, device number 3
16:11:56 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:56 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000000000000000700"})

16:11:56 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 61)

16:11:56 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:11:56 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000001000"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:11:57 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1005.300400][T13502] usb 1-1: USB disconnect, device number 23
[ 1005.335748][T29048] loop2: detected capacity change from 0 to 5
[ 1005.373909][T29048] FAULT_INJECTION: forcing a failure.
[ 1005.373909][T29048] name failslab, interval 1, probability 0, space 0, times 0
[ 1005.392987][T29048] CPU: 0 PID: 29048 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1005.403510][T29048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1005.413572][T29048] Call Trace:
[ 1005.416848][T29048]  <TASK>
[ 1005.419779][T29048]  dump_stack_lvl+0x1e3/0x2cb
[ 1005.424459][T29048]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1005.429912][T29048]  ? panic+0x76e/0x76e
[ 1005.433979][T29048]  ? __might_sleep+0xc0/0xc0
[ 1005.438568][T29048]  ? ext4_mb_initialize_context+0x58b/0xe30
[ 1005.444461][T29048]  should_fail+0x384/0x4b0
[ 1005.448869][T29048]  ? ext4_mb_new_blocks+0xdfb/0x3e20
[ 1005.454156][T29048]  should_failslab+0x5/0x20
[ 1005.458663][T29048]  kmem_cache_alloc+0x69/0x2f0
[ 1005.463417][T29048]  ? ext4_mb_new_blocks+0x50b/0x3e20
[ 1005.468701][T29048]  ext4_mb_new_blocks+0xdfb/0x3e20
[ 1005.473849][T29048]  ? ext4_find_extent+0x342/0xd90
[ 1005.478949][T29048]  ? __kmalloc+0x223/0x370
[ 1005.483352][T29048]  ? ext4_find_extent+0x342/0xd90
[ 1005.488368][T29048]  ? ext4_mb_pa_callback+0xc0/0xc0
[ 1005.493473][T29048]  ? ext4_ext_search_right+0x4b8/0x890
[ 1005.498920][T29048]  ? ext4_ext_check_overlap+0x17a/0x5b0
[ 1005.504460][T29048]  ? ext4_inode_to_goal_block+0x31d/0x460
[ 1005.510347][T29048]  ext4_ext_map_blocks+0x18ec/0x6890
[ 1005.515654][T29048]  ? ext4_ext_release+0x10/0x10
[ 1005.520503][T29048]  ? read_lock_is_recursive+0x10/0x10
[ 1005.525870][T29048]  ? __might_sleep+0xc0/0xc0
[ 1005.530469][T29048]  ? ext4_es_lookup_extent+0x36c/0x720
[ 1005.535926][T29048]  ? __down_read_common+0x156/0x2a0
[ 1005.541121][T29048]  ext4_map_blocks+0xac7/0x1e20
[ 1005.545980][T29048]  ? ext4_issue_zeroout+0x260/0x260
[ 1005.551168][T29048]  ? __ext4_mark_inode_dirty+0x3d8/0x6a0
[ 1005.556813][T29048]  ext4_getblk+0x19c/0x710
[ 1005.561226][T29048]  ? ext4_get_block_unwritten+0x30/0x30
[ 1005.566764][T29048]  ? __brelse+0x54/0x90
[ 1005.570911][T29048]  ? __ext4_new_inode+0x3ae5/0x4740
[ 1005.576110][T29048]  ext4_bread+0x2a/0x170
[ 1005.580346][T29048]  ext4_append+0x1a6/0x370
[ 1005.584758][T29048]  ext4_init_new_dir+0x337/0xa10
[ 1005.589696][T29048]  ? ext4_init_dot_dotdot+0x4d0/0x4d0
[ 1005.595060][T29048]  ? smack_inode_permission+0x29a/0x340
[ 1005.600605][T29048]  ext4_mkdir+0x4fa/0xcf0
[ 1005.604937][T29048]  ? ext4_symlink+0xfe0/0xfe0
[ 1005.609609][T29048]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1005.614625][T29048]  ? security_inode_mkdir+0xdd/0x120
[ 1005.619909][T29048]  vfs_mkdir+0x2f6/0x4d0
[ 1005.624154][T29048]  do_mkdirat+0x267/0x510
[ 1005.628484][T29048]  ? __check_object_size+0x15a/0x210
[ 1005.633763][T29048]  ? vfs_mkdir+0x4d0/0x4d0
[ 1005.638178][T29048]  ? getname_flags+0x1ea/0x4e0
[ 1005.642936][T29048]  ? lockdep_hardirqs_on+0x95/0x140
[ 1005.648134][T29048]  __x64_sys_mkdir+0x6a/0x80
[ 1005.652744][T29048]  do_syscall_64+0x2b/0x70
[ 1005.657158][T29048]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1005.663050][T29048] RIP: 0033:0x7f94af288157
[ 1005.667472][T29048] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1005.687066][T29048] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1005.695476][T29048] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1005.703439][T29048] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1005.711405][T29048] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1005.719365][T29048] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1005.727322][T29048] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1005.735302][T29048]  </TASK>
16:11:57 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 62)

[ 1005.836708][T29065] loop2: detected capacity change from 0 to 5
[ 1005.843692][T29065] FAULT_INJECTION: forcing a failure.
[ 1005.843692][T29065] name failslab, interval 1, probability 0, space 0, times 0
[ 1005.886954][T29065] CPU: 0 PID: 29065 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1005.897472][T29065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1005.907537][T29065] Call Trace:
[ 1005.910810][T29065]  <TASK>
[ 1005.913740][T29065]  dump_stack_lvl+0x1e3/0x2cb
[ 1005.918419][T29065]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1005.923886][T29065]  ? panic+0x76e/0x76e
[ 1005.927958][T29065]  ? __might_sleep+0xc0/0xc0
[ 1005.932646][T29065]  ? ext4_mb_initialize_context+0x58b/0xe30
[ 1005.938546][T29065]  should_fail+0x384/0x4b0
[ 1005.942985][T29065]  ? ext4_mb_new_blocks+0xdfb/0x3e20
[ 1005.948262][T29065]  should_failslab+0x5/0x20
[ 1005.952754][T29065]  kmem_cache_alloc+0x69/0x2f0
[ 1005.957512][T29065]  ? ext4_mb_new_blocks+0x50b/0x3e20
[ 1005.962793][T29065]  ext4_mb_new_blocks+0xdfb/0x3e20
[ 1005.967911][T29065]  ? ext4_find_extent+0x342/0xd90
[ 1005.972928][T29065]  ? __kmalloc+0x223/0x370
[ 1005.977339][T29065]  ? ext4_find_extent+0x342/0xd90
[ 1005.982369][T29065]  ? ext4_mb_pa_callback+0xc0/0xc0
[ 1005.987476][T29065]  ? ext4_ext_search_right+0x4b8/0x890
[ 1005.992924][T29065]  ? ext4_ext_check_overlap+0x17a/0x5b0
[ 1005.998465][T29065]  ? ext4_inode_to_goal_block+0x31d/0x460
[ 1006.004176][T29065]  ext4_ext_map_blocks+0x18ec/0x6890
[ 1006.009479][T29065]  ? ext4_ext_release+0x10/0x10
[ 1006.014318][T29065]  ? read_lock_is_recursive+0x10/0x10
[ 1006.019686][T29065]  ? __might_sleep+0xc0/0xc0
[ 1006.024286][T29065]  ? ext4_es_lookup_extent+0x36c/0x720
[ 1006.029740][T29065]  ? __down_read_common+0x156/0x2a0
[ 1006.034935][T29065]  ext4_map_blocks+0xac7/0x1e20
[ 1006.039792][T29065]  ? ext4_issue_zeroout+0x260/0x260
[ 1006.044981][T29065]  ? __ext4_mark_inode_dirty+0x3d8/0x6a0
[ 1006.050617][T29065]  ext4_getblk+0x19c/0x710
[ 1006.055035][T29065]  ? ext4_get_block_unwritten+0x30/0x30
[ 1006.060574][T29065]  ? __brelse+0x54/0x90
[ 1006.064807][T29065]  ? __ext4_new_inode+0x3ae5/0x4740
[ 1006.070005][T29065]  ext4_bread+0x2a/0x170
[ 1006.074241][T29065]  ext4_append+0x1a6/0x370
[ 1006.078656][T29065]  ext4_init_new_dir+0x337/0xa10
[ 1006.083598][T29065]  ? ext4_init_dot_dotdot+0x4d0/0x4d0
[ 1006.088959][T29065]  ? smack_inode_permission+0x29a/0x340
[ 1006.094501][T29065]  ext4_mkdir+0x4fa/0xcf0
[ 1006.098831][T29065]  ? ext4_symlink+0xfe0/0xfe0
[ 1006.103535][T29065]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1006.108548][T29065]  ? security_inode_mkdir+0xdd/0x120
[ 1006.113828][T29065]  vfs_mkdir+0x2f6/0x4d0
[ 1006.118071][T29065]  do_mkdirat+0x267/0x510
[ 1006.122392][T29065]  ? __check_object_size+0x15a/0x210
[ 1006.127670][T29065]  ? vfs_mkdir+0x4d0/0x4d0
[ 1006.132081][T29065]  ? getname_flags+0x1ea/0x4e0
[ 1006.136835][T29065]  ? lockdep_hardirqs_on+0x95/0x140
[ 1006.142027][T29065]  __x64_sys_mkdir+0x6a/0x80
[ 1006.146611][T29065]  do_syscall_64+0x2b/0x70
[ 1006.151021][T29065]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1006.156906][T29065] RIP: 0033:0x7f94af288157
[ 1006.161310][T29065] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1006.181032][T29065] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1006.189449][T29065] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1006.197424][T29065] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1006.205405][T29065] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1006.213370][T29065] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1006.221330][T29065] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1006.229308][T29065]  </TASK>
16:11:57 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 63)

[ 1006.233712][T13502] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1006.237119][T23068] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1006.248893][ T3684] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1006.256574][ T3682] usb 5-1: new high-speed USB device number 4 using dummy_hcd
16:11:58 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000700"})

[ 1006.331273][T29072] loop2: detected capacity change from 0 to 5
[ 1006.338666][T29072] FAULT_INJECTION: forcing a failure.
[ 1006.338666][T29072] name failslab, interval 1, probability 0, space 0, times 0
[ 1006.354877][T29072] CPU: 1 PID: 29072 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1006.365400][T29072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1006.375462][T29072] Call Trace:
[ 1006.378749][T29072]  <TASK>
[ 1006.381692][T29072]  dump_stack_lvl+0x1e3/0x2cb
[ 1006.386389][T29072]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1006.391863][T29072]  ? panic+0x76e/0x76e
[ 1006.395954][T29072]  ? __might_sleep+0xc0/0xc0
[ 1006.400556][T29072]  ? lockdep_hardirqs_on_prepare+0x448/0x7b0
[ 1006.406558][T29072]  should_fail+0x384/0x4b0
[ 1006.410991][T29072]  ? jbd2_journal_add_journal_head+0x7a/0x480
[ 1006.417166][T29072]  should_failslab+0x5/0x20
[ 1006.421673][T29072]  kmem_cache_alloc+0x69/0x2f0
[ 1006.426436][T29072]  jbd2_journal_add_journal_head+0x7a/0x480
[ 1006.432327][T29072]  jbd2_journal_get_create_access+0x45/0x450
[ 1006.438309][T29072]  __ext4_journal_get_create_access+0xaf/0x550
[ 1006.444460][T29072]  ? __might_sleep+0xc0/0xc0
[ 1006.449046][T29072]  ? __ext4_mark_inode_dirty+0x3d8/0x6a0
[ 1006.454764][T29072]  ? trace_ext4_forget+0x270/0x270
[ 1006.459868][T29072]  ? __getblk_gfp+0x50/0x290
[ 1006.464460][T29072]  ext4_getblk+0x3ea/0x710
[ 1006.468877][T29072]  ? ext4_get_block_unwritten+0x30/0x30
[ 1006.474418][T29072]  ? __brelse+0x54/0x90
[ 1006.478571][T29072]  ? __ext4_new_inode+0x3ae5/0x4740
[ 1006.483775][T29072]  ext4_bread+0x2a/0x170
[ 1006.488017][T29072]  ext4_append+0x1a6/0x370
[ 1006.492430][T29072]  ext4_init_new_dir+0x337/0xa10
[ 1006.497372][T29072]  ? ext4_init_dot_dotdot+0x4d0/0x4d0
[ 1006.502740][T29072]  ? smack_inode_permission+0x29a/0x340
[ 1006.508284][T29072]  ext4_mkdir+0x4fa/0xcf0
[ 1006.512613][T29072]  ? ext4_symlink+0xfe0/0xfe0
[ 1006.517286][T29072]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1006.522332][T29072]  ? security_inode_mkdir+0xdd/0x120
[ 1006.527617][T29072]  vfs_mkdir+0x2f6/0x4d0
[ 1006.531865][T29072]  do_mkdirat+0x267/0x510
[ 1006.536190][T29072]  ? __check_object_size+0x15a/0x210
[ 1006.541472][T29072]  ? vfs_mkdir+0x4d0/0x4d0
[ 1006.545886][T29072]  ? getname_flags+0x1ea/0x4e0
[ 1006.550640][T29072]  ? lockdep_hardirqs_on+0x95/0x140
[ 1006.555841][T29072]  __x64_sys_mkdir+0x6a/0x80
[ 1006.560424][T29072]  do_syscall_64+0x2b/0x70
[ 1006.564833][T29072]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1006.570720][T29072] RIP: 0033:0x7f94af288157
[ 1006.575129][T29072] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1006.594725][T29072] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1006.603132][T29072] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1006.611098][T29072] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1006.619058][T29072] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1006.627019][T29072] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1006.634980][T29072] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1006.642959][T29072]  </TASK>
[ 1006.661109][T29072] ENOMEM in journal_alloc_journal_head, retrying.
[ 1006.671033][T29072] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1006.680160][T29072] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1006.694056][T29072] NILFS (loop2): mounting unchecked fs
[ 1006.702759][T29072] NILFS (loop2): I/O error reading segment
[ 1006.708705][T29072] NILFS (loop2): error -5 while searching super root
16:11:58 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 64)

[ 1006.802430][T29082] loop2: detected capacity change from 0 to 5
[ 1006.835502][T29082] FAULT_INJECTION: forcing a failure.
[ 1006.835502][T29082] name failslab, interval 1, probability 0, space 0, times 0
[ 1006.863490][T29082] CPU: 0 PID: 29082 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1006.874628][T29082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1006.884689][T29082] Call Trace:
[ 1006.887975][T29082]  <TASK>
[ 1006.890911][T29082]  dump_stack_lvl+0x1e3/0x2cb
[ 1006.895606][T29082]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1006.901082][T29082]  ? panic+0x76e/0x76e
[ 1006.905189][T29082]  should_fail+0x384/0x4b0
[ 1006.906766][T13502] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1006.909618][T29082]  ? smk_fetch+0x91/0x140
[ 1006.909651][T29082]  should_failslab+0x5/0x20
[ 1006.928507][T29082]  kmem_cache_alloc_trace+0x68/0x310
[ 1006.928806][T13502] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1006.933806][T29082]  ? do_raw_spin_unlock+0x134/0x8a0
[ 1006.933839][T29082]  smk_fetch+0x91/0x140
[ 1006.933866][T29082]  smack_d_instantiate+0x5c4/0xa10
[ 1006.933899][T29082]  ? smack_sem_semop+0x220/0x220
[ 1006.962401][T13502] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1006.966024][T29082]  ? __raw_spin_lock_init+0x41/0x100
[ 1006.966061][T29082]  security_d_instantiate+0xa5/0x100
[ 1006.966087][T29082]  d_instantiate_new+0x61/0x110
[ 1006.990469][T29082]  ext4_mkdir+0x96b/0xcf0
[ 1006.992877][T13502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.994905][T29082]  ? ext4_symlink+0xfe0/0xfe0
[ 1006.994936][T29082]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1006.994958][T29082]  ? security_inode_mkdir+0xdd/0x120
[ 1007.017876][T29082]  vfs_mkdir+0x2f6/0x4d0
[ 1007.022154][T29082]  do_mkdirat+0x267/0x510
[ 1007.026498][T29082]  ? __check_object_size+0x15a/0x210
[ 1007.031800][T29082]  ? vfs_mkdir+0x4d0/0x4d0
[ 1007.036239][T29082]  ? getname_flags+0x1ea/0x4e0
[ 1007.041006][T29082]  ? lockdep_hardirqs_on+0x95/0x140
[ 1007.046237][T29082]  __x64_sys_mkdir+0x6a/0x80
[ 1007.050834][T29082]  do_syscall_64+0x2b/0x70
[ 1007.055266][T29082]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1007.058942][T13502] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1007.061173][T29082] RIP: 0033:0x7f94af288157
[ 1007.072846][T29082] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1007.092587][T29082] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1007.101028][T29082] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1007.109014][T29082] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1007.116996][T29082] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1007.124978][T29082] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1007.132961][T29082] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1007.140967][T29082]  </TASK>
[ 1007.155449][T29082] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
16:11:58 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000700"})

[ 1007.164682][ T3682] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1007.175023][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1007.196897][T29082] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1007.197241][ T3682] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1007.216274][ T3684] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1007.225369][T29082] NILFS (loop2): mounting unchecked fs
[ 1007.225389][T23068] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1007.241402][T29082] NILFS (loop2): I/O error reading segment
[ 1007.242006][ T3684] usb 6-1: can't read configurations, error -61
[ 1007.254454][ T3682] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1007.262848][T29082] NILFS (loop2): error -5 while searching super root
[ 1007.264159][T23068] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1007.279685][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.288877][T23068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:11:59 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 65)

[ 1007.402557][T29099] loop2: detected capacity change from 0 to 5
[ 1007.410494][ T3684] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1007.415004][T29099] FAULT_INJECTION: forcing a failure.
[ 1007.415004][T29099] name failslab, interval 1, probability 0, space 0, times 0
[ 1007.440546][T29099] CPU: 0 PID: 29099 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1007.451083][T29099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1007.461155][T29099] Call Trace:
[ 1007.464441][T29099]  <TASK>
[ 1007.467379][T29099]  dump_stack_lvl+0x1e3/0x2cb
[ 1007.472072][T29099]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1007.477530][T29099]  ? panic+0x76e/0x76e
[ 1007.481606][T29099]  should_fail+0x384/0x4b0
[ 1007.486019][T29099]  ? smk_fetch+0x91/0x140
[ 1007.490340][T29099]  should_failslab+0x5/0x20
[ 1007.494834][T29099]  kmem_cache_alloc_trace+0x68/0x310
[ 1007.500113][T29099]  ? __vfs_getxattr+0x3de/0x410
[ 1007.504958][T29099]  smk_fetch+0x91/0x140
[ 1007.509118][T29099]  smack_d_instantiate+0x741/0xa10
[ 1007.514234][T29099]  ? smack_sem_semop+0x220/0x220
[ 1007.519169][T29099]  ? __raw_spin_lock_init+0x41/0x100
[ 1007.524456][T29099]  security_d_instantiate+0xa5/0x100
[ 1007.529741][T29099]  d_instantiate_new+0x61/0x110
[ 1007.534590][T29099]  ext4_mkdir+0x96b/0xcf0
[ 1007.538923][T29099]  ? ext4_symlink+0xfe0/0xfe0
[ 1007.543594][T29099]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1007.548605][T29099]  ? security_inode_mkdir+0xdd/0x120
[ 1007.553887][T29099]  vfs_mkdir+0x2f6/0x4d0
[ 1007.558129][T29099]  do_mkdirat+0x267/0x510
[ 1007.562446][T29099]  ? __check_object_size+0x15a/0x210
[ 1007.567726][T29099]  ? vfs_mkdir+0x4d0/0x4d0
[ 1007.572139][T29099]  ? getname_flags+0x1ea/0x4e0
[ 1007.576892][T29099]  ? lockdep_hardirqs_on+0x95/0x140
[ 1007.582091][T29099]  __x64_sys_mkdir+0x6a/0x80
[ 1007.586673][T29099]  do_syscall_64+0x2b/0x70
[ 1007.591079][T29099]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1007.596972][T29099] RIP: 0033:0x7f94af288157
[ 1007.601380][T29099] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1007.620980][T29099] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1007.629388][T29099] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1007.637350][T29099] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1007.645311][T29099] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1007.653273][T29099] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1007.661232][T29099] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1007.669207][T29099]  </TASK>
[ 1007.683314][ T3686] usb 5-1: USB disconnect, device number 4
[ 1007.687536][T29099] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1007.698389][T29099] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1007.711839][T29099] NILFS (loop2): mounting unchecked fs
[ 1007.726236][T29099] NILFS (loop2): I/O error reading segment
[ 1007.733289][T29099] NILFS (loop2): error -5 while searching super root
[ 1007.908244][T23068] wacom 0003:056A:0331.0134: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1008.040017][ T3684] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1008.047950][ T3684] usb 6-1: can't read configurations, error -61
[ 1008.054789][ T3684] usb usb6-port1: attempt power cycle
[ 1008.357851][ T3687] usb 4-1: USB disconnect, device number 85
16:12:00 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:00 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 66)

16:12:00 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000000000700"})

16:12:00 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1008.688659][T23068] usb 1-1: USB disconnect, device number 24
[ 1008.726398][T29135] loop2: detected capacity change from 0 to 5
[ 1008.741176][T29135] FAULT_INJECTION: forcing a failure.
[ 1008.741176][T29135] name failslab, interval 1, probability 0, space 0, times 0
[ 1008.759162][T29135] CPU: 0 PID: 29135 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1008.769705][T29135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1008.779768][T29135] Call Trace:
[ 1008.783041][T29135]  <TASK>
[ 1008.785961][T29135]  dump_stack_lvl+0x1e3/0x2cb
[ 1008.790636][T29135]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1008.796083][T29135]  ? panic+0x76e/0x76e
[ 1008.800146][T29135]  ? __might_sleep+0xc0/0xc0
[ 1008.804761][T29135]  should_fail+0x384/0x4b0
[ 1008.809183][T29135]  ? smk_parse_smack+0x195/0x200
[ 1008.814131][T29135]  should_failslab+0x5/0x20
[ 1008.818632][T29135]  __kmalloc+0x8b/0x370
[ 1008.822817][T29135]  smk_parse_smack+0x195/0x200
[ 1008.827603][T29135]  smk_import_entry+0x22/0x400
[ 1008.832382][T29135]  smk_fetch+0xdc/0x140
[ 1008.836538][T29135]  smack_d_instantiate+0x5c4/0xa10
[ 1008.841675][T29135]  ? smack_sem_semop+0x220/0x220
[ 1008.846626][T29135]  ? __raw_spin_lock_init+0x41/0x100
[ 1008.851913][T29135]  security_d_instantiate+0xa5/0x100
[ 1008.857205][T29135]  d_instantiate_new+0x61/0x110
[ 1008.862056][T29135]  ext4_mkdir+0x96b/0xcf0
[ 1008.866416][T29135]  ? ext4_symlink+0xfe0/0xfe0
[ 1008.871117][T29135]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1008.876151][T29135]  ? security_inode_mkdir+0xdd/0x120
[ 1008.881453][T29135]  vfs_mkdir+0x2f6/0x4d0
[ 1008.885711][T29135]  do_mkdirat+0x267/0x510
[ 1008.890028][T29135]  ? __check_object_size+0x15a/0x210
[ 1008.895302][T29135]  ? vfs_mkdir+0x4d0/0x4d0
[ 1008.899714][T29135]  ? getname_flags+0x1ea/0x4e0
[ 1008.904487][T29135]  ? lockdep_hardirqs_on+0x95/0x140
[ 1008.909678][T29135]  __x64_sys_mkdir+0x6a/0x80
[ 1008.914256][T29135]  do_syscall_64+0x2b/0x70
[ 1008.918667][T29135]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1008.924573][T29135] RIP: 0033:0x7f94af288157
[ 1008.928998][T29135] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1008.948611][T29135] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1008.957012][T29135] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1008.964969][T29135] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1008.972937][T29135] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1008.980923][T29135] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
16:12:00 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000001100"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:12:00 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1008.988898][T29135] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1008.996868][T29135]  </TASK>
[ 1009.037642][ T3687] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1009.037989][T29135] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1009.063503][T29135] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1009.082180][T29135] NILFS (loop2): mounting unchecked fs
[ 1009.088523][T29135] NILFS (loop2): I/O error reading segment
[ 1009.094481][T29135] NILFS (loop2): error -5 while searching super root
16:12:00 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 67)

[ 1009.203626][T29154] loop2: detected capacity change from 0 to 5
[ 1009.212163][T29154] FAULT_INJECTION: forcing a failure.
[ 1009.212163][T29154] name failslab, interval 1, probability 0, space 0, times 0
[ 1009.225978][T29154] CPU: 1 PID: 29154 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1009.228452][ T3684] usb usb6-port1: Cannot enable. Maybe the USB cable is bad?
[ 1009.236498][T29154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1009.236515][T29154] Call Trace:
[ 1009.236522][T29154]  <TASK>
[ 1009.236532][T29154]  dump_stack_lvl+0x1e3/0x2cb
[ 1009.236564][T29154]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1009.236585][T29154]  ? panic+0x76e/0x76e
[ 1009.236610][T29154]  ? __might_sleep+0xc0/0xc0
[ 1009.236641][T29154]  should_fail+0x384/0x4b0
[ 1009.236666][T29154]  ? smk_parse_smack+0x195/0x200
[ 1009.236687][T29154]  should_failslab+0x5/0x20
[ 1009.293175][T29154]  __kmalloc+0x8b/0x370
[ 1009.297368][T29154]  smk_parse_smack+0x195/0x200
[ 1009.302156][T29154]  smk_import_entry+0x22/0x400
[ 1009.306682][ T3682] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 1009.306933][T29154]  smk_fetch+0xdc/0x140
[ 1009.306965][T29154]  smack_d_instantiate+0x5c4/0xa10
[ 1009.323736][T29154]  ? smack_sem_semop+0x220/0x220
[ 1009.328703][T29154]  ? __raw_spin_lock_init+0x41/0x100
[ 1009.334003][T29154]  security_d_instantiate+0xa5/0x100
[ 1009.339287][T29154]  d_instantiate_new+0x61/0x110
[ 1009.344155][T29154]  ext4_mkdir+0x96b/0xcf0
[ 1009.348502][T29154]  ? ext4_symlink+0xfe0/0xfe0
[ 1009.353194][T29154]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1009.357078][T23068] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1009.358225][T29154]  ? security_inode_mkdir+0xdd/0x120
[ 1009.371036][T29154]  vfs_mkdir+0x2f6/0x4d0
[ 1009.375302][T29154]  do_mkdirat+0x267/0x510
[ 1009.379641][T29154]  ? __check_object_size+0x15a/0x210
[ 1009.384938][T29154]  ? vfs_mkdir+0x4d0/0x4d0
[ 1009.389352][T29154]  ? getname_flags+0x1ea/0x4e0
[ 1009.394132][T29154]  ? lockdep_hardirqs_on+0x95/0x140
[ 1009.399346][T29154]  __x64_sys_mkdir+0x6a/0x80
[ 1009.403949][T29154]  do_syscall_64+0x2b/0x70
[ 1009.406724][ T3684] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1009.408352][T29154]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1009.408385][T29154] RIP: 0033:0x7f94af288157
[ 1009.408406][T29154] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1009.445792][T29154] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053
[ 1009.454224][T29154] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1009.462197][T29154] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1009.470188][T29154] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1009.478171][T29154] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1009.486147][T29154] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1009.494128][T29154]  </TASK>
[ 1009.511005][T29154] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1009.520117][T29154] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1009.530835][T29154] NILFS (loop2): mounting unchecked fs
[ 1009.536887][T29154] NILFS (loop2): I/O error reading segment
[ 1009.542795][T29154] NILFS (loop2): error -5 while searching super root
16:12:01 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 68)

16:12:01 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000000000700"})

