last executing test programs:

8.639894657s ago: executing program 2 (id=1017):
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000540)={[{@largeio}, {@filestreams}, {@filestreams}, {@prjquota}]}, 0x5, 0xb919, &(0x7f0000000840)="$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")

5.549092823s ago: executing program 2 (id=1037):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e53000905080ee37e"], 0x0)

4.720459311s ago: executing program 0 (id=1044):
syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000180)=ANY=[@ANYBLOB="12015002778e00206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c02060203"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

4.033091453s ago: executing program 4 (id=1052):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x54, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f)

3.888053829s ago: executing program 4 (id=1054):
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)

3.16850684s ago: executing program 3 (id=1055):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xc, 0x4, 0x4, 0x3abe, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

3.08128289s ago: executing program 0 (id=1056):
chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffffff, 0x0)

2.95725808s ago: executing program 2 (id=1057):
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x1200003, &(0x7f00000002c0)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="2c726573697a653d3078303030303030303030303030303030332c713a5774613f726573697a652c7533727130303030303030303000303030303030303030342c736d61636b66736861743d6574002678f9edfbac5d6325f9002c00c9cd79b9b92293ea"], 0xfe, 0x61e4, &(0x7f0000010340)="$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")

2.924144299s ago: executing program 1 (id=1058):
prctl$PR_MCE_KILL(0x3d, 0x0, 0x2)

2.872006293s ago: executing program 3 (id=1059):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x6a, 0xa, 0xff00, 0xf00}, [@call={0x35}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d)

2.87137238s ago: executing program 0 (id=1060):
syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c02"], 0x0)

2.689135681s ago: executing program 1 (id=1061):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000240)={[{@inlinecrypt}, {@grpjquota}, {@bh}, {@dioread_nolock}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f000001c2c0)="$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")

2.67568819s ago: executing program 3 (id=1062):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x18, 0x0, 0xffffffffffffffff, @void, @value}, 0x20)

2.533592678s ago: executing program 3 (id=1063):
syz_usb_connect$cdc_ecm(0x0, 0xf8, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002020000402505a1a44000000001010902e600010100000309040000120206000405240600000524000400c7240f010000000002000000000424130ea72413f9158bc10961908e5346f8cc79c784d41f0fb24a8a6a0dfb66909a5c78e5ed48a1809e0316205bcc48ac3ffd71cd9f7b6bc275c1580f5f855c0781be1a7cff77443465dad05df58b16037ba131cb2a45fda6499751d334cf2a8a680b7999f8cffaf18946afc8bc6edb241bcf92b625a330d12c4f36f950ca9aee45cb60dfda16d7ddee71969f7d9e98389298b45139a81348f230f5e8e7d878eba972100ce94b1a5939d8b0f77984e23835e3e30f09058202000200"], 0x0)

2.474736936s ago: executing program 4 (id=1064):
syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xc9, 0x9d, 0xc5, 0x10, 0x12d6, 0x444, 0x6cde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfc, 0xae, 0xb4}}]}}]}}, 0x0)

2.308564539s ago: executing program 1 (id=1065):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x61, 0x5f, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28)

2.135060177s ago: executing program 1 (id=1066):
socket(0x22, 0x80000, 0x26)

1.966364285s ago: executing program 1 (id=1067):
syz_usb_connect$uac1(0x2, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200ffff03"], 0x0)

1.88126385s ago: executing program 2 (id=1068):
syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x2cc, &(0x7f00000003c0)="$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")

1.629050069s ago: executing program 2 (id=1069):
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3, 0xd5, 0x9c, 0x40, 0x46d, 0xa0e, 0xfc1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x3, 0x10, 0x10, [{{0x9, 0x4, 0xc8, 0x7, 0x0, 0x3}}]}}]}}, 0x0)

1.206803623s ago: executing program 0 (id=1070):
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffdf004fff, 0x0)

1.153099531s ago: executing program 0 (id=1071):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000ffffff7f000000000000000085000000d100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.0810471s ago: executing program 0 (id=1072):
syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000005b80)=ANY=[], 0x1, 0x5b30, &(0x7f0000005b80)="$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")

1.000332991s ago: executing program 3 (id=1073):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x1080c, &(0x7f0000000040)=ANY=[], 0x3, 0xa6a, &(0x7f00000018c0)="$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")

971.05953ms ago: executing program 4 (id=1074):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x80a, &(0x7f0000000480)=ANY=[], 0x1, 0x1d0, &(0x7f0000000280)="$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")

485.572357ms ago: executing program 4 (id=1075):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061108b000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

452.730723ms ago: executing program 1 (id=1076):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e145000905836f"], 0x0)

363.763031ms ago: executing program 3 (id=1077):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x204010, &(0x7f0000000000), 0x6, 0x640, &(0x7f0000000b00)="$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")

321.154938ms ago: executing program 4 (id=1078):
syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000000c0)={[{@no_data_io}, {@grpquota}, {@prjquota}, {@inline_data}, {@journal_flush_disabled}, {@inodes_use_key_cache}, {@journal_transaction_names}, {@inline_data}, {@norecovery}, {@fsck}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, '('}}]}, 0x1, 0x5921, &(0x7f0000008400)="$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")

0s ago: executing program 2 (id=1079):
syz_emit_ethernet(0x4e, &(0x7f0000000a00)={@remote, @remote, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "0200", 0x10, 0x21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, {[], {{0x4e22, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, "82d6fb", 0xcb, "d268ce"}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

