program: syz_usb_connect_ath9k(0x3, 0x4a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e444, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r0 = syz_usb_connect_ath9k(0x3, 0x4a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e444, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0}) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x1000000, &(0x7f0000000100)={[{@errors_continue}, {@erasure_code}, {@usrquota}], [{@subj_type={'subj_type', 0x3d, '$'}}, {@obj_type={'obj_type', 0x3d, '(\xaa)#!'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_user={'subj_user', 0x3d, '=6\xaa\xfb\xec@S\x14\xba\xdf\xdbrk\"\xf7\xf5\x1a\xe0!\xdcn\x1b\x7f\x17\xe9\x89s\")\xf57|5H\xcf3\x98\xa4\xd6&Z\x1ac\xfd\xff\xd8\x90\x11\xcaL\x1cr\x01\xc2\xb5\a\xd1R\x93E\x9d\xd2\t\t\xe5\an\xcd\f\xf6C\xc2*,\x17H-jz '}}, {@subj_user={'subj_user', 0x3d, 'mr\x1a\xb0#\x1e\xa1\xdd\xbdntinue'}}, {@subj_role={'subj_role', 0x3d, '[+%}'}}, {@dont_measure}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'mr\x1a\xb0#\x1e\xa1\xdd\xbdntinue'}}]}, 0x1, 0x5900, &(0x7f0000005940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f0000000240)='./file0\x00') lchown(&(0x7f00000014c0)='./file0\x00', r2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000080)=@filename='./file0\x00', r2, 0x0) [ 86.300386][ T5303] Bluetooth: hci0: command tx timeout [ 86.369779][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.373547][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.446602][ T57] cfg80211: failed to load regulatory.db [ 86.576906][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.728678][ T10] usb 5-1: too many configurations: 68, using maximum allowed: 8 [ 86.735543][ T10] usb 5-1: config index 0 descriptor too short (expected 72, got 56) [ 86.739652][ T10] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 86.743648][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.750621][ T10] usb 5-1: config index 1 descriptor too short (expected 72, got 56) [ 86.754202][ T10] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 86.760198][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.767009][ T10] usb 5-1: config index 2 descriptor too short (expected 72, got 56) [ 86.770834][ T10] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 86.775237][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.783618][ T10] usb 5-1: config index 3 descriptor too short (expected 72, got 56) [ 86.787521][ T10] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 86.792678][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.800748][ T10] usb 5-1: config index 4 descriptor too short (expected 72, got 56) [ 86.804311][ T10] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 86.811339][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.819419][ T10] usb 5-1: config index 5 descriptor too short (expected 72, got 56) [ 86.822781][ T10] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 86.827954][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.834644][ T10] usb 5-1: config index 6 descriptor too short (expected 72, got 56) [ 86.839866][ T10] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 86.844503][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.851867][ T10] usb 5-1: config index 7 descriptor too short (expected 72, got 56) [ 86.855459][ T10] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 86.861131][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.870460][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.873942][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.878093][ T10] usb 5-1: Product: syz [ 86.879941][ T10] usb 5-1: Manufacturer: syz [ 86.881855][ T10] usb 5-1: SerialNumber: syz [ 86.901350][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 86.923642][ T5311] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 87.480813][ T5319] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.067564][ T5311] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 88.070735][ T5311] ath9k_htc: Failed to initialize the device [ 88.311132][ T5311] usb 5-1: ath9k_htc: USB layer deinitialized [ 88.357737][ T5303] Bluetooth: hci0: command tx timeout [ 88.508804][ T5318] loop0: detected capacity change from 0 to 32768 [ 88.731801][ T5318] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 88.774342][ T5318] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,usrquota,nojournal_transaction_names [ 88.774342][ T5318] allowing incompatible features above 0.0: (unknown version) [ 88.788186][ T5318] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad size, fixing [ 88.794530][ T5318] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 88.798360][ T5318] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 88.798360][ T5318] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 88.820175][ T5318] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 88.824749][ T5318] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree snapshots level 0/0 [ 88.824764][ T5318] u64s 11 type btree_ptr_v2 18446742987082825727:U64_MAX:U32_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 88.824773][ T5318] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: [ 88.842643][ T5318] bcachefs (loop0): flagging btree snapshots lost data [ 88.845404][ T5318] bcachefs (loop0): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 88.851166][ T5318] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 88.856413][ T5318] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 88.864124][ T5318] bcachefs (loop0): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 88.879347][ T5318] bcachefs (loop0): scan_for_btree_nodes... [ 88.881198][ T5318] bcachefs (loop0): btree node scan found 3 nodes after overwrites [ 88.888190][ T5318] done [ 88.889921][ T5318] bcachefs (loop0): check_topology... [ 88.891414][ T5318] bcachefs (loop0): btree root snapshots unreadable, must recover from scan [ 88.898594][ T5318] bcachefs (loop0): no nodes found for btree snapshots, continuing [ 88.901911][ T5318] done [ 88.903638][ T5318] bcachefs (loop0): accounting_read... done [ 88.908438][ T5318] bcachefs (loop0): alloc_read... done [ 88.910779][ T5318] bcachefs (loop0): snapshots_read... [ 88.911671][ T5318] bcachefs (loop0): running explicit recovery pass reconstruct_snapshots (21), currently at snapshots_read (7) [ 88.919008][ T5318] done [ 88.920196][ T5318] bcachefs (loop0): check_allocations... [ 88.922530][ T5318] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 88.922544][ T5318] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 88.941430][ T5318] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 88.941443][ T5318] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 88.952757][ T5318] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 88.952770][ T5318] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 88.963659][ T5318] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 88.963671][ T5318] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 88.976316][ T5318] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 88.976329][ T5318] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 88.988501][ T5318] bcachefs (loop0): bucket 0:32 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 88.992493][ T5318] bcachefs (loop0): bucket 0:32 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 89.002510][ T5318] done [ 89.007892][ T5318] bcachefs (loop0): going read-write [ 89.014956][ T5318] bcachefs (loop0): journal_replay... done [ 89.050274][ T5318] bcachefs (loop0): check_lrus... done [ 89.053605][ T5318] bcachefs (loop0): check_backpointers_to_extents... done [ 89.059317][ T5318] bcachefs (loop0): check_extents_to_backpointers... [ 89.060793][ T5318] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets [ 89.070146][ T5318] done [ 89.072285][ T5318] bcachefs (loop0): reconstruct_snapshots... [ 89.072762][ T5318] bcachefs (loop0): snapshot node 4294905343 from tree 4294905343 missing, recreating [ 89.114696][ T5318] bcachefs (loop0): snapshot node 4294967295 from tree 4294967295 missing, recreating [ 89.121562][ T5318] done [ 89.123726][ T5318] bcachefs (loop0): check_inodes... done [ 89.128829][ T5318] bcachefs (loop0): resume_logged_ops... done [ 89.131470][ T5318] bcachefs (loop0): delete_dead_inodes... done [ 89.139868][ T5318] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 89.143680][ T5318] bcachefs (loop0): check_lrus... done [ 89.147714][ T5318] bcachefs (loop0): check_backpointers_to_extents... done [ 89.151503][ T5318] bcachefs (loop0): check_extents_to_backpointers... done [ 89.155164][ T5318] bcachefs (loop0): reconstruct_snapshots... done [ 89.158677][ T5318] bcachefs (loop0): check_inodes... done [ 89.161272][ T5318] bcachefs (loop0): resume_logged_ops... done [ 89.163811][ T5318] bcachefs (loop0): delete_dead_inodes... done [ 89.166492][ T5318] bcachefs (loop0): reading quotas [ 89.170034][ T5318] bcachefs (loop0): quotas done [ 89.173990][ T5318] bcachefs (loop0): done starting filesystem [ 89.210998][ T5318] ------------[ cut here ]------------ [ 89.213369][ T5318] kernel BUG at fs/bcachefs/quota.c:319! [ 89.216214][ T5318] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 89.218900][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 89.222883][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.227191][ T5318] RIP: 