[ 1009.630417][T29161] loop2: detected capacity change from 0 to 5
[ 1009.639324][T29161] FAULT_INJECTION: forcing a failure.
[ 1009.639324][T29161] name failslab, interval 1, probability 0, space 0, times 0
[ 1009.654405][T29161] CPU: 1 PID: 29161 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1009.656875][ T3684] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1009.664931][T29161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1009.664946][T29161] Call Trace:
[ 1009.664953][T29161]  <TASK>
[ 1009.664962][T29161]  dump_stack_lvl+0x1e3/0x2cb
[ 1009.664993][T29161]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1009.665014][T29161]  ? panic+0x76e/0x76e
[ 1009.665052][T29161]  should_fail+0x384/0x4b0
[ 1009.665075][T29161]  ? smk_fetch+0x91/0x140
[ 1009.665099][T29161]  should_failslab+0x5/0x20
[ 1009.665122][T29161]  kmem_cache_alloc_trace+0x68/0x310
[ 1009.665142][T29161]  ? __vfs_getxattr+0x3de/0x410
[ 1009.665170][T29161]  smk_fetch+0x91/0x140
[ 1009.665194][T29161]  smack_d_instantiate+0x741/0xa10
[ 1009.665228][T29161]  ? smack_sem_semop+0x220/0x220
[ 1009.665251][T29161]  ? __raw_spin_lock_init+0x41/0x100
[ 1009.665282][T29161]  security_d_instantiate+0xa5/0x100
[ 1009.665305][T29161]  d_instantiate_new+0x61/0x110
[ 1009.665329][T29161]  ext4_mkdir+0x96b/0xcf0
[ 1009.665360][T29161]  ? ext4_symlink+0xfe0/0xfe0
[ 1009.665384][T29161]  ? bpf_lsm_inode_mkdir+0x5/0x10
[ 1009.665402][T29161]  ? security_inode_mkdir+0xdd/0x120
[ 1009.665427][T29161]  vfs_mkdir+0x2f6/0x4d0
[ 1009.665458][T29161]  do_mkdirat+0x267/0x510
[ 1009.665477][T29161]  ? __check_object_size+0x15a/0x210
[ 1009.665503][T29161]  ? vfs_mkdir+0x4d0/0x4d0
[ 1009.665527][T29161]  ? getname_flags+0x1ea/0x4e0
[ 1009.665547][T29161]  ? lockdep_hardirqs_on+0x95/0x140
[ 1009.665573][T29161]  __x64_sys_mkdir+0x6a/0x80
[ 1009.676746][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1009.683155][T29161]  do_syscall_64+0x2b/0x70
[ 1009.683188][T29161]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1009.683212][T29161] RIP: 0033:0x7f94af288157
[ 1009.683232][T29161] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1009.698952][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1009.699514][T29161] RSP: 002b:00007f94b0302f88 EFLAGS: 00000213
[ 1009.714016][ T3682] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1009.716767][T29161]  ORIG_RAX: 0000000000000053
[ 1009.716780][T29161] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af288157
[ 1009.716797][T29161] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100
[ 1009.716811][T29161] RBP: 00007f94b0303020 R08: 0000000000000000 R09: 00007f94b03031d0
[ 1009.716826][T29161] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000
[ 1009.716839][T29161] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1009.716871][T29161]  </TASK>
[ 1009.732711][ T3687] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.755670][T29161] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1009.789107][ T3687] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1009.811110][ T3684] usb 6-1: can't read configurations, error -61
[ 1009.822161][ T3687] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1009.836923][T23068] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.857474][T29161] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1009.874697][ T3684] usb usb6-port1: unable to enumerate USB device
[ 1009.895362][ T3687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.921131][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.940676][T29161] NILFS (loop2): mounting unchecked fs
[ 1009.974378][T23068] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1010.033257][T29161] NILFS (loop2): I/O error reading segment
[ 1010.039292][T23068] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1010.061018][T29161] NILFS (loop2): error -5 while searching super root
[ 1010.065043][T23068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:01 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 69)

[ 1010.119153][T23068] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1010.182138][T29179] loop2: detected capacity change from 0 to 5
[ 1010.198862][T29179] FAULT_INJECTION: forcing a failure.
[ 1010.198862][T29179] name failslab, interval 1, probability 0, space 0, times 0
[ 1010.229273][T29179] CPU: 1 PID: 29179 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1010.239810][T29179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1010.249867][T29179] Call Trace:
[ 1010.253146][T29179]  <TASK>
[ 1010.256060][T29179]  dump_stack_lvl+0x1e3/0x2cb
[ 1010.260852][T29179]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1010.266310][T29179]  ? panic+0x76e/0x76e
[ 1010.270378][T29179]  ? __might_sleep+0xc0/0xc0
[ 1010.274990][T29179]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1010.280645][T29179]  should_fail+0x384/0x4b0
[ 1010.285055][T29179]  ? strndup_user+0x64/0xc0
[ 1010.289549][T29179]  should_failslab+0x5/0x20
[ 1010.294062][T29179]  __kmalloc_track_caller+0x89/0x350
[ 1010.299338][T29179]  ? __might_fault+0xb2/0x110
[ 1010.304027][T29179]  memdup_user+0x22/0xb0
[ 1010.308264][T29179]  strndup_user+0x64/0xc0
[ 1010.312604][T29179]  __se_sys_mount+0xde/0x3d0
[ 1010.317184][T29179]  ? print_irqtrace_events+0x220/0x220
[ 1010.322647][T29179]  ? vtime_user_exit+0x2b2/0x3e0
[ 1010.327585][T29179]  ? __x64_sys_mount+0xc0/0xc0
[ 1010.332360][T29179]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1010.338348][T29179]  ? __x64_sys_mount+0x1c/0xc0
[ 1010.343100][T29179]  do_syscall_64+0x2b/0x70
[ 1010.347503][T29179]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1010.353400][T29179] RIP: 0033:0x7f94af28a57a
[ 1010.357804][T29179] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1010.377399][T29179] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1010.385823][T29179] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1010.393787][T29179] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1010.401761][T29179] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1010.409733][T29179] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1010.417715][T29179] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1010.425707][T29179]  </TASK>
16:12:02 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000700"})

[ 1010.442795][T13502] usb 5-1: USB disconnect, device number 5
16:12:02 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 70)

[ 1010.535773][ T3682] wacom 0003:056A:0331.0135: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1010.578509][T29194] loop2: detected capacity change from 0 to 5
[ 1010.594205][T29194] FAULT_INJECTION: forcing a failure.
[ 1010.594205][T29194] name failslab, interval 1, probability 0, space 0, times 0
[ 1010.616661][T29194] CPU: 0 PID: 29194 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1010.627206][T29194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1010.637268][T29194] Call Trace:
[ 1010.640551][T29194]  <TASK>
[ 1010.643477][T29194]  dump_stack_lvl+0x1e3/0x2cb
[ 1010.648171][T29194]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1010.653625][T29194]  ? panic+0x76e/0x76e
[ 1010.657704][T29194]  ? __might_sleep+0xc0/0xc0
[ 1010.662294][T29194]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1010.667944][T29194]  should_fail+0x384/0x4b0
[ 1010.672382][T29194]  ? strndup_user+0x64/0xc0
[ 1010.676905][T29194]  should_failslab+0x5/0x20
[ 1010.681444][T29194]  __kmalloc_track_caller+0x89/0x350
[ 1010.686754][T29194]  ? __might_fault+0xb2/0x110
[ 1010.691458][T29194]  memdup_user+0x22/0xb0
[ 1010.695732][T29194]  strndup_user+0x64/0xc0
[ 1010.700086][T29194]  __se_sys_mount+0xde/0x3d0
[ 1010.704696][T29194]  ? print_irqtrace_events+0x220/0x220
[ 1010.710173][T29194]  ? vtime_user_exit+0x2b2/0x3e0
[ 1010.715115][T29194]  ? __x64_sys_mount+0xc0/0xc0
[ 1010.719893][T29194]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1010.725888][T29194]  ? __x64_sys_mount+0x1c/0xc0
[ 1010.730651][T29194]  do_syscall_64+0x2b/0x70
[ 1010.735083][T29194]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1010.740991][T29194] RIP: 0033:0x7f94af28a57a
[ 1010.745421][T29194] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1010.765026][T29194] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1010.773460][T29194] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1010.781434][T29194] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1010.789422][T29194] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1010.797407][T29194] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1010.805395][T29194] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1010.813374][T29194]  </TASK>
[ 1011.079740][T23068] usb 4-1: USB disconnect, device number 86
16:12:03 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:03 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 71)

16:12:03 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:03 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000000000700"})

16:12:03 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000001200"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1011.848220][ T3684] usb 1-1: USB disconnect, device number 25
[ 1011.899445][T29229] loop2: detected capacity change from 0 to 5
[ 1011.920404][T29229] FAULT_INJECTION: forcing a failure.
[ 1011.920404][T29229] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1011.941167][T29229] CPU: 1 PID: 29229 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1011.951703][T29229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1011.961771][T29229] Call Trace:
[ 1011.965039][T29229]  <TASK>
[ 1011.967956][T29229]  dump_stack_lvl+0x1e3/0x2cb
[ 1011.972624][T29229]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1011.978071][T29229]  ? panic+0x76e/0x76e
[ 1011.982128][T29229]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1011.987746][T29229]  ? __lock_acquire+0x1f80/0x1f80
[ 1011.992768][T29229]  ? __virt_addr_valid+0x21b/0x2d0
[ 1011.997876][T29229]  should_fail+0x384/0x4b0
[ 1012.002301][T29229]  _copy_from_user+0x2b/0x160
[ 1012.006976][T29229]  memdup_user+0x5b/0xb0
[ 1012.011216][T29229]  strndup_user+0x64/0xc0
[ 1012.015539][T29229]  __se_sys_mount+0xde/0x3d0
[ 1012.020128][T29229]  ? print_irqtrace_events+0x220/0x220
[ 1012.025585][T29229]  ? vtime_user_exit+0x2b2/0x3e0
[ 1012.030523][T29229]  ? __x64_sys_mount+0xc0/0xc0
[ 1012.035282][T29229]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1012.041263][T29229]  ? __x64_sys_mount+0x1c/0xc0
[ 1012.046036][T29229]  do_syscall_64+0x2b/0x70
[ 1012.050454][T29229]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1012.056345][T29229] RIP: 0033:0x7f94af28a57a
[ 1012.060754][T29229] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1012.080357][T29229] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1012.088770][T29229] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
16:12:03 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1012.096731][T29229] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1012.104698][T29229] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1012.112665][T29229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1012.120630][T29229] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1012.128610][T29229]  </TASK>
16:12:03 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 72)

[ 1012.216835][T23068] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1012.251639][T29246] loop2: detected capacity change from 0 to 5
[ 1012.260662][T29246] FAULT_INJECTION: forcing a failure.
[ 1012.260662][T29246] name failslab, interval 1, probability 0, space 0, times 0
[ 1012.287020][ T3682] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1012.290223][T29246] CPU: 1 PID: 29246 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1012.305092][T29246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1012.315147][T29246] Call Trace:
[ 1012.318412][T29246]  <TASK>
[ 1012.321328][T29246]  dump_stack_lvl+0x1e3/0x2cb
[ 1012.325996][T29246]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1012.331445][T29246]  ? panic+0x76e/0x76e
[ 1012.335498][T29246]  ? __might_sleep+0xc0/0xc0
[ 1012.340082][T29246]  ? __virt_addr_valid+0x21b/0x2d0
[ 1012.345216][T29246]  should_fail+0x384/0x4b0
[ 1012.349640][T29246]  ? __se_sys_mount+0x156/0x3d0
[ 1012.354498][T29246]  should_failslab+0x5/0x20
[ 1012.358986][T29246]  kmem_cache_alloc_trace+0x68/0x310
[ 1012.364259][T29246]  ? memdup_user+0x96/0xb0
[ 1012.368665][T29246]  __se_sys_mount+0x156/0x3d0
[ 1012.373326][T29246]  ? print_irqtrace_events+0x220/0x220
[ 1012.378765][T29246]  ? __x64_sys_mount+0xc0/0xc0
[ 1012.383512][T29246]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1012.389483][T29246]  ? __x64_sys_mount+0x1c/0xc0
[ 1012.394272][T29246]  do_syscall_64+0x2b/0x70
[ 1012.398688][T29246]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1012.404578][T29246] RIP: 0033:0x7f94af28a57a
[ 1012.408988][T29246] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1012.428581][T29246] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1012.436991][T29246] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1012.444955][T29246] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1012.452916][T29246] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
16:12:04 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000700"})

[ 1012.460880][T29246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1012.468843][T29246] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1012.476839][T29246]  </TASK>
[ 1012.480611][ T3684] usb 1-1: new high-speed USB device number 26 using dummy_hcd
16:12:04 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 73)

[ 1012.600861][T29256] loop2: detected capacity change from 0 to 5
[ 1012.624374][T29256] FAULT_INJECTION: forcing a failure.
[ 1012.624374][T29256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1012.645370][T29256] CPU: 1 PID: 29256 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1012.655919][T29256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1012.665980][T29256] Call Trace:
[ 1012.669253][T29256]  <TASK>
[ 1012.672176][T29256]  dump_stack_lvl+0x1e3/0x2cb
[ 1012.676868][T29256]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1012.682319][T29256]  ? panic+0x76e/0x76e
[ 1012.686390][T29256]  ? __lock_acquire+0x1f80/0x1f80
[ 1012.691413][T29256]  should_fail+0x384/0x4b0
[ 1012.695838][T29256]  _copy_from_user+0x2b/0x160
[ 1012.697477][ T3686] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1012.700508][T29256]  __se_sys_mount+0x179/0x3d0
[ 1012.700539][T29256]  ? print_irqtrace_events+0x220/0x220
[ 1012.718193][T29256]  ? __x64_sys_mount+0xc0/0xc0
[ 1012.722972][T29256]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1012.728946][T29256]  ? __x64_sys_mount+0x1c/0xc0
[ 1012.733733][T29256]  do_syscall_64+0x2b/0x70
[ 1012.738145][T29256]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1012.744030][T29256] RIP: 0033:0x7f94af28a57a
[ 1012.747288][T23068] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1012.748436][T29256] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1012.778171][T29256] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1012.786591][T29256] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1012.794558][T29256] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1012.802520][T29256] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1012.810483][T29256] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1012.818442][T29256] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1012.826418][T29256]  </TASK>
[ 1012.830650][T23068] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1012.849469][T29256] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1012.858381][T23068] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1012.868004][T29256] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1012.878502][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1012.889701][T23068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.899078][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1012.904340][T29256] NILFS (loop2): mounting unchecked fs
[ 1012.910141][ T3682] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1012.925174][T29256] NILFS (loop2): I/O error reading segment
[ 1012.929788][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.939784][T29256] NILFS (loop2): error -5 while searching super root
[ 1012.967632][ T3684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1012.986693][ T3684] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1013.016433][ T3684] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1013.025996][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:04 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 74)

[ 1013.110959][ T3684] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1013.130745][T29271] loop2: detected capacity change from 0 to 5
[ 1013.159458][T29271] FAULT_INJECTION: forcing a failure.
[ 1013.159458][T29271] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1013.172781][ T3684] usb 5-1: USB disconnect, device number 6
[ 1013.179758][T29271] CPU: 1 PID: 29271 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1013.190283][T29271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1013.200348][T29271] Call Trace:
[ 1013.203632][T29271]  <TASK>
[ 1013.206567][T29271]  dump_stack_lvl+0x1e3/0x2cb
[ 1013.211261][T29271]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1013.216732][T29271]  ? panic+0x76e/0x76e
[ 1013.220798][T29271]  ? __lock_acquire+0x1f80/0x1f80
[ 1013.225811][T29271]  should_fail+0x384/0x4b0
[ 1013.230217][T29271]  _copy_from_user+0x2b/0x160
[ 1013.234985][T29271]  __se_sys_mount+0x179/0x3d0
[ 1013.239664][T29271]  ? print_irqtrace_events+0x220/0x220
[ 1013.245140][T29271]  ? __x64_sys_mount+0xc0/0xc0
[ 1013.249919][T29271]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1013.255924][T29271]  ? __x64_sys_mount+0x1c/0xc0
[ 1013.260705][T29271]  do_syscall_64+0x2b/0x70
[ 1013.265131][T29271]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1013.271017][T29271] RIP: 0033:0x7f94af28a57a
[ 1013.275421][T29271] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1013.295022][T29271] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1013.303454][T29271] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
16:12:05 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000000000007"})

[ 1013.311424][T29271] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1013.319387][T29271] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1013.327351][T29271] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1013.335317][T29271] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1013.343293][T29271]  </TASK>
[ 1013.346818][ T3686] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1013.354412][ T3686] usb 6-1: can't read configurations, error -61
[ 1013.374035][ T3687] usb 1-1: USB disconnect, device number 26
[ 1013.400794][T29271] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1013.423193][T29271] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1013.436262][T29271] NILFS (loop2): mounting unchecked fs
[ 1013.442969][T29271] NILFS (loop2): I/O error reading segment
[ 1013.451869][T29271] NILFS (loop2): error -5 while searching super root
[ 1013.474846][ T3682] wacom 0003:056A:0331.0136: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
16:12:05 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 75)

[ 1013.546765][ T3686] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1013.601801][T29295] loop2: detected capacity change from 0 to 5
[ 1013.624469][T29295] FAULT_INJECTION: forcing a failure.
[ 1013.624469][T29295] name failslab, interval 1, probability 0, space 0, times 0
[ 1013.643165][T29295] CPU: 1 PID: 29295 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1013.653699][T29295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1013.663769][T29295] Call Trace:
[ 1013.667045][T29295]  <TASK>
[ 1013.669982][T29295]  dump_stack_lvl+0x1e3/0x2cb
[ 1013.674676][T29295]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1013.680156][T29295]  ? panic+0x76e/0x76e
[ 1013.684245][T29295]  ? __might_sleep+0xc0/0xc0
[ 1013.688849][T29295]  ? __kernel_text_address+0x9/0x40
[ 1013.694073][T29295]  should_fail+0x384/0x4b0
[ 1013.698502][T29295]  ? tomoyo_encode+0x26f/0x540
[ 1013.703276][T29295]  should_failslab+0x5/0x20
[ 1013.707769][T29295]  __kmalloc+0x8b/0x370
[ 1013.711913][T29295]  ? stack_trace_save+0x12d/0x1f0
[ 1013.716946][T29295]  tomoyo_encode+0x26f/0x540
[ 1013.721538][T29295]  tomoyo_mount_permission+0x319/0xb50
[ 1013.727013][T29295]  ? kasan_set_track+0x5e/0x70
[ 1013.731767][T29295]  ? kasan_set_track+0x4c/0x70
[ 1013.736521][T29295]  ? kasan_set_free_info+0x1f/0x40
[ 1013.741633][T29295]  ? ____kasan_slab_free+0xd8/0x110
[ 1013.746845][T29295]  ? slab_free_freelist_hook+0x12e/0x1a0
[ 1013.752487][T29295]  ? kmem_cache_free+0xc7/0x270
[ 1013.757329][T29295]  ? user_path_at_empty+0x149/0x1a0
[ 1013.762528][T29295]  ? tomoyo_get_name+0x550/0x550
[ 1013.767494][T29295]  ? lockdep_hardirqs_on+0x95/0x140
[ 1013.772687][T29295]  security_sb_mount+0x70/0xd0
[ 1013.777441][T29295]  path_mount+0xbd/0x10f0
[ 1013.781764][T29295]  ? user_path_at_empty+0x149/0x1a0
[ 1013.786955][T29295]  __se_sys_mount+0x2e3/0x3d0
[ 1013.791677][T29295]  ? __x64_sys_mount+0xc0/0xc0
[ 1013.796459][T29295]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1013.802447][T29295]  ? __x64_sys_mount+0x1c/0xc0
[ 1013.807198][T29295]  do_syscall_64+0x2b/0x70
[ 1013.811599][T29295]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1013.817479][T29295] RIP: 0033:0x7f94af28a57a
[ 1013.821931][T29295] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1013.841528][T29295] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1013.849954][T29295] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1013.857917][T29295] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1013.865884][T29295] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1013.873837][T29295] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1013.881790][T29295] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1013.889766][T29295]  </TASK>
[ 1013.948076][ T3684] usb 4-1: USB disconnect, device number 87
16:12:05 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:05 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:05 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 76)

16:12:05 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000000000700"})

[ 1014.115208][ T3686] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1014.123288][T29312] loop2: detected capacity change from 0 to 5
[ 1014.137687][ T3686] usb 6-1: can't read configurations, error -61
[ 1014.163989][T29312] FAULT_INJECTION: forcing a failure.
[ 1014.163989][T29312] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1014.180711][ T3686] usb usb6-port1: attempt power cycle
[ 1014.192699][T29312] CPU: 1 PID: 29312 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1014.203248][T29312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1014.213296][T29312] Call Trace:
[ 1014.216570][T29312]  <TASK>
[ 1014.219497][T29312]  dump_stack_lvl+0x1e3/0x2cb
[ 1014.224167][T29312]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1014.229611][T29312]  ? panic+0x76e/0x76e
[ 1014.233673][T29312]  ? get_any_partial+0x81/0x1a0
[ 1014.238531][T29312]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1014.244150][T29312]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 1014.250125][T29312]  should_fail+0x384/0x4b0
[ 1014.254546][T29312]  prepare_alloc_pages+0x1d7/0x5a0
[ 1014.259657][T29312]  __alloc_pages+0x14d/0x5f0
[ 1014.264240][T29312]  ? __rmqueue_pcplist+0x1cb0/0x1cb0
[ 1014.269531][T29312]  ? alloc_pages+0x43d/0x690
[ 1014.274122][T29312]  alloc_slab_page+0x70/0xf0
[ 1014.278707][T29312]  allocate_slab+0x5e/0x560
[ 1014.283207][T29312]  ___slab_alloc+0x41e/0xcd0
[ 1014.287789][T29312]  ? getname_flags+0xb8/0x4e0
[ 1014.292462][T29312]  ? getname_flags+0xb8/0x4e0
[ 1014.297127][T29312]  kmem_cache_alloc+0x246/0x2f0
[ 1014.301969][T29312]  ? getname_flags+0xb8/0x4e0
[ 1014.306638][T29312]  getname_flags+0xb8/0x4e0
[ 1014.311136][T29312]  user_path_at_empty+0x2a/0x1a0
[ 1014.316070][T29312]  __se_sys_mount+0x2a4/0x3d0
[ 1014.320746][T29312]  ? __x64_sys_mount+0xc0/0xc0
[ 1014.325518][T29312]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1014.331495][T29312]  ? __x64_sys_mount+0x1c/0xc0
[ 1014.336252][T29312]  do_syscall_64+0x2b/0x70
[ 1014.340664][T29312]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1014.346554][T29312] RIP: 0033:0x7f94af28a57a
[ 1014.350964][T29312] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1014.370558][T29312] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1014.378969][T29312] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1014.386931][T29312] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1014.394894][T29312] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1014.402857][T29312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1014.410825][T29312] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1014.418801][T29312]  </TASK>
[ 1014.444541][T29312] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1014.453508][T29312] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1014.465217][T29312] NILFS (loop2): mounting unchecked fs
[ 1014.471666][T29312] NILFS (loop2): I/O error reading segment
[ 1014.479066][T29312] NILFS (loop2): error -5 while searching super root
16:12:06 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000001800"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1014.586676][ T3687] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1014.596905][  T144] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1014.846747][ T3686] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1014.926754][T13504] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1014.957006][ T3687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1014.967307][  T144] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1014.977631][  T144] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1014.987850][ T3687] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1015.001085][  T144] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1015.011073][ T3687] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1015.020524][  T144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.028831][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.081246][ T3687] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
16:12:06 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:06 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 77)

16:12:06 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000000000700"})

[ 1015.166734][ T3686] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1015.174372][ T3686] usb 6-1: can't read configurations, error -61
[ 1015.216084][T29340] loop2: detected capacity change from 0 to 5
[ 1015.243694][T29340] FAULT_INJECTION: forcing a failure.
[ 1015.243694][T29340] name failslab, interval 1, probability 0, space 0, times 0
[ 1015.258061][T29340] CPU: 0 PID: 29340 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1015.268593][T29340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1015.278657][T29340] Call Trace:
[ 1015.281947][T29340]  <TASK>
[ 1015.284888][T29340]  dump_stack_lvl+0x1e3/0x2cb
[ 1015.289587][T29340]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1015.295075][T29340]  ? panic+0x76e/0x76e
[ 1015.296841][T13504] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1015.299164][T29340]  ? __might_sleep+0xc0/0xc0
[ 1015.299192][T29340]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1015.299219][T29340]  should_fail+0x384/0x4b0
[ 1015.319254][T13504] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1015.320246][T29340]  ? tomoyo_realpath_from_path+0xd8/0x5f0
[ 1015.320278][T29340]  should_failslab+0x5/0x20
[ 1015.325975][T13504] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1015.334385][T29340]  __kmalloc+0x8b/0x370
[ 1015.334412][T29340]  ? kfree+0x2f/0x210
[ 1015.334435][T29340]  tomoyo_realpath_from_path+0xd8/0x5f0
[ 1015.334472][T29340]  tomoyo_mount_permission+0x380/0xb50
[ 1015.334501][T29340]  ? kasan_set_track+0x4c/0x70
[ 1015.334520][T29340]  ? kasan_set_free_info+0x1f/0x40
[ 1015.334536][T29340]  ? ____kasan_slab_free+0xd8/0x110
[ 1015.334554][T29340]  ? slab_free_freelist_hook+0x12e/0x1a0
[ 1015.334574][T29340]  ? kmem_cache_free+0xc7/0x270
[ 1015.334591][T29340]  ? user_path_at_empty+0x149/0x1a0
[ 1015.334613][T29340]  ? tomoyo_get_name+0x550/0x550
[ 1015.334679][T29340]  ? lockdep_hardirqs_on+0x95/0x140
[ 1015.353069][T13504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.353878][T29340]  security_sb_mount+0x70/0xd0
[ 1015.426384][T29340]  path_mount+0xbd/0x10f0
[ 1015.430740][T29340]  ? user_path_at_empty+0x149/0x1a0
[ 1015.435949][T29340]  __se_sys_mount+0x2e3/0x3d0
[ 1015.440809][T29340]  ? __x64_sys_mount+0xc0/0xc0
[ 1015.445579][T29340]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1015.451562][T29340]  ? __x64_sys_mount+0x1c/0xc0
[ 1015.456346][T29340]  do_syscall_64+0x2b/0x70
[ 1015.460772][T29340]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1015.466675][T29340] RIP: 0033:0x7f94af28a57a
[ 1015.471096][T29340] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1015.490706][T29340] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1015.499135][T29340] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1015.507116][T29340] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1015.515093][T29340] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1015.523051][T29340] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1015.531014][T29340] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1015.539015][T29340]  </TASK>
[ 1015.552496][T29340] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1015.557538][  T144] usb 1-1: USB disconnect, device number 27
16:12:07 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 78)

[ 1015.580537][ T3687] usb 5-1: USB disconnect, device number 7
[ 1015.672599][T29361] loop2: detected capacity change from 0 to 5
[ 1015.684370][T29361] FAULT_INJECTION: forcing a failure.
[ 1015.684370][T29361] name failslab, interval 1, probability 0, space 0, times 0
[ 1015.702909][T29361] CPU: 0 PID: 29361 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1015.713438][T29361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1015.723493][T29361] Call Trace:
[ 1015.726762][T29361]  <TASK>
[ 1015.729696][T29361]  dump_stack_lvl+0x1e3/0x2cb
[ 1015.734385][T29361]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1015.739841][T29361]  ? panic+0x76e/0x76e
[ 1015.743928][T29361]  ? __might_sleep+0xc0/0xc0
[ 1015.748535][T29361]  should_fail+0x384/0x4b0
[ 1015.752978][T29361]  ? getname_kernel+0x55/0x2d0
[ 1015.757751][T29361]  should_failslab+0x5/0x20
[ 1015.762265][T29361]  kmem_cache_alloc+0x69/0x2f0
[ 1015.767050][T29361]  getname_kernel+0x55/0x2d0
[ 1015.771657][T29361]  kern_path+0x1f/0x180
[ 1015.775819][T29361]  tomoyo_mount_permission+0x807/0xb50
[ 1015.781286][T29361]  ? kasan_set_track+0x4c/0x70
[ 1015.786058][T29361]  ? kasan_set_free_info+0x1f/0x40
[ 1015.791177][T29361]  ? ____kasan_slab_free+0xd8/0x110
[ 1015.796398][T29361]  ? slab_free_freelist_hook+0x12e/0x1a0
[ 1015.802039][T29361]  ? kmem_cache_free+0xc7/0x270
[ 1015.806899][T29361]  ? user_path_at_empty+0x149/0x1a0
[ 1015.812110][T29361]  ? tomoyo_get_name+0x550/0x550
[ 1015.817114][T29361]  ? lockdep_hardirqs_on+0x95/0x140
[ 1015.822344][T29361]  security_sb_mount+0x70/0xd0
[ 1015.827126][T29361]  path_mount+0xbd/0x10f0
[ 1015.831471][T29361]  ? user_path_at_empty+0x149/0x1a0
[ 1015.836679][T29361]  __se_sys_mount+0x2e3/0x3d0
[ 1015.841376][T29361]  ? __x64_sys_mount+0xc0/0xc0
[ 1015.846144][T29361]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1015.852119][T29361]  ? __x64_sys_mount+0x1c/0xc0
[ 1015.856904][T29361]  do_syscall_64+0x2b/0x70
[ 1015.861334][T29361]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1015.863201][T13504] wacom 0003:056A:0331.0137: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1015.867237][T29361] RIP: 0033:0x7f94af28a57a
[ 1015.867258][T29361] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1015.867278][T29361] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1015.867302][T29361] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
16:12:07 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000000000000000700"})

[ 1015.867318][T29361] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1015.867332][T29361] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1015.867346][T29361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1015.867359][T29361] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1015.867392][T29361]  </TASK>
16:12:07 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 79)