oint 0x1 has invalid wMaxPacketSize 0
[  181.169916][  T977] usb 4-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid wMaxPacketSize 0
[  181.192433][  T980] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  181.209615][  T977] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 0
[  181.220362][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.228410][  T980] usb 2-1: Product: syz
[  181.239816][  T977] usb 4-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[  181.255393][  T980] usb 2-1: Manufacturer: syz
[  181.265342][  T980] usb 2-1: SerialNumber: syz
[  181.279622][  T977] usb 4-1: config 0 interface 66 has no altsetting 0
[  181.296636][ T7522] loop2: detected capacity change from 0 to 32768
[  181.304956][  T977] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  181.318858][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.341994][  T977] usb 4-1: Product: syz
[  181.359405][  T977] usb 4-1: Manufacturer: syz
[  181.363683][ T7522] (syz.2.682,7522,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=11, slot=0
[  181.369517][  T977] usb 4-1: SerialNumber: syz
[  181.378224][ T7522] (syz.2.682,7522,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  181.385180][   T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 339ms
[  181.390555][ T7522] (syz.2.682,7522,1):ocfs2_mount_volume:1758 ERROR: status = -22
[  181.400973][  T977] usb 4-1: config 0 descriptor??
[  181.411903][ T7514] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  181.424298][   T10] gfs2: fsid=syz:syz.0: jid=0: Done
[  181.432163][  T977] ljca 4-1:0.84: bulk endpoints not found
[  181.438052][ T7490] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  181.452833][ T7522] (syz.2.682,7522,1):ocfs2_fill_super:1177 ERROR: status = -22
[  181.461954][ T5943] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  181.504620][  T980] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  181.533702][  T980] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  181.598817][  T980] usb 2-1: USB disconnect, device number 24
[  181.629848][ T5943] usb 1-1: Using ep0 maxpacket: 32
[  181.640830][  T977] ljca 4-1:0.66: submit rx urb failed: -90
[  181.661413][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  181.663206][  T977] ljca 4-1:0.66: probe with driver ljca failed with error -90
[  181.705137][ T5943] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  181.747471][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  181.760089][  T977] usb 4-1: USB disconnect, device number 27
[  181.785901][ T5943] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  181.806277][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.819936][ T5943] usb 1-1: Product: syz
[  181.826517][ T5943] usb 1-1: Manufacturer: syz
[  181.849197][ T5943] usb 1-1: SerialNumber: syz
[  181.881380][ T5943] usb 1-1: config 0 descriptor??
[  181.898479][ T5943] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  181.989188][ T5943] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12
[  182.039774][ T3587] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  182.115593][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.119570][ T5943] usb 1-1: USB disconnect, device number 22
[  182.239163][ T3587] usb 3-1: Using ep0 maxpacket: 16
[  182.253485][ T7535] loop3: detected capacity change from 0 to 128
[  182.295073][ T3587] usb 3-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice= 0.90
[  182.320026][ T3587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.381045][ T3587] r8152-cfgselector 3-1: Unknown version 0x0000
[  182.387378][ T3587] r8152-cfgselector 3-1: config 0 descriptor??
[  182.413811][ T3587] r8152 3-1:0.0: Expected endpoints are not found
[  182.595772][ T7545] loop1: detected capacity change from 0 to 512
[  182.629631][ T7545] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  182.653269][ T3587] r8152-cfgselector 3-1: USB disconnect, device number 19
[  182.654925][ T7545] EXT4-fs (loop1): invalid journal inode
[  182.686149][ T7545] EXT4-fs (loop1): can't get journal size
[  182.720226][ T7545] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002]
[  182.740228][  T980] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  182.764127][ T7545] System zones: 1-12, 13-13
[  182.801654][ T7545] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.691: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  182.856546][ T7545] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.691: couldn't read orphan inode 15 (err -117)
[  182.894603][ T7545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.920061][  T980] usb 4-1: Using ep0 maxpacket: 16
[  182.936824][  T980] usb 4-1: config 8 has an invalid interface number: 39 but max is 0
[  182.948031][  T980] usb 4-1: config 8 has no interface number 0
[  182.966026][  T980] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  182.985822][  T980] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[  183.007293][  T980] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0
[  183.019313][  T980] usb 4-1: config 8 interface 39 has no altsetting 0
[  183.033331][  T980] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[  183.052855][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.053238][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.077035][  T980] usb 4-1: Product: syz
[  183.081751][  T980] usb 4-1: Manufacturer: syz
[  183.089727][  T980] usb 4-1: SerialNumber: syz
[  183.160419][ T3587] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  183.273549][ T7543] loop4: detected capacity change from 0 to 32768
[  183.289488][ T7543] bcachefs: bch2_fs_parse_param() Error parsing option compression: option_value
[  183.323597][ T3587] usb 1-1: config index 0 descriptor too short (expected 1051, got 27)
[  183.338647][  T980] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -71
[  183.339908][ T3587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  183.348559][  T980] ipheth 4-1:8.39: probe with driver ipheth failed with error -71
[  183.388175][ T3587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  183.416491][  T980] usb 4-1: USB disconnect, device number 28
[  183.453773][ T3587] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9
[  183.463195][   T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  183.481466][ T3587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.499742][ T3587] usb 1-1: Product: syz
[  183.504494][ T3587] usb 1-1: Manufacturer: syz
[  183.509144][ T3587] usb 1-1: SerialNumber: syz
[  183.523261][ T3587] usb 1-1: config 0 descriptor??
[  183.632870][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  183.649404][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  183.664027][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  183.675986][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  183.688841][   T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  183.698994][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.725199][   T24] usb 2-1: Product: syz
[  183.729448][   T24] usb 2-1: Manufacturer: syz
[  183.756595][   T24] usb 2-1: SerialNumber: syz
[  183.771461][ T3587] usb 1-1: USB disconnect, device number 23
[  183.790861][   T24] usb 2-1: config 0 descriptor??
[  183.807202][ T7553] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  183.818791][   T24] usb 2-1: ucan: probing device on interface #0
[  183.830320][   T24] usb 2-1: ucan: invalid endpoint configuration
[  183.843235][   T24] usb 2-1: ucan: probe failed; try to update the device firmware
[  184.070454][ T3587] usb 2-1: USB disconnect, device number 25
[  184.097238][ T7569] loop2: detected capacity change from 0 to 8
[  184.142761][ T7569] SQUASHFS error: xz decompression failed, data probably corrupt
[  184.150787][ T7569] SQUASHFS error: Failed to read block 0x108: -5
[  184.157156][ T7569] SQUASHFS error: Unable to read metadata cache entry [106]
[  184.165798][ T7569] SQUASHFS error: Unable to read inode 0x101f
[  184.472960][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  184.503577][ T7575] loop0: detected capacity change from 0 to 4096
[  184.578394][ T7575] EXT4-fs error (device loop0): ext4_quota_enable:7124: comm syz.0.703: inode #255: comm syz.0.703: iget: illegal inode #
[  184.608550][ T7575] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.703: Bad quota inode: 255, type: 2
[  184.629298][ T7575] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=255). Please run e2fsck to fix.
[  184.646914][ T7575] EXT4-fs (loop0): mount failed
[  184.660174][   T10] usb 5-1: Using ep0 maxpacket: 32
[  184.672484][   T10] usb 5-1: config 238 has an invalid interface number: 67 but max is 0
[  184.713245][   T10] usb 5-1: config 238 has no interface number 0
[  184.719590][   T10] usb 5-1: config 238 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  184.773269][   T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=57.85
[  184.790076][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.810460][   T10] usb 5-1: Product: syz
[  184.814697][   T10] usb 5-1: Manufacturer: syz
[  184.830520][   T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  184.840574][   T10] usb 5-1: SerialNumber: syz
[  184.868305][ T7571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  184.891490][ T7584] loop1: detected capacity change from 0 to 1024
[  184.897063][ T7567] loop3: detected capacity change from 0 to 32768
[  184.919805][   T10] keyspan 5-1:238.67: Keyspan 1 port adapter converter detected
[  184.947293][ T7567] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.701 (7567)
[  184.957543][   T10] keyspan 5-1:238.67: found no endpoint descriptor for endpoint 84
[  184.973447][ T7584] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  184.978145][ T7567] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  185.013376][   T10] keyspan 5-1:238.67: found no endpoint descriptor for endpoint 81
[  185.025309][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  185.026208][   T10] keyspan 5-1:238.67: found no endpoint descriptor for endpoint 82
[  185.051001][   T10] keyspan 5-1:238.67: found no endpoint descriptor for endpoint 1
[  185.059116][   T10] keyspan 5-1:238.67: found no endpoint descriptor for endpoint 83
[  185.061471][ T7584] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 2: comm syz.1.708: lblock 2 mapped to illegal pblock 2 (length 1)
[  185.067968][   T10] keyspan 5-1:238.67: found no endpoint descriptor for endpoint 3
[  185.090105][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  185.093430][   T10] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  185.099953][ T7567] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  185.131411][   T10] usb 5-1: USB disconnect, device number 18
[  185.146639][   T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  185.159795][   T10] keyspan 5-1:238.67: device disconnected
[  185.173580][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  185.196540][ T7584] Quota error (device loop1): write_blk: dquota write failed
[  185.217855][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  185.240385][ T7584] Quota error (device loop1): find_free_dqentry: Can't write quota data block 2
[  185.270372][ T7584] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  185.302300][   T24] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  185.331080][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.341212][ T7584] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.708: Failed to acquire dquot type 0
[  185.368463][ T7584] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.708: lblock 2 mapped to illegal pblock 2 (length 1)
[  185.368859][   T24] usb 3-1: Product: syz
[  185.414054][ T7584] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  185.433025][   T24] usb 3-1: Manufacturer: syz
[  185.442623][ T7584] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.708: Failed to acquire dquot type 0
[  185.446995][ T7567] BTRFS info (device loop3): rebuilding free space tree
[  185.470197][   T24] usb 3-1: SerialNumber: syz
[  185.491441][ T7584] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.708: Freeing blocks not in datazone - block = 0, count = 4096
[  185.506139][   T24] usb 3-1: config 0 descriptor??
[  185.548318][   T24] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  185.573567][ T7584] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.708: lblock 2 mapped to illegal pblock 2 (length 1)
[  185.581223][   T24] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card
[  185.598522][   T24] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90
[  185.614810][ T7584] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  185.641112][ T7567] BTRFS info (device loop3): disabling free space tree
[  185.650446][ T7584] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.708: Failed to acquire dquot type 0
[  185.669224][ T7567] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  185.698403][ T7584] EXT4-fs (loop1): 1 orphan inode deleted
[  185.700738][ T7567] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  185.741337][ T7584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.843361][   T10] usb 3-1: USB disconnect, device number 20
[  185.883859][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.948558][ T5838] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  186.092710][  T980] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  186.142653][ T7612] loop4: detected capacity change from 0 to 4096
[  186.162414][ T7612] ntfs3(loop4): ino=2, mi_enum_attr
[  186.173932][ T7612] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  186.199511][ T7612] ntfs3(loop4): Failed to load $LogFile (-22).
[  186.298371][  T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  186.322024][  T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  186.341568][  T980] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  186.376019][   T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  186.400324][  T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.444127][  T980] usb 1-1: config 0 descriptor??
[  186.560422][   T10] usb 2-1: Using ep0 maxpacket: 16
[  186.574239][   T10] usb 2-1: config 8 has an invalid interface number: 206 but max is 0
[  186.588196][ T7624] loop4: detected capacity change from 0 to 512
[  186.594957][   T10] usb 2-1: config 8 has no interface number 0
[  186.601738][   T10] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  186.614326][   T10] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  186.626206][   T10] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  186.639715][   T10] usb 2-1: config 8 interface 206 has no altsetting 0
[  186.663002][   T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  186.683024][  T980] ath6kl: Failed to submit usb control message: -71
[  186.689740][  T980] ath6kl: unable to send the bmi data to the device: -71
[  186.697010][ T7624] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  186.706577][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.731648][   T10] usb 2-1: Product: syz
[  186.735895][   T10] usb 2-1: Manufacturer: syz
[  186.756206][  T980] ath6kl: Unable to send get target info: -71
[  186.763539][   T10] usb 2-1: SerialNumber: syz
[  186.771643][  T980] ath6kl: Failed to init ath6kl core: -71
[  186.779664][ T7624] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended
[  186.805259][  T980] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  186.856620][ T7624] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.721: inode #15: comm syz.4.721: iget: illegal inode #
[  186.925918][  T980] usb 1-1: USB disconnect, device number 24
[  186.933781][ T7624] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.721: couldn't read orphan inode 15 (err -117)
[  187.003541][ T7624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.032457][   T10] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected
[  187.069029][   T10] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  187.108678][   T10] usb 2-1: USB disconnect, device number 26
[  187.133977][   T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  187.180077][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.187119][   T10] garmin_gps 2-1:8.206: device disconnected
[  187.230468][ T5930] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  187.402788][ T5930] usb 4-1: config 0 has an invalid interface number: 124 but max is 0
[  187.420258][ T5930] usb 4-1: config 0 has no interface number 0
[  187.427342][ T5930] usb 4-1: config 0 interface 124 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  187.443111][ T5930] usb 4-1: config 0 interface 124 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  187.455171][ T5930] usb 4-1: config 0 interface 124 altsetting 0 endpoint 0xD has invalid maxpacket 1552, setting to 64
[  187.472256][ T5930] usb 4-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86
[  187.485509][ T5930] usb 4-1: config 0 interface 124 altsetting 0 endpoint 0x86 has invalid maxpacket 59461, setting to 64
[  187.508270][ T5930] usb 4-1: config 0 interface 124 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  187.539951][ T5930] usb 4-1: New USB device found, idVendor=058f, idProduct=9720, bcdDevice=ec.28
[  187.552249][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.561769][ T5930] usb 4-1: Product: syz
[  187.565985][ T5930] usb 4-1: Manufacturer: syz
[  187.571334][ T5930] usb 4-1: SerialNumber: syz
[  187.580760][ T5930] usb 4-1: config 0 descriptor??
[  187.586743][ T7632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  187.605927][ T7632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  187.613395][   T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  187.625774][ T7632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  187.638257][ T7626] loop2: detected capacity change from 0 to 32768
[  187.656490][ T7626] XFS: noikeep mount option is deprecated.
[  187.711602][ T7626] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.796200][   T24] usb 5-1: Using ep0 maxpacket: 16
[  187.808349][   T24] usb 5-1: config 0 interface 0 altsetting 66 endpoint 0x81 has an invalid bInterval 112, changing to 10
