last executing test programs: 748.531912ms ago: executing program 1 (id=1471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r0) 649.816985ms ago: executing program 4 (id=1476): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000540)="e49dac", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)='7', 0x1}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="14"], 0x18}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000140)='\n_', 0x2}], 0x1}}], 0x3, 0x240048d1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'lo\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$key(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYRESHEX=r1], 0x88}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000c00)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000c40)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000c80)={&(0x7f0000000cc0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'dvmrp0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r9}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002580)={r2, 0x0, 0x52, 0xdf, &(0x7f00000002c0)="59307cba942f163b00273ac943c1d80350c53eb8e6dafcfc71b9c74be9a8e4b71bf62326c16c0621071bd9703970e1428914d6d422cb5c7e27e8d47cc965ee70e44d45d3b03d1c1d41e53288388d55b1e8aa", &(0x7f0000000340)=""/223, 0x6, 0x0, 0xce, 0x1000, &(0x7f0000000440)="0a9873e2c5837fce7c0c0583a17c0d90ec64d43179d67d0f5a9a2b931c399bf314c54a6e4205fab890d77cb4bacf8061ffe972b9dc1162c9610cde2e6afdc836e8752602bad2830cd0f8d008141a0334975937bae6638f872babbc9c5b9abfbc5883e85cd5b54f5d5edb7aed8492a362bd80eed6866f55cc1e4e062172a1b5bfb110b9a7ec53dc42e477b267021711dbe39a7f0d24bee2612b7d1f068a0967740cf0d5c506b2a80b09b00fa77ef64775d320233802b7d51218d942157935f2cb2da73425b8c0be91f4f2e5e51aa3", &(0x7f0000001580)="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", 0x4, 0x0, 0x80000000}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x7, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr={0x8, 0x0, 0x0, 0x2, 0x4}, @enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x9, [{0x4, 0x6, 0x9}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @struct={0x3, 0x0, 0x0, 0x4, 0x0, 0x7}, @ptr={0xa}]}, {0x0, [0x0, 0x0, 0x30, 0x5f, 0x0]}}, 0x0, 0x83}, 0x28) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000940)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4b00f25a0000000040060003000000000000001c00"/31], 0x2c}}, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000000000000000000000000000000002000100000000fffffffb160000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 607.923266ms ago: executing program 1 (id=1479): r0 = accept(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0x4, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 532.755168ms ago: executing program 2 (id=1481): socket(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044040) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000280)=0x2a0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r5, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xaf1a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x71}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8040000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000300)={0x0, 0xfffffff5, &(0x7f0000000340)=[{&(0x7f0000000380)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000000480)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r9, @ANYBLOB="080026006c0900000800a0006c09000008005700881300000800a10000100000080027"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 515.160508ms ago: executing program 3 (id=1483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030"], 0xfdef) 474.469819ms ago: executing program 4 (id=1484): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000001000000852000004c46030095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 445.53054ms ago: executing program 4 (id=1485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000037c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000003800)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000003880)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003940)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003a00)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000003a80)=ANY=[@ANYBLOB="ffffffffffff525400123456ed3e000a22010008"], 0x3a) 444.1604ms ago: executing program 1 (id=1486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private=0xa010101, @in=@remote, 0xee24, 0x0, 0x10, 0x3, 0x2}, {0xff, 0x200000004, 0x40000000007, 0xfffffffc, 0x100000000, 0x4, 0x57, 0x9}, {0x2, 0x0, 0x0, 0x7}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x34fe, 0x4, 0x8, 0x0, 0x8000, 0xef, 0x10000}}, 0xe8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x1d, 0x0, 0x0, 0xfffff022}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0) write(r0, &(0x7f0000000200)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 409.178481ms ago: executing program 2 (id=1487): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000001400)={0x0, {0x10, 0x9, 0xffff, 0x3, 0x7}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90021118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000200)="09c69e16e16067", 0x28}], 0x2) 352.273982ms ago: executing program 3 (id=1490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r0) 332.466813ms ago: executing program 2 (id=1491): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000bc0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000001100)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)='.', 0x1a000}}, 0xfe) write(r0, 0x0, 0x0) 331.135733ms ago: executing program 0 (id=1492): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'netdevsim0\x00', @remote}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030005ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 315.565003ms ago: executing program 4 (id=1493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00009100aaaaaaaaaaaa"], 0x2a) 300.658293ms ago: executing program 2 (id=1494): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000540)="e49dac", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)='7', 0x1}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="14"], 0x18}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000140)='\n_', 0x2}], 0x1}}], 0x3, 0x240048d1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'lo\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$key(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYRESHEX=r1], 0x88}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000c00)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000c40)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000c80)={&(0x7f0000000cc0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'dvmrp0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r9}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002580)={r2, 0x0, 0x52, 0xdf, &(0x7f00000002c0)="59307cba942f163b00273ac943c1d80350c53eb8e6dafcfc71b9c74be9a8e4b71bf62326c16c0621071bd9703970e1428914d6d422cb5c7e27e8d47cc965ee70e44d45d3b03d1c1d41e53288388d55b1e8aa", &(0x7f0000000340)=""/223, 0x6, 0x0, 0xce, 0x1000, &(0x7f0000000440)="0a9873e2c5837fce7c0c0583a17c0d90ec64d43179d67d0f5a9a2b931c399bf314c54a6e4205fab890d77cb4bacf8061ffe972b9dc1162c9610cde2e6afdc836e8752602bad2830cd0f8d008141a0334975937bae6638f872babbc9c5b9abfbc5883e85cd5b54f5d5edb7aed8492a362bd80eed6866f55cc1e4e062172a1b5bfb110b9a7ec53dc42e477b267021711dbe39a7f0d24bee2612b7d1f068a0967740cf0d5c506b2a80b09b00fa77ef64775d320233802b7d51218d942157935f2cb2da73425b8c0be91f4f2e5e51aa3", &(0x7f0000001580)="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", 0x4, 0x0, 0x80000000}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x7, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @ptr={0x8, 0x0, 0x0, 0x2, 0x4}, @enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x9, [{0x4, 0x6, 0x9}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @struct={0x3, 0x0, 0x0, 0x4, 0x0, 0x7}, @ptr={0xa}]}, {0x0, [0x0, 0x0, 0x30, 0x5f, 0x0]}}, 0x0, 0x83}, 0x28) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000940)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4b00f25a0000000040060003000000000000001c00"/31], 0x2c}}, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000000000000000000000000000000002000100000000fffffffb160000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 277.542964ms ago: executing program 0 (id=1495): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000400)={r2, 0xfffffff8}, 0x8) 276.602184ms ago: executing program 1 (id=1496): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x4001, 0x3, 0x540, 0x2d0, 0x0, 0x148, 0x2d0, 0x148, 0x4a8, 0x240, 0x240, 0x4a8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x0, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x7f, 'netbios-ns\x00'}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) 235.025885ms ago: executing program 1 (id=1497): r0 = accept(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0x4, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 234.622245ms ago: executing program 0 (id=1498): socket(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044040) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000280)=0x2a0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r5, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xaf1a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x71}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8040000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000300)={0x0, 