[ 1015.976866][ T3686] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1016.085246][T29378] loop2: detected capacity change from 0 to 5
[ 1016.093793][T29378] FAULT_INJECTION: forcing a failure.
[ 1016.093793][T29378] name failslab, interval 1, probability 0, space 0, times 0
[ 1016.121229][T29378] CPU: 0 PID: 29378 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1016.131777][T29378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1016.141851][T29378] Call Trace:
[ 1016.145143][T29378]  <TASK>
[ 1016.148087][T29378]  dump_stack_lvl+0x1e3/0x2cb
[ 1016.152784][T29378]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1016.158238][T29378]  ? panic+0x76e/0x76e
[ 1016.162328][T29378]  ? __might_sleep+0xc0/0xc0
[ 1016.166935][T29378]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1016.172586][T29378]  should_fail+0x384/0x4b0
[ 1016.177025][T29378]  ? tomoyo_realpath_from_path+0xd8/0x5f0
[ 1016.182761][T29378]  should_failslab+0x5/0x20
[ 1016.187282][T29378]  __kmalloc+0x8b/0x370
[ 1016.191446][T29378]  ? kfree+0x2f/0x210
[ 1016.195443][T29378]  tomoyo_realpath_from_path+0xd8/0x5f0
[ 1016.201009][T29378]  tomoyo_mount_permission+0xa1e/0xb50
[ 1016.206493][T29378]  ? kasan_set_track+0x4c/0x70
[ 1016.211267][T29378]  ? kasan_set_free_info+0x1f/0x40
[ 1016.216387][T29378]  ? ____kasan_slab_free+0xd8/0x110
[ 1016.221587][T29378]  ? slab_free_freelist_hook+0x12e/0x1a0
[ 1016.227233][T29378]  ? kmem_cache_free+0xc7/0x270
[ 1016.232096][T29378]  ? user_path_at_empty+0x149/0x1a0
[ 1016.237320][T29378]  ? tomoyo_get_name+0x550/0x550
[ 1016.242322][T29378]  ? lockdep_hardirqs_on+0x95/0x140
[ 1016.247545][T29378]  security_sb_mount+0x70/0xd0
[ 1016.252336][T29378]  path_mount+0xbd/0x10f0
[ 1016.256684][T29378]  ? user_path_at_empty+0x149/0x1a0
[ 1016.261899][T29378]  __se_sys_mount+0x2e3/0x3d0
[ 1016.266598][T29378]  ? __x64_sys_mount+0xc0/0xc0
[ 1016.271369][T29378]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1016.277370][T29378]  ? __x64_sys_mount+0x1c/0xc0
[ 1016.282152][T29378]  do_syscall_64+0x2b/0x70
[ 1016.286582][T29378]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1016.292484][T29378] RIP: 0033:0x7f94af28a57a
[ 1016.296910][T29378] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1016.316528][T29378] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1016.324959][T29378] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
16:12:08 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:08 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1016.333043][T29378] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1016.341036][T29378] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1016.349021][T29378] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1016.357008][T29378] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1016.360438][T13504] usb 4-1: USB disconnect, device number 88
[ 1016.365005][T29378]  </TASK>
[ 1016.400027][T29378] ERROR: Out of memory at tomoyo_realpath_from_path.
16:12:08 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 80)

[ 1016.489043][ T3686] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1016.506381][ T3686] usb 6-1: config 0 has no interfaces?
[ 1016.522114][ T3686] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1016.538804][T29400] loop2: detected capacity change from 0 to 5
[ 1016.543283][ T3686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1016.561253][T29400] FAULT_INJECTION: forcing a failure.
[ 1016.561253][T29400] name failslab, interval 1, probability 0, space 0, times 0
[ 1016.581376][ T3686] usb 6-1: config 0 descriptor??
[ 1016.586001][T29400] CPU: 1 PID: 29400 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1016.596823][T29400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1016.606891][T29400] Call Trace:
[ 1016.610183][T29400]  <TASK>
[ 1016.613119][T29400]  dump_stack_lvl+0x1e3/0x2cb
[ 1016.617813][T29400]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1016.623270][T29400]  ? panic+0x76e/0x76e
[ 1016.627347][T29400]  ? __might_sleep+0xc0/0xc0
[ 1016.631930][T29400]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1016.637559][T29400]  should_fail+0x384/0x4b0
[ 1016.642000][T29400]  ? tomoyo_realpath_from_path+0xd8/0x5f0
[ 1016.647718][T29400]  should_failslab+0x5/0x20
[ 1016.652213][T29400]  __kmalloc+0x8b/0x370
[ 1016.656360][T29400]  ? kfree+0x2f/0x210
[ 1016.660339][T29400]  tomoyo_realpath_from_path+0xd8/0x5f0
[ 1016.665975][T29400]  tomoyo_mount_permission+0xa1e/0xb50
[ 1016.671427][T29400]  ? kasan_quarantine_put+0x1f8/0x230
[ 1016.676786][T29400]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1016.682436][T29400]  ? tomoyo_get_name+0x550/0x550
[ 1016.687380][T29400]  ? read_lock_is_recursive+0x10/0x10
[ 1016.692760][T29400]  ? lockdep_hardirqs_on+0x95/0x140
[ 1016.697966][T29400]  security_sb_mount+0x70/0xd0
[ 1016.702726][T29400]  path_mount+0xbd/0x10f0
[ 1016.707050][T29400]  ? user_path_at_empty+0x149/0x1a0
[ 1016.712238][T29400]  __se_sys_mount+0x2e3/0x3d0
[ 1016.716912][T29400]  ? __x64_sys_mount+0xc0/0xc0
[ 1016.721669][T29400]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1016.727644][T29400]  ? __x64_sys_mount+0x1c/0xc0
[ 1016.732417][T29400]  do_syscall_64+0x2b/0x70
[ 1016.736831][T29400]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1016.742720][T29400] RIP: 0033:0x7f94af28a57a
[ 1016.747126][T29400] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1016.766718][T29400] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1016.775128][T29400] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1016.783089][T29400] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1016.791048][T29400] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1016.799007][T29400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1016.806970][T29400] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1016.814952][T29400]  </TASK>
[ 1016.819529][   T14] usb 1-1: new high-speed USB device number 28 using dummy_hcd
16:12:08 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1016.834830][T29400] ERROR: Out of memory at tomoyo_realpath_from_path.
16:12:08 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 81)

[ 1016.896665][ T3687] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1016.949381][T29412] loop2: detected capacity change from 0 to 5
[ 1016.967423][T29412] FAULT_INJECTION: forcing a failure.
[ 1016.967423][T29412] name failslab, interval 1, probability 0, space 0, times 0
[ 1016.986315][T29412] CPU: 0 PID: 29412 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1016.996852][T29412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1017.006919][T29412] Call Trace:
[ 1017.010204][T29412]  <TASK>
[ 1017.013137][T29412]  dump_stack_lvl+0x1e3/0x2cb
[ 1017.017832][T29412]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1017.023316][T29412]  ? panic+0x76e/0x76e
[ 1017.027414][T29412]  ? __might_sleep+0xc0/0xc0
[ 1017.032035][T29412]  should_fail+0x384/0x4b0
[ 1017.036473][T29412]  ? alloc_fs_context+0x63/0x870
[ 1017.041424][T29412]  should_failslab+0x5/0x20
[ 1017.045942][T29412]  kmem_cache_alloc_trace+0x68/0x310
[ 1017.051257][T29412]  alloc_fs_context+0x63/0x870
[ 1017.056040][T29412]  ? do_raw_read_unlock+0x37/0x70
[ 1017.061084][T29412]  ? _raw_read_unlock+0x24/0x40
[ 1017.065959][T29412]  do_new_mount+0x15c/0xad0
[ 1017.070478][T29412]  ? ns_capable+0x81/0xe0
[ 1017.074916][T29412]  ? do_move_mount_old+0x160/0x160
[ 1017.080048][T29412]  ? user_path_at_empty+0x149/0x1a0
[ 1017.085262][T29412]  __se_sys_mount+0x2e3/0x3d0
[ 1017.089973][T29412]  ? __x64_sys_mount+0xc0/0xc0
[ 1017.094754][T29412]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1017.100744][T29412]  ? __x64_sys_mount+0x1c/0xc0
[ 1017.105524][T29412]  do_syscall_64+0x2b/0x70
[ 1017.109942][T29412]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1017.115825][T29412] RIP: 0033:0x7f94af28a57a
[ 1017.120235][T29412] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1017.139836][T29412] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
16:12:08 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000002500"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1017.148247][T29412] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1017.156209][T29412] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1017.164167][T29412] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1017.172124][T29412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1017.180172][T29412] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1017.188156][T29412]  </TASK>
[ 1017.356658][ T3687] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1017.366980][ T3687] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1017.376094][ T3687] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1017.385617][ T3687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1017.467049][   T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1017.477234][ T3682] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1017.485104][   T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1017.498691][   T14] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1017.507800][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1017.588897][   T14] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1017.641044][   T14] usb 5-1: USB disconnect, device number 8
[ 1017.796290][ T3687] usb 1-1: USB disconnect, device number 28
[ 1017.889457][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1017.900763][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1017.910946][ T3682] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1017.920285][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.409318][ T3682] wacom 0003:056A:0331.0138: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
16:12:10 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000000000700"})

16:12:10 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 82)

16:12:10 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:10 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:10 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1018.567524][ T3682] usb 6-1: USB disconnect, device number 71
[ 1018.619630][T29448] loop2: detected capacity change from 0 to 5
[ 1018.633864][T29448] FAULT_INJECTION: forcing a failure.
[ 1018.633864][T29448] name failslab, interval 1, probability 0, space 0, times 0
[ 1018.660548][T29448] CPU: 0 PID: 29448 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1018.671104][T29448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1018.681169][T29448] Call Trace:
[ 1018.684459][T29448]  <TASK>
[ 1018.687375][T29448]  dump_stack_lvl+0x1e3/0x2cb
[ 1018.692147][T29448]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1018.697589][T29448]  ? panic+0x76e/0x76e
[ 1018.701642][T29448]  ? __might_sleep+0xc0/0xc0
[ 1018.706220][T29448]  should_fail+0x384/0x4b0
[ 1018.710625][T29448]  ? alloc_fs_context+0x63/0x870
[ 1018.715551][T29448]  should_failslab+0x5/0x20
[ 1018.720043][T29448]  kmem_cache_alloc_trace+0x68/0x310
[ 1018.725335][T29448]  alloc_fs_context+0x63/0x870
[ 1018.730096][T29448]  ? do_raw_read_unlock+0x37/0x70
[ 1018.735111][T29448]  ? _raw_read_unlock+0x24/0x40
[ 1018.739960][T29448]  do_new_mount+0x15c/0xad0
[ 1018.744457][T29448]  ? ns_capable+0x81/0xe0
[ 1018.748781][T29448]  ? do_move_mount_old+0x160/0x160
[ 1018.753887][T29448]  ? user_path_at_empty+0x149/0x1a0
[ 1018.759078][T29448]  __se_sys_mount+0x2e3/0x3d0
[ 1018.763753][T29448]  ? __x64_sys_mount+0xc0/0xc0
[ 1018.768530][T29448]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1018.774514][T29448]  ? __x64_sys_mount+0x1c/0xc0
[ 1018.779275][T29448]  do_syscall_64+0x2b/0x70
[ 1018.783686][T29448]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1018.789576][T29448] RIP: 0033:0x7f94af28a57a
[ 1018.793980][T29448] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1018.813574][T29448] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1018.821981][T29448] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1018.829958][T29448] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1018.837918][T29448] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1018.845883][T29448] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1018.853838][T29448] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1018.861818][T29448]  </TASK>
16:12:10 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 83)

[ 1018.873200][ T3684] usb 4-1: USB disconnect, device number 89
[ 1018.959328][T29474] loop2: detected capacity change from 0 to 5
[ 1018.967586][T29474] FAULT_INJECTION: forcing a failure.
[ 1018.967586][T29474] name failslab, interval 1, probability 0, space 0, times 0
[ 1018.982852][T29474] CPU: 1 PID: 29474 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1018.993375][T29474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1019.003444][T29474] Call Trace:
[ 1019.006731][T29474]  <TASK>
[ 1019.009671][T29474]  dump_stack_lvl+0x1e3/0x2cb
[ 1019.014364][T29474]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1019.016745][   T14] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1019.019828][T29474]  ? panic+0x76e/0x76e
[ 1019.019862][T29474]  ? __might_sleep+0xc0/0xc0
[ 1019.019892][T29474]  should_fail+0x384/0x4b0
[ 1019.019914][T29474]  ? alloc_fs_context+0x63/0x870
[ 1019.027586][ T3686] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1019.031507][T29474]  should_failslab+0x5/0x20
[ 1019.031539][T29474]  kmem_cache_alloc_trace+0x68/0x310
[ 1019.062634][T29474]  alloc_fs_context+0x63/0x870
[ 1019.067424][T29474]  ? do_raw_read_unlock+0x37/0x70
[ 1019.072480][T29474]  ? _raw_read_unlock+0x24/0x40
[ 1019.077327][T29474]  do_new_mount+0x15c/0xad0
[ 1019.081846][T29474]  ? ns_capable+0x81/0xe0
[ 1019.086187][T29474]  ? do_move_mount_old+0x160/0x160
[ 1019.091317][T29474]  ? user_path_at_empty+0x149/0x1a0
[ 1019.096532][T29474]  __se_sys_mount+0x2e3/0x3d0
[ 1019.101226][T29474]  ? __x64_sys_mount+0xc0/0xc0
[ 1019.105997][T29474]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1019.111981][T29474]  ? __x64_sys_mount+0x1c/0xc0
[ 1019.116758][T29474]  do_syscall_64+0x2b/0x70
[ 1019.121185][T29474]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1019.127091][T29474] RIP: 0033:0x7f94af28a57a
[ 1019.131597][T29474] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1019.151206][T29474] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1019.159634][T29474] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1019.167700][T29474] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1019.175682][T29474] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1019.183663][T29474] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1019.186671][ T3682] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1019.191639][T29474] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1019.191674][T29474]  </TASK>
16:12:10 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000700"})

16:12:10 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 84)

[ 1019.328351][T29484] loop2: detected capacity change from 0 to 5
[ 1019.347711][T29484] FAULT_INJECTION: forcing a failure.
[ 1019.347711][T29484] name failslab, interval 1, probability 0, space 0, times 0
[ 1019.361664][T29484] CPU: 1 PID: 29484 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1019.372273][T29484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1019.382340][T29484] Call Trace:
[ 1019.385621][T29484]  <TASK>
[ 1019.388554][T29484]  dump_stack_lvl+0x1e3/0x2cb
[ 1019.393252][T29484]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1019.396920][ T3686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1019.398722][T29484]  ? panic+0x76e/0x76e
[ 1019.409014][   T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1019.412829][T29484]  ? memset+0x1f/0x40
[ 1019.426834][T29484]  ? lockdep_init_map_type+0x9d/0x8d0
[ 1019.432218][T29484]  should_fail+0x384/0x4b0
[ 1019.433883][ T3686] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1019.436639][T29484]  ? legacy_init_fs_context+0x4d/0xb0
[ 1019.436666][T29484]  should_failslab+0x5/0x20
[ 1019.436687][T29484]  kmem_cache_alloc_trace+0x68/0x310
[ 1019.436709][T29484]  ? __raw_spin_lock_init+0x41/0x100
[ 1019.436732][T29484]  legacy_init_fs_context+0x4d/0xb0
[ 1019.436757][T29484]  alloc_fs_context+0x696/0x870
[ 1019.436789][T29484]  do_new_mount+0x15c/0xad0
[ 1019.436811][T29484]  ? ns_capable+0x81/0xe0
[ 1019.436834][T29484]  ? do_move_mount_old+0x160/0x160
[ 1019.436858][T29484]  ? user_path_at_empty+0x149/0x1a0
[ 1019.436881][T29484]  __se_sys_mount+0x2e3/0x3d0
[ 1019.445901][   T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1019.451140][T29484]  ? __x64_sys_mount+0xc0/0xc0
[ 1019.451164][T29484]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1019.451192][T29484]  ? __x64_sys_mount+0x1c/0xc0
16:12:11 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000004000"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1019.451215][T29484]  do_syscall_64+0x2b/0x70
[ 1019.451236][T29484]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1019.451259][T29484] RIP: 0033:0x7f94af28a57a
[ 1019.451279][T29484] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1019.451297][T29484] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206
[ 1019.455973][ T3686] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1019.461208][T29484]  ORIG_RAX: 00000000000000a5
[ 1019.461220][T29484] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1019.461235][T29484] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1019.461248][T29484] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1019.461262][T29484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1019.461275][T29484] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1019.461307][T29484]  </TASK>
[ 1019.628235][   T14] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1019.637904][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.646811][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:11 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 85)

[ 1019.691544][   T14] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1019.746984][ T3682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1019.766670][ T3682] usb 6-1: config 0 has no interfaces?
[ 1019.772181][ T3682] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1019.793446][ T3682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.794638][T29502] loop2: detected capacity change from 0 to 5
[ 1019.815258][  T144] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1019.823698][T29502] FAULT_INJECTION: forcing a failure.
[ 1019.823698][T29502] name failslab, interval 1, probability 0, space 0, times 0
16:12:11 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000000000000000700"})

[ 1019.854586][ T3682] usb 6-1: config 0 descriptor??
[ 1019.860516][T29502] CPU: 0 PID: 29502 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1019.871032][T29502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1019.881343][T29502] Call Trace:
[ 1019.884630][T29502]  <TASK>
[ 1019.887571][T29502]  dump_stack_lvl+0x1e3/0x2cb
[ 1019.892268][T29502]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1019.897746][T29502]  ? panic+0x76e/0x76e
[ 1019.901854][T29502]  should_fail+0x384/0x4b0
[ 1019.906287][T29502]  ? alloc_super+0x59/0x820
[ 1019.910807][T29502]  should_failslab+0x5/0x20
[ 1019.915320][T29502]  kmem_cache_alloc_trace+0x68/0x310
[ 1019.920601][T29502]  ? nilfs_destroy_cachep+0x40/0x40
[ 1019.925891][T29502]  alloc_super+0x59/0x820
[ 1019.930239][T29502]  ? nilfs_destroy_cachep+0x40/0x40
[ 1019.935470][T29502]  sget+0x20e/0x4f0
[ 1019.939275][T29502]  ? nilfs_test_bdev_super+0x40/0x40
[ 1019.944585][T29502]  nilfs_mount+0x512/0x9e0
[ 1019.948999][T29502]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1019.954968][T29502]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1019.960241][T29502]  ? trace_kfree+0x2d/0xd0
[ 1019.964646][T29502]  ? kfree+0x2f/0x210
[ 1019.968625][T29502]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1019.973907][T29502]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1019.979360][T29502]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1019.984809][T29502]  ? cap_capable+0x1b5/0x250
[ 1019.989392][T29502]  legacy_get_tree+0xea/0x180
[ 1019.994063][T29502]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1020.000037][T29502]  vfs_get_tree+0x88/0x270
[ 1020.004465][T29502]  do_new_mount+0x289/0xad0
[ 1020.008962][T29502]  ? ns_capable+0x81/0xe0
[ 1020.013292][T29502]  ? do_move_mount_old+0x160/0x160
[ 1020.018407][T29502]  ? user_path_at_empty+0x149/0x1a0
[ 1020.023611][T29502]  __se_sys_mount+0x2e3/0x3d0
[ 1020.028285][T29502]  ? __x64_sys_mount+0xc0/0xc0
[ 1020.033041][T29502]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1020.039017][T29502]  ? __x64_sys_mount+0x1c/0xc0
[ 1020.043781][T29502]  do_syscall_64+0x2b/0x70
[ 1020.048191][T29502]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1020.054076][T29502] RIP: 0033:0x7f94af28a57a
[ 1020.058482][T29502] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1020.078077][T29502] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1020.086500][T29502] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1020.094466][T29502] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1020.102425][T29502] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1020.110386][T29502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1020.118346][T29502] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1020.126320][T29502]  </TASK>
[ 1020.142349][   T14] usb 5-1: USB disconnect, device number 9
16:12:11 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 86)

[ 1020.263492][T29518] loop2: detected capacity change from 0 to 5
[ 1020.284610][T29518] FAULT_INJECTION: forcing a failure.
[ 1020.284610][T29518] name failslab, interval 1, probability 0, space 0, times 0
[ 1020.298314][T29518] CPU: 0 PID: 29518 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1020.308835][T29518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1020.318903][T29518] Call Trace:
[ 1020.322181][T29518]  <TASK>
[ 1020.325113][T29518]  dump_stack_lvl+0x1e3/0x2cb
[ 1020.329786][T29518]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1020.335232][T29518]  ? panic+0x76e/0x76e
[ 1020.339291][T29518]  ? __might_sleep+0xc0/0xc0
[ 1020.343863][T29518]  ? lockdep_init_map_type+0x9d/0x8d0
[ 1020.349229][T29518]  should_fail+0x384/0x4b0
[ 1020.353648][T29518]  ? security_sb_alloc+0x3a/0x140
[ 1020.358676][T29518]  should_failslab+0x5/0x20
[ 1020.363190][T29518]  __kmalloc+0x8b/0x370
[ 1020.367369][T29518]  security_sb_alloc+0x3a/0x140
[ 1020.372232][T29518]  alloc_super+0x1cd/0x820
[ 1020.376662][T29518]  ? nilfs_destroy_cachep+0x40/0x40
[ 1020.381863][T29518]  sget+0x20e/0x4f0
[ 1020.385671][T29518]  ? nilfs_test_bdev_super+0x40/0x40
[ 1020.390958][T29518]  nilfs_mount+0x512/0x9e0
[ 1020.395365][T29518]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1020.401337][T29518]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1020.406634][T29518]  ? trace_kfree+0x2d/0xd0
[ 1020.411053][T29518]  ? kfree+0x2f/0x210
[ 1020.415043][T29518]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1020.420323][T29518]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1020.425775][T29518]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1020.431226][T29518]  ? cap_capable+0x1b5/0x250
[ 1020.435813][T29518]  legacy_get_tree+0xea/0x180
[ 1020.440495][T29518]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1020.446480][T29518]  vfs_get_tree+0x88/0x270
[ 1020.450907][T29518]  do_new_mount+0x289/0xad0
[ 1020.455404][T29518]  ? ns_capable+0x81/0xe0
[ 1020.459724][T29518]  ? do_move_mount_old+0x160/0x160
[ 1020.464831][T29518]  ? user_path_at_empty+0x149/0x1a0
[ 1020.470027][T29518]  __se_sys_mount+0x2e3/0x3d0
[ 1020.474711][T29518]  ? __x64_sys_mount+0xc0/0xc0
[ 1020.479491][T29518]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1020.485831][T29518]  ? __x64_sys_mount+0x1c/0xc0
[ 1020.490600][T29518]  do_syscall_64+0x2b/0x70
[ 1020.495019][T29518]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1020.500911][T29518] RIP: 0033:0x7f94af28a57a
[ 1020.505323][T29518] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1020.524915][T29518] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1020.533317][T29518] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1020.541275][T29518] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1020.549233][T29518] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1020.557188][T29518] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1020.565141][T29518] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1020.573128][T29518]  </TASK>
[ 1020.597311][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
16:12:12 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 87)

[ 1020.608520][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1020.623487][  T144] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1020.632892][  T144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:12 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1020.748868][T29530] loop2: detected capacity change from 0 to 5
[ 1020.756338][T29530] FAULT_INJECTION: forcing a failure.
[ 1020.756338][T29530] name failslab, interval 1, probability 0, space 0, times 0
[ 1020.771577][T29530] CPU: 1 PID: 29530 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1020.782106][T29530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1020.792177][T29530] Call Trace:
[ 1020.795471][T29530]  <TASK>
[ 1020.798418][T29530]  dump_stack_lvl+0x1e3/0x2cb
[ 1020.803118][T29530]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1020.808589][T29530]  ? panic+0x76e/0x76e
[ 1020.812662][T29530]  ? __might_sleep+0xc0/0xc0
[ 1020.817253][T29530]  should_fail+0x384/0x4b0
[ 1020.821666][T29530]  ? __list_lru_init+0x9f/0x530
[ 1020.826516][T29530]  should_failslab+0x5/0x20
[ 1020.831020][T29530]  __kmalloc+0x8b/0x370
[ 1020.835172][T29530]  ? lockdep_softirqs_off+0x420/0x420
[ 1020.840536][T29530]  __list_lru_init+0x9f/0x530
[ 1020.845210][T29530]  alloc_super+0x6d1/0x820
[ 1020.849618][T29530]  ? nilfs_destroy_cachep+0x40/0x40
[ 1020.854807][T29530]  sget+0x20e/0x4f0
[ 1020.858605][T29530]  ? nilfs_test_bdev_super+0x40/0x40
[ 1020.863882][T29530]  nilfs_mount+0x512/0x9e0
[ 1020.868298][T29530]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1020.874266][T29530]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1020.879540][T29530]  ? trace_kfree+0x2d/0xd0
[ 1020.883945][T29530]  ? kfree+0x2f/0x210
[ 1020.887919][T29530]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1020.893192][T29530]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1020.898643][T29530]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1020.904094][T29530]  ? cap_capable+0x1b5/0x250
[ 1020.908678][T29530]  legacy_get_tree+0xea/0x180
[ 1020.913346][T29530]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1020.919321][T29530]  vfs_get_tree+0x88/0x270
[ 1020.923732][T29530]  do_new_mount+0x289/0xad0
[ 1020.928226][T29530]  ? ns_capable+0x81/0xe0
[ 1020.932550][T29530]  ? do_move_mount_old+0x160/0x160
[ 1020.937654][T29530]  ? user_path_at_empty+0x149/0x1a0
[ 1020.942851][T29530]  __se_sys_mount+0x2e3/0x3d0
[ 1020.947526][T29530]  ? __x64_sys_mount+0xc0/0xc0
[ 1020.952278][T29530]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1020.958250][T29530]  ? __x64_sys_mount+0x1c/0xc0
[ 1020.963003][T29530]  do_syscall_64+0x2b/0x70
[ 1020.967410][T29530]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1020.973302][T29530] RIP: 0033:0x7f94af28a57a
[ 1020.977708][T29530] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1020.997482][T29530] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1021.005889][T29530] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1021.013865][T29530] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1021.021825][T29530] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1021.029793][T29530] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1021.037766][T29530] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1021.045750][T29530]  </TASK>
[ 1021.294845][  T144] wacom 0003:056A:0331.0139: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1021.604206][  T144] usb 1-1: USB disconnect, device number 29
[ 1021.752706][ T3687] usb 4-1: USB disconnect, device number 90
16:12:13 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:13 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0xd, {0xd, 0x0, "a418720210fed1ef23b45d"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:13 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 88)

16:12:13 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000700"})

16:12:13 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1022.087931][ T3683] usb 6-1: USB disconnect, device number 72
[ 1022.127925][T29567] loop2: detected capacity change from 0 to 5
[ 1022.166117][T29567] FAULT_INJECTION: forcing a failure.
[ 1022.166117][T29567] name failslab, interval 1, probability 0, space 0, times 0
[ 1022.180858][T29567] CPU: 1 PID: 29567 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1022.191391][T29567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1022.201462][T29567] Call Trace:
[ 1022.204753][T29567]  <TASK>
[ 1022.207693][T29567]  dump_stack_lvl+0x1e3/0x2cb
[ 1022.212389][T29567]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1022.217840][T29567]  ? panic+0x76e/0x76e
[ 1022.221927][T29567]  ? __might_sleep+0xc0/0xc0
[ 1022.226532][T29567]  should_fail+0x384/0x4b0
[ 1022.230960][T29567]  ? __list_lru_init+0x9f/0x530
[ 1022.235815][T29567]  should_failslab+0x5/0x20
[ 1022.240311][T29567]  __kmalloc+0x8b/0x370
[ 1022.244477][T29567]  ? lockdep_softirqs_off+0x420/0x420
[ 1022.249866][T29567]  __list_lru_init+0x9f/0x530
[ 1022.254569][T29567]  alloc_super+0x6d1/0x820
[ 1022.258997][T29567]  ? nilfs_destroy_cachep+0x40/0x40
[ 1022.264209][T29567]  sget+0x20e/0x4f0
[ 1022.268032][T29567]  ? nilfs_test_bdev_super+0x40/0x40
[ 1022.273349][T29567]  nilfs_mount+0x512/0x9e0
[ 1022.277770][T29567]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1022.283757][T29567]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1022.289059][T29567]  ? trace_kfree+0x2d/0xd0
[ 1022.293486][T29567]  ? kfree+0x2f/0x210
[ 1022.297470][T29567]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1022.302753][T29567]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1022.308204][T29567]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1022.313657][T29567]  ? cap_capable+0x1b5/0x250
[ 1022.318237][T29567]  legacy_get_tree+0xea/0x180
[ 1022.322909][T29567]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1022.328893][T29567]  vfs_get_tree+0x88/0x270
[ 1022.333308][T29567]  do_new_mount+0x289/0xad0
[ 1022.337803][T29567]  ? ns_capable+0x81/0xe0
[ 1022.342123][T29567]  ? do_move_mount_old+0x160/0x160
[ 1022.347227][T29567]  ? user_path_at_empty+0x149/0x1a0
[ 1022.352424][T29567]  __se_sys_mount+0x2e3/0x3d0
[ 1022.357101][T29567]  ? __x64_sys_mount+0xc0/0xc0
[ 1022.361865][T29567]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1022.367846][T29567]  ? __x64_sys_mount+0x1c/0xc0
[ 1022.372606][T29567]  do_syscall_64+0x2b/0x70
[ 1022.377012][T29567]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1022.382895][T29567] RIP: 0033:0x7f94af28a57a
[ 1022.387298][T29567] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1022.406978][T29567] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
16:12:14 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000005c00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1022.415384][T29567] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1022.423347][T29567] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1022.431306][T29567] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1022.439264][T29567] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1022.447223][T29567] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1022.455198][T29567]  </TASK>
16:12:14 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 89)