[  187.829047][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  187.845171][   T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  187.856628][ T5930] pl2303 4-1:0.124: required interrupt-in endpoint missing
[  187.871069][ T7650] loop0: detected capacity change from 0 to 64
[  187.907701][ T7650] hfs: get root inode failed
[  187.922186][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.941912][ T5930] usb 4-1: USB disconnect, device number 29
[  187.990910][ T7626] XFS (loop2): Ending clean mount
[  188.031048][   T24] usb 5-1: config 0 descriptor??
[  188.039644][ T7626] XFS (loop2): Quotacheck needed: Please wait.
[  188.184349][ T7626] XFS (loop2): Quotacheck: Done.
[  188.261132][   T24] usb 5-1: string descriptor 0 read error: -71
[  188.271876][   T24] usbhid 5-1:0.0: can't add hid device: -71
[  188.285073][   T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  188.296545][ T5848] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.329237][   T24] usb 5-1: USB disconnect, device number 19
[  188.653828][ T5930] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  188.773552][ T7653] loop1: detected capacity change from 0 to 32768
[  188.822381][ T5930] usb 1-1: Using ep0 maxpacket: 16
[  188.853349][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  188.886617][ T5930] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  188.909374][ T7671] loop4: detected capacity change from 0 to 8
[  188.951324][  T977] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  188.955051][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  189.029845][ T5930] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  189.055508][ T7653] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,fix_errors=ask,norecovery,version_upgrade=incompatible
[  189.055508][ T7653]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  189.100724][  T977] usb 4-1: Using ep0 maxpacket: 16
[  189.101923][ T7653] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  189.116293][ T5930] usb 1-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb
[  189.126043][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.137538][ T5930] usb 1-1: Product: syz
[  189.143573][  T977] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  189.147833][ T7653] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  189.161349][   T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  189.175846][  T977] usb 4-1: config 0 interface 0 has no altsetting 1
[  189.183013][ T5930] usb 1-1: Manufacturer: syz
[  189.192104][ T5930] usb 1-1: SerialNumber: syz
[  189.203372][  T977] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8
[  189.213628][ T5930] usb 1-1: config 0 descriptor??
[  189.228974][ T7653] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  189.228974][ T7653]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  189.236197][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.284666][ T5930] io_ti 1-1:0.0: required endpoints missing
[  189.296697][  T977] usb 4-1: Product: syz
[  189.308384][  T977] usb 4-1: Manufacturer: syz
[  189.320426][  T977] usb 4-1: SerialNumber: syz
[  189.326821][ T7653] bcachefs (loop1): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 1.7: mi_btree_bitmap
[  189.326821][ T7653] 
[  189.370713][   T24] usb 3-1: Using ep0 maxpacket: 8
[  189.370840][  T977] usb 4-1: config 0 descriptor??
[  189.384390][   T24] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  189.434003][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.463343][ T7653] bcachefs (loop1): bcachefs (loop1): error validating btree node at btree alloc level 0/0
[  189.463367][ T7653]     u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  189.463385][ T7653]     node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing
[  189.469246][   T24] usb 3-1: Product: syz
[  189.485317][ T7653] bcachefs (loop1): accounting_read...
[  189.499417][ T5962] usb 1-1: USB disconnect, device number 25
[  189.524130][ T7653]  done
[  189.526952][ T7653] bcachefs (loop1): alloc_read... done
[  189.535129][ T7653] bcachefs (loop1): snapshots_read... done
[  189.552779][   T24] usb 3-1: Manufacturer: syz
[  189.558077][ T7653] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  189.565897][   T24] usb 3-1: SerialNumber: syz
[  189.584615][ T7653] bcachefs (loop1): done starting filesystem
[  189.599201][   T24] usb 3-1: config 0 descriptor??
[  189.613219][   T24] radioshark2 3-1:0.0: Invalid radioSHARK2 device
[  189.629968][   T24] radioshark2 3-1:0.0: probe with driver radioshark2 failed with error -22
[  189.651622][   T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  189.653185][  T980] usb 4-1: USB disconnect, device number 30
[  189.730315][ T5834] bcachefs (loop1): shutting down
[  189.770481][ T5834] bcachefs (loop1): shutdown complete
[  189.818490][  T977] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  189.838333][ T5962] usb 3-1: USB disconnect, device number 21
[  189.980913][  T977] usb 5-1: Using ep0 maxpacket: 32
[  189.993461][  T977] usb 5-1: unable to get BOS descriptor or descriptor too short
[  190.002930][  T977] usb 5-1: config 7 has an invalid interface number: 128 but max is 0
[  190.011290][  T977] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  190.020033][  T977] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  190.030317][  T977] usb 5-1: config 7 has no interface number 0
[  190.036683][  T977] usb 5-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7
[  190.048725][  T977] usb 5-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32
[  190.073765][  T977] usb 5-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11
[  190.091950][  T977] usb 5-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  190.105952][  T977] usb 5-1: config 7 interface 128 has no altsetting 0
[  190.115415][  T977] usb 5-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13
[  190.129499][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.137719][  T977] usb 5-1: Product: syz
[  190.142210][  T977] usb 5-1: Manufacturer: syz
[  190.146828][  T977] usb 5-1: SerialNumber: syz
[  190.159838][ T7681] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  190.351042][   T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  190.412048][  T977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  190.421533][  T977] usb 5-1: MIDIStreaming interface descriptor not found
[  190.515007][   T24] usb 1-1: Using ep0 maxpacket: 32
[  190.515817][  T977] usb 5-1: USB disconnect, device number 20
[  190.581682][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  190.599447][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  190.645156][   T24] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=6d.22
[  190.671007][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.694682][   T24] usb 1-1: Product: syz
[  190.698936][   T24] usb 1-1: Manufacturer: syz
[  190.720824][   T24] usb 1-1: SerialNumber: syz
[  190.741123][   T24] usb 1-1: config 0 descriptor??
[  190.760155][   T24] usbserial_generic 1-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  190.777931][   T24] usbserial_generic 1-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  190.789167][   T24] usbserial_generic 1-1:0.0: generic converter detected
[  190.804074][   T24] usb 1-1: generic converter now attached to ttyUSB0
[  190.980715][   T24] usb 1-1: USB disconnect, device number 26
[  190.987085][ T5962] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  191.020650][   T24] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  191.050594][   T24] usbserial_generic 1-1:0.0: device disconnected
[  191.161554][ T5962] usb 3-1: Using ep0 maxpacket: 8
[  191.173905][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  191.189364][ T7690] loop3: detected capacity change from 0 to 32768
[  191.191194][ T5962] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  191.212393][ T7690] XFS: noikeep mount option is deprecated.
[  191.234328][ T5962] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  191.241257][ T7690] XFS (loop3): invalid logbufs value: 10 [not 2-8]
[  191.255428][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.277909][ T5962] usb 3-1: Product: syz
[  191.291463][ T5962] usb 3-1: Manufacturer: syz
[  191.306578][ T5962] usb 3-1: SerialNumber: syz
[  191.350990][ T5962] usb 3-1: config 0 descriptor??
[  191.638173][ T5962] usb 3-1: USB disconnect, device number 22
[  191.711644][   T30] audit: type=1326 audit(1749540108.992:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.3.752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1f0f8e929 code=0x0
[  191.757966][   T30] audit: type=1326 audit(1749540109.032:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7706 comm="syz.1.762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc77b8e929 code=0x0
[  191.813436][ T7708] loop0: detected capacity change from 0 to 512
[  191.878677][ T7708] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  191.950315][ T7708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  191.966080][ T7708] EXT4-fs (loop0): orphan cleanup on readonly fs
[  191.973397][ T7708] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.751: bg 0: block 361: padding at end of block bitmap is not set
[  192.012893][ T7708] EXT4-fs (loop0): Remounting filesystem read-only
[  192.039011][ T7708] EXT4-fs (loop0): 1 truncate cleaned up
[  192.047600][ T7708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  192.108853][ T7716] loop1: detected capacity change from 0 to 4096
[  192.129400][ T7716] ntfs3(loop1): Primary boot: invalid sectors per cluster 119.
[  192.142424][ T7716] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[  192.257522][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  192.267084][ T5962] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  192.462204][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  192.488502][ T5962] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  192.521995][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  192.551311][ T5962] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  192.581529][ T7697] loop4: detected capacity change from 0 to 40427
[  192.608516][ T7697] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  192.622769][ T5962] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  192.636360][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.640693][ T7697] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  192.653800][  T977] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  192.655560][ T5962] usb 4-1: Product: syz
[  192.675119][ T5962] usb 4-1: Manufacturer: syz
[  192.680883][ T7697] F2FS-fs (loop4): inline encryption not supported
[  192.688849][ T7697] F2FS-fs (loop4): build fault injection rate: 3
[  192.691130][ T5962] usb 4-1: SerialNumber: syz
[  192.710383][ T7697] F2FS-fs (loop4): build fault injection type: 0x6
[  192.723138][ T5962] usb 4-1: config 0 descriptor??
[  192.730450][ T7697] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  192.756789][ T5962] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  192.783265][ T5962] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card
[  192.812240][ T7697] F2FS-fs (loop4): invalid crc value
[  192.820432][ T5962] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90
[  192.846502][  T977] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  192.860937][ T7697] F2FS-fs (loop4): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x45bc/0x6c80
[  192.881133][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  192.905039][ T7697] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12)
[  192.913524][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  192.932679][  T977] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  192.972706][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  193.001176][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  193.029320][  T977] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  193.038922][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.047180][ T5962] usb 4-1: USB disconnect, device number 31
[  193.098702][  T977] usb 3-1: Product: syz
[  193.113635][ T7735] loop1: detected capacity change from 0 to 512
[  193.124446][  T977] usb 3-1: Manufacturer: syz
[  193.129108][  T977] usb 3-1: SerialNumber: syz
[  193.194251][  T977] usb 3-1: config 0 descriptor??
[  193.213486][ T7735] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  193.239525][  T977] iguanair 3-1:0.0: probe with driver iguanair failed with error -12
[  193.276023][ T7735] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  193.325607][ T7735] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.765: Failed to acquire dquot type 1
[  193.373814][ T7735] EXT4-fs (loop1): 1 truncate cleaned up
[  193.417798][ T7735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.478131][ T7735] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.492580][  T977] usb 3-1: USB disconnect, device number 23
[  193.524660][ T7742] loop4: detected capacity change from 0 to 4096
[  193.557047][ T7742] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  193.592128][ T7742] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  193.617166][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.647094][ T7742] ntfs3(loop4): volume is dirty and "force" flag is not set!
[  193.999910][ T7752] loop1: detected capacity change from 0 to 512
[  194.029436][ T7752] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  194.038708][ T7752] EXT4-fs (loop1): orphan cleanup on readonly fs
[  194.052748][ T7752] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present
[  194.061275][   T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  194.063386][ T7752] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  194.080181][ T7752] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.770: Failed to acquire dquot type 1
[  194.119507][ T7752] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.770: bg 0: block 40: padding at end of block bitmap is not set
[  194.135974][ T7752] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  194.155856][ T7752] EXT4-fs (loop1): 1 truncate cleaned up
[  194.171342][ T5943] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  194.203168][ T7752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  194.303395][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc
[  194.320594][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.331031][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.340775][   T10] usb 4-1: config 0 descriptor??
[  194.361477][ T5943] usb 5-1: Using ep0 maxpacket: 8
[  194.379960][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  194.382405][   T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12
[  194.412879][ T5943] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  194.458868][ T5943] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  194.519005][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.540357][ T5943] usb 5-1: Product: syz
[  194.550138][ T7760] loop2: detected capacity change from 0 to 64
[  194.560982][ T5943] usb 5-1: Manufacturer: syz
[  194.565810][ T5192] bcm5974 4-1:0.0: could not read from device
[  194.585583][ T5943] usb 5-1: SerialNumber: syz
[  194.605754][ T7760] hfs: get root inode failed
[  194.611120][ T5192] bcm5974 4-1:0.0: could not read from device
[  194.621094][ T5943] usb 5-1: config 0 descriptor??
[  194.637046][   T10] usb 4-1: USB disconnect, device number 32
[  194.682413][ T7744] loop0: detected capacity change from 0 to 32768
[  194.734345][ T7744] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  194.804676][ T7744] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  194.866069][ T5943] usb 5-1: USB disconnect, device number 21
[  194.872053][ T7744] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  194.879442][  T980] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  194.887174][  T980] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  194.924507][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  194.937293][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  195.062895][ T7769] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  195.096198][ T7765] loop2: detected capacity change from 0 to 4096
[  195.204560][ T7765] ntfs3(loop2): ino=19, mi_enum_attr
[  195.238708][ T7765] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  195.298127][  T980] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 410ms
[  195.335273][  T980] gfs2: fsid=syz:syz.0: jid=0: Done
[  195.352075][ T7744] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  195.613842][ T7781] loop4: detected capacity change from 0 to 8
[  195.668287][ T7783] loop2: detected capacity change from 0 to 512
[  195.680182][ T7781] SQUASHFS error: lzo decompression failed, data probably corrupt
[  195.708062][ T7781] SQUASHFS error: Failed to read block 0x91: -5
[  195.724342][ T7783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  195.744953][ T7781] SQUASHFS error: Unable to read metadata cache entry [8f]
[  195.759829][ T7781] SQUASHFS error: Unable to read inode 0x11f
[  195.769144][  T980] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  195.789327][ T7785] loop1: detected capacity change from 0 to 512
[  195.796746][ T7783] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002]
[  195.831644][ T7785] EXT4-fs: Ignoring removed i_version option
[  195.857571][ T7783] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.782: missing EA_INODE flag
[  195.908586][ T7785] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  195.917952][ T7783] EXT4-fs (loop2): Remounting filesystem read-only
[  195.935854][ T7785] EXT4-fs (loop1): failed to open journal device unknown-block(128,0) -6
[  195.953159][  T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  195.971735][ T7783] EXT4-fs (loop2): 1 orphan inode deleted
[  195.981794][  T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  196.005003][ T7783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.019732][  T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  196.072809][  T980] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  196.111416][  T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.119623][  T980] usb 4-1: Product: syz