0xfffffff5, &(0x7f0000000340)=[{&(0x7f0000000380)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000000480)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r9, @ANYBLOB="080026006c0900000800a0006c09000008005700881300000800a10000100000080027"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 233.232285ms ago: executing program 3 (id=1499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000000a0601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 198.005846ms ago: executing program 3 (id=1500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030"], 0xfdef) 175.744076ms ago: executing program 2 (id=1501): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000001400)={0x0, {0x10, 0x9, 0xffff, 0x3, 0x7}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90021118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000200)="09c69e16e16067", 0x28}], 0x2) 143.329107ms ago: executing program 4 (id=1502): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 142.520897ms ago: executing program 0 (id=1503): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000001900), r4) socket(0x10, 0x3, 0x0) 71.045569ms ago: executing program 2 (id=1504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000037c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000003800)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000003880)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003940)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003a00)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000003a80)=ANY=[@ANYBLOB="ffffffffffff525400123456ed3e000a22010008"], 0x3a) 70.101099ms ago: executing program 3 (id=1505): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000bc0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000001100)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)='.', 0x1a000}}, 0xfe) write(r0, 0x0, 0x0) 55.898689ms ago: executing program 0 (id=1506): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'netdevsim0\x00', @remote}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030005ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 37.933009ms ago: executing program 3 (id=1507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private=0xa010101, @in=@remote, 0xee24, 0x0, 0x10, 0x3, 0x2}, {0xff, 0x200000004, 0x40000000007, 0xfffffffc, 0x100000000, 0x4, 0x57, 0x9}, {0x2, 0x0, 0x0, 0x7}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x34fe, 0x4, 0x8, 0x0, 0x8000, 0xef, 0x10000}}, 0xe8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x1d, 0x0, 0x0, 0xfffff022}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0) write(r0, &(0x7f0000000200)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 32.26131ms ago: executing program 1 (id=1508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b40)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000cc0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000d00)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x10000000, 0xb, 0xdc}, 0x1, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000e80), 0x56) sendmsg$kcm(r6, &(0x7f0000000ec0)={&(0x7f0000000f00)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) socket$inet_udp(0x2, 0x2, 0x0) 276.65µs ago: executing program 4 (id=1509): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000000000000000000010000"], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x4040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000008c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000900)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000980)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000a00)="8a0cca", 0x3}], 0x1}}], 0x1, 0x2000c090) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000640)='\b\x00', 0x2}, {&(0x7f0000000680)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000000000000000000340000"], 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x8, r4, 0x1, 0xba, 0x6, @broadcast}, 0x14) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000740)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000007c0)={0x1, [0x0]}, &(0x7f0000000800)=0x8) setsockopt$inet_sctp6_SCTP_EVENT(r6, 0x84, 0x7f, &(0x7f0000000840)={r7, 0x8006}, 0x8) setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r5, 0x84, 0x80, &(0x7f0000000880)={r7, 0x9}, 0x8) write(r0, &(0x7f0000000000)="010000000000000020", 0x9) 0s ago: executing program 0 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r0) kernel console output (not intermixed with test programs): urned -16 [ 84.957769][ T5912] loop3: detected capacity change from 0 to 32768 [ 84.979682][ T5912] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 84.983306][ T5912] JBD2: Ignoring recovery information on journal [ 84.986436][ T5912] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 84.988090][ T5912] JBD2: bad block at offset 32 [ 84.990013][ T5912] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 85.204177][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 85.509249][ T5926] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 85.512641][ T5926] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 85.518169][ T5926] OCFS2: File system is now read-only. [ 85.519089][ T5926] (syz.3.393,5926,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 85.520504][ T5926] (syz.3.393,5926,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 85.521852][ T5926] (syz.3.393,5926,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 85.523209][ T5926] (syz.3.393,5926,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 85.551276][ T5926] (syz.3.393,5926,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 85.552643][ T5926] (syz.3.393,5926,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 85.554099][ T5926] (syz.3.393,5926,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 85.589010][ T5926] (syz.3.393,5926,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 85.759246][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.766483][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.970708][ T5940] loop1: detected capacity change from 0 to 256 [ 85.983748][ T5940] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 86.000496][ T5940] exFAT-fs (loop1): hint_cluster is invalid (17) [ 86.018616][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 86.059934][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.061931][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.989841][ T5960] loop1: detected capacity change from 0 to 32768 [ 87.005990][ T5960] JBD2: Ignoring recovery information on journal [ 87.007830][ T5960] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 87.009311][ T5960] JBD2: bad block at offset 32 [ 87.011171][ T5960] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 87.432819][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.453727][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.997384][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 88.053687][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.056894][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.134434][ T5978] loop3: detected capacity change from 0 to 32768 [ 88.145812][ T5978] JBD2: Ignoring recovery information on journal [ 88.148743][ T5978] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 88.150311][ T5978] JBD2: bad block at offset 32 [ 88.152789][ T5978] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 88.218958][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.221351][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.445242][ T5988] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 88.449089][ T5988] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 88.450736][ T5988] OCFS2: File system is now read-only. [ 88.451633][ T5988] (syz.3.414,5988,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 88.453153][ T5988] (syz.3.414,5988,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 88.454497][ T5988] (syz.3.414,5988,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 88.455798][ T5988] (syz.3.414,5988,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 88.457197][ T5988] (syz.3.414,5988,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 88.458424][ T5988] (syz.3.414,5988,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 88.459797][ T5988] (syz.3.414,5988,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 88.461188][ T5988] (syz.3.414,5988,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 88.519548][ T5990] loop2: detected capacity change from 0 to 256 [ 88.523705][ T5990] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 88.531611][ T5990] exFAT-fs (loop2): hint_cluster is invalid (17) [ 89.002529][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 89.500663][ T6015] loop2: detected capacity change from 0 to 32768 [ 89.530326][ T6015] JBD2: Ignoring recovery information on journal [ 89.532349][ T6015] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 89.534014][ T6015] JBD2: bad block at offset 32 [ 89.541501][ T6015] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.248376][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.250828][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.550602][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 