[ 1022.557842][T29584] loop2: detected capacity change from 0 to 5
[ 1022.582493][T29584] FAULT_INJECTION: forcing a failure.
[ 1022.582493][T29584] name failslab, interval 1, probability 0, space 0, times 0
[ 1022.595545][T29584] CPU: 0 PID: 29584 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1022.606077][T29584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1022.616138][T29584] Call Trace:
[ 1022.619425][T29584]  <TASK>
[ 1022.622350][T29584]  dump_stack_lvl+0x1e3/0x2cb
[ 1022.627026][T29584]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1022.632476][T29584]  ? panic+0x76e/0x76e
[ 1022.636540][T29584]  ? __might_sleep+0xc0/0xc0
[ 1022.641128][T29584]  should_fail+0x384/0x4b0
[ 1022.645541][T29584]  ? __list_lru_init+0x9f/0x530
[ 1022.650386][T29584]  should_failslab+0x5/0x20
[ 1022.654879][T29584]  __kmalloc+0x8b/0x370
[ 1022.659024][T29584]  ? lockdep_softirqs_off+0x420/0x420
[ 1022.664394][T29584]  __list_lru_init+0x9f/0x530
[ 1022.669083][T29584]  alloc_super+0x6d1/0x820
[ 1022.673496][T29584]  ? nilfs_destroy_cachep+0x40/0x40
[ 1022.678691][T29584]  sget+0x20e/0x4f0
[ 1022.682490][T29584]  ? nilfs_test_bdev_super+0x40/0x40
[ 1022.687767][T29584]  nilfs_mount+0x512/0x9e0
[ 1022.692186][T29584]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1022.698158][T29584]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1022.703435][T29584]  ? trace_kfree+0x2d/0xd0
[ 1022.707837][T29584]  ? kfree+0x2f/0x210
[ 1022.711815][T29584]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1022.717089][T29584]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1022.722550][T29584]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1022.728003][T29584]  ? cap_capable+0x1b5/0x250
[ 1022.732585][T29584]  legacy_get_tree+0xea/0x180
[ 1022.737251][T29584]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1022.743249][T29584]  vfs_get_tree+0x88/0x270
[ 1022.747663][T29584]  do_new_mount+0x289/0xad0
[ 1022.752160][T29584]  ? ns_capable+0x81/0xe0
[ 1022.756483][T29584]  ? do_move_mount_old+0x160/0x160
[ 1022.761593][T29584]  ? user_path_at_empty+0x149/0x1a0
[ 1022.766789][T29584]  __se_sys_mount+0x2e3/0x3d0
[ 1022.771467][T29584]  ? __x64_sys_mount+0xc0/0xc0
[ 1022.776222][T29584]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1022.782198][T29584]  ? __x64_sys_mount+0x1c/0xc0
[ 1022.786954][T29584]  do_syscall_64+0x2b/0x70
[ 1022.791361][T29584]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1022.797247][T29584] RIP: 0033:0x7f94af28a57a
[ 1022.801650][T29584] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1022.821244][T29584] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1022.829647][T29584] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1022.837608][T29584] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1022.845582][T29584] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1022.853543][T29584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1022.861503][T29584] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1022.869477][T29584]  </TASK>
[ 1022.872782][ T3687] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1022.880516][  T144] usb 1-1: new high-speed USB device number 30 using dummy_hcd
16:12:14 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000000000000000700"})

16:12:14 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 90)

[ 1022.946631][ T3683] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1023.028661][T29593] loop2: detected capacity change from 0 to 5
[ 1023.039358][ T3682] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1023.039838][T29593] FAULT_INJECTION: forcing a failure.
[ 1023.039838][T29593] name failslab, interval 1, probability 0, space 0, times 0
[ 1023.077772][T29593] CPU: 0 PID: 29593 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1023.088338][T29593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1023.098386][T29593] Call Trace:
[ 1023.101666][T29593]  <TASK>
[ 1023.104601][T29593]  dump_stack_lvl+0x1e3/0x2cb
[ 1023.109332][T29593]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1023.114812][T29593]  ? panic+0x76e/0x76e
[ 1023.118893][T29593]  ? __might_sleep+0xc0/0xc0
[ 1023.123474][T29593]  ? vsnprintf+0x1c02/0x1ce0
[ 1023.128075][T29593]  should_fail+0x384/0x4b0
[ 1023.132505][T29593]  ? alloc_nilfs+0x4d/0x2d0
[ 1023.137009][T29593]  should_failslab+0x5/0x20
[ 1023.141516][T29593]  kmem_cache_alloc_trace+0x68/0x310
[ 1023.146807][T29593]  alloc_nilfs+0x4d/0x2d0
[ 1023.151130][T29593]  nilfs_fill_super+0xa1/0x650
[ 1023.155887][T29593]  ? vscnprintf+0x80/0x80
[ 1023.160207][T29593]  ? nilfs_set_bdev_super+0xa0/0xa0
[ 1023.165414][T29593]  nilfs_mount+0x673/0x9e0
[ 1023.169827][T29593]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1023.175821][T29593]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1023.181119][T29593]  ? trace_kfree+0x2d/0xd0
[ 1023.185544][T29593]  ? kfree+0x2f/0x210
[ 1023.189537][T29593]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1023.194831][T29593]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1023.200432][T29593]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1023.205906][T29593]  ? cap_capable+0x1b5/0x250
[ 1023.210500][T29593]  legacy_get_tree+0xea/0x180
[ 1023.215203][T29593]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1023.221292][T29593]  vfs_get_tree+0x88/0x270
[ 1023.225722][T29593]  do_new_mount+0x289/0xad0
[ 1023.230219][T29593]  ? ns_capable+0x81/0xe0
[ 1023.234540][T29593]  ? do_move_mount_old+0x160/0x160
[ 1023.239668][T29593]  ? user_path_at_empty+0x149/0x1a0
[ 1023.244861][T29593]  __se_sys_mount+0x2e3/0x3d0
[ 1023.249533][T29593]  ? __x64_sys_mount+0xc0/0xc0
[ 1023.254287][T29593]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1023.260262][T29593]  ? __x64_sys_mount+0x1c/0xc0
[ 1023.265015][T29593]  do_syscall_64+0x2b/0x70
[ 1023.269418][T29593]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1023.275299][T29593] RIP: 0033:0x7f94af28a57a
[ 1023.279701][T29593] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1023.299396][T29593] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1023.307808][T29593] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1023.315767][T29593] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1023.323725][T29593] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1023.331680][T29593] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1023.339635][T29593] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1023.347607][T29593]  </TASK>
16:12:15 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 91)

[ 1023.492763][T29602] loop2: detected capacity change from 0 to 5
[ 1023.499516][ T3687] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1023.509686][  T144] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1023.520994][ T3687] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1023.526954][ T3683] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1023.530153][  T144] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1023.550592][ T3683] usb 6-1: config 0 has no interfaces?
[ 1023.557971][T29602] FAULT_INJECTION: forcing a failure.
[ 1023.557971][T29602] name failslab, interval 1, probability 0, space 0, times 0
[ 1023.571505][ T3683] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1023.583342][ T3687] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1023.593879][T29602] CPU: 1 PID: 29602 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1023.597188][ T3683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.604390][T29602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1023.604405][T29602] Call Trace:
[ 1023.604414][T29602]  <TASK>
[ 1023.604423][T29602]  dump_stack_lvl+0x1e3/0x2cb
[ 1023.604454][T29602]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1023.604477][T29602]  ? panic+0x76e/0x76e
[ 1023.634845][ T3683] usb 6-1: config 0 descriptor??
[ 1023.638788][T29602]  ? __might_sleep+0xc0/0xc0
[ 1023.638815][T29602]  ? vsnprintf+0x1c02/0x1ce0
[ 1023.638844][T29602]  should_fail+0x384/0x4b0
[ 1023.638867][T29602]  ? alloc_nilfs+0x4d/0x2d0
[ 1023.638887][T29602]  should_failslab+0x5/0x20
[ 1023.638909][T29602]  kmem_cache_alloc_trace+0x68/0x310
[ 1023.638938][T29602]  alloc_nilfs+0x4d/0x2d0
[ 1023.638967][T29602]  nilfs_fill_super+0xa1/0x650
[ 1023.638994][T29602]  ? vscnprintf+0x80/0x80
[ 1023.639013][T29602]  ? nilfs_set_bdev_super+0xa0/0xa0
[ 1023.639045][T29602]  nilfs_mount+0x673/0x9e0
[ 1023.639075][T29602]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1023.639095][T29602]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1023.639117][T29602]  ? trace_kfree+0x2d/0xd0
[ 1023.639134][T29602]  ? kfree+0x2f/0x210
[ 1023.676802][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1023.680160][T29602]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1023.680194][T29602]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1023.680220][T29602]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1023.680243][T29602]  ? cap_capable+0x1b5/0x250
[ 1023.685337][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1023.689301][T29602]  legacy_get_tree+0xea/0x180
[ 1023.689331][T29602]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1023.689360][T29602]  vfs_get_tree+0x88/0x270
[ 1023.689386][T29602]  do_new_mount+0x289/0xad0
[ 1023.689407][T29602]  ? ns_capable+0x81/0xe0
[ 1023.689429][T29602]  ? do_move_mount_old+0x160/0x160
16:12:15 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000000000700"})

[ 1023.689454][T29602]  ? user_path_at_empty+0x149/0x1a0
[ 1023.689477][T29602]  __se_sys_mount+0x2e3/0x3d0
[ 1023.689505][T29602]  ? __x64_sys_mount+0xc0/0xc0
[ 1023.689527][T29602]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1023.689554][T29602]  ? __x64_sys_mount+0x1c/0xc0
[ 1023.689576][T29602]  do_syscall_64+0x2b/0x70
[ 1023.689595][T29602]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1023.689616][T29602] RIP: 0033:0x7f94af28a57a
[ 1023.689635][T29602] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1023.689651][T29602] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1023.689673][T29602] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1023.689686][T29602] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1023.689700][T29602] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1023.689713][T29602] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1023.689726][T29602] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1023.689758][T29602]  </TASK>
[ 1023.697966][ T3687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.746860][ T3682] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1023.763137][  T144] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1023.809639][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.828400][  T144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:15 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 92)

[ 1024.028875][  T144] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1024.058439][T29621] loop2: detected capacity change from 0 to 5
[ 1024.086880][T29621] FAULT_INJECTION: forcing a failure.
[ 1024.086880][T29621] name failslab, interval 1, probability 0, space 0, times 0
[ 1024.100270][T29621] CPU: 1 PID: 29621 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1024.110785][T29621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1024.120830][T29621] Call Trace:
[ 1024.124101][T29621]  <TASK>
[ 1024.127047][T29621]  dump_stack_lvl+0x1e3/0x2cb
[ 1024.131752][T29621]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1024.137211][T29621]  ? panic+0x76e/0x76e
[ 1024.141279][T29621]  should_fail+0x384/0x4b0
[ 1024.145685][T29621]  ? xas_create+0x6f5/0x1a20
[ 1024.150358][T29621]  should_failslab+0x5/0x20
[ 1024.154865][T29621]  kmem_cache_alloc_lru+0x75/0x2d0
[ 1024.159992][T29621]  xas_create+0x6f5/0x1a20
[ 1024.164451][T29621]  xas_store+0x97/0x18b0
[ 1024.168707][T29621]  ? xas_find_conflict+0xb1d/0xc30
[ 1024.173836][T29621]  __filemap_add_folio+0xaaa/0x19a0
[ 1024.179042][T29621]  ? put_page+0x230/0x230
[ 1024.183371][T29621]  ? folio_lruvec+0x390/0x390
[ 1024.188041][T29621]  ? __rmqueue_pcplist+0x1cb0/0x1cb0
[ 1024.193331][T29621]  filemap_add_folio+0x12c/0x5c0
[ 1024.198264][T29621]  ? add_to_page_cache_locked+0x150/0x150
[ 1024.203983][T29621]  ? folio_alloc+0x47/0x50
[ 1024.208394][T29621]  ? filemap_alloc_folio+0x1a9/0x1c0
[ 1024.213680][T29621]  __filemap_get_folio+0x909/0x11f0
[ 1024.218875][T29621]  ? page_cache_prev_miss+0x500/0x500
[ 1024.224266][T29621]  pagecache_get_page+0x2a/0x240
[ 1024.229218][T29621]  grow_dev_page+0xba/0x820
[ 1024.233756][T29621]  ? submit_bio+0x27a/0x3d0
[ 1024.238335][T29621]  ? bit_waitqueue+0x30/0x30
[ 1024.242923][T29621]  __getblk_gfp+0x16c/0x290
[ 1024.247429][T29621]  __bread_gfp+0x2a/0x360
[ 1024.251750][T29621]  nilfs_read_super_block+0x82/0xe0
[ 1024.256947][T29621]  nilfs_load_super_block+0x179/0xea0
[ 1024.262318][T29621]  ? invalidate_bh_lrus+0x30/0x30
[ 1024.267339][T29621]  ? init_nilfs+0x7f0/0x7f0
[ 1024.271831][T29621]  ? set_blocksize+0x2ec/0x360
[ 1024.276592][T29621]  ? sb_min_blocksize+0x126/0x180
[ 1024.281610][T29621]  init_nilfs+0xda/0x7f0
[ 1024.285867][T29621]  ? nilfs_swap_super_block+0x120/0x120
[ 1024.291420][T29621]  ? __init_rwsem+0x11e/0x160
[ 1024.296115][T29621]  nilfs_fill_super+0xe9/0x650
[ 1024.300883][T29621]  ? vscnprintf+0x80/0x80
[ 1024.305218][T29621]  ? nilfs_set_bdev_super+0xa0/0xa0
[ 1024.310422][T29621]  nilfs_mount+0x673/0x9e0
[ 1024.314837][T29621]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1024.320805][T29621]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1024.326082][T29621]  ? trace_kfree+0x2d/0xd0
[ 1024.330488][T29621]  ? kfree+0x2f/0x210
[ 1024.334470][T29621]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1024.339851][T29621]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1024.345300][T29621]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1024.350752][T29621]  ? cap_capable+0x1b5/0x250
[ 1024.355334][T29621]  legacy_get_tree+0xea/0x180
[ 1024.360002][T29621]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1024.365973][T29621]  vfs_get_tree+0x88/0x270
[ 1024.370383][T29621]  do_new_mount+0x289/0xad0
[ 1024.374877][T29621]  ? ns_capable+0x81/0xe0
[ 1024.379199][T29621]  ? do_move_mount_old+0x160/0x160
[ 1024.384309][T29621]  ? user_path_at_empty+0x149/0x1a0
[ 1024.389500][T29621]  __se_sys_mount+0x2e3/0x3d0
[ 1024.394174][T29621]  ? __x64_sys_mount+0xc0/0xc0
[ 1024.398928][T29621]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1024.404900][T29621]  ? __x64_sys_mount+0x1c/0xc0
[ 1024.409653][T29621]  do_syscall_64+0x2b/0x70
[ 1024.414058][T29621]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1024.419939][T29621] RIP: 0033:0x7f94af28a57a
[ 1024.424342][T29621] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1024.443931][T29621] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1024.452333][T29621] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1024.460306][T29621] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1024.468264][T29621] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1024.476226][T29621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1024.484185][T29621] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1024.492159][T29621]  </TASK>
[ 1024.516832][ T3682] wacom 0003:056A:0331.013A: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1024.519337][  T144] usb 5-1: USB disconnect, device number 10
[ 1024.538640][T29621] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1024.548150][T29621] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1024.560113][T29621] NILFS (loop2): mounting unchecked fs
[ 1024.568202][T29621] NILFS (loop2): I/O error reading segment
[ 1024.574332][T29621] NILFS (loop2): error -5 while searching super root
[ 1024.978852][ T3682] usb 4-1: USB disconnect, device number 91
16:12:17 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:17 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:17 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 93)

16:12:17 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0xd, {0xd, 0x0, "a418720210fed1ef23b45d"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1025.524367][   T14] usb 6-1: USB disconnect, device number 73
[ 1025.561955][T29657] loop2: detected capacity change from 0 to 5
[ 1025.575814][T29657] FAULT_INJECTION: forcing a failure.
[ 1025.575814][T29657] name failslab, interval 1, probability 0, space 0, times 0
[ 1025.588439][T29657] CPU: 0 PID: 29657 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1025.598949][T29657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1025.609012][T29657] Call Trace:
[ 1025.612305][T29657]  <TASK>
[ 1025.615253][T29657]  dump_stack_lvl+0x1e3/0x2cb
[ 1025.619965][T29657]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1025.625435][T29657]  ? panic+0x76e/0x76e
[ 1025.629512][T29657]  should_fail+0x384/0x4b0
[ 1025.633932][T29657]  ? xas_create+0x6f5/0x1a20
[ 1025.638522][T29657]  should_failslab+0x5/0x20
[ 1025.643022][T29657]  kmem_cache_alloc_lru+0x75/0x2d0
[ 1025.648132][T29657]  xas_create+0x6f5/0x1a20
[ 1025.652556][T29657]  xas_store+0x97/0x18b0
[ 1025.656791][T29657]  ? xas_find_conflict+0xb1d/0xc30
[ 1025.661904][T29657]  __filemap_add_folio+0xaaa/0x19a0
[ 1025.667105][T29657]  ? put_page+0x230/0x230
[ 1025.671428][T29657]  ? folio_lruvec+0x390/0x390
[ 1025.676100][T29657]  ? __rmqueue_pcplist+0x1cb0/0x1cb0
[ 1025.681380][T29657]  filemap_add_folio+0x12c/0x5c0
[ 1025.686314][T29657]  ? add_to_page_cache_locked+0x150/0x150
[ 1025.692025][T29657]  ? folio_alloc+0x47/0x50
[ 1025.696431][T29657]  ? filemap_alloc_folio+0x1a9/0x1c0
[ 1025.701711][T29657]  __filemap_get_folio+0x909/0x11f0
[ 1025.706904][T29657]  ? page_cache_prev_miss+0x500/0x500
[ 1025.712276][T29657]  pagecache_get_page+0x2a/0x240
[ 1025.717214][T29657]  grow_dev_page+0xba/0x820
[ 1025.721709][T29657]  ? submit_bio+0x27a/0x3d0
[ 1025.726210][T29657]  __getblk_gfp+0x16c/0x290
[ 1025.730709][T29657]  __bread_gfp+0x2a/0x360
[ 1025.735040][T29657]  nilfs_read_super_block+0x82/0xe0
[ 1025.740233][T29657]  nilfs_load_super_block+0x179/0xea0
[ 1025.745609][T29657]  ? init_nilfs+0x7f0/0x7f0
[ 1025.750100][T29657]  ? set_blocksize+0x2f3/0x360
[ 1025.754858][T29657]  ? sb_min_blocksize+0x126/0x180
[ 1025.759874][T29657]  init_nilfs+0xda/0x7f0
[ 1025.764128][T29657]  ? nilfs_swap_super_block+0x120/0x120
[ 1025.769668][T29657]  ? __init_rwsem+0x11e/0x160
[ 1025.774345][T29657]  nilfs_fill_super+0xe9/0x650
[ 1025.779104][T29657]  ? vscnprintf+0x80/0x80
[ 1025.783426][T29657]  ? nilfs_set_bdev_super+0xa0/0xa0
[ 1025.788623][T29657]  nilfs_mount+0x673/0x9e0
[ 1025.793041][T29657]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1025.799015][T29657]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1025.804293][T29657]  ? trace_kfree+0x2d/0xd0
[ 1025.808703][T29657]  ? kfree+0x2f/0x210
[ 1025.812685][T29657]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1025.817965][T29657]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1025.823417][T29657]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1025.828869][T29657]  ? cap_capable+0x1b5/0x250
[ 1025.833453][T29657]  legacy_get_tree+0xea/0x180
[ 1025.838121][T29657]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1025.844095][T29657]  vfs_get_tree+0x88/0x270
[ 1025.848505][T29657]  do_new_mount+0x289/0xad0
[ 1025.853009][T29657]  ? ns_capable+0x81/0xe0
[ 1025.857332][T29657]  ? do_move_mount_old+0x160/0x160
[ 1025.862528][T29657]  ? user_path_at_empty+0x149/0x1a0
[ 1025.867718][T29657]  __se_sys_mount+0x2e3/0x3d0
[ 1025.872398][T29657]  ? __x64_sys_mount+0xc0/0xc0
[ 1025.877153][T29657]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1025.883135][T29657]  ? __x64_sys_mount+0x1c/0xc0
[ 1025.887891][T29657]  do_syscall_64+0x2b/0x70
[ 1025.892297][T29657]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1025.898182][T29657] RIP: 0033:0x7f94af28a57a
[ 1025.902596][T29657] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1025.922192][T29657] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1025.930603][T29657] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1025.938566][T29657] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1025.946528][T29657] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1025.954524][T29657] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1025.962487][T29657] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1025.970463][T29657]  </TASK>
16:12:17 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:17 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000ffffffff00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1025.982176][T29657] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1025.991432][T29657] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1025.996292][ T3687] usb 1-1: USB disconnect, device number 30
[ 1026.002547][T29657] NILFS (loop2): mounting unchecked fs
[ 1026.014366][T29657] NILFS (loop2): I/O error reading segment
[ 1026.020567][T29657] NILFS (loop2): error -5 while searching super root
16:12:17 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 94)

[ 1026.119765][T29679] loop2: detected capacity change from 0 to 5
[ 1026.136675][  T144] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1026.158674][T29679] FAULT_INJECTION: forcing a failure.
[ 1026.158674][T29679] name failslab, interval 1, probability 0, space 0, times 0
[ 1026.171827][T29679] CPU: 0 PID: 29679 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1026.182313][T29679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1026.192356][T29679] Call Trace:
[ 1026.195623][T29679]  <TASK>
[ 1026.198542][T29679]  dump_stack_lvl+0x1e3/0x2cb
[ 1026.203210][T29679]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1026.208662][T29679]  ? panic+0x76e/0x76e
[ 1026.212738][T29679]  ? __rwlock_init+0x140/0x140
[ 1026.217518][T29679]  should_fail+0x384/0x4b0
[ 1026.221955][T29679]  ? loop_queue_rq+0x3e8/0xb20
[ 1026.226731][T29679]  should_failslab+0x5/0x20
[ 1026.231243][T29679]  kmem_cache_alloc_trace+0x68/0x310
[ 1026.236537][T29679]  ? cgroup_get_e_css+0x358/0x3c0
[ 1026.241641][T29679]  loop_queue_rq+0x3e8/0xb20
[ 1026.246231][T29679]  __blk_mq_try_issue_directly+0x550/0xcb0
[ 1026.252041][T29679]  ? trace_block_unplug+0x280/0x280
[ 1026.257227][T29679]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1026.262843][T29679]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 1026.268815][T29679]  ? blk_mq_alloc_request+0x300/0x300
[ 1026.274212][T29679]  blk_mq_try_issue_directly+0x28/0x1f0
[ 1026.279777][T29679]  ? blk_mq_submit_bio+0x188c/0x21a0
[ 1026.285075][T29679]  blk_mq_submit_bio+0x19ce/0x21a0
[ 1026.290178][T29679]  ? blk_mq_try_issue_list_directly+0x520/0x520
[ 1026.296433][T29679]  ? mark_lock+0x98/0x350
[ 1026.300768][T29679]  __submit_bio+0x261/0x2f0
[ 1026.305262][T29679]  ? trace_raw_output_block_rq_remap+0x240/0x240
[ 1026.311585][T29679]  submit_bio_noacct_nocheck+0x846/0xa10
[ 1026.317227][T29679]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1026.322866][T29679]  ? should_fail_request+0x70/0x70
[ 1026.327997][T29679]  ? trace_block_bio_queue+0xb3/0x210
[ 1026.333379][T29679]  submit_bio+0x27a/0x3d0
[ 1026.337694][T29679]  ? trace_block_bio_queue+0x210/0x210
[ 1026.343146][T29679]  ? submit_bh_wbc+0x42b/0x4e0
[ 1026.347918][T29679]  __bread_gfp+0x1aa/0x360
[ 1026.352320][T29679]  nilfs_read_super_block+0x82/0xe0
[ 1026.357511][T29679]  nilfs_load_super_block+0x133/0xea0
[ 1026.362871][T29679]  ? invalidate_bh_lrus+0x30/0x30
[ 1026.367899][T29679]  ? invalidate_bh_lrus+0x30/0x30
[ 1026.372934][T29679]  ? init_nilfs+0x7f0/0x7f0
[ 1026.377440][T29679]  ? set_blocksize+0x2ec/0x360
[ 1026.382220][T29679]  ? sb_min_blocksize+0x126/0x180
[ 1026.387241][T29679]  init_nilfs+0xda/0x7f0
[ 1026.391468][T29679]  ? nilfs_swap_super_block+0x120/0x120
[ 1026.396998][T29679]  ? __init_rwsem+0x11e/0x160
[ 1026.401669][T29679]  nilfs_fill_super+0xe9/0x650
[ 1026.406467][T29679]  ? vscnprintf+0x80/0x80
[ 1026.410791][T29679]  ? nilfs_set_bdev_super+0xa0/0xa0
[ 1026.415983][T29679]  nilfs_mount+0x673/0x9e0
[ 1026.420407][T29679]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1026.426425][T29679]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1026.431720][T29679]  ? trace_kfree+0x2d/0xd0
[ 1026.436136][T29679]  ? kfree+0x2f/0x210
[ 1026.440131][T29679]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1026.445533][T29679]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1026.450982][T29679]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1026.456428][T29679]  ? cap_capable+0x1b5/0x250
[ 1026.461014][T29679]  legacy_get_tree+0xea/0x180
[ 1026.465713][T29679]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1026.471686][T29679]  vfs_get_tree+0x88/0x270
[ 1026.476115][T29679]  do_new_mount+0x289/0xad0
[ 1026.480624][T29679]  ? ns_capable+0x81/0xe0
[ 1026.484944][T29679]  ? do_move_mount_old+0x160/0x160
[ 1026.490116][T29679]  ? user_path_at_empty+0x149/0x1a0
[ 1026.495311][T29679]  __se_sys_mount+0x2e3/0x3d0
[ 1026.499979][T29679]  ? __x64_sys_mount+0xc0/0xc0
[ 1026.504732][T29679]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1026.510719][T29679]  ? __x64_sys_mount+0x1c/0xc0
[ 1026.515469][T29679]  do_syscall_64+0x2b/0x70
[ 1026.517673][ T3687] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1026.519876][T29679]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1026.533290][T29679] RIP: 0033:0x7f94af28a57a
[ 1026.537716][T29679] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1026.557333][T29679] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1026.565747][T29679] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1026.573724][T29679] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1026.581711][T29679] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1026.589673][T29679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1026.597631][T29679] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1026.605622][T29679]  </TASK>
[ 1026.611123][T29679] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1026.622143][T29679] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1026.632609][T29679] NILFS (loop2): mounting unchecked fs
[ 1026.638513][T29679] NILFS (loop2): I/O error reading segment
[ 1026.644336][T29679] NILFS (loop2): error -5 while searching super root
[ 1026.676785][ T3686] usb 4-1: new high-speed USB device number 92 using dummy_hcd
16:12:18 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 95)