[  196.124152][  T980] usb 4-1: Manufacturer: syz
[  196.129034][  T980] usb 4-1: SerialNumber: syz
[  196.145201][  T980] usb 4-1: config 0 descriptor??
[  196.177163][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.360503][ T7789] loop4: detected capacity change from 0 to 4096
[  196.386049][ T7789] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  196.428948][  T980] usb 4-1: USB disconnect, device number 33
[  197.021780][  T980] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  197.141120][ T7793] loop1: detected capacity change from 0 to 32768
[  197.184000][ T7793] XFS: noikeep mount option is deprecated.
[  197.216217][  T980] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  197.251547][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.258308][ T7793] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  197.270130][  T980] usb 1-1: Product: syz
[  197.281137][  T980] usb 1-1: Manufacturer: syz
[  197.294023][  T980] usb 1-1: SerialNumber: syz
[  197.316869][  T980] usb 1-1: config 0 descriptor??
[  197.481919][ T5943] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  197.494863][ T7793] XFS (loop1): Ending clean mount
[  197.515931][ T7799] loop4: detected capacity change from 0 to 32768
[  197.517054][ T7793] XFS (loop1): Quotacheck needed: Please wait.
[  197.550839][  T980] usb 1-1: USB disconnect, device number 27
[  197.579488][ T7823] loop2: detected capacity change from 0 to 1764
[  197.638617][ T7793] XFS (loop1): Quotacheck: Done.
[  197.654279][ T5943] usb 4-1: Using ep0 maxpacket: 16
[  197.689302][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  197.740367][ T5834] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  197.741117][ T5943] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  197.789992][ T7799] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  197.789992][ T7799]   allowing incompatible features above 0.0: (unknown version)
[  197.789992][ T7799]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  197.843561][ T7799] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  197.861322][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.868352][ T7799] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  197.879146][ T7799] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  197.879146][ T7799]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  197.903500][ T7799] bcachefs (loop4): dropping and reconstructing all alloc info
[  197.922511][ T5943] usb 4-1: Product: syz
[  197.926745][ T5943] usb 4-1: Manufacturer: syz
[  197.931526][ T5943] usb 4-1: SerialNumber: syz
[  197.940744][ T7799] bcachefs (loop4): invalid bkey in btree_node btree=extents level=0: u64s 10 type inline_data 4100:0:1761607679 len 8 ver 0: datalen 40: 2f746d702f73797a2d696d61676567656e3931343136303536352f66696c6530
[  197.940772][ T7799]   size greater than offset (8 > 0), deleting
[  198.012819][ T5943] usb 4-1: config 0 descriptor??
[  198.046042][ T7799] bcachefs (loop4): error reading btree root btree=extents level=0: btree_node_read_error, fixing
[  198.139340][ T7799] bcachefs (loop4): check_topology...
[  198.139515][ T7799] bcachefs (loop4): btree root extents unreadable, must recover from scan
[  198.198267][ T7799] bcachefs (loop4): no nodes found for btree extents, continuing
[  198.242259][ T5930] usb 4-1: USB disconnect, device number 34
[  198.273976][ T7799]  done
[  198.276809][ T7799] bcachefs (loop4): accounting_read... done
[  198.302437][ T7799] bcachefs (loop4): alloc_read... done
[  198.308414][ T7799] bcachefs (loop4): snapshots_read... done
[  198.331849][ T7799] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean
[  198.343174][ T7799] bcachefs (loop4): done starting filesystem
[  198.443397][  T977] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  198.449644][   T51] Bluetooth: hci3: Malformed HCI Event
[  198.481929][ T5843] bcachefs (loop4): shutting down
[  198.563369][ T5843] bcachefs (loop4): shutdown complete
[  198.651955][  T977] usb 3-1: config 0 has an invalid interface number: 168 but max is 0
[  198.674206][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.698216][  T977] usb 3-1: config 0 has no interface number 0
[  198.704850][  T977] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  198.781259][  T977] usb 3-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  198.810693][  T977] usb 3-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98
[  198.834409][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.882847][  T977] usb 3-1: config 0 descriptor??
[  198.893502][  T977] HFC-S_USB 3-1:0.168: probe with driver HFC-S_USB failed with error -5
[  198.922041][ T5930] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  199.085177][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  199.104962][ T5943] usb 3-1: USB disconnect, device number 24
[  199.120222][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  199.155315][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  199.195404][ T5930] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  199.207003][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.215319][ T5930] usb 2-1: Product: syz
[  199.219717][ T5930] usb 2-1: Manufacturer: syz
[  199.229843][ T5930] usb 2-1: SerialNumber: syz
[  199.246337][ T5930] usb 2-1: config 0 descriptor??
[  199.282634][ T5962] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  199.452273][ T5962] usb 1-1: Using ep0 maxpacket: 16
[  199.476126][ T5962] usb 1-1: config 0 has an invalid interface number: 174 but max is 0
[  199.518125][ T5962] usb 1-1: config 0 has no interface number 0
[  199.529864][ T5962] usb 1-1: config 0 interface 174 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  199.540270][ T5962] usb 1-1: config 0 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  199.560323][ T5962] usb 1-1: New USB device found, idVendor=045e, idProduct=0433, bcdDevice=5d.bb
[  199.571210][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.608281][ T5962] usb 1-1: Product: syz
[  199.617151][ T5962] usb 1-1: Manufacturer: syz
[  199.631708][ T5962] usb 1-1: SerialNumber: syz
[  199.653700][ T5962] usb 1-1: config 0 descriptor??
[  199.660621][ T7850] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  199.682075][ T7850] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  199.714000][ T5962] ipaq 1-1:0.174: PocketPC PDA converter detected
[  199.721086][ T5962] usb 1-1: active config #0 != 1 ??
[  199.990182][  T977] usb 1-1: USB disconnect, device number 28
[  200.493170][ T7877] loop2: detected capacity change from 0 to 164
[  200.516070][ T7863] loop3: detected capacity change from 0 to 32768
[  200.591695][ T7863] (syz.3.819,7863,0):ocfs2_verify_userspace_stack:858 ERROR: cluster stack passed to mount, but this filesystem does not support it
[  200.635786][ T7863] (syz.3.819,7863,1):ocfs2_fill_super:1177 ERROR: status = -22
[  200.846888][ T7885] loop2: detected capacity change from 0 to 256
[  200.952368][ T7885] exFAT-fs (loop2): failed to load alloc-bitmap
[  200.958688][ T7885] exFAT-fs (loop2): failed to recognize exfat type
[  201.039251][ T7882] loop1: detected capacity change from 0 to 4096
[  201.099156][ T7882] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  201.372690][ T7890] loop3: detected capacity change from 0 to 4096
[  201.380183][ T7890] journal_path: not usable as path
[  201.397155][ T7882] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  201.449800][ T7890] EXT4-fs: error: could not find journal device path
[  202.521702][ T7922] loop2: detected capacity change from 0 to 164
[  202.559407][ T7922] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  202.772891][   T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  202.828525][ T7904] loop0: detected capacity change from 0 to 32768
[  202.868073][ T7904] (syz.0.838,7904,1):ocfs2_verify_volume:2293 ERROR: found superblock with incorrect block size: found 4096, should be 512
[  202.903173][ T7904] (syz.0.838,7904,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  202.912007][ T7904] (syz.0.838,7904,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  202.942813][ T7904] (syz.0.838,7904,0):ocfs2_fill_super:1177 ERROR: status = -22
[  202.985532][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  203.019560][   T24] usb 4-1: config 1 interface 0 has no altsetting 1
[  203.039572][   T24] usb 4-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40
[  203.059865][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.081388][   T24] usb 4-1: Product: syz
[  203.086398][   T24] usb 4-1: Manufacturer: syz
[  203.091143][   T24] usb 4-1: SerialNumber: syz
[  203.162767][ T5962] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  203.332821][ T5962] usb 3-1: Using ep0 maxpacket: 32
[  203.361868][ T5962] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[  203.392489][ T5962] usb 3-1: config 0 has no interface number 0
[  203.398755][ T5962] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  203.403910][ T7937] loop0: detected capacity change from 0 to 1764
[  203.417790][   T24] usb 4-1: USB disconnect, device number 35
[  203.451914][ T5962] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  203.492981][ T5962] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  203.513425][ T5962] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  203.532436][ T5962] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  203.543284][ T5962] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  203.564934][ T5962] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  203.592461][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.620077][ T5962] usb 3-1: Product: syz
[  203.634358][ T5962] usb 3-1: Manufacturer: syz
[  203.646586][ T5962] usb 3-1: SerialNumber: syz
[  203.686831][ T5962] usb 3-1: config 0 descriptor??
[  203.693356][ T7930] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  203.722696][ T7930] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  203.853763][  T980] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  203.945156][ T5962] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz)
[  203.954912][ T5962] etas_es58x 3-1:0.219: could not retrieve the product info string
[  204.014337][ T5962] usb 3-1: USB disconnect, device number 25
[  204.014820][  T980] usb 5-1: unable to get BOS descriptor or descriptor too short
[  204.025797][ T5962] etas_es58x 3-1:0.219: Disconnecting syz syz
[  204.054447][  T980] usb 5-1: not running at top speed; connect to a high speed hub
[  204.059780][   T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  204.064379][  T980] usb 5-1: config 140 has an invalid interface number: 70 but max is 0
[  204.088751][  T980] usb 5-1: config 140 has no interface number 0
[  204.097164][  T980] usb 5-1: config 140 interface 70 altsetting 6 has an endpoint descriptor with address 0x91, changing to 0x81
[  204.117006][  T980] usb 5-1: config 140 interface 70 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64
[  204.129954][  T980] usb 5-1: config 140 interface 70 has no altsetting 0
[  204.166180][  T980] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=19.a5
[  204.181163][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.217235][  T980] usb 5-1: Product: syz
[  204.235572][  T980] usb 5-1: Manufacturer: syz
[  204.248144][   T24] usb 1-1: Using ep0 maxpacket: 8
[  204.250732][  T980] usb 5-1: SerialNumber: syz
[  204.269518][   T24] usb 1-1: config 8 has an invalid interface number: 125 but max is 0
[  204.277890][ T7940] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  204.299368][   T24] usb 1-1: config 8 has no interface number 0
[  204.313481][   T24] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec
[  204.344811][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.356712][   T24] usb 1-1: Product: syz
[  204.361095][   T24] usb 1-1: Manufacturer: syz
[  204.366318][   T24] usb 1-1: SerialNumber: syz
[  204.397875][   T24] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  204.529854][  T980] usb 5-1: USB disconnect, device number 22
[  204.624223][   T24] gspca_m5602: Failed to find a sensor
[  204.629875][   T24] ALi m5602 1-1:8.125: ALi m5602 webcam failed
[  204.662893][   T24] usb 1-1: USB disconnect, device number 29
[  204.892615][ T5943] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  205.052652][  T980] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  205.073593][ T5943] usb 4-1: Using ep0 maxpacket: 16
[  205.110605][ T5943] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  205.140950][ T5943] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  205.183076][ T5943] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  205.232649][  T980] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  205.232742][ T5943] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  205.271181][  T980] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 3
[  205.302664][  T980] usb 3-1: config 255 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  205.323056][ T5943] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  205.357217][  T980] usb 3-1: New USB device found, idVendor=19d2, idProduct=0414, bcdDevice=1c.6f
[  205.371402][ T5943] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  205.391106][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.417784][  T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.445702][  T980] usb 3-1: Product: syz
[  205.449952][  T980] usb 3-1: Manufacturer: syz
[  205.454962][ T5943] usb 4-1: Product: syz
[  205.459334][ T5943] usb 4-1: Manufacturer: syz
[  205.475902][  T980] usb 3-1: SerialNumber: syz
[  205.493843][ T5943] usb 4-1: SerialNumber: syz
[  205.570438][ T7966] loop0: detected capacity change from 0 to 2048
[  205.588284][ T7964] loop1: detected capacity change from 0 to 4096
[  205.622338][ T7964] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  205.640951][ T7966]  loop0: p2 < > p4
[  205.655125][ T7966] loop0: partition table partially beyond EOD, truncated
[  205.712883][ T7966] loop0: p4 start 25856 is beyond EOD, truncated
[  205.718192][ T7964] ntfs3(loop1): $Secure::$SDH is corrupted.
[  205.729004][  T980] cdc_ether 3-1:255.0: skipping garbage
[  205.760560][  T980] cdc_ether 3-1:255.0: skipping garbage
[  205.789694][  T980] cdc_ether 3-1:255.0: skipping garbage
[  205.798359][ T7964] ntfs3(loop1): Failed to initialize $Secure (-22).
[  205.834341][  T980] cdc_ether 3-1:255.0: skipping garbage
[  205.840010][  T980] cdc_ether 3-1:255.0: skipping garbage
[  205.901961][  T980] cdc_ether 3-1:255.0: skipping garbage
[  205.911068][ T5943] usb 4-1: USB disconnect, device number 36
[  205.939332][  T980] cdc_ether 3-1:255.0: skipping garbage
[  205.972129][  T980] cdc_ether 3-1:255.0: skipping garbage
[  206.008384][  T980] usb 3-1: bad CDC descriptors
[  206.036556][  T980] usb 3-1: USB disconnect, device number 26
[  206.112804][   T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  206.150128][ T6225] udevd[6225]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.277846][ T7974] loop1: detected capacity change from 0 to 2048
[  206.305323][ T7974] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  206.334446][   T10] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  206.355681][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.388736][   T10] usb 5-1: config 0 has no interface number 0
[  206.417135][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  206.458297][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.495524][   T10] usb 5-1: Product: syz
[  206.520156][   T10] usb 5-1: Manufacturer: syz
[  206.555662][   T10] usb 5-1: SerialNumber: syz
[  206.596543][   T10] usb 5-1: config 0 descriptor??
[  206.826811][   T10] usb 5-1: Found UVC 0.00 device syz (046d:0823)
[  206.852839][   T10] usb 5-1: No valid video chain found.
[  206.889428][   T10] usb 5-1: USB disconnect, device number 23
[  206.902926][  T977] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  207.051956][ T7992] capability: warning: `syz.3.883' uses 32-bit capabilities (legacy support in use)
[  207.111799][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.168361][  T977] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1
[  207.182986][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.201369][  T977] usb 3-1: Product: syz
[  207.226844][  T977] usb 3-1: Manufacturer: syz
[  207.231656][  T977] usb 3-1: SerialNumber: syz
[  207.262277][  T977] usb 3-1: config 0 descriptor??
[  207.307063][  T977] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32
[  207.421521][ T7998] loop0: detected capacity change from 0 to 2048
[  207.479753][ T7998] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.523961][  T977] usb 3-1: USB disconnect, device number 27
[  208.032914][  T977] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  208.072965][  T980] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  208.192972][  T977] usb 4-1: Using ep0 maxpacket: 8
[  208.204058][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  208.229513][  T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  208.250120][ T8002] loop4: detected capacity change from 0 to 32768
[  208.255526][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  208.267569][  T980] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00
[  208.297965][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.307736][ T8002] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section journal: journal bucket 128 past end of device (nbuckets 128)
[  208.307736][ T8002] journal (size 32):
[  208.307736][ T8002] Buckets:  9 7 128
[  208.307736][ T8002] 
[  208.325646][  T980] usb 1-1: Product: syz
[  208.340859][  T977] usb 4-1: New USB device found, idVendor=0bfd, idProduct=001a, bcdDevice=5a.c8
[  208.369897][ T8002] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  208.378891][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.390346][  T980] usb 1-1: Manufacturer: syz
[  208.401067][  T980] usb 1-1: SerialNumber: syz
[  208.406668][  T977] usb 4-1: Product: syz
[  208.413805][  T977] usb 4-1: Manufacturer: syz
[  208.418453][  T977] usb 4-1: SerialNumber: syz