90.598720][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.600734][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.600783][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.603944][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.097811][ T6035] loop1: detected capacity change from 0 to 32768 [ 91.141299][ T6035] JBD2: Ignoring recovery information on journal [ 91.144036][ T6035] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 91.150209][ T6035] JBD2: bad block at offset 32 [ 91.153667][ T6043] loop2: detected capacity change from 0 to 256 [ 91.157662][ T6035] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 91.166320][ T6043] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 91.177442][ T6043] exFAT-fs (loop2): hint_cluster is invalid (17) [ 91.428763][ T6050] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 91.432753][ T6050] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 91.434682][ T6050] OCFS2: File system is now read-only. [ 91.435888][ T6050] (syz.1.430,6050,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 91.437490][ T6050] (syz.1.430,6050,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 91.439304][ T6050] (syz.1.430,6050,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 91.440832][ T6050] (syz.1.430,6050,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 91.442386][ T6050] (syz.1.430,6050,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 91.444025][ T6050] (syz.1.430,6050,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 91.445957][ T6050] (syz.1.430,6050,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 91.447971][ T6050] (syz.1.430,6050,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 92.037824][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 92.204003][ T6063] loop1: detected capacity change from 0 to 32768 [ 92.213272][ T6063] JBD2: Ignoring recovery information on journal [ 92.215119][ T6063] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 92.216574][ T6063] JBD2: bad block at offset 32 [ 92.228113][ T6063] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 93.089278][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 93.156200][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.157745][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.454462][ T4551] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.539712][ T6092] loop3: detected capacity change from 0 to 256 [ 93.563826][ T6092] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 93.571813][ T6092] exFAT-fs (loop3): hint_cluster is invalid (17) [ 93.644847][ T6094] loop4: detected capacity change from 0 to 32768 [ 93.654473][ T4551] usb 1-1: Using ep0 maxpacket: 16 [ 93.657887][ T4551] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.659144][ T4551] usb 1-1: config 0 has no interface number 0 [ 93.660122][ T4551] usb 1-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.662337][ T4551] usb 1-1: config 0 interface 1 has no altsetting 0 [ 93.663684][ T4551] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 93.667439][ T4551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.671764][ T6094] JBD2: Ignoring recovery information on journal [ 93.678768][ T6094] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 93.680349][ T6094] JBD2: bad block at offset 32 [ 93.682114][ T4551] usb 1-1: config 0 descriptor?? [ 93.963652][ T6094] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 93.972704][ T4551] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 93.993457][ T6101] loop1: detected capacity change from 0 to 512 [ 94.046920][ T5666] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.232107][ T6106] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 94.235666][ T6106] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 94.237285][ T6106] OCFS2: File system is now read-only. [ 94.238318][ T6106] (syz.4.448,6106,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 94.239730][ T6106] (syz.4.448,6106,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 94.241115][ T6106] (syz.4.448,6106,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 94.242452][ T6106] (syz.4.448,6106,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 94.243891][ T6106] (syz.4.448,6106,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 94.245367][ T6106] (syz.4.448,6106,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 94.246807][ T6106] (syz.4.448,6106,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 94.248191][ T6106] (syz.4.448,6106,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 94.644512][ T6110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.648167][ T6110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.674775][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 94.713194][ T6108] loop2: detected capacity change from 0 to 32768 [ 94.732731][ T6108] JBD2: Ignoring recovery information on journal [ 94.734703][ T6108] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 94.736151][ T6108] JBD2: bad block at offset 32 [ 94.788645][ T6108] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 95.185878][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 95.659419][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.661994][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.794297][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 96.030734][ T6148] loop4: detected capacity change from 0 to 32768 [ 96.044520][ T6148] JBD2: Ignoring recovery information on journal [ 96.046475][ T6148] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 96.047944][ T6148] JBD2: bad block at offset 32 [ 96.050320][ T6148] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 96.264178][ T6154] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 96.268266][ T6154] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 96.269983][ T6154] OCFS2: File system is now read-only. [ 96.271099][ T6154] (syz.4.462,6154,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 96.272554][ T6154] (syz.4.462,6154,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 96.273959][ T6154] (syz.4.462,6154,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 96.275488][ T6154] (syz.4.462,6154,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 96.276902][ T6154] (syz.4.462,6154,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 96.278256][ T6154] (syz.4.462,6154,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 96.279735][ T6154] (syz.4.462,6154,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 96.281463][ T6154] (syz.4.462,6154,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 96.529561][ T4551] usb 1-1: USB disconnect, device number 6 [ 96.531924][ T6156] loop3: detected capacity change from 0 to 512 [ 97.286084][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 97.351916][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.353874][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.484060][ T6177] loop1: detected capacity change from 0 to 32768 [ 97.485059][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 97.504946][ T6177] JBD2: Ignoring recovery information on journal [ 97.506758][ T6177] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 97.508193][ T6177] JBD2: bad block at offset 32 [ 97.540637][ T6177] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 98.079143][ T6195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.083313][ T6195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.385277][ T6202] loop4: detected capacity change from 0 to 32768 [ 98.402279][ T6202] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 98.405600][ T6202] JBD2: Ignoring recovery information on journal [ 98.407359][ T6202] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 98.408743][ T6202] JBD2: bad block at offset 32 [ 98.412371][ T6202] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 98.499409][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.511316][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.527132][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 98.895711][ T6213] loop1: detected capacity change from 0 to 512 [ 99.315750][ T6211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.322739][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 99.369994][ T6211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.444181][ T6211] bond0 (unregistering): Released all slaves [ 99.796834][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 99.830910][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.833474][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.123253][ T6240] loop3: detected capacity change from 0 to 32768 [ 100.262883][ T6240] JBD2: Ignoring recovery information on journal [ 100.264717][ T6240] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 100.266197][ T6240] JBD2: bad block at offset 32 [ 100.268503][ T6240] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 100.300206][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.302860][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.616499][ T6254] loop2: detected capacity change from 0 to 32768 [ 100.622476][ T6254] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 100.626396][ T6254] JBD2: Ignoring recovery information on journal [ 100.628262][ T6254] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 100.629697][ T6254] JBD2: bad block at offset 32 [ 100.631644][ T6254] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.078552][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.094781][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.406316][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 101.410837][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 101.513466][ T6275] loop2: detected capacity change from 0 to 512 [ 102.288470][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.291131][ T6294] FAULT_INJECTION: forcing a failure. [ 102.291131][ T6294] name fail_futex, interval 1, probability 0, space 0, times 1 [ 102.291452][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.293512][ T6294] CPU: 0 PID: 6294 Comm: syz.1.503 Not tainted syzkaller #0 [ 102.296192][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.297967][ T6294] Call trace: [ 102.298561][ T6294] dump_backtrace+0x1c4/0x1f0 [ 102.299384][ T6294] show_stack+0x2c/0x3c [ 102.300134][ T6294] __dump_stack+0x30/0x40 [ 102.300916][ T6294] dump_stack_lvl+0xf4/0x15c [ 102.301709][ T6294] dump_stack+0x1c/0x5c [ 102.302439][ T6294] should_fail_ex+0x3cc/0x524 [ 102.303267][ T6294] should_fail+0x14/0x24 [ 102.303993][ T6294] get_futex_key+0x904/0xfb0 [ 102.304773][ T6294] futex_wait_setup+0xbc/0x320 [ 102.305594][ T6294] futex_wait+0x164/0x424 [ 102.306335][ T6294] do_futex+0x2e8/0x340 [ 102.307038][ T6294] __arm64_sys_futex+0x390/0x414 [ 102.307904][ T6294] invoke_syscall+0x98/0x290 [ 102.308702][ T6294] el0_svc_common+0x13c/0x258 [ 102.309539][ T6294] do_el0_svc+0x5c/0x134 [ 102.310292][ T6294] el0_svc+0x58/0x12c [ 102.310990][ T6294] el0t_64_sync_handler+0x84/0xf0 [ 102.311854][ T6294] el0t_64_sync+0x18c/0x190 [ 102.314270][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.316949][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.832121][ T6305] loop4: detected capacity change from 0 to 32768 [ 102.845906][ T6305] JBD2: Ignoring recovery information on journal [ 102.847819][ T6305] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 102.849120][ T6305] JBD2: bad block at offset 32 [ 102.851244][ T6305] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 103.039980][ T6309] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 103.043354][ T6309] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 103.045174][ T6309] OCFS2: File system is now read-only. [ 103.046142][ T6309] (syz.4.507,6309,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 103.047624][ T6309] (syz.4.507,6309,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 103.048961][ T6309] (syz.4.507,6309,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 103.050359][ T6309] (syz.4.507,6309,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 103.051756][ T6309] (syz.4.507,6309,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 103.053135][ T6309] (syz.4.507,6309,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 103.054715][ T6309] (syz.4.507,6309,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 103.056326][ T6309] (syz.4.507,6309,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 103.456748][ T6319] loop2: detected capacity change from 0 to 32768 [ 103.466149][ T6319] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 103.469248][ T6319] JBD2: Ignoring recovery information on journal [ 103.470980][ T6319] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 103.472371][ T6319] JBD2: bad block at offset 32 [ 103.491245][ T6319] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 103.617392][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 103.621105][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 103.671594][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.673213][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.716173][ T6331] loop4: detected capacity change from 0 to 512 [ 104.580372][ T6352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.582453][ T6352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.926238][ T6355] FAULT_INJECTION: forcing a failure. [ 104.926238][ T6355] name failslab, interval 1, probability 0, space 0, times 1 [ 104.928900][ T6355] CPU: 1 PID: 6355 Comm: syz.1.522 Not tainted syzkaller #0 [ 104.930307][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.932194][ T6355] Call trace: [ 104.932781][ T6355] dump_backtrace+0x1c4/0x1f0 [ 104.933633][ T6355] show_stack+0x2c/0x3c [ 104.934392][ T6355] __dump_stack+0x30/0x40 [ 104.935174][ T6355] dump_stack_lvl+0xf4/0x15c [ 104.935994][ T6355] dump_stack+0x1c/0x5c [ 104.936737][ T6355] should_fail_ex+0x3cc/0x524 [ 104.937619][ T6355] __should_failslab+0xc0/0x11c [ 104.938642][ T6355] should_failslab+0x10/0x28 [ 104.939597][ T6355] kmem_cache_alloc+0x88/0x310 [ 104.940534][ T6355] getname_flags+0xb8/0x458 [ 104.941499][ T6355] __arm64_sys_mkdirat+0x80/0xa8 [ 104.942543][ T6355] invoke_syscall+0x98/0x290 [ 104.943510][ T6355] el0_svc_common+0x13c/0x258 [ 104.944396][ T6355] do_el0_svc+0x5c/0x134 [ 104.945200][ T6355] el0_svc+0x58/0x12c [ 104.945917][ T6355] el0t_64_sync_handler+0x84/0xf0 [ 104.946844][ T6355] el0t_64_sync+0x18c/0x190 [ 104.952622][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.955769][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.096638][ T6361] loop3: detected capacity change from 0 to 32768 [ 105.107855][ T6361] JBD2: Ignoring recovery information on journal [ 105.109719][ T6361] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 105.111174][ T6361] JBD2: bad block at offset 32 [ 105.113296][ T6361] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 105.207686][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 105.332065][ T6366] loop3: detected capacity change from 0 to 32768 [ 105.340967][ T6366] JBD2: Ignoring recovery information on journal [ 105.342884][ T6366] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 105.344328][ T6366] JBD2: bad block at offset 32 [ 105.365544][ T6366] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 105.613124][ T6381] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 105.616728][ T6381] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 105.618370][ T6381] OCFS2: File system is now read-only. [ 105.619355][ T6381] (syz.3.526,6381,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 105.620811][ T6381] (syz.3.526,6381,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 105.622229][ T6381] (syz.3.526,6381,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 105.623717][ T6381] (syz.3.526,6381,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 105.625325][ T6381] (syz.3.526,6381,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 105.626747][ T6381] (syz.3.526,6381,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 105.628248][ T6381] (syz.3.526,6381,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 105.629838][ T6381] (syz.3.526,6381,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 105.831266][ T6389] loop0: detected capacity change from 0 to 512 [ 105.954959][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.975753][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.568000][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 106.733371][ T6406] loop2: detected capacity change from 0 to 32768 [ 106.771110][ T6406] JBD2: Ignoring recovery information on journal [ 106.773155][ T6406] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 106.774976][ T6406] JBD2: bad block at offset 32 [ 106.784844][ T6406] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 106.798419][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.802553][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.885746][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 107.032583][ T6425] loop2: detected capacity change from 0 to 32768 [ 107.283565][ T6425] JBD2: Ignoring recovery information on journal [ 107.285500][ T6425] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 107.286889][ T6425] JBD2: bad block at offset 32 [ 107.288731][ T6425] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 107.398299][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 107.528778][ T6438] loop4: detected capacity change from 0 to 32768 [ 107.533595][ T6438] JBD2: Ignoring recovery information on journal [ 107.535690][ T6438] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 107.537375][ T6438] JBD2: bad block at offset 32 [ 107.550347][ T6438] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 107.651174][ T6446] ip_tables: iptables: counters copy to user failed while replacing table [ 107.728914][ T6447] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 107.732675][ T6447] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 107.734267][ T6447] OCFS2: File system is now read-only. [ 107.735399][ T6447] (syz.4.545,6447,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 107.736730][ T6447] (syz.4.545,6447,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 107.738004][ T6447] (syz.4.545,6447,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 107.739350][ T6447] (syz.4.545,6447,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 107.740827][ T6447] (syz.4.545,6447,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 107.742171][ T6447] (syz.4.545,6447,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 107.743640][ T6447] (syz.4.545,6447,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 107.745361][ T6447] (syz.4.545,6447,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 107.985037][ T6451] loop3: detected capacity change from 0 to 512 [ 108.740991][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 108.807530][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.809641][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.894640][ T6467] loop4: detected capacity change from 0 to 32768 [ 108.969240][ T6470] loop3: detected capacity change from 0 to 32768 [ 108.977452][ T6467] JBD2: Ignoring recovery information on journal [ 108.979271][ T6467] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 108.980650][ T6467] JBD2: bad block at offset 32 [ 108.992533][ T6467] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 109.031942][ T6470] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 109.045503][ T6470] JBD2: Ignoring recovery information on journal [ 109.047254][ T6470] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 109.048662][ T6470] JBD2: bad block at offset 32 [ 109.062487][ T6470] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 109.182859][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 109.286211][ T6463] loop1: detected capacity change from 0 to 32768 [ 109.287956][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.291179][ T6463] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.552 (6463) [ 109.293180][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.299705][ T6463] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.301633][ T6463] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 109.303273][ T6463] BTRFS info (device loop1): use zlib compression, level 3 [ 109.312234][ T6463] BTRFS info (device loop1): turning on sync discard [ 109.313446][ T6463] BTRFS info (device loop1): using free space tree [ 109.343212][ T6463] BTRFS info (device loop1): enabling ssd optimizations [ 109.447530][ T6507] loop2: detected capacity change from 0 to 256 [ 109.458130][ T6507] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 109.475465][ T6507] exFAT-fs (loop2): hint_cluster is invalid (17) [ 109.889551][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 110.180756][ T6517] loop0: detected capacity change from 0 to 32768 [ 110.201749][ T6517] JBD2: Ignoring recovery information on journal [ 110.203665][ T6517] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 110.205267][ T6517] JBD2: bad block at offset 32 [ 110.209190][ T6517] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.257244][ T4329] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.330582][ T6524] loop2: detected capacity change from 0 to 512 [ 110.388239][ T6525] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 110.391688][ T6525] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 110.393323][ T6525] OCFS2: File system is now read-only. [ 110.394271][ T6525] (syz.0.561,6525,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 110.395904][ T6525] (syz.0.561,6525,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 110.397359][ T6525] (syz.0.561,6525,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 110.398800][ T6525] (syz.0.561,6525,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 110.400281][ T6525] (syz.0.561,6525,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 110.401661][ T6525] (syz.0.561,6525,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 110.403257][ T6525] (syz.0.561,6525,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 110.404973][ T6525] (syz.0.561,6525,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 111.212364][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 111.347193][ T6533] loop3: detected capacity change from 0 to 32768 [ 111.358707][ T6533] JBD2: Ignoring recovery information on journal [ 111.360673][ T6533] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 111.362009][ T6533] JBD2: bad block at offset 32 [ 111.374110][ T6533] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 111.711256][ T6547] ip_tables: iptables: counters copy to user failed while replacing table [ 111.718438][ T6547] device syzkaller1 entered promiscuous mode [ 111.872798][ T6553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.874831][ T6553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.943035][ T6551] loop4: detected capacity change from 0 to 32768 [ 111.962547][ T6551] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 111.966087][ T6551] JBD2: Ignoring recovery information on journal [ 111.967945][ T6551] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 111.969523][ T6551] JBD2: bad block at offset 32 [ 111.982364][ T6551] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 112.189611][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 112.403309][ T6567] loop1: detected capacity change from 0 to 32768 [ 112.409409][ T6567] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.574 (6567) [ 112.416681][ T6567] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.418401][ T6567] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 112.419908][ T6567] BTRFS info (device loop1): use zlib compression, level 3 [ 112.424123][ T6567] BTRFS info (device loop1): turning on sync discard [ 112.429207][ T6567] BTRFS info (device loop1): using free space tree [ 112.435569][ T6569] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 112.441763][ T6567] BTRFS info (device loop1): enabling ssd optimizations [ 112.448821][ T6569] exFAT-fs (loop2): hint_cluster is invalid (17) [ 112.847123][ T5827] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.864970][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 113.005568][ T5827] usb 1-1: device descriptor read/64, error -71 [ 113.019957][ T6593] set_capacity_and_notify: 1 callbacks suppressed [ 113.019965][ T6593] loop4: detected capacity change from 0 to 32768 [ 113.033647][ T6593] JBD2: Ignoring recovery information on journal [ 113.035513][ T6593] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 113.036980][ T6593] JBD2: bad block at offset 32 [ 113.045719][ T6593] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 113.221840][ T6601] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 113.231400][ T6601] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 113.233337][ T6601] OCFS2: File system is now read-only. [ 113.235638][ T6601] (syz.4.576,6601,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 113.237367][ T6601] (syz.4.576,6601,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 113.239021][ T6601] (syz.4.576,6601,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 113.240605][ T6601] (syz.4.576,6601,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 113.242446][ T6601] (syz.4.576,6601,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 113.243934][ T6601] (syz.4.576,6601,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 113.245754][ T6601] (syz.4.576,6601,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 113.248278][ T6601] (syz.4.576,6601,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 113.284455][ T5827] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.313471][ T6603] loop2: detected capacity change from 0 to 512 [ 113.437817][ T5827] usb 1-1: device descriptor read/64, error -71 [ 113.571705][ T4329] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.583222][ T5827] usb usb1-port1: attempt power cycle [ 113.993584][ T6612] ip_tables: iptables: counters copy to user failed while replacing table [ 113.997755][ T6612] device syzkaller1 entered promiscuous mode [ 113.999900][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 114.014489][ T5827] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.045364][ T5827] usb 1-1: device descriptor read/8, error -71 [ 114.248270][ T6625] loop2: detected capacity change from 0 to 32768 [ 114.324614][ T5827] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 114.356942][ T5827] usb 1-1: device descriptor read/8, error -71 [ 114.432967][ T6625] JBD2: Ignoring recovery information on journal [ 114.434867][ T6625] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 114.436419][ T6625] JBD2: bad block at offset 32 [ 114.445918][ T6625] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 114.451253][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.518103][ T5827] usb usb1-port1: unable to enumerate USB device [ 114.523634][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.545788][ T6630] loop3: detected capacity change from 0 to 32768 [ 114.549469][ T6630] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 114.552415][ T6630] JBD2: Ignoring recovery information on journal [ 114.554298][ T6630] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 114.555863][ T6630] JBD2: bad block at offset 32 [ 114.565046][ T6630] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 114.959328][ T6640] loop1: detected capacity change from 0 to 256 [ 114.971347][ T6640] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 114.980579][ T6640] exFAT-fs (loop1): hint_cluster is invalid (17) [ 115.044033][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 115.413508][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 115.502576][ T6651] loop0: detected capacity change from 0 to 32768 [ 115.513782][ T6651] JBD2: Ignoring recovery information on journal [ 115.515727][ T6651] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 115.517208][ T6651] JBD2: bad block at offset 32 [ 