[ 1026.718265][  T144] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1026.742262][  T144] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1026.756627][   T14] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1026.764981][  T144] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1026.775319][  T144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1026.801246][T29687] loop2: detected capacity change from 0 to 5
[ 1026.823379][T29687] FAULT_INJECTION: forcing a failure.
[ 1026.823379][T29687] name failslab, interval 1, probability 0, space 0, times 0
[ 1026.836013][T29687] CPU: 0 PID: 29687 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1026.846532][T29687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1026.856594][T29687] Call Trace:
[ 1026.859877][T29687]  <TASK>
[ 1026.862805][T29687]  dump_stack_lvl+0x1e3/0x2cb
[ 1026.867511][T29687]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1026.872991][T29687]  ? panic+0x76e/0x76e
[ 1026.877083][T29687]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1026.882733][T29687]  should_fail+0x384/0x4b0
[ 1026.887177][T29687]  ? xas_create+0x6f5/0x1a20
[ 1026.891764][T29687]  should_failslab+0x5/0x20
[ 1026.896263][T29687]  kmem_cache_alloc_lru+0x75/0x2d0
[ 1026.901372][T29687]  xas_create+0x6f5/0x1a20
[ 1026.905794][T29687]  xas_store+0x97/0x18b0
[ 1026.910030][T29687]  ? xas_find_conflict+0xb1d/0xc30
[ 1026.915146][T29687]  __filemap_add_folio+0xaaa/0x19a0
[ 1026.920386][T29687]  ? put_page+0x230/0x230
[ 1026.924741][T29687]  ? folio_lruvec+0x390/0x390
[ 1026.929441][T29687]  ? __rmqueue_pcplist+0x1cb0/0x1cb0
[ 1026.934773][T29687]  filemap_add_folio+0x12c/0x5c0
[ 1026.939740][T29687]  ? add_to_page_cache_locked+0x150/0x150
[ 1026.945544][T29687]  ? folio_alloc+0x47/0x50
[ 1026.949956][T29687]  ? filemap_alloc_folio+0x1a9/0x1c0
[ 1026.955236][T29687]  __filemap_get_folio+0x909/0x11f0
[ 1026.960427][T29687]  ? page_cache_prev_miss+0x500/0x500
[ 1026.965813][T29687]  pagecache_get_page+0x2a/0x240
[ 1026.970772][T29687]  grow_dev_page+0xba/0x820
[ 1026.975302][T29687]  ? submit_bio+0x27a/0x3d0
[ 1026.979812][T29687]  ? bit_waitqueue+0x30/0x30
[ 1026.984393][T29687]  __getblk_gfp+0x16c/0x290
[ 1026.988890][T29687]  __bread_gfp+0x2a/0x360
[ 1026.993220][T29687]  nilfs_read_super_block+0x82/0xe0
[ 1026.998418][T29687]  nilfs_load_super_block+0x179/0xea0
[ 1027.003792][T29687]  ? invalidate_bh_lrus+0x30/0x30
[ 1027.008832][T29687]  ? init_nilfs+0x7f0/0x7f0
[ 1027.013328][T29687]  ? set_blocksize+0x2ec/0x360
[ 1027.018111][T29687]  ? sb_min_blocksize+0x126/0x180
[ 1027.023163][T29687]  init_nilfs+0xda/0x7f0
[ 1027.027436][T29687]  ? nilfs_swap_super_block+0x120/0x120
[ 1027.032998][T29687]  ? __init_rwsem+0x11e/0x160
[ 1027.037689][T29687]  nilfs_fill_super+0xe9/0x650
[ 1027.042456][T29687]  ? vscnprintf+0x80/0x80
[ 1027.046794][T29687]  ? nilfs_set_bdev_super+0xa0/0xa0
[ 1027.052018][T29687]  nilfs_mount+0x673/0x9e0
[ 1027.056448][T29687]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1027.062440][T29687]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1027.067741][T29687]  ? trace_kfree+0x2d/0xd0
[ 1027.072188][T29687]  ? kfree+0x2f/0x210
[ 1027.076209][T29687]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1027.081505][T29687]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1027.086960][T29687]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1027.092413][T29687]  ? cap_capable+0x1b5/0x250
[ 1027.096995][T29687]  legacy_get_tree+0xea/0x180
[ 1027.101666][T29687]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1027.107682][T29687]  vfs_get_tree+0x88/0x270
[ 1027.112102][T29687]  do_new_mount+0x289/0xad0
[ 1027.116611][T29687]  ? ns_capable+0x81/0xe0
[ 1027.120967][T29687]  ? do_move_mount_old+0x160/0x160
[ 1027.125345][T13504] usb 5-1: USB disconnect, device number 11
[ 1027.126103][T29687]  ? user_path_at_empty+0x149/0x1a0
[ 1027.137231][T29687]  __se_sys_mount+0x2e3/0x3d0
[ 1027.141933][T29687]  ? __x64_sys_mount+0xc0/0xc0
[ 1027.146724][T29687]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1027.152743][T29687]  ? __x64_sys_mount+0x1c/0xc0
[ 1027.157529][T29687]  do_syscall_64+0x2b/0x70
[ 1027.161942][T29687]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1027.167957][T29687] RIP: 0033:0x7f94af28a57a
[ 1027.172493][T29687] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1027.176765][ T3687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1027.192111][T29687] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1027.192141][T29687] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
16:12:18 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000000000000000700"})

[ 1027.192155][T29687] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1027.192169][T29687] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1027.192183][T29687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1027.231619][ T3687] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1027.234521][T29687] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1027.234564][T29687]  </TASK>
[ 1027.277024][ T3687] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1027.286192][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.309501][T29687] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1027.318698][T29687] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1027.330412][T29687] NILFS (loop2): mounting unchecked fs
[ 1027.336350][T29687] NILFS (loop2): I/O error reading segment
[ 1027.344199][T29687] NILFS (loop2): error -5 while searching super root
[ 1027.353692][ T3687] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
16:12:19 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 96)

[ 1027.426426][ T3686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1027.438644][ T3686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1027.449213][ T3686] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1027.459264][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.497499][   T14] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1027.504301][T29705] loop2: detected capacity change from 0 to 5
[ 1027.507980][   T14] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1027.544417][T29705] FAULT_INJECTION: forcing a failure.
[ 1027.544417][T29705] name failslab, interval 1, probability 0, space 0, times 0
[ 1027.548305][   T14] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1027.557038][T29705] CPU: 1 PID: 29705 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1027.557063][T29705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1027.557076][T29705] Call Trace:
[ 1027.557084][T29705]  <TASK>
[ 1027.557094][T29705]  dump_stack_lvl+0x1e3/0x2cb
[ 1027.557126][T29705]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1027.557147][T29705]  ? panic+0x76e/0x76e
[ 1027.557176][T29705]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1027.557201][T29705]  should_fail+0x384/0x4b0
[ 1027.557225][T29705]  ? xas_create+0x6f5/0x1a20
[ 1027.557245][T29705]  should_failslab+0x5/0x20
[ 1027.557264][T29705]  kmem_cache_alloc_lru+0x75/0x2d0
[ 1027.557292][T29705]  xas_create+0x6f5/0x1a20
[ 1027.557330][T29705]  xas_store+0x97/0x18b0
[ 1027.557353][T29705]  ? xas_find_conflict+0xb1d/0xc30
[ 1027.585630][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.586918][T29705]  __filemap_add_folio+0xaaa/0x19a0
[ 1027.586969][T29705]  ? put_page+0x230/0x230
[ 1027.586992][T29705]  ? folio_lruvec+0x390/0x390
[ 1027.587014][T29705]  ? __rmqueue_pcplist+0x1cb0/0x1cb0
[ 1027.587046][T29705]  filemap_add_folio+0x12c/0x5c0
[ 1027.587074][T29705]  ? add_to_page_cache_locked+0x150/0x150
[ 1027.587095][T29705]  ? folio_alloc+0x47/0x50
[ 1027.587116][T29705]  ? filemap_alloc_folio+0x1a9/0x1c0
[ 1027.587138][T29705]  __filemap_get_folio+0x909/0x11f0
[ 1027.698021][T29705]  ? page_cache_prev_miss+0x500/0x500
[ 1027.703413][T29705]  pagecache_get_page+0x2a/0x240
[ 1027.708350][T29705]  grow_dev_page+0xba/0x820
[ 1027.712850][T29705]  ? submit_bio+0x27a/0x3d0
[ 1027.717346][T29705]  ? bit_waitqueue+0x30/0x30
[ 1027.721934][T29705]  __getblk_gfp+0x16c/0x290
[ 1027.726436][T29705]  __bread_gfp+0x2a/0x360
[ 1027.730764][T29705]  nilfs_read_super_block+0x82/0xe0
[ 1027.735960][T29705]  nilfs_load_super_block+0x179/0xea0
[ 1027.741418][T29705]  ? invalidate_bh_lrus+0x30/0x30
[ 1027.746441][T29705]  ? init_nilfs+0x7f0/0x7f0
[ 1027.750939][T29705]  ? set_blocksize+0x2ec/0x360
[ 1027.755702][T29705]  ? sb_min_blocksize+0x126/0x180
[ 1027.760721][T29705]  init_nilfs+0xda/0x7f0
[ 1027.764963][T29705]  ? nilfs_swap_super_block+0x120/0x120
[ 1027.770513][T29705]  ? __init_rwsem+0x11e/0x160
[ 1027.775191][T29705]  nilfs_fill_super+0xe9/0x650
[ 1027.779948][T29705]  ? vscnprintf+0x80/0x80
[ 1027.784270][T29705]  ? nilfs_set_bdev_super+0xa0/0xa0
[ 1027.789471][T29705]  nilfs_mount+0x673/0x9e0
[ 1027.793886][T29705]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1027.799857][T29705]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1027.805136][T29705]  ? trace_kfree+0x2d/0xd0
[ 1027.809539][T29705]  ? kfree+0x2f/0x210
[ 1027.813516][T29705]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1027.818792][T29705]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1027.824245][T29705]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1027.829699][T29705]  ? cap_capable+0x1b5/0x250
[ 1027.834285][T29705]  legacy_get_tree+0xea/0x180
[ 1027.838952][T29705]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1027.844929][T29705]  vfs_get_tree+0x88/0x270
[ 1027.849341][T29705]  do_new_mount+0x289/0xad0
[ 1027.853840][T29705]  ? ns_capable+0x81/0xe0
[ 1027.858165][T29705]  ? do_move_mount_old+0x160/0x160
[ 1027.863274][T29705]  ? user_path_at_empty+0x149/0x1a0
[ 1027.868469][T29705]  __se_sys_mount+0x2e3/0x3d0
[ 1027.873145][T29705]  ? __x64_sys_mount+0xc0/0xc0
[ 1027.877900][T29705]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1027.883879][T29705]  ? __x64_sys_mount+0x1c/0xc0
[ 1027.888639][T29705]  do_syscall_64+0x2b/0x70
[ 1027.893050][T29705]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1027.898949][T29705] RIP: 0033:0x7f94af28a57a
[ 1027.903361][T29705] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1027.923131][T29705] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1027.931542][T29705] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1027.939511][T29705] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1027.947481][T29705] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1027.955456][T29705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1027.963504][T29705] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1027.971485][T29705]  </TASK>
[ 1027.982884][T29705] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
16:12:19 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0xd, {0xd, 0x0, "a418720210fed1ef23b45d"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1028.006189][T29705] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1028.028441][T29705] NILFS (loop2): mounting unchecked fs
[ 1028.034730][T29705] NILFS (loop2): I/O error reading segment
[ 1028.046189][T29705] NILFS (loop2): error -5 while searching super root
16:12:19 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 97)

[ 1028.163777][T29717] loop2: detected capacity change from 0 to 5
[ 1028.177654][T29717] FAULT_INJECTION: forcing a failure.
[ 1028.177654][T29717] name failslab, interval 1, probability 0, space 0, times 0
[ 1028.190280][T29717] CPU: 0 PID: 29717 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1028.201061][T29717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1028.211133][T29717] Call Trace:
[ 1028.214435][T29717]  <TASK>
[ 1028.217369][T29717]  dump_stack_lvl+0x1e3/0x2cb
[ 1028.222042][T29717]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1028.227502][T29717]  ? panic+0x76e/0x76e
[ 1028.231600][T29717]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1028.237249][T29717]  should_fail+0x384/0x4b0
[ 1028.241687][T29717]  ? xas_create+0x6f5/0x1a20
[ 1028.246290][T29717]  should_failslab+0x5/0x20
[ 1028.250788][T29717]  kmem_cache_alloc_lru+0x75/0x2d0
[ 1028.256060][T29717]  xas_create+0x6f5/0x1a20
[ 1028.260490][T29717]  xas_store+0x97/0x18b0
[ 1028.264730][T29717]  ? xas_find_conflict+0xb1d/0xc30
[ 1028.269847][T29717]  __filemap_add_folio+0xaaa/0x19a0
[ 1028.275074][T29717]  ? put_page+0x230/0x230
[ 1028.279408][T29717]  ? folio_lruvec+0x390/0x390
[ 1028.284104][T29717]  ? __rmqueue_pcplist+0x1cb0/0x1cb0
[ 1028.289416][T29717]  filemap_add_folio+0x12c/0x5c0
[ 1028.294380][T29717]  ? add_to_page_cache_locked+0x150/0x150
[ 1028.300248][T29717]  ? folio_alloc+0x47/0x50
[ 1028.304696][T29717]  ? filemap_alloc_folio+0x1a9/0x1c0
[ 1028.310015][T29717]  __filemap_get_folio+0x909/0x11f0
[ 1028.315246][T29717]  ? page_cache_prev_miss+0x500/0x500
[ 1028.320643][T29717]  pagecache_get_page+0x2a/0x240
[ 1028.325685][T29717]  grow_dev_page+0xba/0x820
[ 1028.330205][T29717]  ? submit_bio+0x27a/0x3d0
[ 1028.334725][T29717]  ? bit_waitqueue+0x30/0x30
[ 1028.339325][T29717]  __getblk_gfp+0x16c/0x290
[ 1028.343832][T29717]  __bread_gfp+0x2a/0x360
[ 1028.348165][T29717]  nilfs_read_super_block+0x82/0xe0
[ 1028.353364][T29717]  nilfs_load_super_block+0x179/0xea0
[ 1028.358746][T29717]  ? init_nilfs+0x7f0/0x7f0
[ 1028.363420][T29717]  ? set_blocksize+0x2f3/0x360
[ 1028.368186][T29717]  ? sb_min_blocksize+0x126/0x180
[ 1028.373213][T29717]  init_nilfs+0xda/0x7f0
[ 1028.377469][T29717]  ? nilfs_swap_super_block+0x120/0x120
[ 1028.383040][T29717]  ? __init_rwsem+0x11e/0x160
[ 1028.387745][T29717]  nilfs_fill_super+0xe9/0x650
[ 1028.392526][T29717]  ? vscnprintf+0x80/0x80
[ 1028.396863][T29717]  ? nilfs_set_bdev_super+0xa0/0xa0
[ 1028.402084][T29717]  nilfs_mount+0x673/0x9e0
[ 1028.406514][T29717]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1028.412491][T29717]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1028.417780][T29717]  ? trace_kfree+0x2d/0xd0
[ 1028.422200][T29717]  ? kfree+0x2f/0x210
[ 1028.426284][T29717]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1028.431572][T29717]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1028.437059][T29717]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1028.442550][T29717]  ? cap_capable+0x1b5/0x250
[ 1028.447155][T29717]  legacy_get_tree+0xea/0x180
[ 1028.451835][T29717]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1028.457846][T29717]  vfs_get_tree+0x88/0x270
[ 1028.462262][T29717]  do_new_mount+0x289/0xad0
[ 1028.466756][T29717]  ? ns_capable+0x81/0xe0
[ 1028.471089][T29717]  ? do_move_mount_old+0x160/0x160
[ 1028.476207][T29717]  ? user_path_at_empty+0x149/0x1a0
[ 1028.481404][T29717]  __se_sys_mount+0x2e3/0x3d0
[ 1028.486112][T29717]  ? __x64_sys_mount+0xc0/0xc0
[ 1028.490885][T29717]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1028.496861][T29717]  ? __x64_sys_mount+0x1c/0xc0
[ 1028.501624][T29717]  do_syscall_64+0x2b/0x70
[ 1028.506076][T29717]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1028.511974][T29717] RIP: 0033:0x7f94af28a57a
[ 1028.516386][T29717] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1028.536006][T29717] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1028.544446][T29717] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1028.552420][T29717] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1028.560390][T29717] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1028.568360][T29717] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1028.576324][T29717] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1028.584314][T29717]  </TASK>
[ 1028.596367][T29717] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1028.606017][T29717] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1028.622240][ T3686] wacom 0003:056A:0331.013B: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1028.635390][T29717] NILFS (loop2): mounting unchecked fs
[ 1028.642003][T29717] NILFS (loop2): I/O error reading segment
[ 1028.652527][T29717] NILFS (loop2): error -5 while searching super root
[ 1028.659615][   T14] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1029.026909][   T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1029.044991][   T14] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1029.054115][   T14] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1029.063633][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1029.080907][T13504] usb 4-1: USB disconnect, device number 92
[ 1029.313479][   T14] usb 5-1: USB disconnect, device number 12
16:12:21 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:21 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000000000000000700"})

16:12:21 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 98)

16:12:21 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000200"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:12:21 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1029.603736][ T3736] usb 1-1: USB disconnect, device number 31
[ 1029.619191][T13504] usb 6-1: USB disconnect, device number 74
[ 1029.637157][T29751] loop2: detected capacity change from 0 to 5
[ 1029.684740][T29751] FAULT_INJECTION: forcing a failure.
[ 1029.684740][T29751] name failslab, interval 1, probability 0, space 0, times 0
[ 1029.697365][T29751] CPU: 0 PID: 29751 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1029.707879][T29751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1029.717947][T29751] Call Trace:
[ 1029.721240][T29751]  <TASK>
[ 1029.724189][T29751]  dump_stack_lvl+0x1e3/0x2cb
[ 1029.728888][T29751]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1029.734364][T29751]  ? panic+0x76e/0x76e
[ 1029.738469][T29751]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1029.744121][T29751]  should_fail+0x384/0x4b0
[ 1029.748558][T29751]  ? xas_create+0x6f5/0x1a20
[ 1029.753162][T29751]  should_failslab+0x5/0x20
[ 1029.757682][T29751]  kmem_cache_alloc_lru+0x75/0x2d0
[ 1029.762818][T29751]  xas_create+0x6f5/0x1a20
[ 1029.767278][T29751]  xas_store+0x97/0x18b0
[ 1029.771540][T29751]  ? xas_find_conflict+0xb1d/0xc30
[ 1029.776683][T29751]  __filemap_add_folio+0xaaa/0x19a0
[ 1029.781917][T29751]  ? put_page+0x230/0x230
[ 1029.786252][T29751]  ? folio_lruvec+0x390/0x390
[ 1029.790927][T29751]  ? __rmqueue_pcplist+0x1cb0/0x1cb0
[ 1029.796248][T29751]  filemap_add_folio+0x12c/0x5c0
[ 1029.801196][T29751]  ? add_to_page_cache_locked+0x150/0x150
[ 1029.806905][T29751]  ? folio_alloc+0x47/0x50
[ 1029.811319][T29751]  ? filemap_alloc_folio+0x1a9/0x1c0
[ 1029.816610][T29751]  __filemap_get_folio+0x909/0x11f0
[ 1029.821798][T29751]  ? page_cache_prev_miss+0x500/0x500
[ 1029.827181][T29751]  pagecache_get_page+0x2a/0x240
[ 1029.832135][T29751]  grow_dev_page+0xba/0x820
[ 1029.836656][T29751]  ? submit_bio+0x27a/0x3d0
[ 1029.841175][T29751]  ? bit_waitqueue+0x30/0x30
[ 1029.845777][T29751]  __getblk_gfp+0x16c/0x290
[ 1029.850286][T29751]  __bread_gfp+0x2a/0x360
[ 1029.854619][T29751]  nilfs_read_super_block+0x82/0xe0
[ 1029.859816][T29751]  nilfs_load_super_block+0x179/0xea0
[ 1029.865183][T29751]  ? init_nilfs+0x7f0/0x7f0
[ 1029.869670][T29751]  ? set_blocksize+0x2f3/0x360
[ 1029.874422][T29751]  ? sb_min_blocksize+0x126/0x180
[ 1029.879448][T29751]  init_nilfs+0xda/0x7f0
[ 1029.883714][T29751]  ? nilfs_swap_super_block+0x120/0x120
[ 1029.889253][T29751]  ? __init_rwsem+0x11e/0x160
[ 1029.893952][T29751]  nilfs_fill_super+0xe9/0x650
[ 1029.898732][T29751]  ? vscnprintf+0x80/0x80
[ 1029.903067][T29751]  ? nilfs_set_bdev_super+0xa0/0xa0
[ 1029.908289][T29751]  nilfs_mount+0x673/0x9e0
[ 1029.912703][T29751]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1029.918665][T29751]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1029.923933][T29751]  ? trace_kfree+0x2d/0xd0
[ 1029.928343][T29751]  ? kfree+0x2f/0x210
[ 1029.932319][T29751]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1029.937593][T29751]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1029.943067][T29751]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1029.948537][T29751]  ? cap_capable+0x1b5/0x250
[ 1029.953132][T29751]  legacy_get_tree+0xea/0x180
[ 1029.957796][T29751]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1029.963764][T29751]  vfs_get_tree+0x88/0x270
[ 1029.968165][T29751]  do_new_mount+0x289/0xad0
[ 1029.972653][T29751]  ? ns_capable+0x81/0xe0
[ 1029.976967][T29751]  ? do_move_mount_old+0x160/0x160
[ 1029.982074][T29751]  ? user_path_at_empty+0x149/0x1a0
[ 1029.987284][T29751]  __se_sys_mount+0x2e3/0x3d0
[ 1029.991980][T29751]  ? __x64_sys_mount+0xc0/0xc0
[ 1029.996754][T29751]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1030.002743][T29751]  ? __x64_sys_mount+0x1c/0xc0
[ 1030.007494][T29751]  do_syscall_64+0x2b/0x70
[ 1030.011894][T29751]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1030.017772][T29751] RIP: 0033:0x7f94af28a57a
[ 1030.022169][T29751] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1030.041764][T29751] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1030.050192][T29751] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1030.058166][T29751] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1030.066121][T29751] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1030.074077][T29751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
16:12:21 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x13, {0x13, 0x0, "a418720210fed1ef23b45daf3edc5853ed"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1030.082028][T29751] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1030.087502][T13504] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1030.090002][T29751]  </TASK>
[ 1030.097585][ T3736] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1030.119114][T29751] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1030.139401][T29751] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1030.152883][T29751] NILFS (loop2): mounting unchecked fs
[ 1030.159375][T29751] NILFS (loop2): I/O error reading segment
[ 1030.165404][T29751] NILFS (loop2): error -5 while searching super root
16:12:21 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 99)

[ 1030.256761][   T14] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1030.279832][T29778] loop2: detected capacity change from 0 to 5
[ 1030.291989][T29778] FAULT_INJECTION: forcing a failure.
[ 1030.291989][T29778] name failslab, interval 1, probability 0, space 0, times 0
[ 1030.304718][T29778] CPU: 1 PID: 29778 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1030.315223][T29778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1030.325274][T29778] Call Trace:
[ 1030.328552][T29778]  <TASK>
[ 1030.331489][T29778]  dump_stack_lvl+0x1e3/0x2cb
[ 1030.336184][T29778]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1030.341664][T29778]  ? panic+0x76e/0x76e
[ 1030.345768][T29778]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1030.351411][T29778]  should_fail+0x384/0x4b0
[ 1030.355821][T29778]  ? xas_create+0x6f5/0x1a20
[ 1030.360403][T29778]  should_failslab+0x5/0x20
[ 1030.364897][T29778]  kmem_cache_alloc_lru+0x75/0x2d0
[ 1030.370029][T29778]  xas_create+0x6f5/0x1a20
[ 1030.374453][T29778]  xas_store+0x97/0x18b0
[ 1030.378688][T29778]  ? xas_find_conflict+0xb1d/0xc30
[ 1030.383795][T29778]  __filemap_add_folio+0xaaa/0x19a0
[ 1030.388993][T29778]  ? put_page+0x230/0x230
[ 1030.393313][T29778]  ? folio_lruvec+0x390/0x390
[ 1030.398000][T29778]  ? __rmqueue_pcplist+0x1cb0/0x1cb0
[ 1030.403293][T29778]  filemap_add_folio+0x12c/0x5c0
[ 1030.408248][T29778]  ? add_to_page_cache_locked+0x150/0x150
[ 1030.409773][ T3686] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1030.413984][T29778]  ? folio_alloc+0x47/0x50
[ 1030.425916][T29778]  ? filemap_alloc_folio+0x1a9/0x1c0
[ 1030.431194][T29778]  __filemap_get_folio+0x909/0x11f0
[ 1030.436387][T29778]  ? page_cache_prev_miss+0x500/0x500
[ 1030.441771][T29778]  pagecache_get_page+0x2a/0x240
[ 1030.446731][T29778]  grow_dev_page+0xba/0x820
[ 1030.451235][T29778]  ? submit_bio+0x27a/0x3d0
[ 1030.455731][T29778]  ? bit_waitqueue+0x30/0x30
[ 1030.460310][T29778]  __getblk_gfp+0x16c/0x290
[ 1030.464828][T29778]  __bread_gfp+0x2a/0x360
[ 1030.469147][T29778]  nilfs_read_super_block+0x82/0xe0
[ 1030.474332][T29778]  nilfs_load_super_block+0x179/0xea0
[ 1030.479697][T29778]  ? init_nilfs+0x7f0/0x7f0
[ 1030.484187][T29778]  ? set_blocksize+0x2f3/0x360
[ 1030.488950][T29778]  ? sb_min_blocksize+0x126/0x180
[ 1030.493966][T29778]  init_nilfs+0xda/0x7f0
[ 1030.498219][T29778]  ? nilfs_swap_super_block+0x120/0x120
16:12:22 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000000000007"})

[ 1030.503760][T29778]  ? __init_rwsem+0x11e/0x160
[ 1030.508454][T29778]  nilfs_fill_super+0xe9/0x650
[ 1030.513237][T29778]  ? vscnprintf+0x80/0x80
[ 1030.517577][T29778]  ? nilfs_set_bdev_super+0xa0/0xa0
[ 1030.522781][T29778]  nilfs_mount+0x673/0x9e0
[ 1030.527216][T29778]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1030.533204][T29778]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1030.538487][T29778]  ? trace_kfree+0x2d/0xd0
[ 1030.542908][T29778]  ? kfree+0x2f/0x210
[ 1030.546877][T29778]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1030.552149][T29778]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1030.557606][T29778]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1030.563076][T29778]  ? cap_capable+0x1b5/0x250
[ 1030.567657][T29778]  legacy_get_tree+0xea/0x180
[ 1030.572321][T29778]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1030.578292][T29778]  vfs_get_tree+0x88/0x270
[ 1030.582699][T29778]  do_new_mount+0x289/0xad0
[ 1030.587189][T29778]  ? ns_capable+0x81/0xe0
[ 1030.591507][T29778]  ? do_move_mount_old+0x160/0x160
[ 1030.596614][T29778]  ? user_path_at_empty+0x149/0x1a0
[ 1030.601814][T29778]  __se_sys_mount+0x2e3/0x3d0
[ 1030.606486][T29778]  ? __x64_sys_mount+0xc0/0xc0
[ 1030.611249][T29778]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1030.616734][   T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1030.617234][T29778]  ? __x64_sys_mount+0x1c/0xc0
[ 1030.617270][T29778]  do_syscall_64+0x2b/0x70
[ 1030.628566][   T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1030.632848][T29778]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1030.632877][T29778] RIP: 0033:0x7f94af28a57a
[ 1030.632897][T29778] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1030.641586][   T14] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1030.647076][T29778] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1030.647104][T29778] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1030.647120][T29778] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1030.647133][T29778] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1030.647148][T29778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1030.647161][T29778] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1030.647192][T29778]  </TASK>
[ 1030.661005][T29778] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1030.756301][T29778] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1030.768274][T29778] NILFS (loop2): mounting unchecked fs
[ 1030.774451][T29778] NILFS (loop2): I/O error reading segment
[ 1030.780792][T29778] NILFS (loop2): error -5 while searching super root
[ 1030.785905][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1030.806837][ T3686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1030.817419][ T3686] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1030.826870][ T3686] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1030.836307][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:22 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]}) (fail_nth: 100)