[  208.425169][  T980] usb 1-1: config 0 descriptor??
[  208.463000][  T980] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  208.471496][  T977] usb 4-1: config 0 descriptor??
[  208.486939][  T980] usb 1-1: Detected FT232HP
[  208.526648][  T977] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  208.637130][  T980] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  208.653312][  T980] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  208.671406][ T8014] loop4: detected capacity change from 0 to 64
[  208.701722][  T980] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  208.716751][ T8014] MINIX-fs: bad superblock
[  208.768648][  T977] usb 4-1: USB disconnect, device number 37
[  208.775705][  T980] usb 1-1: USB disconnect, device number 30
[  208.839625][  T980] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  208.907792][  T980] ftdi_sio 1-1:0.0: device disconnected
[  209.032491][ T8018] loop4: detected capacity change from 0 to 8
[  209.060007][ T8018] SQUASHFS error: xz decompression failed, data probably corrupt
[  209.068158][ T8018] SQUASHFS error: Failed to read block 0x108: -5
[  209.073275][ T5902] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  209.078447][ T8018] SQUASHFS error: Unable to read metadata cache entry [106]
[  209.095071][ T8018] SQUASHFS error: Unable to read inode 0x11f
[  209.256868][ T5902] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  209.288517][ T5902] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.316085][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0
[  209.326377][ T5902] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.00
[  209.337967][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.401502][   T30] audit: type=1326 audit(1749540126.680:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.0.897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d7a18e929 code=0x0
[  209.401651][ T5902] usb 3-1: config 0 descriptor??
[  209.535579][ T8026] loop3: detected capacity change from 0 to 128
[  209.557193][ T8024] loop4: detected capacity change from 0 to 2048
[  209.688172][ T5902] usb 3-1: string descriptor 0 read error: -71
[  209.732308][ T5902] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14
[  209.821753][ T5192] bcm5974 3-1:0.0: could not read from device
[  209.843311][ T5192] bcm5974 3-1:0.0: could not read from device
[  209.860185][ T5902] usb 3-1: USB disconnect, device number 28
[  209.877034][ T8033] loop3: detected capacity change from 0 to 8
[  209.951829][ T8033] SQUASHFS error: lzo decompression failed, data probably corrupt
[  209.993193][ T8033] SQUASHFS error: Failed to read block 0x91: -5
[  209.999506][ T8033] SQUASHFS error: Unable to read metadata cache entry [8f]
[  210.097253][ T8033] SQUASHFS error: Unable to read inode 0x11f
[  210.796994][ T8044] loop2: detected capacity change from 0 to 4096
[  210.840687][  T977] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  210.957381][ T8044] ntfs3(loop2): ino=19, mi_enum_attr
[  210.962774][ T8044] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  211.029652][  T977] usb 4-1: New USB device found, idVendor=0403, idProduct=0000, bcdDevice= 4.00
[  211.063220][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.113986][  T977] usb 4-1: config 0 descriptor??
[  211.155252][  T977] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  211.194710][  T977] usb 4-1: Detected FT232B
[  211.345697][ T8034] loop0: detected capacity change from 0 to 32768
[  211.369011][  T977] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  211.398863][  T977] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  211.429709][  T977] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  211.478642][  T977] usb 4-1: USB disconnect, device number 38
[  211.534212][  T977] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  211.584272][  T977] ftdi_sio 4-1:0.0: device disconnected
[  211.616651][ T8034] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=xxhash,compression=lz4,background_compression=zstd,journal_flush_delay=1,journal_flush_disabled,norecovery,version_upgrade=none,nocow,no_data_io
[  211.616651][ T8034]   allowing incompatible features above 0.0: (unknown version)
[  211.616651][ T8034]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  211.670879][ T8034] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  211.686150][ T8034] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  211.695736][ T8034] bcachefs (loop0): Version upgrade required:
[  211.695736][ T8034] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  211.695736][ T8034] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  211.695736][ T8034]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  211.771289][   T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  211.792739][ T8030] loop4: detected capacity change from 0 to 40427
[  211.830203][ T8030] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  211.853397][ T8030] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  211.911614][ T8030] F2FS-fs (loop4): SIT is corrupted data# 5 7 vs 11
[  211.929533][ T8034] bcachefs (loop0): accounting_read... done
[  211.939898][ T8030] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[  211.948029][ T8034] bcachefs (loop0): alloc_read... done
[  211.956751][ T8034] bcachefs (loop0): snapshots_read... done
[  211.964170][   T24] usb 3-1: Using ep0 maxpacket: 32
[  211.974251][ T8034] bcachefs (loop0): done starting filesystem
[  211.976150][   T24] usb 3-1: config 0 has an invalid interface number: 36 but max is 0
[  212.013939][   T24] usb 3-1: config 0 has no interface number 0
[  212.020279][   T24] usb 3-1: config 0 interface 36 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  212.062141][   T24] usb 3-1: config 0 interface 36 has no altsetting 0
[  212.096830][   T24] usb 3-1: New USB device found, idVendor=2304, idProduct=0208, bcdDevice=e9.bc
[  212.143541][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.182383][   T24] usb 3-1: Product: syz
[  212.205270][   T24] usb 3-1: Manufacturer: syz
[  212.210019][   T24] usb 3-1: SerialNumber: syz
[  212.248993][   T24] usb 3-1: config 0 descriptor??
[  212.315959][ T5847] bcachefs (loop0): shutting down
[  212.325831][   T24] em28xx 3-1:0.36: New device syz syz @ 480 Mbps (2304:0208, interface 36, class 36)
[  212.359117][   T24] em28xx 3-1:0.36: Video interface 36 found:
[  212.368075][ T8038] Bluetooth: hci1: command 0x0406 tx timeout
[  212.376505][ T8038] Bluetooth: hci0: command 0x0406 tx timeout
[  212.383282][ T8038] Bluetooth: hci2: command 0x0406 tx timeout
[  212.389487][ T8038] Bluetooth: hci4: command 0x0406 tx timeout
[  212.394333][ T5157] Bluetooth: hci3: command 0x0406 tx timeout
[  212.482888][ T5847] bcachefs (loop0): shutdown complete
[  212.544271][   T24] em28xx 3-1:0.36: unknown em28xx chip ID (0)
[  212.622805][   T24] em28xx 3-1:0.36: reading from i2c device at 0xa0 failed (error=-5)
[  212.633970][   T24] em28xx 3-1:0.36: board has no eeprom
[  212.643518][  T977] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  212.713448][   T24] em28xx 3-1:0.36: Identified as Pinnacle PCTV USB 2 (card=3)
[  212.731754][   T24] em28xx 3-1:0.36: analog set to bulk mode.
[  212.766418][ T5943] em28xx 3-1:0.36: Registering V4L2 extension
[  212.806469][   T24] usb 3-1: USB disconnect, device number 29
[  212.821080][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  212.838678][   T24] em28xx 3-1:0.36: Disconnecting em28xx
[  212.848052][  T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  212.920175][  T977] usb 4-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=df.97
[  212.943462][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.962272][  T977] usb 4-1: Product: syz
[  212.966595][  T977] usb 4-1: Manufacturer: syz
[  212.971226][  T977] usb 4-1: SerialNumber: syz
[  212.985878][  T977] usb 4-1: config 0 descriptor??
[  213.152592][ T5943] em28xx 3-1:0.36: Config register raw data: 0xffffffed
[  213.170214][ T5943] em28xx 3-1:0.36: AC97 chip type couldn't be determined
[  213.194550][ T5943] em28xx 3-1:0.36: No AC97 audio processor
[  213.232413][  T977] usb 4-1: USB disconnect, device number 39
[  213.242851][ T5943] usb 3-1: Decoder not found
[  213.268597][ T5943] em28xx 3-1:0.36: failed to create media graph
[  213.303749][ T5943] em28xx 3-1:0.36: V4L2 device video103 deregistered
[  213.332021][ T5943] em28xx 3-1:0.36: Registering input extension
[  213.507104][ T5943] rc_core: IR keymap rc-pinnacle-grey not found
[  213.524672][ T5943] Registered IR keymap rc-empty
[  213.532805][ T5943] rc rc0: Pinnacle PCTV USB 2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.36/rc/rc0
[  213.549648][ T5943] input: Pinnacle PCTV USB 2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.36/rc/rc0/input15
[  213.625939][ T5943] em28xx 3-1:0.36: Input extension successfully initialized
[  213.655989][   T24] em28xx 3-1:0.36: Closing input extension
[  213.713926][ T5962] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  213.747433][   T24] em28xx 3-1:0.36: Freeing device
[  213.903688][ T5962] usb 5-1: Using ep0 maxpacket: 16
[  213.927511][ T5962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.959303][ T5962] usb 5-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=80.73
[  213.979223][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.011115][ T5962] usb 5-1: Product: syz
[  214.026502][ T5962] usb 5-1: Manufacturer: syz
[  214.031351][ T5962] usb 5-1: SerialNumber: syz
[  214.085376][ T5962] usb 5-1: config 0 descriptor??
[  214.261469][ T8089] loop3: detected capacity change from 0 to 8
[  214.330804][ T5962] usb 5-1: USB disconnect, device number 24
[  214.344392][ T8089] SQUASHFS error: zlib decompression failed, data probably corrupt
[  214.373884][ T8089] SQUASHFS error: Failed to read block 0x9b: -5
[  214.390498][ T8089] SQUASHFS error: Unable to read metadata cache entry [99]
[  214.463866][ T8089] SQUASHFS error: Unable to read inode 0x127
[  215.187057][ T8079] loop1: detected capacity change from 0 to 40427
[  215.227511][ T8079] F2FS-fs (loop1): Image doesn't support compression
[  215.255317][ T8079] F2FS-fs (loop1): invalid crc value
[  215.284026][ T5943] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  215.313984][ T8090] loop2: detected capacity change from 0 to 32768
[  215.364357][ T8090] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  215.364357][ T8090] clean (size 2912):
[  215.364357][ T8090] flags:          0
[  215.364357][ T8090] journal_seq:    8
[  215.364357][ T8090] usage: type=inodes v=8
[  215.364357][ T8090] usage: type=key_version v=0
[  215.364357][ T8090] usage: type=reserved v=0
[  215.364357][ T8090] usage: type=reserved v=0
[  215.364357][ T8090] usage: type=reserved v=0
[  215.364357][ T8090] usage: type=reserved v=0
[  215.364357][ T8090] data_usage: btree: 1/1 [0]=2816
[  215.364357][ T8090] data_usage: journal: 1/1 [0]=0
[  215.364357][ T8090] data_usage: user: 1/1 [0]=32
[  215.364357][ T8090] dev_usage: dev=0  
[  215.364357][ T8090]   free: buckets=83 sectors=0 fragmented=0
[  215.364357][ T8090]   sb: buckets=25 sectors=6152 fragmented=248
[  215.364357][ T8090]   journal: buckets=8 sectors=2048 fragmented=0
[  215.364357][ T8090]   btree: buckets=11 sectors=2816 fragmented=0
[  215.364357][ T8090]   user: buckets=1 sectors=32 fragmented=224
[  215.364357][ T8090]   cached: buckets=0 sectors=0 fragmented=0
[  215.364357][ T8090]   parity: buckets=0 sectors=0 fragmented=0
[  215.364357][ T8090]   stripe: buckets=0 sectors=0 fragmented=0
[  215.364357][ T8090]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  215.364357][ T8090]   need_discard: buckets=0 sectors=0 fragmented=0
[  215.364357][ T8090] clock: read=0
[  215.364357][ T8090] clock: write=1288
[  215.364357][ T8090] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 72057594037927935:U64_MAX:U32
[  215.364588][ T8090] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  215.533921][ T5943] usb 1-1: Using ep0 maxpacket: 16
[  215.563826][ T5943] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9
[  215.619348][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.654004][ T5943] usb 1-1: Product: syz
[  215.658334][ T5943] usb 1-1: Manufacturer: syz
[  215.716959][ T5943] usb 1-1: SerialNumber: syz
[  215.754067][ T5943] usb 1-1: config 0 descriptor??
[  215.824648][ T8079] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  215.949385][ T8110] loop2: detected capacity change from 0 to 1024
[  216.012114][ T8110] hfsplus: invalid catalog btree flag
[  216.013434][ T5943] speedtch 1-1:0.0: speedtch_bind: wrong device class 141
[  216.034088][  T977] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  216.044507][ T5943] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  216.076646][ T8110] hfsplus: failed to load catalog file
[  216.086504][ T5943] usb 1-1: USB disconnect, device number 31
[  216.213913][  T977] usb 5-1: Using ep0 maxpacket: 32
[  216.238315][  T977] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice=da.88
[  216.262717][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.313530][  T977] usb 5-1: Product: syz
[  216.330617][  T977] usb 5-1: Manufacturer: syz
[  216.364120][  T977] usb 5-1: SerialNumber: syz
[  216.389820][  T977] usb 5-1: config 0 descriptor??
[  216.454863][  T977] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16
[  216.645833][ T5192] bcm5974 5-1:0.0: could not read from device
[  216.711767][  T977] usb 5-1: USB disconnect, device number 25
[  216.717038][ T5192] bcm5974 5-1:0.0: could not read from device
[  216.854106][ T5943] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  217.064437][  T980] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  217.216846][ T5943] usb 3-1: config 0 has an invalid interface number: 93 but max is 1
[  217.224249][  T980] usb 1-1: Using ep0 maxpacket: 16
[  217.235955][  T980] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  217.244090][ T5943] usb 3-1: config 0 has an invalid interface number: 247 but max is 1
[  217.255507][  T980] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  217.255552][  T980] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  217.258507][  T980] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  217.324059][  T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.342385][  T980] usb 1-1: Product: syz
[  217.346687][ T5943] usb 3-1: config 0 has no interface number 0
[  217.346782][ T5943] usb 3-1: config 0 has no interface number 1
[  217.346826][ T5943] usb 3-1: config 0 interface 93 has no altsetting 0
[  217.346847][ T5943] usb 3-1: config 0 interface 247 has no altsetting 0
[  217.346884][ T5943] usb 3-1: New USB device found, idVendor=054c, idProduct=0155, bcdDevice=5e.bc
[  217.395247][  T980] usb 1-1: Manufacturer: syz
[  217.399906][  T980] usb 1-1: SerialNumber: syz
[  217.466634][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.498891][ T5943] usb 3-1: config 0 descriptor??
[  217.654708][  T980] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  217.682256][  T980] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  217.743109][ T5943] usb 3-1: string descriptor 0 read error: -71
[  217.776797][ T5943] usb 3-1: bad CDC descriptors
[  217.813833][ T5943] usb 3-1: USB disconnect, device number 30
[  217.827527][  T980] usb 1-1: USB disconnect, device number 32
[  217.924942][ T3587] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  218.001464][ T7067] udevd[7067]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.114340][ T3587] usb 5-1: Using ep0 maxpacket: 32
[  218.128293][ T3587] usb 5-1: unable to get BOS descriptor or descriptor too short
[  218.148775][ T3587] usb 5-1: config 9 has an invalid interface number: 255 but max is 0
[  218.172263][ T8120] loop3: detected capacity change from 0 to 32768
[  218.172566][ T3587] usb 5-1: config 9 has no interface number 0
[  218.211539][ T3587] usb 5-1: config 9 interface 255 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64
[  218.281627][ T3587] usb 5-1: config 9 interface 255 altsetting 6 has an endpoint descriptor with address 0x3B, changing to 0xB
[  218.300154][ T8120] (syz.3.939,8120,0):ocfs2_load_local_alloc:320 ERROR: Local alloc size is invalid (la_size = 47975)
[  218.319728][ T8120] (syz.3.939,8120,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[  218.373105][ T8120] (syz.3.939,8120,0):ocfs2_check_volume:2404 ERROR: status = -22
[  218.382301][ T8120] (syz.3.939,8120,0):ocfs2_check_volume:2432 ERROR: status = -22
[  218.390387][ T8120] (syz.3.939,8120,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  218.410855][ T3587] usb 5-1: config 9 interface 255 altsetting 6 endpoint 0xB has invalid maxpacket 43096, setting to 1024
[  218.417063][ T8120] (syz.3.939,8120,0):ocfs2_fill_super:1177 ERROR: status = -22
[  218.453602][ T3587] usb 5-1: config 9 interface 255 altsetting 6 bulk endpoint 0xB has invalid maxpacket 1024
[  218.534111][ T3587] usb 5-1: config 9 interface 255 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  218.588217][ T3587] usb 5-1: config 9 interface 255 has no altsetting 0
[  218.630298][ T3587] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=49.59
[  218.633758][ T8143] loop1: detected capacity change from 0 to 512
[  218.650464][ T3587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.684313][ T3587] usb 5-1: Product: syz
[  218.688672][ T3587] usb 5-1: Manufacturer: syz
[  218.693385][ T3587] usb 5-1: SerialNumber: syz
[  218.710894][ T8143] EXT4-fs: Ignoring removed bh option
[  218.712274][ T8144] loop0: detected capacity change from 0 to 1024
[  218.735401][ T8143] EXT4-fs: Ignoring removed mblk_io_submit option
[  218.757048][ T8143] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  218.765116][ T8130] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  218.773109][ T8144] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  218.808714][ T8143] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  218.839273][ T8144] hfsplus: invalid catalog max_key_len 45837
[  218.863859][ T8144] hfsplus: failed to load catalog file
[  218.870123][ T8143] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.949: Invalid inode table block 0 in block_group 0