115.527439][ T6651] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.707645][ T6661] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 115.717468][ T6661] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 115.720404][ T6653] loop3: detected capacity change from 0 to 32768 [ 115.721429][ T6661] OCFS2: File system is now read-only. [ 115.728742][ T6653] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.591 (6653) [ 115.739058][ T6653] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.740433][ T6661] (syz.0.592,6661,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 115.740654][ T6653] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 115.743542][ T6653] BTRFS info (device loop3): use zlib compression, level 3 [ 115.744963][ T6653] BTRFS info (device loop3): turning on sync discard [ 115.746146][ T6653] BTRFS info (device loop3): using free space tree [ 115.747534][ T6661] (syz.0.592,6661,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 115.749206][ T6661] (syz.0.592,6661,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 115.750694][ T6661] (syz.0.592,6661,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 115.752282][ T6661] (syz.0.592,6661,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 115.753642][ T6661] (syz.0.592,6661,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 115.755560][ T6661] (syz.0.592,6661,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 115.756966][ T6661] (syz.0.592,6661,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 115.901695][ T6678] loop1: detected capacity change from 0 to 512 [ 115.957208][ T6685] ip_tables: iptables: counters copy to user failed while replacing table [ 115.964228][ T6685] device syzkaller1 entered promiscuous mode [ 116.214182][ T6653] BTRFS info (device loop3): enabling ssd optimizations [ 116.613003][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 116.742596][ T6698] loop4: detected capacity change from 0 to 32768 [ 116.750397][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.758880][ T6698] JBD2: Ignoring recovery information on journal [ 116.759241][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.760754][ T6698] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 116.762943][ T6698] JBD2: bad block at offset 32 [ 116.826560][ T6698] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 117.297275][ T6710] loop1: detected capacity change from 0 to 32768 [ 117.336671][ T6710] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 117.339412][ T6710] JBD2: Ignoring recovery information on journal [ 117.341343][ T6710] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 117.342709][ T6710] JBD2: bad block at offset 32 [ 117.348836][ T6710] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 117.357734][ T4328] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.499619][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.514851][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.535520][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 117.761933][ T6727] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 117.783179][ T6727] exFAT-fs (loop0): hint_cluster is invalid (17) [ 117.886853][ T6731] JBD2: Ignoring recovery information on journal [ 117.888712][ T6731] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 117.890023][ T6731] JBD2: bad block at offset 32 [ 117.891976][ T6731] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 118.222262][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 118.341955][ T6740] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 118.357734][ T6740] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 118.362595][ T6740] OCFS2: File system is now read-only. [ 118.363512][ T6740] (syz.4.608,6740,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 118.374722][ T6740] (syz.4.608,6740,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 118.381416][ T6740] (syz.4.608,6740,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 118.389650][ T6740] (syz.4.608,6740,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 118.400047][ T6740] (syz.4.608,6740,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 118.404326][ T6740] (syz.4.608,6740,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 118.411821][ T6740] (syz.4.608,6740,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 118.418027][ T6740] (syz.4.608,6740,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 118.508221][ T6747] set_capacity_and_notify: 2 callbacks suppressed [ 118.508230][ T6747] loop3: detected capacity change from 0 to 512 [ 119.061163][ T6751] loop2: detected capacity change from 0 to 32768 [ 119.074417][ T6751] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 119.077512][ T6751] JBD2: Ignoring recovery information on journal [ 119.079455][ T6751] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 119.080859][ T6751] JBD2: bad block at offset 32 [ 119.090388][ T6751] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 119.580876][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 119.662117][ T6753] loop0: detected capacity change from 0 to 32768 [ 119.668318][ T6753] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.612 (6753) [ 119.688600][ T6753] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.694174][ T6753] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 119.697030][ T6753] BTRFS info (device loop0): use zlib compression, level 3 [ 119.699307][ T6753] BTRFS info (device loop0): turning on sync discard [ 119.701570][ T6753] BTRFS info (device loop0): using free space tree [ 119.744488][ T6753] BTRFS info (device loop0): enabling ssd optimizations [ 119.746008][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.750826][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.882426][ T6791] loop3: detected capacity change from 0 to 32768 [ 119.885199][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 119.901042][ T6791] JBD2: Ignoring recovery information on journal [ 119.902881][ T6791] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 119.904306][ T6791] JBD2: bad block at offset 32 [ 119.917288][ T6791] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 119.989371][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.995620][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.172475][ T6803] loop1: detected capacity change from 0 to 256 [ 120.186413][ T6803] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 120.194901][ T6803] exFAT-fs (loop1): hint_cluster is invalid (17) [ 120.668115][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 120.715795][ T6810] loop2: detected capacity change from 0 to 512 [ 120.770791][ T4334] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.863558][ T6814] loop4: detected capacity change from 0 to 32768 [ 121.195573][ T6814] JBD2: Ignoring recovery information on journal [ 121.197504][ T6814] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 121.198895][ T6814] JBD2: bad block at offset 32 [ 121.228265][ T6814] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 121.317981][ T6814] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 121.321523][ T6814] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 121.323090][ T6814] OCFS2: File system is now read-only. [ 121.323951][ T6814] (syz.4.626,6814,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 121.325474][ T6814] (syz.4.626,6814,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 121.326951][ T6814] (syz.4.626,6814,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 121.328257][ T6814] (syz.4.626,6814,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 121.329612][ T6814] (syz.4.626,6814,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 121.330882][ T6814] (syz.4.626,6814,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 121.332200][ T6814] (syz.4.626,6814,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 121.333511][ T6814] (syz.4.626,6814,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 121.368286][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 121.554189][ T6834] loop4: detected capacity change from 0 to 32768 [ 121.575686][ T6834] JBD2: Ignoring recovery information on journal [ 121.577487][ T6834] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 121.578906][ T6834] JBD2: bad block at offset 32 [ 121.590654][ T6834] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 121.612954][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.616123][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.866312][ T6845] loop2: detected capacity change from 0 to 32768 [ 121.872668][ T6845] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 121.876734][ T6845] JBD2: Ignoring recovery information on journal [ 121.878579][ T6845] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 121.879954][ T6845] JBD2: bad block at offset 32 [ 121.882199][ T6845] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 122.131191][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.133882][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.314534][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 122.362842][ T6859] loop4: detected capacity change from 0 to 256 [ 122.381722][ T6859] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 122.388293][ T6859] exFAT-fs (loop4): hint_cluster is invalid (17) [ 122.459203][ T6857] JBD2: Ignoring recovery