[ 1030.923663][T29791] loop2: detected capacity change from 0 to 5
[ 1030.937529][T13504] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1030.950500][T29791] FAULT_INJECTION: forcing a failure.
[ 1030.950500][T29791] name failslab, interval 1, probability 0, space 0, times 0
[ 1030.963111][T29791] CPU: 1 PID: 29791 Comm: syz-executor.2 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1030.973618][T29791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1030.983677][T29791] Call Trace:
[ 1030.986952][T29791]  <TASK>
[ 1030.989877][T29791]  dump_stack_lvl+0x1e3/0x2cb
[ 1030.994552][T29791]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1031.000000][T29791]  ? panic+0x76e/0x76e
[ 1031.004079][T29791]  ? rcu_read_lock_sched_held+0x89/0x130
[ 1031.009724][T29791]  should_fail+0x384/0x4b0
[ 1031.014156][T29791]  ? xas_create+0x6f5/0x1a20
[ 1031.018754][T29791]  should_failslab+0x5/0x20
[ 1031.023255][T29791]  kmem_cache_alloc_lru+0x75/0x2d0
[ 1031.028364][T29791]  xas_create+0x6f5/0x1a20
[ 1031.032789][T29791]  xas_store+0x97/0x18b0
[ 1031.037027][T29791]  ? xas_find_conflict+0xb1d/0xc30
[ 1031.042138][T29791]  __filemap_add_folio+0xaaa/0x19a0
[ 1031.047348][T29791]  ? put_page+0x230/0x230
[ 1031.051669][T29791]  ? folio_lruvec+0x390/0x390
[ 1031.056339][T29791]  ? __rmqueue_pcplist+0x1cb0/0x1cb0
[ 1031.061627][T29791]  filemap_add_folio+0x12c/0x5c0
[ 1031.066577][T29791]  ? add_to_page_cache_locked+0x150/0x150
[ 1031.072317][T29791]  ? folio_alloc+0x47/0x50
[ 1031.076740][T29791]  ? filemap_alloc_folio+0x1a9/0x1c0
[ 1031.082022][T29791]  __filemap_get_folio+0x909/0x11f0
[ 1031.087220][T29791]  ? page_cache_prev_miss+0x500/0x500
[ 1031.092621][T29791]  pagecache_get_page+0x2a/0x240
[ 1031.097582][T29791]  grow_dev_page+0xba/0x820
[ 1031.102093][T29791]  ? submit_bio+0x27a/0x3d0
[ 1031.106597][T29791]  ? bit_waitqueue+0x30/0x30
[ 1031.111186][T29791]  __getblk_gfp+0x16c/0x290
[ 1031.115689][T29791]  __bread_gfp+0x2a/0x360
[ 1031.120014][T29791]  nilfs_read_super_block+0x82/0xe0
[ 1031.125213][T29791]  nilfs_load_super_block+0x179/0xea0
[ 1031.130582][T29791]  ? invalidate_bh_lrus+0x30/0x30
[ 1031.135607][T29791]  ? init_nilfs+0x7f0/0x7f0
[ 1031.140104][T29791]  ? set_blocksize+0x2ec/0x360
[ 1031.144864][T29791]  ? sb_min_blocksize+0x126/0x180
[ 1031.149879][T29791]  init_nilfs+0xda/0x7f0
[ 1031.154115][T29791]  ? nilfs_swap_super_block+0x120/0x120
[ 1031.159655][T29791]  ? __init_rwsem+0x11e/0x160
[ 1031.164326][T29791]  nilfs_fill_super+0xe9/0x650
[ 1031.169086][T29791]  ? vscnprintf+0x80/0x80
[ 1031.173409][T29791]  ? nilfs_set_bdev_super+0xa0/0xa0
[ 1031.178603][T29791]  nilfs_mount+0x673/0x9e0
[ 1031.183038][T29791]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1031.189006][T29791]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1031.194290][T29791]  ? trace_kfree+0x2d/0xd0
[ 1031.198700][T29791]  ? kfree+0x2f/0x210
[ 1031.202700][T29791]  ? vfs_parse_fs_string+0x1dd/0x2a0
[ 1031.208004][T29791]  ? kmem_cache_alloc_trace+0x94/0x310
[ 1031.213469][T29791]  ? smack_sb_eat_lsm_opts+0x34d/0x990
[ 1031.218931][T29791]  ? cap_capable+0x1b5/0x250
[ 1031.223519][T29791]  legacy_get_tree+0xea/0x180
[ 1031.228189][T29791]  ? nilfs_checkpoint_is_mounted+0x1b0/0x1b0
[ 1031.234165][T29791]  vfs_get_tree+0x88/0x270
[ 1031.238577][T29791]  do_new_mount+0x289/0xad0
[ 1031.243075][T29791]  ? ns_capable+0x81/0xe0
[ 1031.247405][T29791]  ? do_move_mount_old+0x160/0x160
[ 1031.252513][T29791]  ? user_path_at_empty+0x149/0x1a0
[ 1031.257703][T29791]  __se_sys_mount+0x2e3/0x3d0
[ 1031.262376][T29791]  ? __x64_sys_mount+0xc0/0xc0
[ 1031.267134][T29791]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1031.273112][T29791]  ? __x64_sys_mount+0x1c/0xc0
[ 1031.277877][T29791]  do_syscall_64+0x2b/0x70
[ 1031.282286][T29791]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1031.288171][T29791] RIP: 0033:0x7f94af28a57a
[ 1031.292580][T29791] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1031.312193][T29791] RSP: 002b:00007f94b0302f88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[ 1031.320620][T29791] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f94af28a57a
[ 1031.328582][T29791] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f94b0302fe0
[ 1031.336559][T29791] RBP: 00007f94b0303020 R08: 00007f94b0303020 R09: 0000000020000000
[ 1031.344522][T29791] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000
[ 1031.352482][T29791] R13: 0000000020000100 R14: 00007f94b0302fe0 R15: 0000000020000040
[ 1031.360464][T29791]  </TASK>
[ 1031.365668][ T3736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1031.390640][T13504] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1031.400662][ T3736] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1031.414193][T13504] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1031.423872][ T3736] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1031.423876][T29791] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1031.423905][T29791] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1031.433597][T13504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1031.456282][T29791] NILFS (loop2): mounting unchecked fs
[ 1031.459729][ T3736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1031.472550][T29791] NILFS (loop2): I/O error reading segment
[ 1031.480542][T13502] usb 5-1: USB disconnect, device number 13
[ 1031.495523][T29791] NILFS (loop2): error -5 while searching super root
[ 1031.519053][ T3736] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
16:12:23 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1031.610931][   T14] wacom 0003:056A:0331.013C: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1031.621183][T29809] loop2: detected capacity change from 0 to 5
[ 1031.635363][T29809] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1031.645577][T29809] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
16:12:23 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1031.657014][T29809] NILFS (loop2): mounting unchecked fs
[ 1031.663456][T29809] NILFS (loop2): I/O error reading segment
[ 1031.669589][T29809] NILFS (loop2): error -5 while searching super root
16:12:23 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1031.844720][T29823] loop2: detected capacity change from 0 to 5
[ 1031.860424][T29823] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1031.869300][T29823] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1031.883333][T29823] NILFS (loop2): mounting unchecked fs
[ 1031.889848][T29823] NILFS (loop2): I/O error reading segment
[ 1031.895887][T29823] NILFS (loop2): error -5 while searching super root
[ 1032.084407][   T14] usb 4-1: USB disconnect, device number 93
16:12:24 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902240001"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:24 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x13, {0x13, 0x0, "a418720210fed1ef23b45daf3edc5853ed"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:24 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:24 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00000000000000000000000000000000000700"})

16:12:24 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:24 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000300"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1033.086995][ T3686] usb 6-1: USB disconnect, device number 75
[ 1033.120742][   T14] usb 1-1: USB disconnect, device number 32
[ 1033.128223][T29850] loop2: detected capacity change from 0 to 5
[ 1033.180907][T29850] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1033.213507][T29850] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1033.224075][T29850] NILFS (loop2): mounting unchecked fs
16:12:24 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1033.230514][T29850] NILFS (loop2): I/O error reading segment
[ 1033.236411][T29850] NILFS (loop2): error -5 while searching super root
[ 1033.312032][T29873] loop2: detected capacity change from 0 to 5
[ 1033.324300][T29873] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1033.333856][T29873] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1033.347870][T29873] NILFS (loop2): mounting unchecked fs
[ 1033.354076][T29873] NILFS (loop2): I/O error reading segment
16:12:25 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1033.360795][T29873] NILFS (loop2): error -5 while searching super root
[ 1033.436610][ T3684] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1033.444349][ T3683] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1033.478612][T29880] loop2: detected capacity change from 0 to 5
[ 1033.502662][T29880] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1033.516887][T29880] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1033.534770][T29880] NILFS (loop2): mounting unchecked fs
[ 1033.541693][T29880] NILFS (loop2): I/O error reading segment
[ 1033.546655][ T3686] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1033.548282][T29880] NILFS (loop2): error -5 while searching super root
[ 1033.556698][   T14] usb 1-1: new high-speed USB device number 33 using dummy_hcd
16:12:25 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:25 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000000000700"})

[ 1033.676185][T29887] loop2: detected capacity change from 0 to 5
[ 1033.688947][T29887] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1033.698266][T29887] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1033.717541][T29887] NILFS (loop2): mounting unchecked fs
[ 1033.726326][T29887] NILFS (loop2): I/O error reading segment
[ 1033.733391][T29887] NILFS (loop2): error -5 while searching super root
16:12:25 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1033.806972][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1033.818200][ T3684] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1033.834544][ T3684] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1033.836035][T29897] loop2: detected capacity change from 0 to 5
[ 1033.844477][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1033.860678][ T3684] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1033.870661][ T3683] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1033.890726][T29897] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1033.901494][T29897] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1033.909510][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1033.912870][T29897] NILFS (loop2): mounting unchecked fs
[ 1033.925716][T29897] NILFS (loop2): I/O error reading segment
[ 1033.927028][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1033.934254][T29897] NILFS (loop2): error -5 while searching super root
[ 1033.946852][ T3686] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1033.957408][   T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1033.968193][   T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1033.987399][ T3686] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1033.996391][ T3686] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1034.008119][   T14] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1034.018308][ T3686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1034.026953][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1034.059177][ T3686] usb 6-1: config 0 descriptor??
16:12:25 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1034.109926][   T14] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1034.154014][T29914] loop2: detected capacity change from 0 to 5
[ 1034.171358][T29914] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1034.187132][T29914] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1034.198724][T29914] NILFS (loop2): mounting unchecked fs
[ 1034.205141][T29914] NILFS (loop2): I/O error reading segment
[ 1034.211444][T29914] NILFS (loop2): error -5 while searching super root
[ 1034.232053][ T3736] usb 5-1: USB disconnect, device number 14
[ 1034.491224][ T3683] wacom 0003:056A:0331.013D: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1034.959244][ T3683] usb 4-1: USB disconnect, device number 94
16:12:27 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:27 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:27 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:27 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x13, {0x13, 0x0, "a418720210fed1ef23b45daf3edc5853ed"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1036.148592][   T14] usb 6-1: USB disconnect, device number 76
[ 1036.184962][T29946] loop2: detected capacity change from 0 to 5
16:12:27 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000400"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:12:27 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1036.209728][ T3684] usb 1-1: USB disconnect, device number 33
[ 1036.231417][T29946] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1036.277606][T29946] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1036.294338][T29946] NILFS (loop2): mounting unchecked fs
[ 1036.300803][T29946] NILFS (loop2): I/O error reading segment
[ 1036.307140][T29946] NILFS (loop2): error -5 while searching super root
16:12:28 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1036.450785][T29972] loop2: detected capacity change from 0 to 5
[ 1036.472596][T29972] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1036.496769][ T3683] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1036.497233][T29972] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1036.515357][T29972] NILFS (loop2): mounting unchecked fs
[ 1036.516958][ T3679] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1036.525265][T29972] NILFS (loop2): I/O error reading segment
[ 1036.546992][T29972] NILFS (loop2): error -5 while searching super root
16:12:28 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1036.636833][   T14] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1036.652990][T29979] loop2: detected capacity change from 0 to 5
[ 1036.665722][T29979] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1036.675908][T29979] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
16:12:28 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1036.687059][T29979] NILFS (loop2): mounting unchecked fs
[ 1036.687144][ T3684] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1036.695485][T29979] NILFS (loop2): I/O error reading segment
[ 1036.717832][T29979] NILFS (loop2): error -5 while searching super root
16:12:28 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1036.847688][T29989] loop2: detected capacity change from 0 to 5
[ 1036.864946][T29989] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1036.873700][T29989] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1036.884755][T29989] NILFS (loop2): mounting unchecked fs
[ 1036.906976][ T3683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1036.914418][T29989] NILFS (loop2): I/O error reading segment
[ 1036.925119][ T3683] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1036.934586][ T3679] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1036.936188][T29989] NILFS (loop2): error -5 while searching super root
[ 1036.953100][ T3679] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1036.965070][ T3683] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1036.974936][ T3679] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1036.984600][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1036.993006][ T3679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:28 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1037.057478][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1037.097279][   T14] usb 6-1: config 0 has no interfaces?
[ 1037.110143][   T14] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1037.123351][T30002] loop2: detected capacity change from 0 to 5
[ 1037.138901][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.144433][T30002] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1037.148255][ T3684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1037.170505][T30002] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1037.189579][   T14] usb 6-1: config 0 descriptor??
[ 1037.193626][T30002] NILFS (loop2): mounting unchecked fs
16:12:28 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000000000700"})

[ 1037.196669][ T3684] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1037.200948][T30002] NILFS (loop2): I/O error reading segment
[ 1037.221570][T30002] NILFS (loop2): error -5 while searching super root
[ 1037.229849][ T3684] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1037.239872][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.273071][   T14] usb 5-1: USB disconnect, device number 15
[ 1037.299125][ T3684] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1037.501541][ T3679] wacom 0003:056A:0331.013E: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1037.960564][ T3679] usb 4-1: USB disconnect, device number 95
16:12:30 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:30 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:30 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x16, {0x16, 0x0, "a418720210fed1ef23b45daf3edc5853edbf9242"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:30 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000000000007"})

16:12:30 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000500"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1039.215687][ T3736] usb 6-1: USB disconnect, device number 77
16:12:30 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1039.278047][ T3679] usb 1-1: USB disconnect, device number 34
[ 1039.287863][T30050] loop2: detected capacity change from 0 to 5
[ 1039.331185][T30050] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1039.341041][T30050] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1039.363386][T30050] NILFS (loop2): mounting unchecked fs
[ 1039.370784][T30050] NILFS (loop2): I/O error reading segment
[ 1039.377452][T30050] NILFS (loop2): error -5 while searching super root
16:12:31 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1039.481273][T30068] loop2: detected capacity change from 0 to 5
[ 1039.495124][T30068] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1039.504185][T30068] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1039.515528][T30068] NILFS (loop2): mounting unchecked fs
[ 1039.522010][T30068] NILFS (loop2): I/O error reading segment
[ 1039.528692][ T3684] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1039.536419][   T14] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1039.544616][T30068] NILFS (loop2): error -5 while searching super root
16:12:31 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1039.671993][T30075] loop2: detected capacity change from 0 to 5
[ 1039.676825][ T3736] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1039.707861][T30075] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
16:12:31 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1039.716252][T30075] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1039.727217][T30075] NILFS (loop2): mounting unchecked fs
[ 1039.733256][T30075] NILFS (loop2): I/O error reading segment
[ 1039.739916][T30075] NILFS (loop2): error -5 while searching super root
[ 1039.746630][ T3679] usb 1-1: new high-speed USB device number 35 using dummy_hcd
16:12:31 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x11, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1039.863823][T30085] loop2: detected capacity change from 0 to 5
[ 1039.887579][T30085] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1039.898876][T30085] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
16:12:31 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1039.909624][T30085] NILFS (loop2): mounting unchecked fs
[ 1039.915914][T30085] NILFS (loop2): I/O error reading segment
[ 1039.922483][T30085] NILFS (loop2): error -5 while searching super root
[ 1039.937213][   T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1039.948203][ T3684] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1039.966540][ T3684] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1039.976167][ T3684] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1039.985515][   T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1039.995333][   T14] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1040.005669][T30089] loop2: detected capacity change from 0 to 5
[ 1040.015635][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.024889][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.036799][ T3736] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1040.057954][T30089] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1040.067200][ T3736] usb 6-1: config 0 has no interfaces?
[ 1040.071005][T30089] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1040.077367][ T3736] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1040.103880][T30089] NILFS (loop2): mounting unchecked fs
[ 1040.110774][T30089] NILFS (loop2): I/O error reading segment
[ 1040.120192][ T3736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.139835][ T3736] usb 6-1: config 0 descriptor??
[ 1040.141551][T30089] NILFS (loop2): error -5 while searching super root
[ 1040.152213][ T3679] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
16:12:31 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x18, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1040.162872][ T3679] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1040.178349][ T3679] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1040.188055][ T3679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.249290][ T3679] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1040.286390][T13502] usb 5-1: USB disconnect, device number 16
[ 1040.289775][T30108] loop2: detected capacity change from 0 to 5
[ 1040.312143][T30108] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1040.336187][T30108] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1040.351065][T30108] NILFS (loop2): mounting unchecked fs
[ 1040.359945][T30108] NILFS (loop2): I/O error reading segment
[ 1040.377197][T30108] NILFS (loop2): error -5 while searching super root
[ 1040.542271][   T14] wacom 0003:056A:0331.013F: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1041.001866][   T14] usb 4-1: USB disconnect, device number 96
16:12:33 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:33 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:33 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1e, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:33 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x16, {0x16, 0x0, "a418720210fed1ef23b45daf3edc5853edbf9242"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:33 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000600"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1042.310771][ T3679] usb 6-1: USB disconnect, device number 78
16:12:34 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1042.351374][T30141] loop2: detected capacity change from 0 to 5
[ 1042.356368][   T14] usb 1-1: USB disconnect, device number 35
[ 1042.424048][T30141] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1042.446350][T30141] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1042.458020][T30141] NILFS (loop2): mounting unchecked fs
[ 1042.464369][T30141] NILFS (loop2): I/O error reading segment
[ 1042.471026][T30141] NILFS (loop2): error -5 while searching super root
16:12:34 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x21, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1042.585157][T30168] loop2: detected capacity change from 0 to 5
[ 1042.611405][T30168] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1042.620742][T30168] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
16:12:34 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x24, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1042.635038][T30168] NILFS (loop2): mounting unchecked fs
[ 1042.640793][ T3683] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1042.646667][T13502] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1042.649292][T30168] NILFS (loop2): I/O error reading segment
[ 1042.662219][T30168] NILFS (loop2): error -5 while searching super root
[ 1042.735853][T30174] loop2: detected capacity change from 0 to 5
[ 1042.763197][T30174] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1042.772539][T30174] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1042.783194][T30174] NILFS (loop2): mounting unchecked fs
[ 1042.789762][T30174] NILFS (loop2): I/O error reading segment
[ 1042.795691][T30174] NILFS (loop2): error -5 while searching super root
[ 1042.816819][   T14] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1042.824614][ T3679] usb 6-1: new high-speed USB device number 79 using dummy_hcd
16:12:34 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b0000000000000000000000000000000000000007"})

16:12:34 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x25, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1042.930021][T30184] loop2: detected capacity change from 0 to 5
[ 1042.947610][T30184] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1042.956298][T30184] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1042.968641][T30184] NILFS (loop2): mounting unchecked fs
[ 1042.974811][T30184] NILFS (loop2): I/O error reading segment
[ 1042.981615][T30184] NILFS (loop2): error -5 while searching super root
[ 1043.016759][T13502] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.035715][T13502] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1043.036867][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1043.046137][T13502] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1043.057492][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1043.076368][ T3683] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1043.086155][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.096016][T13502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:34 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2a, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1043.219106][T30195] loop2: detected capacity change from 0 to 5
[ 1043.241453][T30195] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1043.257077][   T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.267587][ T3679] usb 6-1: config 0 has no interfaces?
[ 1043.273697][ T3679] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1043.276784][T30195] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1043.291662][   T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1043.308488][ T3679] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.311807][T30195] NILFS (loop2): mounting unchecked fs
[ 1043.326817][   T14] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1043.336148][T30195] NILFS (loop2): I/O error reading segment
[ 1043.336628][ T3679] usb 6-1: config 0 descriptor??
[ 1043.345300][T30195] NILFS (loop2): error -5 while searching super root
[ 1043.348629][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.386017][ T3736] usb 5-1: USB disconnect, device number 17
[ 1043.419093][   T14] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
16:12:35 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x30, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1043.516267][T30211] loop2: detected capacity change from 0 to 5
[ 1043.529898][T30211] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1043.539274][T30211] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1043.564406][T30211] NILFS (loop2): mounting unchecked fs
[ 1043.570919][T30211] NILFS (loop2): I/O error reading segment
[ 1043.577223][T30211] NILFS (loop2): error -5 while searching super root
[ 1043.593333][ T3683] wacom 0003:056A:0331.0140: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1044.062190][ T3683] usb 4-1: USB disconnect, device number 97
16:12:37 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:37 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:37 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x36, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:37 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x16, {0x16, 0x0, "a418720210fed1ef23b45daf3edc5853edbf9242"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:37 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000700"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1045.406049][ T3736] usb 6-1: USB disconnect, device number 79
[ 1045.445607][T30244] loop2: detected capacity change from 0 to 5
16:12:37 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, 0x0)

[ 1045.452465][T13502] usb 1-1: USB disconnect, device number 36
[ 1045.497242][T30244] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1045.520356][T30244] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1045.531298][T30244] NILFS (loop2): mounting unchecked fs
[ 1045.542540][T30244] NILFS (loop2): I/O error reading segment
[ 1045.549863][T30244] NILFS (loop2): error -5 while searching super root
16:12:37 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x41, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1045.676840][T30267] loop2: detected capacity change from 0 to 5
[ 1045.696931][ T3683] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1045.705872][T30267] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1045.715351][T30267] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1045.725970][T30267] NILFS (loop2): mounting unchecked fs
[ 1045.726696][ T3687] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1045.732602][T30267] NILFS (loop2): I/O error reading segment
[ 1045.745244][T30267] NILFS (loop2): error -5 while searching super root
16:12:37 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x48, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1045.846771][ T3736] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1045.848172][T30274] loop2: detected capacity change from 0 to 5
[ 1045.868321][T30274] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1045.878566][T30274] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1045.889759][T30274] NILFS (loop2): mounting unchecked fs
16:12:37 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1045.895974][T30274] NILFS (loop2): I/O error reading segment
[ 1045.905872][T30274] NILFS (loop2): error -5 while searching super root
[ 1045.906778][T13502] usb 1-1: new high-speed USB device number 37 using dummy_hcd
16:12:37 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1046.003915][T30285] loop2: detected capacity change from 0 to 5
[ 1046.034753][T30285] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1046.062532][T30285] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1046.086057][T30285] NILFS (loop2): mounting unchecked fs
[ 1046.092843][T30285] NILFS (loop2): I/O error reading segment
[ 1046.099334][T30285] NILFS (loop2): error -5 while searching super root
[ 1046.116740][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1046.116776][ T3687] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1046.128228][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1046.148809][ T3683] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1046.158582][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:37 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1046.161081][ T3687] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1046.177401][ T3687] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1046.197150][ T3687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.267013][ T3736] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1046.274619][ T3736] usb 6-1: can't read configurations, error -61
[ 1046.304380][T30297] loop2: detected capacity change from 0 to 5
[ 1046.320765][T13502] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1046.332966][T13502] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1046.333461][T30297] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1046.355553][T13502] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1046.355985][T30297] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1046.373555][T13502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.376395][T30297] NILFS (loop2): mounting unchecked fs
[ 1046.388957][T30297] NILFS (loop2): I/O error reading segment
[ 1046.395041][T30297] NILFS (loop2): error -5 while searching super root
16:12:38 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1046.438357][T13502] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1046.447372][ T3736] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1046.469851][ T3679] usb 5-1: USB disconnect, device number 18
[ 1046.651940][ T3683] wacom 0003:056A:0331.0141: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1046.846674][ T3736] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1046.854766][ T3736] usb 6-1: can't read configurations, error -61
[ 1046.861492][ T3736] usb usb6-port1: attempt power cycle
[ 1047.119464][ T3683] usb 4-1: USB disconnect, device number 98
[ 1047.276672][ T3736] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1047.526902][ T3736] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1047.534487][ T3736] usb 6-1: can't read configurations, error -61
[ 1047.696721][ T3736] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1047.946680][ T3736] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1047.954270][ T3736] usb 6-1: can't read configurations, error -61
[ 1047.962558][ T3736] usb usb6-port1: unable to enumerate USB device
16:12:40 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:40 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x60, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:40 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x17, {0x17, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:40 executing program 1:
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x11)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004f00000857152077e8b7004854e530c5656b0491000000"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, &(0x7f0000000640)={0x20, 0x4, 0x90, {0x90, 0x7f37982bc17bc762, "08ee75262212f565b854627e7bb84dafbefea961c2b0a25944269cbdbb7a95b888239ebb10908a14034a490f308c653ab78f5c94e50d970adfac9b4cf7ae26fb74997959d9fb7a4ec4903af3525bd8ce21db03db0aa07cb5516280aac38c93589700f3e6681a8fe72deb33a9c09e7b202929b951897864614695c6d953b6c55951d8fcd091386008d5575e6857de"}}, &(0x7f0000000700)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "5f135713d67540bbe8a746230345fe1f3aece2f802d54d154721bf0c6a8413d5954a6f50d5ead04d5dd1ab61cff0247e6554796a0986952eb6f6ae556f727229f5f4d88866a4ddff77cd1a5ab0c299afa91eb7e19b8bc3a4d199ba43c74c7c7bc5963609458c0e40e949ffb85ddd5308a9bb06450e4765d42ce36124faf0172f9d0abf9042f80280ec4c643a331c11a1cc76bc13e760ed1038697db6d6022c3d8f17596e2f4e77f17837457b4fa68cb49698"}}, &(0x7f00000007c0)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "b086777c"}, @global=@item_012={0x1, 0x1, 0x3, '/'}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xfa, 0x1, {0x22, 0x6ae}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x20, 0x10, 0xc4, "c745b96b470ed49532e59853b40b8b49a3127c0e56af6195034d207a8d749c5bf95faf697f067f6b7ea6915afb1bc47a1b9aa117438a1bcfc1b89f4392cc1b95aa35e79d3abf5267f9e793b52e0f18d2f0e34f45a5f94bfd42bacdf2737e74d638aca89982a1330b361526c5c0674852cd7c0a6ac0d97425609820f9fab075ff06eb1c3ae660d34ba04bc6fc024448d61f2ce8e974fd810d67506329978739881426712c2106f0e36167148407e90297763278c57bdce76633a4cf5c5e936cf9c75a36a4"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000b40)={0x20, 0x1, 0xde, "897a7f7c435c9ab123678cc6eacd159655ac232e012fcac7c19116f55d327b9673827f678352fce88a3406578247a72124cbc5917fe94b1491ff20c451215f509817e35bcb4458e10dec2e6464441e60419e91a2b3f1dc1c42569050a7fb761501cc00b043f812fe295aef022d94aa81cf037634dc6d3cd9c86d4c1ea50d0e962e330099a51ebf41e58d2bdfaa0b50ec259d0461a3dc8d32e3c282dd882e4c821eda3e8adb525a196cc3dfa13434c67ee0b7d52196e46c03a50cd046c06e56c0060b34bea5f6011bb62081aa9d4f8a366e7ea3b378bcbdbfd59cc17d2e60"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x7}})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000240)={0x40, 0x10, 0xfe, {0xfe, 0x6, "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"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x75, "2b89cee982e56d52a32314f9634407a9e99bacc13b4149a419f05b48dda53a74a62e2814efe96cd424390352883b7f71385565c66c521b2a2f41c656a1dd73ebf53c88c6a6ba9e71bf7efc328fdf2d586556bc6b757c0f0571c337a406f1945464293b193bf4a206415a76bc4007e5c83fcf5892e1"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x0, 0x7ff, 0x40, 0x8001, 0x0, 0x2, 0x800, 0x80000000, 0xb4, 0x200, 0x2269, 0x5}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}})
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:40 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000800"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1048.508823][T30338] loop2: detected capacity change from 0 to 5
16:12:40 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, 0x0)