[  218.974420][ T8143] EXT4-fs (loop1): Remounting filesystem read-only
[  219.015306][ T3587] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  219.016387][ T8143] EXT4-fs (loop1): get root inode failed
[  219.041240][ T3587] sonixb 5-1:9.255: Error reading register 00: -71
[  219.127556][ T3587] usb 5-1: USB disconnect, device number 26
[  219.153294][ T8143] EXT4-fs (loop1): mount failed
[  219.894317][ T5844] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  219.894593][ T5930] iguanair 2-1:0.0: failed to get version
[  219.914885][ T5930] iguanair 2-1:0.0: probe with driver iguanair failed with error -110
[  219.964461][ T5930] usb 2-1: USB disconnect, device number 27
[  219.977103][ T8168] loop4: detected capacity change from 0 to 4096
[  220.027389][ T8168] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  220.052992][ T8168] ntfs3(loop4): Failed to load $Bitmap (-2).
[  220.094333][ T5844] usb 4-1: Using ep0 maxpacket: 32
[  220.102394][ T8173] loop1: detected capacity change from 0 to 512
[  220.135318][ T5844] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[  220.154565][ T5844] usb 4-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d
[  220.214386][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.277856][ T8173] EXT4-fs error (device loop1): ext4_quota_enable:7120: comm syz.1.963: Bad quota inum: 2, type: 1
[  220.322005][ T5844] quatech2 4-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected
[  220.337909][ T8173] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[  220.386968][ T8173] EXT4-fs (loop1): mount failed
[  220.515426][ T5844] usb 4-1: qt2_attach - failed to power on unit: -71
[  220.522364][ T5844] quatech2 4-1:24.0: probe with driver quatech2 failed with error -71
[  220.642577][ T5844] usb 4-1: USB disconnect, device number 40
[  220.700379][ T8157] loop2: detected capacity change from 0 to 32768
[  220.731724][ T8157] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  220.751987][ T8157] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  220.787632][ T8157] XFS (loop2): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c.  Caller xlog_header_check_mount+0x93/0xe0
[  220.809004][ T5930] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  220.810891][ T8157] CPU: 0 UID: 0 PID: 8157 Comm: syz.2.955 Not tainted 6.16.0-rc1-next-20250610-syzkaller #0 PREEMPT(full) 
[  220.810923][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  220.810946][ T8157] Call Trace:
[  220.810957][ T8157]  <TASK>
[  220.810967][ T8157]  dump_stack_lvl+0x189/0x250
[  220.811001][ T8157]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.811029][ T8157]  ? __phys_addr+0xd3/0x180
[  220.811055][ T8157]  ? __kasan_kmalloc_large+0x85/0xa0
[  220.811095][ T8157]  ? is_vmalloc_addr+0x52/0xb0
[  220.811137][ T8157]  xfs_corruption_error+0x122/0x170
[  220.811168][ T8157]  ? xlog_header_check_mount+0x93/0xe0
[  220.811206][ T8157]  xlog_header_check_mount+0xc6/0xe0
[  220.811239][ T8157]  ? xlog_header_check_mount+0x93/0xe0
[  220.811274][ T8157]  xlog_find_verify_log_record+0x32e/0x500
[  220.811328][ T8157]  xlog_find_zeroed+0x327/0x410
[  220.811367][ T8157]  xlog_find_head+0x5f/0x700
[  220.811397][ T8157]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.811428][ T8157]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  220.811458][ T8157]  xlog_find_tail+0x3d/0x840
[  220.811503][ T8157]  xlog_recover+0x4b/0x3e0
[  220.811541][ T8157]  xfs_log_mount+0x253/0x3e0
[  220.811583][ T8157]  xfs_mountfs+0xe5e/0x2330
[  220.811630][ T8157]  ? __pfx_xfs_mountfs+0x10/0x10
[  220.811667][ T8157]  ? xfs_setup_dax_always+0x20f/0x290
[  220.811696][ T8157]  xfs_fs_fill_super+0x11b3/0x1600
[  220.811730][ T8157]  get_tree_bdev_flags+0x40e/0x4d0
[  220.811768][ T8157]  ? __pfx_xfs_fs_fill_super+0x10/0x10
[  220.811793][ T8157]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  220.811842][ T8157]  vfs_get_tree+0x8f/0x2b0
[  220.811868][ T8157]  do_new_mount+0x24a/0xa40
[  220.811903][ T8157]  __se_sys_mount+0x317/0x410
[  220.811939][ T8157]  ? __pfx___se_sys_mount+0x10/0x10
[  220.811973][ T8157]  ? do_syscall_64+0xbe/0x3b0
[  220.812001][ T8157]  ? __x64_sys_mount+0x20/0xc0
[  220.812032][ T8157]  do_syscall_64+0xfa/0x3b0
[  220.812059][ T8157]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.812085][ T8157]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.812108][ T8157]  ? clear_bhb_loop+0x60/0xb0
[  220.812137][ T8157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.812161][ T8157] RIP: 0033:0x7fd29b3900ca
[  220.812189][ T8157] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.812209][ T8157] RSP: 002b:00007fd29c1f0e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  220.812234][ T8157] RAX: ffffffffffffffda RBX: 00007fd29c1f0ef0 RCX: 00007fd29b3900ca
[  220.812253][ T8157] RDX: 0000200000009700 RSI: 0000200000009740 RDI: 00007fd29c1f0eb0
[  220.812270][ T8157] RBP: 0000200000009700 R08: 00007fd29c1f0ef0 R09: 0000000004000000
[  220.812287][ T8157] R10: 0000000004000000 R11: 0000000000000246 R12: 0000200000009740
[  220.812309][ T8157] R13: 00007fd29c1f0eb0 R14: 000000000000979d R15: 00002000000000c0
[  220.812345][ T8157]  </TASK>
[  220.812354][ T8157] XFS (loop2): Corruption detected. Unmount and run xfs_repair
[  220.884605][ T3587] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  220.904247][ T8157] XFS (loop2): log has mismatched uuid - can't recover
[  221.007597][ T5930] usb 1-1: Using ep0 maxpacket: 32
[  221.011421][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  221.026544][ T8157] XFS (loop2): empty log check failed
[  221.069040][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  221.140065][ T8157] XFS (loop2): log mount/recovery failed: error -117
[  221.177572][ T3587] usb 5-1: Using ep0 maxpacket: 32
[  221.206863][ T5930] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  221.213722][ T8157] XFS (loop2): log mount failed
[  221.228116][ T3587] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice= 6.87
[  221.238182][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.247119][ T3587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.255331][ T5930] usb 1-1: Product: syz
[  221.262516][ T3587] usb 5-1: config 0 descriptor??
[  221.274551][   T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  221.304901][ T5930] usb 1-1: Manufacturer: syz
[  221.313819][ T5930] usb 1-1: SerialNumber: syz
[  221.345882][ T5930] usb 1-1: config 0 descriptor??
[  221.412208][ T5930] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  221.467583][   T24] usb 2-1: Using ep0 maxpacket: 32
[  221.503825][   T24] usb 2-1: config 0 has an invalid interface number: 45 but max is 0
[  221.520142][   T24] usb 2-1: config 0 has no interface number 0
[  221.527639][ T3587] usb 5-1: string descriptor 0 read error: -71
[  221.537721][ T3587] usb 5-1: probing VID:PID(2201:012C)   
[  221.553773][   T24] usb 2-1: config 0 interface 45 has no altsetting 0
[  221.562425][ T3587] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  221.586642][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= a.a5
[  221.597600][  T977] usb 1-1: USB disconnect, device number 33
[  221.597642][ T1037] usb 1-1: Failed to submit usb control message: -71
[  221.621290][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.631821][ T1037] usb 1-1: unable to send the bmi data to the device: -71
[  221.642746][   T24] usb 2-1: Product: syz
[  221.649054][ T1037] usb 1-1: unable to get target info from device
[  221.657603][ T3587] vub300 5-1:0.0: probe with driver vub300 failed with error -22
[  221.666388][   T24] usb 2-1: Manufacturer: syz
[  221.671046][   T24] usb 2-1: SerialNumber: syz
[  221.683964][ T1037] usb 1-1: could not get target info (-71)
[  221.690795][ T1037] usb 1-1: could not probe fw (-71)
[  221.698926][ T3587] usb 5-1: USB disconnect, device number 27
[  221.713648][   T24] usb 2-1: config 0 descriptor??
[  221.938230][   T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.45/input/input17
[  221.950164][ T5192] bcm5974 2-1:0.45: could not read from device
[  221.958146][ T5192] bcm5974 2-1:0.45: could not read from device
[  221.970692][ T5192] bcm5974 2-1:0.45: could not read from device
[  221.970875][   T24] usb 2-1: USB disconnect, device number 28
[  221.985593][ T5192] bcm5974 2-1:0.45: could not read from device
[  222.006974][  T980] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  222.106819][ T5844] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  222.120219][ T8213] loop4: detected capacity change from 0 to 8
[  222.156765][ T8213] SQUASHFS error: xz decompression failed, data probably corrupt
[  222.169100][  T980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  222.181313][ T8213] SQUASHFS error: Failed to read block 0x108: -5
[  222.190289][  T980] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  222.219227][ T8213] SQUASHFS error: Unable to read metadata cache entry [106]
[  222.227517][ T8213] SQUASHFS error: Unable to read inode 0x11f
[  222.245590][  T980] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  222.255047][  T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  222.271250][  T980] usb 4-1: SerialNumber: syz
[  222.289957][ T5844] usb 3-1: Using ep0 maxpacket: 8
[  222.298855][ T5844] usb 3-1: config 127 has an invalid interface number: 171 but max is 1
[  222.315757][  T980] cdc_mbim 4-1:1.0: MBIM functional descriptor missing
[  222.323160][ T5844] usb 3-1: config 127 has no interface number 1
[  222.333911][  T980] cdc_mbim 4-1:1.0: bind() failure
[  222.340195][ T5844] usb 3-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x91, changing to 0x81
[  222.373689][ T5844] usb 3-1: config 127 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.390466][ T5844] usb 3-1: config 127 interface 171 has no altsetting 0
[  222.398075][ T5844] usb 3-1: config 127 interface 0 has no altsetting 0
[  222.418124][ T5844] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  222.427795][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.436308][ T5844] usb 3-1: Product: syz
[  222.445124][ T5844] usb 3-1: Manufacturer: syz
[  222.451769][ T5844] usb 3-1: SerialNumber: syz
[  222.507120][  T980] usb 4-1: USB disconnect, device number 41
[  222.530735][ T5837] Bluetooth: hci3: unexpected event for opcode 0x100c
[  222.684856][ T5844] xr_serial 3-1:127.171: xr_serial converter detected
[  222.701662][ T5844] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  222.708612][   T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  222.722754][ T5844] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  222.754029][ T5844] usb 3-1: USB disconnect, device number 31
[  222.771644][ T5844] xr_serial 3-1:127.171: device disconnected
[  222.874722][ T5943] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  222.874800][   T10] usb 5-1: Using ep0 maxpacket: 16
[  222.903997][   T10] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  222.914084][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  222.929552][   T10] usb 5-1: config 0 has no interface number 0
[  222.938794][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  222.948424][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.956792][   T10] usb 5-1: Product: syz
[  222.961114][   T10] usb 5-1: Manufacturer: syz
[  222.967925][   T10] usb 5-1: SerialNumber: syz
[  222.975857][   T10] usb 5-1: config 0 descriptor??
[  223.043608][ T5943] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  223.054326][ T5943] usb 1-1: config 0 has no interface number 0
[  223.074861][ T5943] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  223.097744][ T5943] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  223.124808][ T5943] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  223.158721][ T5943] usb 1-1: config 0 interface 20 has no altsetting 0
[  223.177095][ T5943] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05
[  223.195031][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.224727][ T5943] usb 1-1: Product: syz
[  223.228944][ T5943] usb 1-1: Manufacturer: syz
[  223.244964][ T5943] usb 1-1: SerialNumber: syz
[  223.255829][ T3587] usb 5-1: USB disconnect, device number 28
[  223.265468][ T5943] usb 1-1: config 0 descriptor??
[  223.338170][ T8226] loop1: detected capacity change from 0 to 32768
[  223.377984][ T8226] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  223.377984][ T8226] clean (size 2912):
[  223.377984][ T8226] flags:          0
[  223.377984][ T8226] journal_seq:    10
[  223.377984][ T8226] usage: type=inodes v=8
[  223.377984][ T8226] usage: type=key_version v=0
[  223.377984][ T8226] usage: type=reserved v=0
[  223.377984][ T8226] usage: type=reserved v=0
[  223.377984][ T8226] usage: type=reserved v=0
[  223.377984][ T8226] usage: type=reserved v=0
[  223.377984][ T8226] data_usage: btree: 1/1 [0]=2816
[  223.377984][ T8226] data_usage: journal: 1/1 [0]=0
[  223.377984][ T8226] data_usage: user: 1/1 [0]=16
[  223.377984][ T8226] dev_usage: dev=0  
[  223.377984][ T8226]   free: buckets=83 sectors=0 fragmented=0
[  223.377984][ T8226]   sb: buckets=25 sectors=6152 fragmented=248
[  223.377984][ T8226]   journal: buckets=8 sectors=2048 fragmented=0
[  223.377984][ T8226]   btree: buckets=11 sectors=2816 fragmented=0
[  223.377984][ T8226]   user: buckets=1 sectors=16 fragmented=240
[  223.377984][ T8226]   cached: buckets=0 sectors=0 fragmented=13565952
[  223.377984][ T8226]   parity: buckets=0 sectors=0 fragmented=0
[  223.377984][ T8226]   stripe: buckets=0 sectors=0 fragmented=0
[  223.377984][ T8226]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  223.377984][ T8226]   need_discard: buckets=0 sectors=0 fragmented=0
[  223.377984][ T8226] clock: read=0
[  223.377984][ T8226] clock: write=1280
[  223.377984][ T8226] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0:
[  223.378355][ T8226] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  223.560953][ T5943] keyspan 1-1:0.20: Keyspan 1 port adapter converter detected
[  223.588172][ T5943] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 87
[  223.624121][ T5943] keyspan 1-1:0.20: unsupported endpoint type 0
[  223.666272][ T5943] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 81
[  223.674150][ T5943] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 1
[  223.737969][ T5943] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 2
[  223.784959][ T5943] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 85
[  223.792932][ T5943] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 5
[  223.828849][ T5943] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  223.887057][ T5943] usb 1-1: USB disconnect, device number 34
[  223.935480][ T5943] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  223.960592][ T5943] keyspan 1-1:0.20: device disconnected
[  224.247744][   T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  224.416643][   T24] usb 2-1: Using ep0 maxpacket: 16
[  224.423771][ T8230] loop3: detected capacity change from 0 to 32768
[  224.428805][   T24] usb 2-1: config 8 has an invalid interface number: 39 but max is 0
[  224.439466][ T8230] bcachefs: bch2_fs_parse_param() Error parsing option acl: option_value
[  224.450586][   T24] usb 2-1: config 8 has no interface number 0
[  224.465672][   T24] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  224.487613][   T24] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[  224.502052][   T24] usb 2-1: config 8 interface 39 has no altsetting 0
[  224.519257][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[  224.539579][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.550218][   T24] usb 2-1: Product: syz
[  224.554446][   T24] usb 2-1: Manufacturer: syz
[  224.561069][   T24] usb 2-1: SerialNumber: syz
[  224.585128][ T5943] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  224.594901][ T5962] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  224.625019][ T3587] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  224.745689][ T5962] usb 3-1: Using ep0 maxpacket: 8
[  224.761820][ T5943] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  224.790245][ T5962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.815012][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  224.837160][ T3587] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  224.848539][ T3587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.857692][   T24] ipheth 2-1:8.39: Unable to find endpoints
[  224.874178][ T5962] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  224.883385][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  224.897639][ T3587] usb 5-1: Product: syz
[  224.901859][ T3587] usb 5-1: Manufacturer: syz
[  224.910044][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  224.920619][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  224.931373][   T24] usb 2-1: USB disconnect, device number 29
[  224.948729][ T5962] usb 3-1: SerialNumber: syz
[  224.954991][ T3587] usb 5-1: SerialNumber: syz
[  224.967863][ T5962] usb 3-1: config 0 descriptor??
[  224.980802][ T3587] usb 5-1: config 0 descriptor??
[  225.000305][ T5943] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  225.012761][ T3587] hub 5-1:0.0: bad descriptor, ignoring hub
[  225.023142][ T5962] usb 3-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  225.030681][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.039105][ T3587] hub 5-1:0.0: probe with driver hub failed with error -5
[  225.046989][ T5962] usb 3-1: No valid video chain found.
[  225.053505][ T5943] usb 1-1: Product: syz
[  225.059760][ T3587] f81232 5-1:0.0: f81534a converter detected
[  225.065862][ T5943] usb 1-1: Manufacturer: syz
[  225.070911][ T5943] usb 1-1: SerialNumber: syz
[  225.106134][ T5943] usb 1-1: config 0 descriptor??
[  225.121323][ T5943] iguanair 1-1:0.0: probe with driver iguanair failed with error -12
[  225.210550][ T3587] f81534a ttyUSB0: f81232_set_register failed status: -71
[  225.221319][ T3587] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[  225.236784][ T5844] usb 3-1: USB disconnect, device number 32
[  225.256099][ T3587] usb 5-1: USB disconnect, device number 29