information on journal [ 122.461120][ T6857] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 122.462485][ T6857] JBD2: bad block at offset 32 [ 122.490510][ T6857] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 122.644424][ T6863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.640 (6863) [ 122.656447][ T6866] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 122.660187][ T6866] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 122.662054][ T6866] OCFS2: File system is now read-only. [ 122.663287][ T6866] (syz.0.639,6866,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 122.664847][ T6866] (syz.0.639,6866,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 122.666486][ T6866] (syz.0.639,6866,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 122.668042][ T6866] (syz.0.639,6866,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 122.669912][ T6866] (syz.0.639,6866,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 122.671362][ T6866] (syz.0.639,6866,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 122.673156][ T6866] (syz.0.639,6866,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 122.675108][ T6866] (syz.0.639,6866,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 122.828762][ T6863] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.831065][ T6863] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 122.832588][ T6863] BTRFS info (device loop3): use zlib compression, level 3 [ 122.833759][ T6863] BTRFS info (device loop3): turning on sync discard [ 122.834998][ T6863] BTRFS info (device loop3): using free space tree [ 122.852539][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 122.868792][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 122.926668][ T6863] BTRFS info (device loop3): enabling ssd optimizations [ 123.797508][ T4328] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.961608][ T6914] set_capacity_and_notify: 2 callbacks suppressed [ 123.961619][ T6914] loop4: detected capacity change from 0 to 32768 [ 124.028825][ T6918] loop3: detected capacity change from 0 to 32768 [ 124.033427][ T6914] JBD2: Ignoring recovery information on journal [ 124.035553][ T6914] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 124.037055][ T6914] JBD2: bad block at offset 32 [ 124.037951][ T22] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 124.041238][ T6914] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 124.047087][ T6918] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 124.050288][ T6918] JBD2: Ignoring recovery information on journal [ 124.052504][ T6918] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 124.053935][ T6918] JBD2: bad block at offset 32 [ 124.058199][ T6918] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 124.214445][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 124.217476][ T22] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.219126][ T22] usb 1-1: config 0 has no interface number 0 [ 124.220399][ T22] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.222508][ T22] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.224476][ T22] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.252388][ T22] usb 1-1: config 0 interface 1 has no altsetting 0 [ 124.253708][ T22] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 124.255681][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.259019][ T22] usb 1-1: config 0 descriptor?? [ 124.263510][ T22] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 124.285120][ T6926] loop1: detected capacity change from 0 to 32768 [ 124.296223][ T6926] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 124.299217][ T6926] JBD2: Ignoring recovery information on journal [ 124.300896][ T6926] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 124.302243][ T6926] JBD2: bad block at offset 32 [ 124.304290][ T6926] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 124.321639][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.324752][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.375927][ T6926] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 124.379707][ T6926] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 124.381259][ T6926] OCFS2: File system is now read-only. [ 124.382137][ T6926] (syz.1.652,6926,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 124.383470][ T6926] (syz.1.652,6926,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 124.384963][ T6926] (syz.1.652,6926,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 124.386507][ T6926] (syz.1.652,6926,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 124.388058][ T6926] (syz.1.652,6926,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 124.389362][ T6926] (syz.1.652,6926,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 124.390732][ T6926] (syz.1.652,6926,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 124.392087][ T6926] (syz.1.652,6926,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 124.430807][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 124.861594][ T22] usbhid 1-1:0.1: can't add hid device: -71 [ 124.862895][ T22] usbhid: probe of 1-1:0.1 failed with error -71 [ 124.870151][ T22] usb 1-1: USB disconnect, device number 11 [ 124.880577][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 124.882046][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 125.058444][ T6943] loop4: detected capacity change from 0 to 512 [ 125.711848][ T6955] loop1: detected capacity change from 0 to 32768 [ 125.716167][ T6955] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.660 (6955) [ 125.719618][ T6955] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.721372][ T6955] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 125.722766][ T6955] BTRFS info (device loop1): use zlib compression, level 3 [ 125.723946][ T6955] BTRFS info (device loop1): turning on sync discard [ 125.725154][ T6955] BTRFS info (device loop1): using free space tree [ 125.737568][ T6955] BTRFS info (device loop1): enabling ssd optimizations [ 125.927957][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.929230][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.031771][ T6984] loop3: detected capacity change from 0 to 32768 [ 126.053195][ T6984] JBD2: Ignoring recovery information on journal [ 126.055090][ T6984] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 126.056570][ T6984] JBD2: bad block at offset 32 [ 126.119013][ T6988] loop4: detected capacity change from 0 to 32768 [ 126.129890][ T6984] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.137278][ T6988] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 126.140389][ T6988] JBD2: Ignoring recovery information on journal [ 126.142195][ T6988] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 126.143623][ T6988] JBD2: bad block at offset 32 [ 126.199007][ T6988] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 126.370983][ T6994] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 126.374809][ T6994] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 126.376711][ T6994] OCFS2: File system is now read-only. [ 126.377648][ T6994] (syz.4.664,6994,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 126.379299][ T6994] (syz.4.664,6994,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 126.380818][ T6994] (syz.4.664,6994,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 126.382287][ T6994] (syz.4.664,6994,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 126.384004][ T6994] (syz.4.664,6994,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 126.385667][ T6994] (syz.4.664,6994,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 126.387235][ T6994] (syz.4.664,6994,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 126.388712][ T6994] (syz.4.664,6994,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 126.710874][ T7001] loop2: detected capacity change from 0 to 32768 [ 126.731466][ T7001] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 126.734228][ T7001] JBD2: Ignoring recovery information on journal [ 126.736123][ T7001] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 126.737518][ T7001] JBD2: bad block at offset 32 [ 126.742660][ T7001] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 126.816789][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 126.867576][ T4329] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.934242][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 126.937654][ T7008] loop3: detected capacity change from 0 to 256 [ 126.947116][ T7008] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 126.958272][ T7008] exFAT-fs (loop3): hint_cluster is invalid (17) [ 127.018504][ T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 127.063870][ T7012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.066187][ T7012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.415198][ T22] usb 1-1: device descriptor read/64, error -71 [ 127.489554][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 127.546248][ T7024] loop2: detected capacity change from 0 to 512 [ 127.688120][ T22] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 128.320552][ T22] usb 1-1: device descriptor read/64, error -71 [ 128.436001][ T22] usb usb1-port1: attempt power cycle [ 128.561192][ T7040] JBD2: Ignoring recovery information on journal [ 128.563119][ T7040] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 