[ 1048.554265][ T3684] usb 1-1: USB disconnect, device number 37
[ 1048.577274][T30338] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1048.588472][T30338] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1048.603496][T30338] NILFS (loop2): mounting unchecked fs
[ 1048.613161][T30338] NILFS (loop2): I/O error reading segment
[ 1048.619391][T30338] NILFS (loop2): error -5 while searching super root
16:12:40 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x68, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1048.755038][T30359] loop2: detected capacity change from 0 to 5
[ 1048.777362][ T3736] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1048.783977][T30359] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1048.794223][T30359] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1048.804651][T30359] NILFS (loop2): mounting unchecked fs
[ 1048.806903][ T3683] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1048.811439][T30359] NILFS (loop2): I/O error reading segment
[ 1048.817718][ T3679] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1048.832994][T30359] NILFS (loop2): error -5 while searching super root
16:12:40 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1048.942767][T30366] loop2: detected capacity change from 0 to 5
[ 1048.946768][ T3682] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1048.996926][ T3684] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1049.007648][T30366] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1049.016016][T30366] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1049.028186][T30366] NILFS (loop2): mounting unchecked fs
[ 1049.034162][T30366] NILFS (loop2): I/O error reading segment
[ 1049.040307][T30366] NILFS (loop2): error -5 while searching super root
16:12:40 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x74, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1049.086700][ T3683] usb 2-1: Using ep0 maxpacket: 8
[ 1049.137102][ T3683] usb 2-1: too many configurations: 229, using maximum allowed: 8
[ 1049.151999][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1049.157427][T30373] loop2: detected capacity change from 0 to 5
[ 1049.172976][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1049.189080][T30373] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1049.194098][ T3736] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1049.206840][ T3736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.212841][T30373] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1049.227430][T30373] NILFS (loop2): mounting unchecked fs
[ 1049.237553][ T3679] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1049.249806][ T3679] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1049.259488][ T3679] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1049.260566][T30373] NILFS (loop2): I/O error reading segment
[ 1049.269207][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.297056][ T3683] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1049.302504][T30373] NILFS (loop2): error -5 while searching super root
[ 1049.305129][ T3683] usb 2-1: can't read configurations, error -61
16:12:41 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1049.366829][ T3682] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1049.375032][ T3682] usb 6-1: can't read configurations, error -61
[ 1049.432016][ T3684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1049.457974][T30384] loop2: detected capacity change from 0 to 5
[ 1049.464301][ T3684] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1049.474376][T30384] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1049.477831][ T3683] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1049.496280][ T3684] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1049.505073][T30384] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1049.506821][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.536740][ T3682] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1049.552539][T30384] NILFS (loop2): mounting unchecked fs
[ 1049.562968][ T3679] usb 5-1: USB disconnect, device number 19
[ 1049.564068][T30384] NILFS (loop2): I/O error reading segment
[ 1049.575427][T30384] NILFS (loop2): error -5 while searching super root
16:12:41 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1049.608644][ T3684] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1049.705951][T30397] loop2: detected capacity change from 0 to 5
[ 1049.735521][T30397] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1049.746041][T30397] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1049.747052][ T3736] wacom 0003:056A:0331.0142: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1049.757653][T30397] NILFS (loop2): mounting unchecked fs
[ 1049.772855][ T3683] usb 2-1: Using ep0 maxpacket: 8
[ 1049.787399][T30397] NILFS (loop2): I/O error reading segment
[ 1049.793240][T30397] NILFS (loop2): error -5 while searching super root
[ 1049.817000][ T3683] usb 2-1: too many configurations: 229, using maximum allowed: 8
16:12:41 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1049.917271][T30410] loop2: detected capacity change from 0 to 5
[ 1049.940926][T30410] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1049.950103][T30410] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1049.961867][T30410] NILFS (loop2): mounting unchecked fs
[ 1049.970201][T30410] NILFS (loop2): I/O error reading segment
[ 1049.976205][T30410] NILFS (loop2): error -5 while searching super root
[ 1049.986955][ T3682] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1049.994537][ T3682] usb 6-1: can't read configurations, error -61
[ 1050.001496][ T3683] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1050.010922][ T3683] usb 2-1: can't read configurations, error -61
[ 1050.017879][ T3682] usb usb6-port1: attempt power cycle
[ 1050.023513][ T3683] usb usb2-port1: attempt power cycle
[ 1050.218851][ T3736] usb 4-1: USB disconnect, device number 99
[ 1050.466676][ T3683] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1050.474355][ T3682] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1050.587039][ T3683] usb 2-1: Using ep0 maxpacket: 8
[ 1050.637255][ T3683] usb 2-1: too many configurations: 229, using maximum allowed: 8
[ 1050.766968][ T3682] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1050.774602][ T3682] usb 6-1: can't read configurations, error -61
[ 1050.781902][ T3683] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1050.790171][ T3683] usb 2-1: can't read configurations, error -61
[ 1050.949982][ T3682] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1050.957686][ T3683] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1051.056872][ T3683] usb 2-1: Using ep0 maxpacket: 8
[ 1051.097076][ T3683] usb 2-1: too many configurations: 229, using maximum allowed: 8
[ 1051.237668][ T3682] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1051.245283][ T3682] usb 6-1: can't read configurations, error -61
[ 1051.251983][ T3683] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1051.259624][ T3683] usb 2-1: can't read configurations, error -61
[ 1051.266064][ T3682] usb usb6-port1: unable to enumerate USB device
[ 1051.272924][ T3683] usb usb2-port1: unable to enumerate USB device
16:12:43 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:43 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x17, {0x17, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:43 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x108, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:43 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000900"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:12:43 executing program 1:
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x11)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004f00000857152077e8b7004854e530c5656b0491000000"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, &(0x7f0000000640)={0x20, 0x4, 0x90, {0x90, 0x7f37982bc17bc762, "08ee75262212f565b854627e7bb84dafbefea961c2b0a25944269cbdbb7a95b888239ebb10908a14034a490f308c653ab78f5c94e50d970adfac9b4cf7ae26fb74997959d9fb7a4ec4903af3525bd8ce21db03db0aa07cb5516280aac38c93589700f3e6681a8fe72deb33a9c09e7b202929b951897864614695c6d953b6c55951d8fcd091386008d5575e6857de"}}, &(0x7f0000000700)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "5f135713d67540bbe8a746230345fe1f3aece2f802d54d154721bf0c6a8413d5954a6f50d5ead04d5dd1ab61cff0247e6554796a0986952eb6f6ae556f727229f5f4d88866a4ddff77cd1a5ab0c299afa91eb7e19b8bc3a4d199ba43c74c7c7bc5963609458c0e40e949ffb85ddd5308a9bb06450e4765d42ce36124faf0172f9d0abf9042f80280ec4c643a331c11a1cc76bc13e760ed1038697db6d6022c3d8f17596e2f4e77f17837457b4fa68cb49698"}}, &(0x7f00000007c0)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "b086777c"}, @global=@item_012={0x1, 0x1, 0x3, '/'}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xfa, 0x1, {0x22, 0x6ae}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x20, 0x10, 0xc4, "c745b96b470ed49532e59853b40b8b49a3127c0e56af6195034d207a8d749c5bf95faf697f067f6b7ea6915afb1bc47a1b9aa117438a1bcfc1b89f4392cc1b95aa35e79d3abf5267f9e793b52e0f18d2f0e34f45a5f94bfd42bacdf2737e74d638aca89982a1330b361526c5c0674852cd7c0a6ac0d97425609820f9fab075ff06eb1c3ae660d34ba04bc6fc024448d61f2ce8e974fd810d67506329978739881426712c2106f0e36167148407e90297763278c57bdce76633a4cf5c5e936cf9c75a36a4"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000b40)={0x20, 0x1, 0xde, "897a7f7c435c9ab123678cc6eacd159655ac232e012fcac7c19116f55d327b9673827f678352fce88a3406578247a72124cbc5917fe94b1491ff20c451215f509817e35bcb4458e10dec2e6464441e60419e91a2b3f1dc1c42569050a7fb761501cc00b043f812fe295aef022d94aa81cf037634dc6d3cd9c86d4c1ea50d0e962e330099a51ebf41e58d2bdfaa0b50ec259d0461a3dc8d32e3c282dd882e4c821eda3e8adb525a196cc3dfa13434c67ee0b7d52196e46c03a50cd046c06e56c0060b34bea5f6011bb62081aa9d4f8a366e7ea3b378bcbdbfd59cc17d2e60"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x7}}) (async)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000240)={0x40, 0x10, 0xfe, {0xfe, 0x6, "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"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x75, "2b89cee982e56d52a32314f9634407a9e99bacc13b4149a419f05b48dda53a74a62e2814efe96cd424390352883b7f71385565c66c521b2a2f41c656a1dd73ebf53c88c6a6ba9e71bf7efc328fdf2d586556bc6b757c0f0571c337a406f1945464293b193bf4a206415a76bc4007e5c83fcf5892e1"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x0, 0x7ff, 0x40, 0x8001, 0x0, 0x2, 0x800, 0x80000000, 0xb4, 0x200, 0x2269, 0x5}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 32)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"}) (rerun: 32)

16:12:43 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, 0x0)

[ 1051.550426][T30435] loop2: detected capacity change from 0 to 5
[ 1051.614165][ T3683] usb 1-1: USB disconnect, device number 38
[ 1051.639491][T30435] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
16:12:43 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x162, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1051.665296][T30435] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1051.685552][T30435] NILFS (loop2): mounting unchecked fs
[ 1051.692218][T30435] NILFS (loop2): I/O error reading segment
[ 1051.698329][T30435] NILFS (loop2): error -5 while searching super root
[ 1051.777403][T30459] loop2: detected capacity change from 0 to 5
[ 1051.816994][ T3679] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1051.825641][T30459] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1051.826603][  T144] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1051.834516][T30459] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1051.854841][T30459] NILFS (loop2): mounting unchecked fs
[ 1051.861468][T30459] NILFS (loop2): I/O error reading segment
[ 1051.868525][T30459] NILFS (loop2): error -5 while searching super root
16:12:43 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x163, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1051.966993][ T3682] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1051.979266][T30466] loop2: detected capacity change from 0 to 5
[ 1051.992163][T30466] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1052.006668][ T3736] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1052.015786][T30466] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1052.027663][T30466] NILFS (loop2): mounting unchecked fs
[ 1052.034346][T30466] NILFS (loop2): I/O error reading segment
[ 1052.042076][T30466] NILFS (loop2): error -5 while searching super root
[ 1052.056891][ T3683] usb 1-1: new high-speed USB device number 39 using dummy_hcd
16:12:43 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x164, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1052.154313][T30475] loop2: detected capacity change from 0 to 5
[ 1052.177171][T30475] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1052.197902][T30475] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1052.216787][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1052.217093][ T3679] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1052.229664][T30475] NILFS (loop2): mounting unchecked fs
[ 1052.237986][ T3682] usb 2-1: Using ep0 maxpacket: 8
[ 1052.238610][ T3679] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1052.247966][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1052.249475][ T3679] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1052.264306][T30475] NILFS (loop2): I/O error reading segment
[ 1052.269243][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.281037][T30475] NILFS (loop2): error -5 while searching super root
[ 1052.296942][ T3682] usb 2-1: too many configurations: 229, using maximum allowed: 8
[ 1052.306397][  T144] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1052.326615][  T144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:44 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x204, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1052.416782][ T3736] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1052.430265][ T3736] usb 6-1: can't read configurations, error -61
[ 1052.447100][ T3683] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1052.457350][ T3682] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1052.464939][ T3682] usb 2-1: can't read configurations, error -61
[ 1052.480171][ T3683] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1052.495397][T30487] loop2: detected capacity change from 0 to 5
[ 1052.495928][ T3683] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1052.512374][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.532695][T30487] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1052.544907][ T3679] usb 5-1: USB disconnect, device number 20
[ 1052.546390][T30487] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1052.570375][T30487] NILFS (loop2): mounting unchecked fs
[ 1052.570721][ T3683] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1052.576437][T30487] NILFS (loop2): I/O error reading segment
[ 1052.591230][ T3736] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1052.607653][T30487] NILFS (loop2): error -5 while searching super root
16:12:44 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x29b, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1052.646893][ T3682] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1052.718844][T30500] loop2: detected capacity change from 0 to 5
[ 1052.743347][T30500] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1052.752514][T30500] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1052.773760][T30500] NILFS (loop2): mounting unchecked fs
[ 1052.781191][T30500] NILFS (loop2): I/O error reading segment
[ 1052.788205][T30500] NILFS (loop2): error -5 while searching super root
16:12:44 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x29c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1052.836970][  T144] wacom 0003:056A:0331.0143: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1052.916196][T30509] loop2: detected capacity change from 0 to 5
[ 1052.922886][ T3682] usb 2-1: Using ep0 maxpacket: 8
[ 1052.952806][T30509] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1052.964509][T30509] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1052.977030][ T3682] usb 2-1: too many configurations: 229, using maximum allowed: 8
[ 1052.999880][T30509] NILFS (loop2): mounting unchecked fs
[ 1053.006137][T30509] NILFS (loop2): I/O error reading segment
[ 1053.013276][T30509] NILFS (loop2): error -5 while searching super root
[ 1053.020655][ T3736] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1053.036832][ T3736] usb 6-1: can't read configurations, error -61
[ 1053.051837][ T3736] usb usb6-port1: attempt power cycle
[ 1053.116916][ T3682] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1053.124528][ T3682] usb 2-1: can't read configurations, error -61
[ 1053.133891][ T3682] usb usb2-port1: attempt power cycle
[ 1053.288634][ T3683] usb 4-1: USB disconnect, device number 100
[ 1053.466684][ T3736] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1053.576637][ T3682] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1053.667385][ T3682] usb 2-1: Using ep0 maxpacket: 8
[ 1053.716868][ T3682] usb 2-1: too many configurations: 229, using maximum allowed: 8
[ 1053.726751][ T3736] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1053.734486][ T3736] usb 6-1: can't read configurations, error -61
[ 1053.866923][ T3682] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1053.875808][ T3682] usb 2-1: can't read configurations, error -61
[ 1053.886691][ T3736] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1054.036716][ T3682] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1054.087827][ T1229] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.094141][ T1229] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.136841][ T3682] usb 2-1: Using ep0 maxpacket: 8
[ 1054.147037][ T3736] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1054.154626][ T3736] usb 6-1: can't read configurations, error -61
[ 1054.171483][ T3736] usb usb6-port1: unable to enumerate USB device
[ 1054.186906][ T3682] usb 2-1: too many configurations: 229, using maximum allowed: 8
[ 1054.326718][ T3682] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1054.334327][ T3682] usb 2-1: can't read configurations, error -61
[ 1054.342222][ T3682] usb usb2-port1: unable to enumerate USB device
16:12:46 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:46 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x17, {0x17, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:46 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x29d, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:46 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000a00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:12:46 executing program 1:
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x11)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004f00000857152077e8b7004854e530c5656b0491000000"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, &(0x7f0000000640)={0x20, 0x4, 0x90, {0x90, 0x7f37982bc17bc762, "08ee75262212f565b854627e7bb84dafbefea961c2b0a25944269cbdbb7a95b888239ebb10908a14034a490f308c653ab78f5c94e50d970adfac9b4cf7ae26fb74997959d9fb7a4ec4903af3525bd8ce21db03db0aa07cb5516280aac38c93589700f3e6681a8fe72deb33a9c09e7b202929b951897864614695c6d953b6c55951d8fcd091386008d5575e6857de"}}, &(0x7f0000000700)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "5f135713d67540bbe8a746230345fe1f3aece2f802d54d154721bf0c6a8413d5954a6f50d5ead04d5dd1ab61cff0247e6554796a0986952eb6f6ae556f727229f5f4d88866a4ddff77cd1a5ab0c299afa91eb7e19b8bc3a4d199ba43c74c7c7bc5963609458c0e40e949ffb85ddd5308a9bb06450e4765d42ce36124faf0172f9d0abf9042f80280ec4c643a331c11a1cc76bc13e760ed1038697db6d6022c3d8f17596e2f4e77f17837457b4fa68cb49698"}}, &(0x7f00000007c0)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "b086777c"}, @global=@item_012={0x1, 0x1, 0x3, '/'}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xfa, 0x1, {0x22, 0x6ae}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x20, 0x10, 0xc4, "c745b96b470ed49532e59853b40b8b49a3127c0e56af6195034d207a8d749c5bf95faf697f067f6b7ea6915afb1bc47a1b9aa117438a1bcfc1b89f4392cc1b95aa35e79d3abf5267f9e793b52e0f18d2f0e34f45a5f94bfd42bacdf2737e74d638aca89982a1330b361526c5c0674852cd7c0a6ac0d97425609820f9fab075ff06eb1c3ae660d34ba04bc6fc024448d61f2ce8e974fd810d67506329978739881426712c2106f0e36167148407e90297763278c57bdce76633a4cf5c5e936cf9c75a36a4"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000b40)={0x20, 0x1, 0xde, "897a7f7c435c9ab123678cc6eacd159655ac232e012fcac7c19116f55d327b9673827f678352fce88a3406578247a72124cbc5917fe94b1491ff20c451215f509817e35bcb4458e10dec2e6464441e60419e91a2b3f1dc1c42569050a7fb761501cc00b043f812fe295aef022d94aa81cf037634dc6d3cd9c86d4c1ea50d0e962e330099a51ebf41e58d2bdfaa0b50ec259d0461a3dc8d32e3c282dd882e4c821eda3e8adb525a196cc3dfa13434c67ee0b7d52196e46c03a50cd046c06e56c0060b34bea5f6011bb62081aa9d4f8a366e7ea3b378bcbdbfd59cc17d2e60"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x7}})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000240)={0x40, 0x10, 0xfe, {0xfe, 0x6, "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"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x75, "2b89cee982e56d52a32314f9634407a9e99bacc13b4149a419f05b48dda53a74a62e2814efe96cd424390352883b7f71385565c66c521b2a2f41c656a1dd73ebf53c88c6a6ba9e71bf7efc328fdf2d586556bc6b757c0f0571c337a406f1945464293b193bf4a206415a76bc4007e5c83fcf5892e1"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x0, 0x7ff, 0x40, 0x8001, 0x0, 0x2, 0x800, 0x80000000, 0xb4, 0x200, 0x2269, 0x5}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}})
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x11) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004f00000857152077e8b7004854e530c5656b0491000000"], 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x0, 0x0, 0x2, "23da"}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, &(0x7f0000000640)={0x20, 0x4, 0x90, {0x90, 0x7f37982bc17bc762, "08ee75262212f565b854627e7bb84dafbefea961c2b0a25944269cbdbb7a95b888239ebb10908a14034a490f308c653ab78f5c94e50d970adfac9b4cf7ae26fb74997959d9fb7a4ec4903af3525bd8ce21db03db0aa07cb5516280aac38c93589700f3e6681a8fe72deb33a9c09e7b202929b951897864614695c6d953b6c55951d8fcd091386008d5575e6857de"}}, &(0x7f0000000700)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "5f135713d67540bbe8a746230345fe1f3aece2f802d54d154721bf0c6a8413d5954a6f50d5ead04d5dd1ab61cff0247e6554796a0986952eb6f6ae556f727229f5f4d88866a4ddff77cd1a5ab0c299afa91eb7e19b8bc3a4d199ba43c74c7c7bc5963609458c0e40e949ffb85ddd5308a9bb06450e4765d42ce36124faf0172f9d0abf9042f80280ec4c643a331c11a1cc76bc13e760ed1038697db6d6022c3d8f17596e2f4e77f17837457b4fa68cb49698"}}, &(0x7f00000007c0)={0x0, 0x22, 0x8, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "b086777c"}, @global=@item_012={0x1, 0x1, 0x3, '/'}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xfa, 0x1, {0x22, 0x6ae}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x20, 0x10, 0xc4, "c745b96b470ed49532e59853b40b8b49a3127c0e56af6195034d207a8d749c5bf95faf697f067f6b7ea6915afb1bc47a1b9aa117438a1bcfc1b89f4392cc1b95aa35e79d3abf5267f9e793b52e0f18d2f0e34f45a5f94bfd42bacdf2737e74d638aca89982a1330b361526c5c0674852cd7c0a6ac0d97425609820f9fab075ff06eb1c3ae660d34ba04bc6fc024448d61f2ce8e974fd810d67506329978739881426712c2106f0e36167148407e90297763278c57bdce76633a4cf5c5e936cf9c75a36a4"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000b40)={0x20, 0x1, 0xde, "897a7f7c435c9ab123678cc6eacd159655ac232e012fcac7c19116f55d327b9673827f678352fce88a3406578247a72124cbc5917fe94b1491ff20c451215f509817e35bcb4458e10dec2e6464441e60419e91a2b3f1dc1c42569050a7fb761501cc00b043f812fe295aef022d94aa81cf037634dc6d3cd9c86d4c1ea50d0e962e330099a51ebf41e58d2bdfaa0b50ec259d0461a3dc8d32e3c282dd882e4c821eda3e8adb525a196cc3dfa13434c67ee0b7d52196e46c03a50cd046c06e56c0060b34bea5f6011bb62081aa9d4f8a366e7ea3b378bcbdbfd59cc17d2e60"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x7}}) (async)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000240)={0x40, 0x10, 0xfe, {0xfe, 0x6, "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"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x75, "2b89cee982e56d52a32314f9634407a9e99bacc13b4149a419f05b48dda53a74a62e2814efe96cd424390352883b7f71385565c66c521b2a2f41c656a1dd73ebf53c88c6a6ba9e71bf7efc328fdf2d586556bc6b757c0f0571c337a406f1945464293b193bf4a206415a76bc4007e5c83fcf5892e1"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x0, 0x7ff, 0x40, 0x8001, 0x0, 0x2, 0x800, 0x80000000, 0xb4, 0x200, 0x2269, 0x5}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) (async)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"}) (async)

16:12:46 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x0, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1054.669285][T30536] loop2: detected capacity change from 0 to 5
[ 1054.690984][ T3687] usb 1-1: USB disconnect, device number 39
[ 1054.701526][T30536] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1054.765845][T30536] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1054.779382][T30536] NILFS (loop2): mounting unchecked fs
[ 1054.785610][T30536] NILFS (loop2): I/O error reading segment
[ 1054.792472][T30536] NILFS (loop2): error -5 while searching super root
16:12:46 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1054.890193][T30561] loop2: detected capacity change from 0 to 5
[ 1054.915845][T30561] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1054.937332][ T3736] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1054.945059][T13502] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1054.967689][T30561] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1054.977006][ T3683] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1054.978522][T30561] NILFS (loop2): mounting unchecked fs
[ 1054.992242][T30561] NILFS (loop2): I/O error reading segment
[ 1054.999835][T30561] NILFS (loop2): error -5 while searching super root
16:12:46 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x402, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1055.124188][T30569] loop2: detected capacity change from 0 to 5
[ 1055.136661][ T3684] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1055.147637][ T3687] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1055.155903][T30569] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1055.169165][T30569] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1055.186950][ T3736] usb 2-1: Using ep0 maxpacket: 8
[ 1055.193803][T30569] NILFS (loop2): mounting unchecked fs
[ 1055.206149][T30569] NILFS (loop2): I/O error reading segment
[ 1055.214545][T30569] NILFS (loop2): error -5 while searching super root
[ 1055.228474][ T3736] usb 2-1: too many configurations: 229, using maximum allowed: 8
16:12:46 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x406, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1055.306966][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1055.323930][T30576] loop2: detected capacity change from 0 to 5
[ 1055.324979][T13502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1055.346975][T13502] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1055.356040][T13502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.361928][T30576] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1055.364411][ T3736] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1055.374193][ T3683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1055.380906][ T3736] usb 2-1: can't read configurations, error -61
[ 1055.400702][T30576] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1055.411747][T30576] NILFS (loop2): mounting unchecked fs
[ 1055.418387][T30576] NILFS (loop2): I/O error reading segment
[ 1055.420220][ T3683] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1055.424298][T30576] NILFS (loop2): error -5 while searching super root
[ 1055.436065][ T3683] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1055.451223][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:47 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x500, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1055.546720][ T3736] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1055.548103][ T3684] usb 6-1: config 0 has no interfaces?
[ 1055.556834][ T3687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1055.568225][ T3684] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1055.579917][ T3684] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.586975][ T3687] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1055.596882][ T3684] usb 6-1: config 0 descriptor??
[ 1055.615421][T30589] loop2: detected capacity change from 0 to 5
[ 1055.631994][T30589] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1055.642016][T30589] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1055.655782][ T3687] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1055.659898][T30589] NILFS (loop2): mounting unchecked fs
[ 1055.677274][T30589] NILFS (loop2): I/O error reading segment
[ 1055.679475][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.683342][T30589] NILFS (loop2): error -5 while searching super root
16:12:47 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x600, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1055.726915][ T3684] usb 5-1: USB disconnect, device number 21
[ 1055.751786][ T3687] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1055.803371][T30604] loop2: detected capacity change from 0 to 5
[ 1055.810170][ T3736] usb 2-1: Using ep0 maxpacket: 8
[ 1055.825303][T30604] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1055.846746][T30604] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1055.855284][ T3736] usb 2-1: too many configurations: 229, using maximum allowed: 8
[ 1055.870992][ T3683] usb 6-1: USB disconnect, device number 92
[ 1055.882498][T30604] NILFS (loop2): mounting unchecked fs
[ 1055.895072][T13502] wacom 0003:056A:0331.0144: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1055.906366][T30604] NILFS (loop2): I/O error reading segment
[ 1055.906388][T30604] NILFS (loop2): error -5 while searching super root
16:12:47 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x604, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1055.996844][ T3736] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1056.004797][T30619] loop2: detected capacity change from 0 to 5
[ 1056.009391][ T3736] usb 2-1: can't read configurations, error -61
[ 1056.032714][T30619] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1056.037447][ T3736] usb usb2-port1: attempt power cycle
[ 1056.050441][T30619] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1056.073118][T30619] NILFS (loop2): mounting unchecked fs
[ 1056.079623][T30619] NILFS (loop2): I/O error reading segment
[ 1056.085528][T30619] NILFS (loop2): error -5 while searching super root
16:12:48 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:48 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x700, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:48 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1056.369810][  T144] usb 4-1: USB disconnect, device number 101
[ 1056.409358][T30638] loop2: detected capacity change from 0 to 5
[ 1056.433358][T30638] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1056.466717][ T3736] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1056.477885][T30638] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1056.497572][T30638] NILFS (loop2): mounting unchecked fs
[ 1056.503433][T30638] NILFS (loop2): I/O error reading segment
[ 1056.511976][T30638] NILFS (loop2): error -5 while searching super root
[ 1056.567251][ T3736] usb 2-1: Using ep0 maxpacket: 8
[ 1056.606765][ T3736] usb 2-1: too many configurations: 229, using maximum allowed: 8
[ 1056.686821][ T3683] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1056.726834][ T3736] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1056.735981][ T3736] usb 2-1: can't read configurations, error -61
[ 1056.746781][ T3686] usb 6-1: new high-speed USB device number 93 using dummy_hcd
16:12:48 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000b00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1056.886923][ T3736] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1056.986736][ T3736] usb 2-1: Using ep0 maxpacket: 8
[ 1057.026969][ T3736] usb 2-1: too many configurations: 229, using maximum allowed: 8
[ 1057.108831][ T3683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1057.120675][ T3683] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1057.129981][ T3686] usb 6-1: config 0 has no interfaces?
[ 1057.135481][ T3686] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1057.144630][ T3683] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1057.153759][ T3736] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1057.153760][ T3686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.154751][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.169551][ T3736] usb 2-1: can't read configurations, error -61
[ 1057.188527][ T3686] usb 6-1: config 0 descriptor??
[ 1057.188683][ T3736] usb usb2-port1: unable to enumerate USB device
[ 1057.196583][ T3679] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1057.452944][T13502] usb 6-1: USB disconnect, device number 93
[ 1057.477636][ T3682] usb 5-1: USB disconnect, device number 22
16:12:49 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1057.606819][ T3679] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1057.617798][ T3679] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1057.628200][ T3679] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1057.637914][ T3679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:49 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x801, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:49 executing program 0:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x108, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1057.760460][T13502] usb 1-1: USB disconnect, device number 40
[ 1057.789740][T30672] loop2: detected capacity change from 0 to 5
16:12:49 executing program 0:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x60, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1057.820168][T30672] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1057.834029][T30672] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1057.846026][T30672] NILFS (loop2): mounting unchecked fs
[ 1057.858295][T30672] NILFS (loop2): I/O error reading segment
16:12:49 executing program 0:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1057.864228][T30672] NILFS (loop2): error -5 while searching super root
16:12:49 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000200"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:12:49 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x900, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:49 executing program 5:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:49 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1058.029612][T30696] loop2: detected capacity change from 0 to 5
[ 1058.064403][T30696] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1058.079210][T30696] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1058.103877][T30696] NILFS (loop2): mounting unchecked fs
[ 1058.111491][T30696] NILFS (loop2): I/O error reading segment
[ 1058.118355][T30696] NILFS (loop2): error -5 while searching super root
16:12:49 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:49 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1058.152299][ T3679] wacom 0003:056A:0331.0145: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1058.239521][T30714] loop2: detected capacity change from 0 to 5
[ 1058.253331][T30714] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1058.266757][  T144] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1058.280999][T30714] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1058.310810][T30714] NILFS (loop2): mounting unchecked fs
[ 1058.325986][T30714] NILFS (loop2): I/O error reading segment
[ 1058.327000][T13502] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1058.339332][T30714] NILFS (loop2): error -5 while searching super root
[ 1058.354675][ T3683] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1058.617931][ T3687] usb 4-1: USB disconnect, device number 102
[ 1058.627145][  T144] usb 6-1: config 0 has no interfaces?
[ 1058.632650][  T144] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1058.648802][  T144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.670037][  T144] usb 6-1: config 0 descriptor??
[ 1058.696812][T13502] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1058.716985][T13502] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1058.728521][T13502] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1058.737970][T13502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.766921][ T3683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1058.783102][ T3683] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1058.797337][ T3683] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1058.807673][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.910390][ T3683] usb 6-1: USB disconnect, device number 94
[ 1059.071694][ T3679] usb 5-1: USB disconnect, device number 23
16:12:50 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000c00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:12:50 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:50 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1059.151397][T30747] loop2: detected capacity change from 0 to 5
[ 1059.191048][T30747] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1059.200331][T30747] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1059.211556][T30747] NILFS (loop2): mounting unchecked fs
[ 1059.218019][T30747] NILFS (loop2): I/O error reading segment
[ 1059.225123][T30747] NILFS (loop2): error -5 while searching super root
16:12:50 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb94, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1059.253761][T13502] wacom 0003:056A:0331.0146: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0
[ 1059.321504][T30760] loop2: detected capacity change from 0 to 5
[ 1059.345092][T30760] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
16:12:51 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1059.363016][T30760] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1059.378781][T30760] NILFS (loop2): mounting unchecked fs
[ 1059.385214][T30760] NILFS (loop2): I/O error reading segment
[ 1059.403115][T30760] NILFS (loop2): error -5 while searching super root
16:12:51 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1059.463723][ T3683] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1059.519605][T30774] loop2: detected capacity change from 0 to 6
[ 1059.537059][T30774] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1059.546024][T30774] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1059.557475][T30774] NILFS (loop2): mounting unchecked fs
[ 1059.563716][T30774] NILFS (loop2): I/O error reading segment
[ 1059.570037][T30774] NILFS (loop2): error -5 while searching super root
[ 1059.757149][ T3682] usb 1-1: USB disconnect, device number 41
[ 1059.757326][ T3687] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1059.896967][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1059.908353][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1059.918636][ T3683] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1059.927958][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.146755][ T3687] usb 6-1: config 0 has no interfaces?
[ 1060.152253][ T3687] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1060.165892][ T3687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.175752][ T3687] usb 6-1: config 0 descriptor??
16:12:51 executing program 0:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000000000000000700"})

16:12:51 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:51 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc68, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:51 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})
write$hidraw(r0, &(0x7f0000000000)="aa5d578e572d0f7b666afee4d232e36b194563f66193b7d00109d2eab771966edbb6d7709cbc3dc9c4659abb1eb4b65c89b732dbe9fcd40e8a5fd1f8acb5e88495e17622f124081fccf36f8ad6f21328e42bd2f7ab94d71672fa2366c5cba61f3bb52bfd5253d319b647ac9df7d961e6ebc77add3d0796cb8bb712f6f0187583bc885f43d4ff9965f1fd07bf585fded7e8deb5022459a90981e4b41487885abcced6ddc26bd3a5e24e84b095722865f1f555f4fbc65d9cb78c89b649c639549a819fd0db67caa1f6328aaf33541197b5", 0xd0)