[  225.267795][ T3587] f81232 5-1:0.0: device disconnected
[  225.327883][   T24] usb 1-1: USB disconnect, device number 35
[  225.405246][ T5943] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  225.582470][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  225.595273][ T5943] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  225.610700][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  225.624797][ T5943] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  225.642784][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  225.659285][ T5943] usb 4-1: Product: syz
[  225.663585][ T5943] usb 4-1: Manufacturer: syz
[  225.670077][ T5943] usb 4-1: SerialNumber: syz
[  225.687231][ T5943] usb 4-1: config 0 descriptor??
[  225.697157][ T8264] loop1: detected capacity change from 0 to 32768
[  225.700897][ T5943] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  225.713412][ T8264] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got  should be 
[  225.725377][ T8264] bcachefs (/dev/loop1): error validating superblock: Invalid option invalid compression opt 15
[  225.748144][ T8264] bcachefs: bch2_fs_get_tree() error: invalid_sb_opt_compression
[  225.925651][ T5943] usb 4-1: USB disconnect, device number 42
[  226.224137][ T8272] loop4: detected capacity change from 0 to 4096
[  226.273588][ T8272] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  226.585435][ T5844] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  226.638341][   T10] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  226.780390][ T5844] usb 2-1: config 0 has an invalid interface number: 84 but max is 0
[  226.795441][ T5844] usb 2-1: config 0 has an invalid interface number: 66 but max is 0
[  226.832223][ T5844] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  226.842857][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  226.864332][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64
[  226.885275][ T5844] usb 2-1: config 0 has no interface number 0
[  226.891637][ T5844] usb 2-1: config 0 has no interface number 1
[  226.893627][ T8294] loop2: detected capacity change from 0 to 128
[  226.904763][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23
[  226.927025][ T5844] usb 2-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 1024
[  226.946504][ T5844] usb 2-1: config 0 interface 84 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  226.950352][ T8294] FAT-fs (loop2): FAT read failed (blocknr 39712)
[  226.966313][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  226.975739][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  226.983779][   T10] usb 1-1: SerialNumber: syz
[  226.999315][ T5844] usb 2-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  227.033847][ T5844] usb 2-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[  227.068323][ T5844] usb 2-1: config 0 interface 66 altsetting 153 endpoint 0x5 has invalid maxpacket 1056, setting to 1024
[  227.080610][ T8284] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  227.105013][   T10] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  227.124573][ T5844] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 1024
[  227.146531][ T5844] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2
[  227.175519][ T5844] usb 2-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86
[  227.208091][ T5844] usb 2-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 53
[  227.243325][ T5844] usb 2-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[  227.275311][ T5844] usb 2-1: config 0 interface 66 has no altsetting 0
[  227.288660][ T5844] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  227.305196][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.331833][   T10] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  227.346230][ T5844] usb 2-1: Product: syz
[  227.353601][ T5844] usb 2-1: Manufacturer: syz
[  227.362536][   T10] usb 1-1: USB disconnect, device number 36
[  227.371684][ T5844] usb 2-1: SerialNumber: syz
[  227.383978][ T5844] usb 2-1: config 0 descriptor??
[  227.418869][ T8281] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  227.440318][ T5844] ljca 2-1:0.84: bulk endpoints not found
[  227.514483][ T8290] loop3: detected capacity change from 0 to 32768
[  227.553214][ T8290] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type write_buffer_keys overruns end of section
[  227.553214][ T8290] clean (size 2912):
[  227.553214][ T8290] flags:          0
[  227.553214][ T8290] journal_seq:    10
[  227.553214][ T8290] usage: type=inodes v=8
[  227.553214][ T8290] usage: type=key_version v=2
[  227.553214][ T8290] usage: type=reserved v=0
[  227.553214][ T8290] usage: type=reserved v=0
[  227.553214][ T8290] usage: type=(unknown fs_usage_type 4) v=0
[  227.553214][ T8290] usage: type=reserved v=0
[  227.553214][ T8290] data_usage: btree: 1/1 [0]=2816
[  227.553214][ T8290] data_usage: journal: 1/1 [0]=0
[  227.553214][ T8290] data_usage: user: 1/1 [0]=32
[  227.553214][ T8290] datetime: 0
[  227.553214][ T8290] clock: read=0
[  227.553214][ T8290] clock: write=1336
[  227.553214][ T8290] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 83426fcb67886cbe written 16 min_key POS_MIN ptr: 0:6912 gen 0
[  227.553214][ T8290] btree_root: btree=inodes level=0 u64s 7 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a22d880bb51b703b written 24 min_key POS_MIN 
[  227.553214][ T8290] 
[  227.663471][ T8290] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  227.707185][ T5844] ljca 2-1:0.66: probe with driver ljca failed with error -71
[  227.734546][ T8289] loop4: detected capacity change from 0 to 32768
[  227.758534][ T5844] usb 2-1: USB disconnect, device number 30
[  227.786637][ T8289] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section journal: journal bucket at sector 0
[  227.786637][ T8289] journal (size 40):
[  227.786637][ T8289] Buckets:  9 7 24 0
[  227.786637][ T8289] 
[  227.858810][ T8289] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  227.907139][ T5837] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  228.247674][ T8304] loop3: detected capacity change from 0 to 24
[  228.785559][ T5943] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  228.865719][   T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  228.957968][ T5943] usb 1-1: unable to get BOS descriptor or descriptor too short
[  228.970294][ T5943] usb 1-1: not running at top speed; connect to a high speed hub
[  228.990597][ T5943] usb 1-1: config 17 has an invalid interface number: 8 but max is 1
[  229.006147][ T5943] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2
[  229.028856][ T5943] usb 1-1: config 17 has no interface number 0
[  229.035113][ T5943] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 43287, setting to 64
[  229.065429][ T5943] usb 1-1: config 17 interface 8 has no altsetting 0
[  229.075439][   T24] usb 4-1: Using ep0 maxpacket: 8
[  229.087236][   T24] usb 4-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11
[  229.107998][ T5943] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  229.125445][   T24] usb 4-1: config 1 interface 0 has no altsetting 0
[  229.132297][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.147989][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40
[  229.168319][ T5943] usb 1-1: Product: syz
[  229.173729][ T5943] usb 1-1: Manufacturer: syz
[  229.180297][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.195453][ T5943] usb 1-1: SerialNumber: syz
[  229.205682][   T24] usb 4-1: Product: syz
[  229.209901][   T24] usb 4-1: Manufacturer: syz
[  229.230325][ T8312] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  229.237921][   T24] usb 4-1: SerialNumber: syz
[  229.338282][ T8296] loop2: detected capacity change from 0 to 65536
[  229.403521][ T8296] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  229.488644][ T5943] usb 1-1: selecting invalid altsetting 0
[  229.499012][   T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input19
[  229.543427][ T5192] bcm5974 4-1:1.0: could not read from device
[  229.552194][ T8296] XFS (loop2): Ending clean mount
[  229.560376][ T5943] usb 1-1: USB disconnect, device number 37
[  229.575158][ T8296] XFS (loop2): Quotacheck needed: Please wait.
[  229.597546][   T24] usb 4-1: USB disconnect, device number 43
[  229.607478][ T5192] bcm5974 4-1:1.0: could not read from device
[  229.644602][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.713429][ T3037] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x25 dinode
[  229.747873][ T8322] loop1: detected capacity change from 0 to 40427
[  229.763114][ T3037] XFS (loop2): Unmount and run xfs_repair
[  229.770847][ T3037] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  229.781046][ T8322] F2FS-fs (loop1): build fault injection rate: 16
[  229.790964][ T3037] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00  IN..............
[  229.823361][ T3037] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  229.824474][ T8322] F2FS-fs (loop1): build fault injection type: 0xe
[  229.833540][ T3037] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[  229.853438][ T3037] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27  4.Xhz.DM.......'
[  229.878948][ T3037] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  229.895881][ T8322] F2FS-fs (loop1): invalid crc value
[  229.898095][ T3037] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4  .............DI.
[  229.914230][ T3037] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02  ................
[  229.937133][ T3037] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  229.954429][ T8322] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x3227/0x49f0
[  229.971207][ T8322] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  229.982481][ T8296] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  230.166541][ T5848] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  230.226332][ T5848] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  230.257258][ T8342] loop3: detected capacity change from 0 to 512
[  230.277017][ T8342] EXT4-fs: Ignoring removed nomblk_io_submit option
[  230.295966][ T8342] EXT4-fs: Ignoring removed i_version option
[  230.392147][ T8342] EXT4-fs (loop3): 1 orphan inode deleted
[  230.488542][ T8342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.676942][ T8338] loop4: detected capacity change from 0 to 32768
[  230.790352][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.335769][ T5943] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  231.372553][ T5837] Bluetooth: hci2: Unable to find connection for big 0x00
[  231.381018][   T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  231.449843][ T8368] loop3: detected capacity change from 0 to 4096
[  231.490920][ T8368] ntfs3(loop3): It is recommened to use chkdsk.
[  231.506542][ T5943] usb 3-1: Using ep0 maxpacket: 16
[  231.537050][ T5943] usb 3-1: config 0 has an invalid interface number: 104 but max is 1
[  231.550760][   T10] usb 1-1: Using ep0 maxpacket: 32
[  231.552320][ T8368] ntfs3(loop3): Failed to load $MFT.
[  231.573325][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  231.579753][ T5943] usb 3-1: config 0 has an invalid interface number: 104 but max is 1
[  231.590837][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.615865][ T5943] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  231.626758][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  231.630861][ T5943] usb 3-1: config 0 has no interface number 0
[  231.642302][   T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  231.664624][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  231.678115][ T5943] usb 3-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 32483, setting to 1024
[  231.708845][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.717991][ T5943] usb 3-1: config 0 interface 104 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024
[  231.736806][   T10] usb 1-1: Product: syz
[  231.741031][   T10] usb 1-1: Manufacturer: syz
[  231.748952][ T5943] usb 3-1: config 0 interface 104 has no altsetting 1
[  231.764261][   T10] usb 1-1: SerialNumber: syz
[  231.773769][ T5943] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  231.793768][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.802336][ T5943] usb 3-1: Product: syz
[  231.807369][   T24] usb 2-1: Using ep0 maxpacket: 8
[  231.824641][ T5943] usb 3-1: Manufacturer: syz
[  231.845563][ T5943] usb 3-1: SerialNumber: syz
[  231.852374][   T24] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=58.4c
[  231.868928][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.882087][   T24] usb 2-1: Product: syz
[  231.889398][   T24] usb 2-1: Manufacturer: syz
[  231.894056][   T24] usb 2-1: SerialNumber: syz
[  231.901409][ T5943] usb 3-1: config 0 descriptor??
[  231.947220][   T24] usb 2-1: config 0 descriptor??
[  232.015464][   T10] usb 1-1: 0:3 : does not exist
[  232.056190][   T10] usb 1-1: USB disconnect, device number 38
[  232.116287][ T5943] asix 3-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  232.128868][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  232.137312][ T5943] asix 3-1:0.104: probe with driver asix failed with error -71
[  232.179835][   T24] usb 2-1: USB disconnect, device number 31
[  232.217477][ T5943] usb 3-1: USB disconnect, device number 33
[  232.226860][  T980] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  232.389964][ T8380] loop3: detected capacity change from 0 to 32768
[  232.400458][  T980] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  232.414607][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.423860][  T980] usb 5-1: Product: syz
[  232.430323][  T980] usb 5-1: Manufacturer: syz
[  232.434976][  T980] usb 5-1: SerialNumber: syz
[  232.445455][  T980] usb 5-1: config 0 descriptor??
[  232.462599][  T980] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  232.501122][  T980] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  232.528975][  T980] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  232.705659][ T5943] usb 5-1: USB disconnect, device number 30
[  233.080250][ T8401] loop1: detected capacity change from 0 to 512
[  233.111404][ T8401] EXT4-fs: inline encryption not supported
[  233.145980][ T8401] EXT4-fs: Ignoring removed bh option
[  233.159348][ T8401] EXT4-fs: Ignoring removed mblk_io_submit option
[  233.170121][ T8401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  233.180437][ T8401] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  233.229152][ T8401] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  233.253690][ T8401] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.1061: Invalid inode table block 0 in block_group 0
[  233.276455][ T5962] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  233.289863][ T8401] EXT4-fs (loop1): get root inode failed
[  233.307201][ T8401] EXT4-fs (loop1): mount failed
[  233.456038][ T5962] usb 1-1: Using ep0 maxpacket: 16
[  233.474973][ T5962] usb 1-1: config 8 has an invalid interface number: 206 but max is 0
[  233.489691][ T5962] usb 1-1: config 8 has no interface number 0
[  233.498008][ T5962] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  233.512050][ T5962] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  233.533669][ T5962] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0
[  233.543916][ T5962] usb 1-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0
[  233.562822][ T5962] usb 1-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  233.576869][ T5844] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  233.577375][ T5943] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  233.607451][ T5962] usb 1-1: config 8 interface 206 has no altsetting 0
[  233.619011][ T5962] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  233.647598][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.655669][ T5962] usb 1-1: Product: syz
[  233.665700][ T5962] usb 1-1: Manufacturer: syz
[  233.681202][ T5962] usb 1-1: SerialNumber: syz
[  233.688545][ T8397] loop2: detected capacity change from 0 to 32768
[  233.707301][ T8397] jfs_mount: Mount Failure: superblock is corrupt!
[  233.713889][ T8397] Mount JFS Failure: -22
[  233.727964][ T8397] jfs_mount failed w/return code = -22
[  233.738577][ T5844] usb 5-1: Using ep0 maxpacket: 16
[  233.751670][ T5844] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de
[  233.779451][ T5943] usb 4-1: config 1 descriptor has 1 excess byte, ignoring
[  233.783693][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.810358][ T5844] usb 5-1: Product: syz
[  233.814659][ T5844] usb 5-1: Manufacturer: syz
[  233.819220][ T5943] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  233.829049][ T5844] usb 5-1: SerialNumber: syz
[  233.842346][ T5844] usb 5-1: config 0 descriptor??
[  233.855532][ T5943] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  233.872783][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  233.888224][ T5943] usb 4-1: SerialNumber: syz
[  233.912453][ T5844] ems_usb 5-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  233.939046][ T5962] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected
[  233.947468][ T5844] ems_usb 5-1:0.0: probe with driver ems_usb failed with error -22
[  233.988873][ T5962] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90
[  234.009791][ T5962] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[  234.041436][ T5962] usb 1-1: USB disconnect, device number 39
[  234.074142][ T5962] garmin_gps 1-1:8.206: device disconnected
[  234.116048][ T3587] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  234.125193][ T5943] cdc_ether 4-1:1.0: invalid descriptor buffer length
[  234.144069][ T5943] usb 4-1: bad CDC descriptors
[  234.160736][ T5844] usb 5-1: USB disconnect, device number 31
[  234.175702][ T5943] usb 4-1: USB disconnect, device number 44
[  234.288543][ T3587] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  234.302478][ T3587] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.320100][ T3587] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  234.330196][ T3587] usb 2-1: config 1 has no interface number 1