0010:bch2_quota_transfer+0xa29/0xa50 [ 89.229612][ T5318] Code: ff ff 89 f9 80 e1 07 38 c1 0f 8c 72 f7 ff ff 48 89 d3 e8 ca eb dd fd 48 89 da e9 62 f7 ff ff e8 cd 4d 12 07 e8 b8 f7 7b fd 90 <0f> 0b e8 b0 f7 7b fd 90 0f 0b e8 a8 f7 7b fd 90 0f 0b e8 a0 f7 7b [ 89.237637][ T5318] RSP: 0018:ffffc9000d11f6a0 EFLAGS: 00010293 [ 89.240146][ T5318] RAX: ffffffff8443d898 RBX: 0000000000000000 RCX: ffff88801efd2440 [ 89.243376][ T5318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.246670][ T5318] RBP: ffffc9000d11f850 R08: 0000000000000001 R09: 0000000000000001 [ 89.249979][ T5318] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000 [ 89.253210][ T5318] R13: ffff888051560c28 R14: 1ffff1100a3c0e32 R15: dffffc0000000000 [ 89.256540][ T5318] FS: 00007f7903cbd6c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 89.260260][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.262939][ T5318] CR2: 00002000000014c0 CR3: 000000003db62000 CR4: 0000000000352ef0 [ 89.266269][ T5318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.269517][ T5318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.272732][ T5318] Call Trace: [ 89.274111][ T5318] [ 89.275434][ T5318] ? __pfx_bch2_quota_transfer+0x10/0x10 [ 89.277797][ T5318] ? rcu_is_watching+0x15/0xb0 [ 89.279843][ T5318] ? bch2_fs_quota_transfer+0x1c0/0x4f0 [ 89.282210][ T5318] ? __bch2_bkey_get_val_typed+0x130/0x390 [ 89.284695][ T5318] ? bch2_setattr_nonsize+0x12c/0x10e0 [ 89.287029][ T5318] ? __pfx___mutex_lock+0x10/0x10 [ 89.289159][ T5318] bch2_fs_quota_transfer+0x27d/0x4f0 [ 89.291494][ T5318] bch2_setattr_nonsize+0x3a6/0x10e0 [ 89.293693][ T5318] ? bch2_trans_unlock+0x333/0x4b0 [ 89.295894][ T5318] ? bch2_trans_put+0x8bf/0x10a0 [ 89.297899][ T5318] ? rcu_is_watching+0x15/0xb0 [ 89.299883][ T5318] ? bch2_trans_put+0x8bf/0x10a0 [ 89.301962][ T5318] ? aa_get_newest_label+0xf7/0x5d0 [ 89.304139][ T5318] ? __pfx_bch2_setattr_nonsize+0x10/0x10 [ 89.306423][ T5318] ? __pfx_from_kgid+0x10/0x10 [ 89.308474][ T5318] ? setattr_prepare+0x1e7/0xac0 [ 89.310486][ T5318] ? bch2_setattr+0x186/0x220 [ 89.312505][ T5318] ? __pfx_bch2_setattr+0x10/0x10 [ 89.314561][ T5318] notify_change+0xb33/0xe40 [ 89.316485][ T5318] chown_common+0x3f9/0x5a0 [ 89.318386][ T5318] ? __pfx_chown_common+0x10/0x10 [ 89.320489][ T5318] ? mnt_get_write_access+0x223/0x2a0 [ 89.322646][ T5318] do_fchownat+0x161/0x270 [ 89.324565][ T5318] ? __pfx_do_fchownat+0x10/0x10 [ 89.326692][ T5318] __x64_sys_lchown+0x85/0xa0 [ 89.328668][ T5318] do_syscall_64+0xf6/0x210 [ 89.330521][ T5318] ? clear_bhb_loop+0x45/0xa0 [ 89.332495][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.334852][ T5318] RIP: 0033:0x7f7902d8e969 [ 89.336705][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.344409][ T5318] RSP: 002b:00007f7903cbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 89.347914][ T5318] RAX: ffffffffffffffda RBX: 00007f7902fb5fa0 RCX: 00007f7902d8e969 [ 89.351239][ T5318] RDX: 0000000000000000 RSI: 00000000000041ed RDI: 00002000000014c0 [ 89.354574][ T5318] RBP: 00007f7902e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 89.357845][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.360960][ T5318] R13: 0000000000000000 R14: 00007f7902fb5fa0 R15: 00007ffdf8193068 [ 89.364274][ T5318] [ 89.365574][ T5318] Modules linked in: [ 89.367680][ T5318] ---[ end trace 0000000000000000 ]--- [ 89.375807][ T5318] RIP: 0010:bch2_quota_transfer+0xa29/0xa50 [ 89.378439][ T5318] Code: ff ff 89 f9 80 e1 07 38 c1 0f 8c 72 f7 ff ff 48 89 d3 e8 ca eb dd fd 48 89 da e9 62 f7 ff ff e8 cd 4d 12 07 e8 b8 f7 7b fd 90 <0f> 0b e8 b0 f7 7b fd 90 0f 0b e8 a8 f7 7b fd 90 0f 0b e8 a0 f7 7b [ 89.386400][ T5318] RSP: 0018:ffffc9000d11f6a0 EFLAGS: 00010293 [ 89.389598][ T5318] RAX: ffffffff8443d898 RBX: 0000000000000000 RCX: ffff88801efd2440 [ 89.392931][ T5318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.396268][ T5318] RBP: ffffc9000d11f850 R08: 0000000000000001 R09: 0000000000000001 [ 89.401103][ T5318] R10: dffffc0000000000 R11: fffffbfff1efdb2f R12: 0000000000000000 [ 89.404377][ T5318] R13: ffff888051560c28 R14: 1ffff1100a3c0e32 R15: dffffc0000000000 [ 89.408094][ T5318] FS: 00007f7903cbd6c0(0000) GS:ffff88808d6cb000(0000) knlGS:0000000000000000 [ 89.411749][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.414480][ T5318] CR2: 00002000000014c0 CR3: 000000003db62000 CR4: 0000000000352ef0 [ 89.418106][ T5318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.421445][ T5318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.424793][ T5318] Kernel panic - not syncing: Fatal exception [ 89.427615][ T5318] Kernel Offset: disabled [ 89.429488][ T5318] Rebooting in 86400 seconds..