[ 1060.306020][T30799] loop2: detected capacity change from 0 to 6
[ 1060.332882][T30799] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1060.343581][T30799] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1060.355948][T30799] NILFS (loop2): mounting unchecked fs
[ 1060.362844][T30799] NILFS (loop2): I/O error reading segment
[ 1060.369180][T30799] NILFS (loop2): error -5 while searching super root
16:12:52 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1060.445292][ T3683] wacom 0003:056A:0331.0147: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1060.494827][T30812] loop2: detected capacity change from 0 to 6
[ 1060.522241][T30812] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1060.533668][T30812] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1060.544578][T30812] NILFS (loop2): mounting unchecked fs
[ 1060.558618][T30812] NILFS (loop2): I/O error reading segment
[ 1060.564713][T30812] NILFS (loop2): error -5 while searching super root
[ 1060.572040][ T3682] usb 5-1: new high-speed USB device number 24 using dummy_hcd
16:12:52 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1060.686443][T30822] loop2: detected capacity change from 0 to 7
[ 1060.737121][T30822] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1060.745937][T30822] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1060.770915][T30822] NILFS (loop2): mounting unchecked fs
[ 1060.783196][T30822] NILFS (loop2): I/O error reading segment
[ 1060.789615][T30822] NILFS (loop2): error -5 while searching super root
[ 1060.898730][ T3736] usb 4-1: USB disconnect, device number 103
[ 1060.986718][ T3682] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1060.997346][ T3682] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1061.006322][ T3682] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1061.016017][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.271661][ T3686] usb 5-1: USB disconnect, device number 24
16:12:53 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000d00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:12:53 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"}) (async, rerun: 32)
write$hidraw(r0, &(0x7f0000000000)="aa5d578e572d0f7b666afee4d232e36b194563f66193b7d00109d2eab771966edbb6d7709cbc3dc9c4659abb1eb4b65c89b732dbe9fcd40e8a5fd1f8acb5e88495e17622f124081fccf36f8ad6f21328e42bd2f7ab94d71672fa2366c5cba61f3bb52bfd5253d319b647ac9df7d961e6ebc77add3d0796cb8bb712f6f0187583bc885f43d4ff9965f1fd07bf585fded7e8deb5022459a90981e4b41487885abcced6ddc26bd3a5e24e84b095722865f1f555f4fbc65d9cb78c89b649c639549a819fd0db67caa1f6328aaf33541197b5", 0xd0) (rerun: 32)

16:12:53 executing program 0:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000000000000000700"})

16:12:53 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1061.419883][T30848] loop2: detected capacity change from 0 to 7
[ 1061.470686][T30848] NILFS (loop2): unable to read secondary superblock (blocksize = 1024)
[ 1061.483353][T30848] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1061.494087][T30848] NILFS (loop2): mounting unchecked fs
[ 1061.500325][T30848] NILFS (loop2): I/O error reading segment
[ 1061.506327][T30848] NILFS (loop2): error -5 while searching super root
[ 1061.746697][ T3736] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1062.116743][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1062.127908][ T3736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1062.137816][ T3736] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1062.147206][ T3736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:12:54 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:54 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1020, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:54 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:54 executing program 0:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000000000000000000000700"})

16:12:54 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})
write$hidraw(r0, &(0x7f0000000000)="aa5d578e572d0f7b666afee4d232e36b194563f66193b7d00109d2eab771966edbb6d7709cbc3dc9c4659abb1eb4b65c89b732dbe9fcd40e8a5fd1f8acb5e88495e17622f124081fccf36f8ad6f21328e42bd2f7ab94d71672fa2366c5cba61f3bb52bfd5253d319b647ac9df7d961e6ebc77add3d0796cb8bb712f6f0187583bc885f43d4ff9965f1fd07bf585fded7e8deb5022459a90981e4b41487885abcced6ddc26bd3a5e24e84b095722865f1f555f4fbc65d9cb78c89b649c639549a819fd0db67caa1f6328aaf33541197b5", 0xd0)

[ 1062.483989][ T3686] usb 6-1: USB disconnect, device number 95
[ 1062.532553][T30875] loop2: detected capacity change from 0 to 8
[ 1062.558124][T30875] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1062.579834][T30875] NILFS (loop2): mounting unchecked fs
[ 1062.588423][T30875] NILFS (loop2): I/O error reading segment
[ 1062.606967][T30875] NILFS (loop2): error -5 while searching super root
16:12:54 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1100, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1062.642192][ T3736] wacom 0003:056A:0331.0148: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1062.719497][T30889] loop2: detected capacity change from 0 to 8
[ 1062.757153][T30889] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1062.778442][T30889] NILFS (loop2): mounting unchecked fs
[ 1062.784369][T30889] NILFS (loop2): I/O error reading segment
[ 1062.796889][T30889] NILFS (loop2): error -5 while searching super root
[ 1062.806965][ T3683] usb 5-1: new high-speed USB device number 25 using dummy_hcd
16:12:54 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1200, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1062.902682][T30900] loop2: detected capacity change from 0 to 9
[ 1062.916360][T30900] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1062.929818][T30900] NILFS (loop2): mounting unchecked fs
[ 1062.940884][T30900] NILFS (loop2): invalid segment: Magic number mismatch
[ 1062.948786][T30900] NILFS (loop2): unable to fall back to spare super block
[ 1062.956093][T30900] NILFS (loop2): error -22 while searching super root
16:12:54 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1800, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1063.006833][ T3686] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1063.084958][T30907] loop2: detected capacity change from 0 to 12
[ 1063.106462][ T3679] usb 4-1: USB disconnect, device number 104
[ 1063.120882][T30907] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1063.158943][T30907] NILFS (loop2): mounting unchecked fs
[ 1063.165044][T30907] NILFS (loop2): invalid segment: Magic number mismatch
[ 1063.172635][T30907] NILFS (loop2): unable to fall back to spare super block
[ 1063.183212][T30907] NILFS (loop2): error -22 while searching super root
[ 1063.236903][ T3683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1063.254859][ T3683] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1063.276271][ T3683] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1063.299053][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.436933][ T3686] usb 6-1: config 0 has no interfaces?
[ 1063.442460][ T3686] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1063.452296][ T3686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.462862][ T3686] usb 6-1: config 0 descriptor??
[ 1063.550744][ T3683] usb 5-1: USB disconnect, device number 25
16:12:55 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000e00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:12:55 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000))
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})
r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc2})
read$hidraw(r1, &(0x7f0000000040)=""/98, 0x62)

16:12:55 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000b00"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:12:55 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1e00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1063.637589][T30934] loop2: detected capacity change from 0 to 15
[ 1063.676697][T30934] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1063.701049][T30934] NILFS (loop2): mounting unchecked fs
[ 1063.710016][T30934] NILFS (loop2): invalid segment: Magic number mismatch
[ 1063.720959][T30934] NILFS (loop2): unable to fall back to spare super block
[ 1063.729567][T30934] NILFS (loop2): error -22 while searching super root
[ 1063.896616][T13502] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1063.956802][ T3687] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1064.256728][T13502] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1064.268005][T13502] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1064.278280][T13502] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1064.287748][T13502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.316873][ T3687] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1064.328323][ T3687] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1064.342506][ T3687] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1064.352521][ T3687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.786941][T13502] wacom 0003:056A:0331.0149: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0
[ 1064.840340][ T3687] wacom 0003:056A:0331.014A: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1065.260688][T13502] usb 1-1: USB disconnect, device number 42
16:12:57 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:57 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:57 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:12:57 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) (async, rerun: 32)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"}) (rerun: 32)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc2})
read$hidraw(r1, &(0x7f0000000040)=""/98, 0x62)

[ 1065.555394][T13502] usb 6-1: USB disconnect, device number 96
[ 1065.602549][T30984] loop2: detected capacity change from 0 to 16
[ 1065.645934][T30984] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1065.657892][T30984] NILFS (loop2): mounting unchecked fs
[ 1065.663944][T30984] NILFS (loop2): invalid segment: Magic number mismatch
[ 1065.671401][T30984] NILFS (loop2): unable to fall back to spare super block
[ 1065.679500][T30984] NILFS (loop2): error -22 while searching super root
16:12:57 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2010, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:57 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1065.819724][T30995] loop2: detected capacity change from 0 to 16
[ 1065.841765][T30995] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1065.856722][ T3683] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1065.862680][T30995] NILFS (loop2): mounting unchecked fs
16:12:57 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2100, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1065.871070][T30995] NILFS (loop2): invalid segment: Magic number mismatch
[ 1065.880229][T30995] NILFS (loop2): unable to fall back to spare super block
[ 1065.888343][T30995] NILFS (loop2): error -22 while searching super root
[ 1065.994391][T31005] loop2: detected capacity change from 0 to 16
[ 1065.996803][T13502] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1066.013778][T31005] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1066.025140][T31005] NILFS (loop2): mounting unchecked fs
[ 1066.031773][T31005] NILFS (loop2): invalid segment: Magic number mismatch
[ 1066.040481][T31005] NILFS (loop2): unable to fall back to spare super block
[ 1066.048630][T31005] NILFS (loop2): error -22 while searching super root
16:12:57 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) (async)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"}) (async)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc2})
read$hidraw(r1, &(0x7f0000000040)=""/98, 0x62)

[ 1066.106743][ T3687] usb 4-1: reset high-speed USB device number 105 using dummy_hcd
[ 1066.126798][  T144] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1066.236722][ T3683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1066.247114][ T3683] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1066.256304][ T3683] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1066.266246][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.366747][T13502] usb 6-1: config 0 has no interfaces?
[ 1066.372317][T13502] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1066.382504][T13502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.394255][T13502] usb 6-1: config 0 descriptor??
[ 1066.496917][  T144] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1066.507356][  T144] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1066.516423][  T144] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1066.525949][  T144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.538379][ T3683] usb 5-1: USB disconnect, device number 26
16:12:58 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b001000"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

16:12:58 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2400, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:12:58 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f0000000000)={0xb, "c707216c514f33c44d4927cf0100ac229ab23af0d5f1a64a8cdb9170aa20c660f74973d1ac1d8d19ce00023b0800010000ff0100000000001000000000001000"})

[ 1066.666459][T31027] loop2: detected capacity change from 0 to 18
[ 1066.707063][T31027] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1066.749551][T31027] NILFS (loop2): mounting unchecked fs
[ 1066.762697][T31027] NILFS (loop2): invalid segment: Magic number mismatch
[ 1066.770447][T31027] NILFS (loop2): unable to fall back to spare super block
[ 1066.778752][T31027] NILFS (loop2): error -22 while searching super root
16:12:58 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2500, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1066.862897][T31041] loop2: detected capacity change from 0 to 18
[ 1066.877498][T31041] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1066.888266][T31041] NILFS (loop2): mounting unchecked fs
[ 1066.894260][T31041] NILFS (loop2): invalid segment: Magic number mismatch
[ 1066.902357][T31041] NILFS (loop2): unable to fall back to spare super block
[ 1066.910085][T31041] NILFS (loop2): error -22 while searching super root
[ 1067.046811][ T3687] usb 4-1: device descriptor read/64, error -71
[ 1067.316834][ T3687] usb 4-1: reset high-speed USB device number 105 using dummy_hcd
[ 1068.358373][ T3683] usb 4-1: USB disconnect, device number 105
16:13:00 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:13:00 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2a00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:13:00 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x80084803, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:13:00 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f0000000000)={0xb, "c707216c514f33c44d4927cf0100ac229ab23af0d5f1a64a8cdb9170aa20c660f74973d1ac1d8d19ce00023b0800010000ff0100000000001000000000001000"})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f0000000000)={0xb, "c707216c514f33c44d4927cf0100ac229ab23af0d5f1a64a8cdb9170aa20c660f74973d1ac1d8d19ce00023b0800010000ff0100000000001000000000001000"}) (async)

[ 1068.604412][ T3679] usb 6-1: USB disconnect, device number 97
[ 1068.637259][T31064] loop2: detected capacity change from 0 to 21
[ 1068.654886][T31064] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1068.682249][T31064] NILFS (loop2): mounting unchecked fs
[ 1068.706218][T31064] NILFS (loop2): invalid segment: Magic number mismatch
[ 1068.714360][T31064] NILFS (loop2): unable to fall back to spare super block
[ 1068.721864][T31064] NILFS (loop2): error -22 while searching super root
16:13:00 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:13:00 executing program 0:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000700"})

[ 1068.815533][T31081] loop2: detected capacity change from 0 to 24
[ 1068.836011][T31081] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1068.853848][ T3687] usb 1-1: USB disconnect, device number 43
16:13:00 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b001100"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1068.887557][T31081] NILFS (loop2): mounting unchecked fs
[ 1068.893310][T31081] NILFS (loop2): invalid segment: Magic number mismatch
[ 1068.896870][ T3683] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1068.947603][T31081] NILFS (loop2): unable to fall back to spare super block
[ 1068.958113][T31081] NILFS (loop2): error -22 while searching super root
16:13:00 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3600, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1069.076293][T31097] loop2: detected capacity change from 0 to 27
[ 1069.092134][T31097] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1069.105319][T31097] NILFS (loop2): mounting unchecked fs
[ 1069.106841][ T3679] usb 6-1: new high-speed USB device number 98 using dummy_hcd
16:13:00 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f0000000000)={0xb, "c707216c514f33c44d4927cf0100ac229ab23af0d5f1a64a8cdb9170aa20c660f74973d1ac1d8d19ce00023b0800010000ff0100000000001000000000001000"})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f0000000000)={0xb, "c707216c514f33c44d4927cf0100ac229ab23af0d5f1a64a8cdb9170aa20c660f74973d1ac1d8d19ce00023b0800010000ff0100000000001000000000001000"}) (async)

[ 1069.122287][T31097] NILFS (loop2): invalid segment: Magic number mismatch
[ 1069.140474][T31097] NILFS (loop2): unable to fall back to spare super block
[ 1069.155711][T31097] NILFS (loop2): error -22 while searching super root
16:13:00 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1069.226885][ T3684] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1069.274030][T31109] loop2: detected capacity change from 0 to 31
[ 1069.277093][ T3683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.294483][T31109] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1069.297665][ T3683] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1069.316355][T31109] NILFS (loop2): mounting unchecked fs
[ 1069.331384][T31109] NILFS (loop2): invalid segment: Magic number mismatch
[ 1069.334853][ T3683] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1069.350544][T31109] NILFS (loop2): unable to fall back to spare super block
[ 1069.358079][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.375822][T31109] NILFS (loop2): error -22 while searching super root
16:13:01 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:13:01 executing program 0:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000700"})

[ 1069.482261][ T3679] usb 6-1: config 0 has no interfaces?
[ 1069.489834][ T3679] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1069.529738][ T3679] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.543857][ T3679] usb 6-1: config 0 descriptor??
[ 1069.555496][T31122] loop2: detected capacity change from 0 to 32
[ 1069.579154][T31122] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1069.586830][ T3684] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1069.614841][ T3687] usb 5-1: USB disconnect, device number 27
[ 1069.615167][T31122] NILFS (loop2): mounting unchecked fs
[ 1069.621037][T31122] NILFS (loop2): invalid segment: Magic number mismatch
[ 1069.644071][T31122] NILFS (loop2): unable to fall back to spare super block
[ 1069.645860][ T3684] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1069.653475][T31122] NILFS (loop2): error -22 while searching super root
[ 1069.673698][ T3684] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1069.683309][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.173631][ T3684] wacom 0003:056A:0331.014B: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1070.638803][ T3684] usb 4-1: USB disconnect, device number 106
16:13:03 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:13:03 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4100, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:13:03 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000000)={0x40, 0x11, 0xf2, {0xf2, 0x2, "8919b4b26a12f72baa40622d82a93bfb1c76273c4cab72c20136358e1c224e7504bfd09bcca0eb85ba8b6ae7392ab1faf67148f0c2701d208a74e08828eba034de054dbbafda5ee3ff40ccd46b5a2c15b6e3d7a2165e26b28e14e2d3e9234ced716cca96847c293206e485dc2650557b73a2957b758d625c324bd8a48923441dc5ea3df89c8a26b1f3ff8d20aeb3872e036cefb22e16f7e2ae1d89b90e299f1a97549326ec370600000000000000afb292a086631f4f11e5c285a4ffffffffffffffff19581b69518eaa28ea2088250d5d1f00004496650a33df04a3053bf668b4b5d3abba250f552b0c5fd9f777a2d0"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000140)={0x1c, &(0x7f0000000440)={0x40, 0x10, 0x58, "600906d5a274d3409f2264b5523591437476794bd5f6b491ab01096c38f43ea2928d8a995cf5c69648e243c09f155a7af81193f9d32c254ce887c30db99bec72f75f46b447214839e8ab8bc5957615831cc49b017176b8c6"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}})
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:13:03 executing program 0:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b000000000000000700"})

16:13:03 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, 0x0)

16:13:03 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b001200"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1071.688951][ T3682] usb 6-1: USB disconnect, device number 98
[ 1071.742754][T31167] loop2: detected capacity change from 0 to 32
[ 1071.771400][T31167] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1071.795603][T31167] NILFS (loop2): mounting unchecked fs
[ 1071.801561][T31167] NILFS (loop2): invalid segment: Magic number mismatch
[ 1071.809710][T31167] NILFS (loop2): unable to fall back to spare super block
[ 1071.818818][T31167] NILFS (loop2): error -22 while searching super root
16:13:03 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4800, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1071.971345][T31179] loop2: detected capacity change from 0 to 36
[ 1071.992366][T31179] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1072.002499][ T3736] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1072.010261][ T3687] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1072.017332][T31179] NILFS (loop2): mounting unchecked fs
[ 1072.025373][T31179] NILFS (loop2): invalid segment: Magic number mismatch
[ 1072.033060][T31179] NILFS (loop2): unable to fall back to spare super block
[ 1072.040829][T31179] NILFS (loop2): error -22 while searching super root
16:13:03 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1072.157855][T31186] loop2: detected capacity change from 0 to 38
[ 1072.174726][T31186] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1072.186697][ T3682] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1072.191293][T31186] NILFS (loop2): mounting unchecked fs
[ 1072.200868][T31186] NILFS (loop2): invalid segment: Magic number mismatch
16:13:03 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000000)={0x40, 0x11, 0xf2, {0xf2, 0x2, "8919b4b26a12f72baa40622d82a93bfb1c76273c4cab72c20136358e1c224e7504bfd09bcca0eb85ba8b6ae7392ab1faf67148f0c2701d208a74e08828eba034de054dbbafda5ee3ff40ccd46b5a2c15b6e3d7a2165e26b28e14e2d3e9234ced716cca96847c293206e485dc2650557b73a2957b758d625c324bd8a48923441dc5ea3df89c8a26b1f3ff8d20aeb3872e036cefb22e16f7e2ae1d89b90e299f1a97549326ec370600000000000000afb292a086631f4f11e5c285a4ffffffffffffffff19581b69518eaa28ea2088250d5d1f00004496650a33df04a3053bf668b4b5d3abba250f552b0c5fd9f777a2d0"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000140)={0x1c, &(0x7f0000000440)={0x40, 0x10, 0x58, "600906d5a274d3409f2264b5523591437476794bd5f6b491ab01096c38f43ea2928d8a995cf5c69648e243c09f155a7af81193f9d32c254ce887c30db99bec72f75f46b447214839e8ab8bc5957615831cc49b017176b8c6"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}})
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:13:03 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x0, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"}) (fail_nth: 1)

[ 1072.208757][T31186] NILFS (loop2): unable to fall back to spare super block
[ 1072.216088][T31186] NILFS (loop2): error -22 while searching super root
16:13:03 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5c00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1072.340107][T31200] loop2: detected capacity change from 0 to 46
[ 1072.360072][T31200] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1072.372137][T31200] NILFS (loop2): mounting unchecked fs
[ 1072.379982][T31200] NILFS (loop2): invalid segment: Magic number mismatch
[ 1072.388496][T31200] NILFS (loop2): unable to fall back to spare super block
[ 1072.395953][T31200] NILFS (loop2): error -22 while searching super root
[ 1072.416880][ T3736] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.427310][ T3687] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1072.439140][ T3736] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1072.448799][ T3687] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1072.458999][ T3736] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1072.468491][ T3687] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1072.478182][ T3736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.486322][ T3687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:13:04 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1072.546802][ T3682] usb 6-1: config 0 has no interfaces?
[ 1072.552434][ T3684] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1072.570178][T31211] loop2: detected capacity change from 0 to 48
[ 1072.570461][ T3682] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1072.591542][T31211] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1072.600471][ T3682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.607682][T31211] NILFS (loop2): mounting unchecked fs
[ 1072.622802][ T3682] usb 6-1: config 0 descriptor??
[ 1072.623439][T31211] NILFS (loop2): invalid segment: Magic number mismatch
[ 1072.647569][T31211] NILFS (loop2): unable to fall back to spare super block
[ 1072.659084][T31211] NILFS (loop2): error -22 while searching super root
[ 1072.763767][ T3682] usb 5-1: USB disconnect, device number 28
[ 1072.946976][ T3684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.957267][ T3684] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1072.971797][ T3684] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1072.981390][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1073.002889][ T3687] wacom 0003:056A:0331.014C: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1073.028965][ T3684] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1073.461502][ T3687] usb 4-1: USB disconnect, device number 107
[ 1073.589698][T31241] FAULT_INJECTION: forcing a failure.
[ 1073.589698][T31241] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1073.603003][T31241] CPU: 1 PID: 31241 Comm: syz-executor.0 Not tainted 5.18.0-rc1-syzkaller-00350-g1862a69c9174 #0
[ 1073.613503][T31241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1073.623572][T31241] Call Trace:
[ 1073.626852][T31241]  <TASK>
[ 1073.629795][T31241]  dump_stack_lvl+0x1e3/0x2cb
[ 1073.634498][T31241]  ? bfq_pos_tree_add_move+0x436/0x436
[ 1073.639972][T31241]  ? panic+0x76e/0x76e
[ 1073.644063][T31241]  ? snprintf+0xd6/0x120
[ 1073.648326][T31241]  should_fail+0x384/0x4b0
[ 1073.652768][T31241]  _copy_to_user+0x2b/0x130
[ 1073.657294][T31241]  simple_read_from_buffer+0xd9/0x160
[ 1073.662692][T31241]  proc_fail_nth_read+0x1af/0x220
[ 1073.667745][T31241]  ? proc_fault_inject_write+0x3a0/0x3a0
[ 1073.673397][T31241]  ? security_file_permission+0x45f/0x5c0
[ 1073.679115][T31241]  ? proc_fault_inject_write+0x3a0/0x3a0
[ 1073.684771][T31241]  vfs_read+0x2ea/0xd10
[ 1073.688949][T31241]  ? __fdget_pos+0x247/0x2e0
[ 1073.693556][T31241]  ? kernel_read+0x1f0/0x1f0
[ 1073.698180][T31241]  ? mutex_lock_nested+0x17/0x20
[ 1073.703137][T31241]  ? __fdget_pos+0x247/0x2e0
[ 1073.707737][T31241]  ? ksys_read+0x77/0x2c0
[ 1073.712082][T31241]  ksys_read+0x19b/0x2c0
[ 1073.716334][T31241]  ? print_irqtrace_events+0x220/0x220
[ 1073.721794][T31241]  ? vfs_write+0xd40/0xd40
[ 1073.726221][T31241]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1073.732203][T31241]  ? syscall_enter_from_user_mode+0x2e/0x1a0
[ 1073.738210][T31241]  do_syscall_64+0x2b/0x70
[ 1073.742640][T31241]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1073.753406][T31241] RIP: 0033:0x7f793083bbfc
[ 1073.757819][T31241] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1073.777438][T31241] RSP: 002b:00007f793198b160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1073.785883][T31241] RAX: ffffffffffffffda RBX: 00007f793099c030 RCX: 00007f793083bbfc
[ 1073.793868][T31241] RDX: 000000000000000f RSI: 00007f793198b1e0 RDI: 0000000000000004
[ 1073.801851][T31241] RBP: 00007f793198b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1073.809816][T31241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1073.817799][T31241] R13: 00007fff9ba46a5f R14: 00007f793198b300 R15: 0000000000022000
[ 1073.825799][T31241]  </TASK>
[ 1073.845382][  T144] usb 1-1: USB disconnect, device number 44
16:13:06 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:13:06 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6201, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

16:13:06 executing program 1:
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000000)={0x40, 0x11, 0xf2, {0xf2, 0x2, "8919b4b26a12f72baa40622d82a93bfb1c76273c4cab72c20136358e1c224e7504bfd09bcca0eb85ba8b6ae7392ab1faf67148f0c2701d208a74e08828eba034de054dbbafda5ee3ff40ccd46b5a2c15b6e3d7a2165e26b28e14e2d3e9234ced716cca96847c293206e485dc2650557b73a2957b758d625c324bd8a48923441dc5ea3df89c8a26b1f3ff8d20aeb3872e036cefb22e16f7e2ae1d89b90e299f1a97549326ec370600000000000000afb292a086631f4f11e5c285a4ffffffffffffffff19581b69518eaa28ea2088250d5d1f00004496650a33df04a3053bf668b4b5d3abba250f552b0c5fd9f777a2d0"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000140)={0x1c, &(0x7f0000000440)={0x40, 0x10, 0x58, "600906d5a274d3409f2264b5523591437476794bd5f6b491ab01096c38f43ea2928d8a995cf5c69648e243c09f155a7af81193f9d32c254ce887c30db99bec72f75f46b447214839e8ab8bc5957615831cc49b017176b8c6"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}}) (async)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:13:06 executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0x80084803, 0x0)

16:13:06 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000101000000090400000103010000"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x80044801, &(0x7f00000004c0)={0x0, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

16:13:06 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc040480b, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b001800"})
syz_usb_control_io$hid(r0, 0x0, 0x0)

[ 1074.791817][ T3682] usb 6-1: USB disconnect, device number 99
[ 1074.830178][T31257] loop2: detected capacity change from 0 to 49
[ 1074.848395][T31257] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1074.864026][T31257] NILFS (loop2): mounting unchecked fs
[ 1074.879759][T31257] NILFS (loop2): invalid segment: Magic number mismatch
[ 1074.899547][T31257] NILFS (loop2): unable to fall back to spare super block
[ 1074.907474][T31257] NILFS (loop2): error -22 while searching super root
16:13:06 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6301, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1074.994207][T31274] loop2: detected capacity change from 0 to 49
[ 1075.028298][T31274] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1075.038853][T31274] NILFS (loop2): mounting unchecked fs
16:13:06 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6401, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1075.044714][T31274] NILFS (loop2): invalid segment: Magic number mismatch
[ 1075.052881][T31274] NILFS (loop2): unable to fall back to spare super block
[ 1075.060289][T31274] NILFS (loop2): error -22 while searching super root
[ 1075.096848][ T3684] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1075.116986][  T144] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1075.124782][ T3736] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1075.156390][T31282] loop2: detected capacity change from 0 to 50
[ 1075.176170][T31282] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1075.189395][T31282] NILFS (loop2): mounting unchecked fs
16:13:06 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6800, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1075.202684][T31282] NILFS (loop2): invalid segment: Magic number mismatch
[ 1075.210239][T31282] NILFS (loop2): unable to fall back to spare super block
[ 1075.218390][T31282] NILFS (loop2): error -22 while searching super root
[ 1075.256685][ T3682] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1075.293312][T31288] loop2: detected capacity change from 0 to 52
16:13:07 executing program 1:
r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc2})
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0x5452, &(0x7f00000004c0)={0x3, "c707216c514f33c44d4927cf010000229ab23af0d5f1a64a8cdb9170aa00c660f7497351ac1d8d11cef8013b00"})

[ 1075.322414][T31288] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1075.386255][T31288] NILFS (loop2): mounting unchecked fs
[ 1075.408415][T31288] NILFS (loop2): invalid segment: Magic number mismatch
[ 1075.415514][T31288] NILFS (loop2): unable to fall back to spare super block
[ 1075.423274][T31288] NILFS (loop2): error -22 while searching super root
16:13:07 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x680c, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1075.456752][ T3684] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1075.467051][ T3684] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 1075.476006][ T3684] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1075.485204][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.547762][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1075.558995][ T3736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1075.578799][ T3736] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1075.580863][T31301] loop2: detected capacity change from 0 to 52
[ 1075.592765][  T144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1075.609948][ T3736] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1075.619628][  T144] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1075.629296][ T3736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.637955][  T144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.640800][ T3682] usb 6-1: config 0 has no interfaces?
[ 1075.664838][ T3682] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40
[ 1075.675741][T31301] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1075.684532][ T3682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
16:13:07 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6c00, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a7934171308d3000000003f00000000000000000010000000000004000000000000001000000005000000010000000000000004000000000000000000000000000000e003000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c000100053b0c0d949ee453ea072891e4b77bc60", 0xa8, 0x400}, {&(0x7f0000010100)="000000000000000001", 0x9, 0x500}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@order_strict}, {@discard}]})

[ 1075.687767][ T3736] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1075.709286][T31301] NILFS (loop2): mounting unchecked fs
[ 1075.717833][T31301] NILFS (loop2): invalid segment: Magic number mismatch
[ 1075.725154][T31301] NILFS (loop2): unable to fall back to spare super block
[ 1075.733028][T31301] NILFS (loop2): error -22 while searching super root
[ 1075.738925][ T3682] usb 6-1: config 0 descriptor??
[ 1075.771847][ T3679] usb 5-1: USB disconnect, device number 29
[ 1075.828325][T31316] loop2: detected capacity change from 0 to 54
[ 1075.859921][T31316] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1075.888758][T31316] NILFS (loop2): mounting unchecked fs
[ 1075.894408][T31316] NILFS (loop2): invalid segment: Magic number mismatch
[ 1075.902418][T31316] NILFS (loop2): unable to fall back to spare super block
[ 1075.910882][T31316] NILFS (loop2): error -22 while searching super root
[ 1076.132778][  T144] wacom 0003:056A:0331.014D: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[ 1076.601318][  T144] usb 4-1: USB disconnect, device number 108
[ 1077.818403][  T144] usb 1-1: USB disconnect, device number 45