[  234.338719][ T3587] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  234.351570][ T3587] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[  234.362580][ T3587] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  234.379478][ T3587] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  234.388796][ T3587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.398505][ T3587] usb 2-1: Product: syz
[  234.402709][ T3587] usb 2-1: Manufacturer: syz
[  234.407636][ T3587] usb 2-1: SerialNumber: syz
[  234.456170][ T5902] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  234.637232][ T5902] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[  234.655596][ T5902] usb 3-1: config 0 has no interface number 0
[  234.663384][ T3587] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  234.686146][ T5902] usb 3-1: config 0 interface 200 has no altsetting 0
[  234.693401][ T3587] usb 2-1: MIDIStreaming interface descriptor not found
[  234.721731][ T5902] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=fc.1e
[  234.744707][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.783176][ T5902] usb 3-1: Product: syz
[  234.809058][ T5902] usb 3-1: Manufacturer: syz
[  234.813745][ T5902] usb 3-1: SerialNumber: syz
[  234.826494][ T3587] usb 2-1: USB disconnect, device number 32
[  234.860190][ T5902] usb 3-1: config 0 descriptor??
[  234.945967][ T8429] loop4: detected capacity change from 0 to 8
[  234.954827][ T7067] udevd[7067]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  234.984908][ T8429] SQUASHFS error: zlib decompression failed, data probably corrupt
[  234.997964][ T8429] SQUASHFS error: Failed to read block 0x9b: -5
[  235.004461][ T8429] SQUASHFS error: Unable to read metadata cache entry [99]
[  235.022226][ T8427] loop3: detected capacity change from 0 to 2048
[  235.056463][ T8427] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  235.077740][ T8429] SQUASHFS error: Unable to read inode 0x127
[  235.114327][ T5902] usbhid 3-1:0.200: couldn't find an input interrupt endpoint
[  235.122018][ T8427] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=5)
[  235.197175][ T5902] usb 3-1: USB disconnect, device number 34
[  235.205531][ T8427] Remounting filesystem read-only
[  235.245651][ T8427] NILFS (loop3): error -5 while loading super root
[  235.500323][ T8435] loop3: detected capacity change from 0 to 1024
[  235.527819][ T8435] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  235.574475][ T8435] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 2: comm syz.3.1077: lblock 2 mapped to illegal pblock 2 (length 1)
[  235.606567][ T8435] Quota error (device loop3): write_blk: dquota write failed
[  235.614040][ T8435] Quota error (device loop3): find_free_dqentry: Can't write quota data block 2
[  235.676394][ T8435] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  235.686340][ T5943] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  235.704608][ T8425] loop0: detected capacity change from 0 to 32768
[  235.735606][ T8435] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1077: Failed to acquire dquot type 0
[  235.753515][ T8425] ==================================================================
[  235.761652][ T8425] BUG: KASAN: slab-out-of-bounds in bch2_sb_members_v1_to_text+0x1b2/0x2b0
[  235.770393][ T8425] Read of size 56 at addr ffff88804684a000 by task syz.0.1072/8425
[  235.778326][ T8425] 
[  235.780689][ T8425] CPU: 0 UID: 0 PID: 8425 Comm: syz.0.1072 Not tainted 6.16.0-rc1-next-20250610-syzkaller #0 PREEMPT(full) 
[  235.780718][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  235.780733][ T8425] Call Trace:
[  235.780742][ T8425]  <TASK>
[  235.780750][ T8425]  dump_stack_lvl+0x189/0x250
[  235.780776][ T8425]  ? __virt_addr_valid+0x1c8/0x5c0
[  235.780799][ T8425]  ? rcu_is_watching+0x15/0xb0
[  235.780837][ T8425]  ? __kasan_check_byte+0x12/0x40
[  235.780859][ T8425]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.780887][ T8425]  ? rcu_is_watching+0x15/0xb0
[  235.780905][ T8425]  ? lock_release+0x4b/0x3e0
[  235.780938][ T8425]  ? __virt_addr_valid+0x1c8/0x5c0
[  235.780961][ T8425]  ? __virt_addr_valid+0x4a5/0x5c0
[  235.780984][ T8425]  print_report+0xd2/0x2b0
[  235.781012][ T8425]  ? bch2_sb_members_v1_to_text+0x1b2/0x2b0
[  235.781045][ T8425]  kasan_report+0x118/0x150
[  235.781066][ T8425]  ? bch2_sb_members_v1_to_text+0x1b2/0x2b0
[  235.781104][ T8425]  kasan_check_range+0x2b0/0x2c0
[  235.781124][ T8425]  ? bch2_sb_members_v1_to_text+0x1b2/0x2b0
[  235.781157][ T8425]  __asan_memcpy+0x29/0x70
[  235.781186][ T8425]  bch2_sb_members_v1_to_text+0x1b2/0x2b0
[  235.781226][ T8425]  ? bch2_prt_printf+0x5a2/0x740
[  235.781248][ T8425]  ? __pfx_bch2_sb_members_v1_to_text+0x10/0x10
[  235.781287][ T8425]  ? bch2_prt_newline+0x4a8/0xab0
[  235.781309][ T8425]  ? bch2_printbuf_tabstop_push+0xda/0x240
[  235.781334][ T8425]  ? bch2_sb_field_to_text+0x193/0x260
[  235.781364][ T8425]  bch2_sb_field_validate+0x1c6/0x280
[  235.781393][ T8425]  ? __pfx_bch2_sb_field_validate+0x10/0x10
[  235.781424][ T8425]  ? __pfx_wait_for_common_io+0x10/0x10
[  235.781448][ T8425]  ? bch2_sb_compatible+0x628/0xef0
[  235.781474][ T8425]  ? bch2_opt_validate+0x2cb/0x310
[  235.781509][ T8425]  bch2_sb_validate+0x14bd/0x1980
[  235.781546][ T8425]  ? __pfx_bch2_sb_validate+0x10/0x10
[  235.781571][ T8425]  ? bch2_sb_compatible+0x628/0xef0
[  235.781601][ T8425]  ? read_one_super+0x759/0x850
[  235.781633][ T8425]  ? __pfx_read_one_super+0x10/0x10
[  235.781660][ T8425]  ? bch2_sb_realloc+0x446/0x630
[  235.781687][ T8425]  ? __pfx_bch2_sb_realloc+0x10/0x10
[  235.781711][ T8425]  ? bdev_file_open_by_path+0x37c/0x4d0
[  235.781733][ T8425]  ? rcu_is_watching+0x15/0xb0
[  235.781752][ T8425]  ? __pfx_bdev_file_open_by_path+0x10/0x10
[  235.781772][ T8425]  ? kstrdup+0x81/0x100
[  235.781803][ T8425]  __bch2_read_super+0xba4/0x1040
[  235.781833][ T8425]  ? stack_depot_save_flags+0x40/0x900
[  235.781865][ T8425]  ? __pfx___bch2_read_super+0x10/0x10
[  235.781932][ T8425]  ? __bch2_darray_resize_noprof+0x1c9/0x290
[  235.781957][ T8425]  ? rcu_is_watching+0x15/0xb0
[  235.781984][ T8425]  bch2_fs_open+0x1fe/0x2570
[  235.782005][ T8425]  ? __se_sys_mount+0x317/0x410
[  235.782027][ T8425]  ? do_syscall_64+0xfa/0x3b0
[  235.782051][ T8425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.782085][ T8425]  ? __pfx_bch2_fs_open+0x10/0x10
[  235.782113][ T8425]  ? kasan_quarantine_put+0xdd/0x220
[  235.782152][ T8425]  ? sget+0x267/0x620
[  235.782180][ T8425]  ? __pfx_bch2_noset_super+0x10/0x10
[  235.782212][ T8425]  bch2_fs_get_tree+0x437/0x14f0
[  235.782249][ T8425]  ? bch2_parse_one_mount_opt+0x25b/0x880
[  235.782279][ T8425]  ? __pfx_bch2_fs_get_tree+0x10/0x10
[  235.782321][ T8425]  ? aa_get_newest_label+0xf7/0x5d0
[  235.782348][ T8425]  ? vfs_parse_monolithic_sep+0x2df/0x310
[  235.782378][ T8425]  ? apparmor_capable+0x137/0x1b0
[  235.782415][ T8425]  vfs_get_tree+0x8f/0x2b0
[  235.782436][ T8425]  do_new_mount+0x24a/0xa40
[  235.782462][ T8425]  __se_sys_mount+0x317/0x410
[  235.782488][ T8425]  ? __pfx___se_sys_mount+0x10/0x10
[  235.782514][ T8425]  ? do_syscall_64+0xbe/0x3b0
[  235.782538][ T8425]  ? __x64_sys_mount+0x20/0xc0
[  235.782562][ T8425]  do_syscall_64+0xfa/0x3b0
[  235.782586][ T8425]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.782609][ T8425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.782631][ T8425]  ? clear_bhb_loop+0x60/0xb0
[  235.782654][ T8425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.782675][ T8425] RIP: 0033:0x7f1d7a1900ca
[  235.782695][ T8425] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.782715][ T8425] RSP: 002b:00007f1d7b081e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  235.782737][ T8425] RAX: ffffffffffffffda RBX: 00007f1d7b081ef0 RCX: 00007f1d7a1900ca
[  235.782754][ T8425] RDX: 0000200000005b00 RSI: 0000200000005b40 RDI: 00007f1d7b081eb0
[  235.782770][ T8425] RBP: 0000200000005b00 R08: 00007f1d7b081ef0 R09: 0000000000000000
[  235.782784][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000005b40
[  235.782799][ T8425] R13: 00007f1d7b081eb0 R14: 0000000000005b30 R15: 0000200000005b80
[  235.782823][ T8425]  </TASK>
[  235.782831][ T8425] 
[  236.238393][ T8425] Allocated by task 8425:
[  236.242732][ T8425]  kasan_save_track+0x3e/0x80
[  236.247446][ T8425]  __kasan_kmalloc+0x93/0xb0
[  236.252066][ T8425]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  236.258510][ T8425]  krealloc_noprof+0x124/0x340
[  236.263296][ T8425]  bch2_sb_realloc+0x348/0x630
[  236.268088][ T8425]  read_one_super+0x3a3/0x850
[  236.272783][ T8425]  __bch2_read_super+0x6c6/0x1040
[  236.277833][ T8425]  bch2_fs_open+0x1fe/0x2570
[  236.282438][ T8425]  bch2_fs_get_tree+0x437/0x14f0
[  236.287403][ T8425]  vfs_get_tree+0x8f/0x2b0
[  236.291829][ T8425]  do_new_mount+0x24a/0xa40
[  236.296352][ T8425]  __se_sys_mount+0x317/0x410
[  236.301045][ T8425]  do_syscall_64+0xfa/0x3b0
[  236.305582][ T8425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.311518][ T8425] 
[  236.313861][ T8425] The buggy address belongs to the object at ffff888046848000
[  236.313861][ T8425]  which belongs to the cache kmalloc-8k of size 8192
[  236.327934][ T8425] The buggy address is located 0 bytes to the right of
[  236.327934][ T8425]  allocated 8192-byte region [ffff888046848000, ffff88804684a000)
[  236.342541][ T8425] 
[  236.344875][ T8425] The buggy address belongs to the physical page:
[  236.351321][ T8425] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46848
[  236.360100][ T8425] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  236.368615][ T8425] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  236.376179][ T8425] page_type: f5(slab)
[  236.380175][ T8425] raw: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  236.388782][ T8425] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  236.397381][ T8425] head: 00fff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  236.406063][ T8425] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  236.414743][ T8425] head: 00fff00000000003 ffffea00011a1201 00000000ffffffff 00000000ffffffff
[  236.423425][ T8425] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  236.432101][ T8425] page dumped because: kasan: bad access detected
[  236.438533][ T8425] page_owner tracks the page as allocated
[  236.444282][ T8425] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5511, tgid 5511 (dhcpcd-run-hook), ts 57709528614, free_ts 57707950317
[  236.465792][ T8425]  post_alloc_hook+0x240/0x2a0
[  236.470576][ T8425]  get_page_from_freelist+0x21e4/0x22c0
[  236.476151][ T8425]  __alloc_frozen_pages_noprof+0x181/0x370
[  236.481976][ T8425]  alloc_pages_mpol+0x232/0x4a0
[  236.486838][ T8425]  allocate_slab+0x8a/0x3b0
[  236.491361][ T8425]  ___slab_alloc+0xbfc/0x1480
[  236.496054][ T8425]  __kmalloc_cache_noprof+0x296/0x3d0
[  236.501448][ T8425]  tomoyo_init_log+0x111f/0x1f70
[  236.506408][ T8425]  tomoyo_supervisor+0x340/0x1480
[  236.511449][ T8425]  tomoyo_env_perm+0x149/0x1e0
[  236.516227][ T8425]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  236.521882][ T8425]  tomoyo_bprm_check_security+0x11c/0x180
[  236.527626][ T8425]  security_bprm_check+0x89/0x270
[  236.532672][ T8425]  bprm_execve+0x8ee/0x1450
[  236.537196][ T8425]  do_execveat_common+0x510/0x6a0
[  236.542241][ T8425]  __x64_sys_execve+0x94/0xb0
[  236.546941][ T8425] page last free pid 5511 tgid 5511 stack trace:
[  236.553273][ T8425]  __free_frozen_pages+0xc71/0xe70
[  236.558407][ T8425]  __put_partials+0x161/0x1c0
[  236.563102][ T8425]  put_cpu_partial+0x17c/0x250
[  236.567886][ T8425]  __slab_free+0x2f7/0x400
[  236.572316][ T8425]  qlist_free_all+0x97/0x140
[  236.576930][ T8425]  kasan_quarantine_reduce+0x148/0x160
[  236.582405][ T8425]  __kasan_slab_alloc+0x22/0x80
[  236.587278][ T8425]  __kmalloc_cache_noprof+0x1be/0x3d0
[  236.592672][ T8425]  tomoyo_init_log+0x111f/0x1f70
[  236.597629][ T8425]  tomoyo_supervisor+0x340/0x1480
[  236.602678][ T8425]  tomoyo_env_perm+0x149/0x1e0
[  236.607458][ T8425]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  236.613101][ T8425]  tomoyo_bprm_check_security+0x11c/0x180
[  236.618844][ T8425]  security_bprm_check+0x89/0x270
[  236.623885][ T8425]  bprm_execve+0x8ee/0x1450
[  236.628410][ T8425]  do_execveat_common+0x510/0x6a0
[  236.633546][ T8425] 
[  236.635878][ T8425] Memory state around the buggy address:
[  236.641514][ T8425]  ffff888046849f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  236.649597][ T8425]  ffff888046849f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  236.657765][ T8425] >ffff88804684a000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  236.665837][ T8425]                    ^
[  236.669913][ T8425]  ffff88804684a080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  236.677986][ T8425]  ffff88804684a100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  236.686052][ T8425] ==================================================================
[  236.782195][ T8437] loop4: detected capacity change from 0 to 32768
[  236.797054][ T8425] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  236.804305][ T8425] CPU: 1 UID: 0 PID: 8425 Comm: syz.0.1072 Not tainted 6.16.0-rc1-next-20250610-syzkaller #0 PREEMPT(full) 
[  236.815803][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  236.825898][ T8425] Call Trace:
[  236.829212][ T8425]  <TASK>
[  236.832172][ T8425]  dump_stack_lvl+0x99/0x250
[  236.836813][ T8425]  ? __asan_memcpy+0x40/0x70
[  236.841453][ T8425]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.846693][ T8425]  ? __pfx__printk+0x10/0x10
[  236.851338][ T8425]  panic+0x2db/0x790
[  236.855290][ T8425]  ? __pfx_panic+0x10/0x10
[  236.859767][ T8425]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  236.865702][ T8425]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  236.872084][ T8425]  ? print_memory_metadata+0x314/0x400
[  236.877598][ T8425]  ? bch2_sb_members_v1_to_text+0x1b2/0x2b0
[  236.883559][ T8425]  check_panic_on_warn+0x89/0xb0
[  236.888537][ T8425]  ? bch2_sb_members_v1_to_text+0x1b2/0x2b0
[  236.894461][ T8425]  end_report+0x78/0x160
[  236.898732][ T8425]  kasan_report+0x129/0x150
[  236.903256][ T8425]  ? bch2_sb_members_v1_to_text+0x1b2/0x2b0
[  236.909195][ T8425]  kasan_check_range+0x2b0/0x2c0
[  236.914169][ T8425]  ? bch2_sb_members_v1_to_text+0x1b2/0x2b0
[  236.920111][ T8425]  __asan_memcpy+0x29/0x70
[  236.924571][ T8425]  bch2_sb_members_v1_to_text+0x1b2/0x2b0
[  236.930345][ T8425]  ? bch2_prt_printf+0x5a2/0x740
[  236.935325][ T8425]  ? __pfx_bch2_sb_members_v1_to_text+0x10/0x10
[  236.941720][ T8425]  ? bch2_prt_newline+0x4a8/0xab0
[  236.946799][ T8425]  ? bch2_printbuf_tabstop_push+0xda/0x240
[  236.952640][ T8425]  ? bch2_sb_field_to_text+0x193/0x260
[  236.958155][ T8425]  bch2_sb_field_validate+0x1c6/0x280
[  236.963563][ T8425]  ? __pfx_bch2_sb_field_validate+0x10/0x10
[  236.969500][ T8425]  ? __pfx_wait_for_common_io+0x10/0x10
[  236.975066][ T8425]  ? bch2_sb_compatible+0x628/0xef0
[  236.980287][ T8425]  ? bch2_opt_validate+0x2cb/0x310
[  236.985770][ T8425]  bch2_sb_validate+0x14bd/0x1980
[  236.990844][ T8425]  ? __pfx_bch2_sb_validate+0x10/0x10
[  236.996241][ T8425]  ? bch2_sb_compatible+0x628/0xef0
[  237.001472][ T8425]  ? read_one_super+0x759/0x850
[  237.006361][ T8425]  ? __pfx_read_one_super+0x10/0x10
[  237.011618][ T8425]  ? bch2_sb_realloc+0x446/0x630
[  237.016590][ T8425]  ? __pfx_bch2_sb_realloc+0x10/0x10
[  237.021899][ T8425]  ? bdev_file_open_by_path+0x37c/0x4d0
[  237.027469][ T8425]  ? rcu_is_watching+0x15/0xb0
[  237.032253][ T8425]  ? __pfx_bdev_file_open_by_path+0x10/0x10
[  237.038165][ T8425]  ? kstrdup+0x81/0x100
[  237.042349][ T8425]  __bch2_read_super+0xba4/0x1040
[  237.047411][ T8425]  ? stack_depot_save_flags+0x40/0x900
[  237.052895][ T8425]  ? __pfx___bch2_read_super+0x10/0x10
[  237.058406][ T8425]  ? __bch2_darray_resize_noprof+0x1c9/0x290
[  237.064406][ T8425]  ? rcu_is_watching+0x15/0xb0
[  237.069198][ T8425]  bch2_fs_open+0x1fe/0x2570
[  237.073804][ T8425]  ? __se_sys_mount+0x317/0x410
[  237.078678][ T8425]  ? do_syscall_64+0xfa/0x3b0
[  237.083374][ T8425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.089471][ T8425]  ? __pfx_bch2_fs_open+0x10/0x10
[  237.094518][ T8425]  ? kasan_quarantine_put+0xdd/0x220
[  237.099837][ T8425]  ? sget+0x267/0x620
[  237.103842][ T8425]  ? __pfx_bch2_noset_super+0x10/0x10
[  237.109243][ T8425]  bch2_fs_get_tree+0x437/0x14f0
[  237.114219][ T8425]  ? bch2_parse_one_mount_opt+0x25b/0x880
[  237.119973][ T8425]  ? __pfx_bch2_fs_get_tree+0x10/0x10
[  237.125382][ T8425]  ? aa_get_newest_label+0xf7/0x5d0
[  237.130608][ T8425]  ? vfs_parse_monolithic_sep+0x2df/0x310
[  237.136358][ T8425]  ? apparmor_capable+0x137/0x1b0
[  237.141416][ T8425]  vfs_get_tree+0x8f/0x2b0
[  237.145884][ T8425]  do_new_mount+0x24a/0xa40
[  237.150429][ T8425]  __se_sys_mount+0x317/0x410
[  237.155135][ T8425]  ? __pfx___se_sys_mount+0x10/0x10
[  237.160561][ T8425]  ? do_syscall_64+0xbe/0x3b0
[  237.165284][ T8425]  ? __x64_sys_mount+0x20/0xc0
[  237.170076][ T8425]  do_syscall_64+0xfa/0x3b0
[  237.174607][ T8425]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.179830][ T8425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.185918][ T8425]  ? clear_bhb_loop+0x60/0xb0
[  237.190625][ T8425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.196533][ T8425] RIP: 0033:0x7f1d7a1900ca
[  237.201068][ T8425] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.222827][ T8425] RSP: 002b:00007f1d7b081e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  237.231266][ T8425] RAX: ffffffffffffffda RBX: 00007f1d7b081ef0 RCX: 00007f1d7a1900ca
[  237.239278][ T8425] RDX: 0000200000005b00 RSI: 0000200000005b40 RDI: 00007f1d7b081eb0
[  237.247265][ T8425] RBP: 0000200000005b00 R08: 00007f1d7b081ef0 R09: 0000000000000000
[  237.255247][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000005b40
[  237.263238][ T8425] R13: 00007f1d7b081eb0 R14: 0000000000005b30 R15: 0000200000005b80
[  237.271282][ T8425]  </TASK>
[  237.274461][ T8425] Kernel Offset: disabled
[  237.278809][ T8425] Rebooting in 86400 seconds..