128.564552][ T7040] JBD2: bad block at offset 32 [ 128.571668][ T7040] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.655160][ T7044] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.681 (7044) [ 128.658437][ T7044] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.660157][ T7044] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 128.661597][ T7044] BTRFS info (device loop1): use zlib compression, level 3 [ 128.662840][ T7044] BTRFS info (device loop1): turning on sync discard [ 128.663949][ T7044] BTRFS info (device loop1): using free space tree [ 128.710166][ T7044] BTRFS info (device loop1): enabling ssd optimizations [ 128.954380][ T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 129.002791][ T7068] set_capacity_and_notify: 2 callbacks suppressed [ 129.002800][ T7068] loop4: detected capacity change from 0 to 32768 [ 129.006188][ T22] usb 1-1: device descriptor read/8, error -71 [ 129.014798][ T7068] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 129.017737][ T7068] JBD2: Ignoring recovery information on journal [ 129.019692][ T7068] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 129.021171][ T7068] JBD2: bad block at offset 32 [ 129.033870][ T7068] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 129.120815][ T7075] loop3: detected capacity change from 0 to 32768 [ 129.163787][ T7075] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 129.167889][ T7075] JBD2: Ignoring recovery information on journal [ 129.169720][ T7075] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 129.171293][ T7075] JBD2: bad block at offset 32 [ 129.269026][ T7080] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 129.272679][ T7080] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 129.274204][ T7080] OCFS2: File system is now read-only. [ 129.275238][ T7080] (syz.4.682,7080,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 129.276564][ T7080] (syz.4.682,7080,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 129.277906][ T7080] (syz.4.682,7080,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 129.279237][ T7080] (syz.4.682,7080,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 129.280607][ T7080] (syz.4.682,7080,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 129.281799][ T7080] (syz.4.682,7080,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 129.283145][ T7080] (syz.4.682,7080,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 129.284621][ T7080] (syz.4.682,7080,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 129.287078][ T22] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 129.292437][ T7075] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 129.367169][ T22] usb 1-1: device descriptor read/8, error -71 [ 129.399025][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 129.495138][ T22] usb usb1-port1: unable to enumerate USB device [ 129.550878][ T7083] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 129.596685][ T4329] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.666469][ T7090] loop2: detected capacity change from 0 to 512 [ 129.697063][ T5665] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.712807][ T7094] loop1: detected capacity change from 0 to 256 [ 129.726890][ T7094] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 129.734957][ T7094] exFAT-fs (loop1): hint_cluster is invalid (17) [ 130.347609][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 130.440988][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 130.575452][ T4402] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 130.754407][ T4402] usb 1-1: Using ep0 maxpacket: 16 [ 130.757761][ T4402] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.759397][ T4402] usb 1-1: config 0 has no interface number 0 [ 130.760675][ T4402] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.762803][ T4402] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.766731][ T4402] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.771255][ T4402] usb 1-1: config 0 interface 1 has no altsetting 0 [ 130.772669][ T4402] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 130.774658][ T4402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.777544][ T4402] usb 1-1: config 0 descriptor?? [ 130.782233][ T4402] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 130.857715][ T7114] netlink: 64 bytes leftover after parsing attributes in process `syz.3.694'. [ 130.968869][ T7119] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 131.023282][ T7128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.025387][ T7128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.102187][ T7126] loop1: detected capacity change from 0 to 32768 [ 131.107340][ T7126] JBD2: Ignoring recovery information on journal [ 131.109469][ T7126] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 131.111140][ T7126] JBD2: bad block at offset 32 [ 131.113128][ T7126] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 131.184738][ T4402] usbhid 1-1:0.1: can't add hid device: -71 [ 131.185869][ T4402] usbhid: probe of 1-1:0.1 failed with error -71 [ 131.189616][ T4402] usb 1-1: USB disconnect, device number 16 [ 131.283435][ T7132] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 131.287717][ T7132] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 131.289604][ T7132] OCFS2: File system is now read-only. [ 131.290571][ T7132] (syz.1.700,7132,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 131.292279][ T7132] (syz.1.700,7132,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 131.293881][ T7132] (syz.1.700,7132,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 131.295580][ T7132] (syz.1.700,7132,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 131.297263][ T7132] (syz.1.700,7132,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 131.298731][ T7132] (syz.1.700,7132,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 131.300396][ T7132] (syz.1.700,7132,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 131.302045][ T7132] (syz.1.700,7132,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 131.519377][ T7135] loop4: detected capacity change from 0 to 512 [ 131.535251][ T7136] loop2: detected capacity change from 0 to 32768 [ 131.547709][ T7136] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 131.550359][ T7136] JBD2: Ignoring recovery information on journal [ 131.552370][ T7136] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 131.553789][ T7136] JBD2: bad block at offset 32 [ 131.561510][ T7136] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 131.568331][ T5665] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.438072][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 132.449361][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 132.515555][ T7147] netlink: 64 bytes leftover after parsing attributes in process `syz.0.706'. [ 132.646031][ T7156] loop1: detected capacity change from 0 to 32768 [ 132.655511][ T7156] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.703 (7156) [ 132.718920][ T7156] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.720740][ T7156] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 132.722319][ T7156] BTRFS info (device loop1): use zlib compression, level 3 [ 132.723682][ T7156] BTRFS info (device loop1): turning on sync discard [ 132.724925][ T7156] BTRFS info (device loop1): using free space tree [ 133.119241][ T7165] nvme_fcloop: unknown parameter or missing value 'lpwwnn' [ 133.242625][ T7188] loop3: detected capacity change from 0 to 32768 [ 133.253743][ T7188] JBD2: Ignoring recovery information on journal [ 133.257198][ T7188] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 133.258716][ T7188] JBD2: bad block at offset 32 [ 133.263210][ T7188] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.267159][ T7156] BTRFS info (device loop1): enabling ssd optimizations [ 133.376240][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.377901][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.388191][ T7201] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 133.391920][ T7201] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 133.393599][ T7201] OCFS2: File system is now read-only. [ 133.394935][ T7201] (syz.3.713,7201,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 133.396399][ T7201] (syz.3.713,7201,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 133.397970][ T7201] (syz.3.713,7201,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 133.399443][ T7201] (syz.3.713,7201,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 133.401043][ T7201] (syz.3.713,7201,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 133.402464][ T7201] (syz.3.713,7201,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 133.403910][ T7201] (syz.3.713,7201,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 133.405942][ T7201] (syz.3.713,7201,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 133.682600][ T7205] loop0: detected capacity change from 0 to 32768 [ 133.687288][ T7205] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 133.690000][ T7205] JBD2: Ignoring recovery information on journal [ 133.691796][ T7205] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 133.693200][ T7205] JBD2: bad block at offset 32 [ 133.699208][ T7205] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 134.178857][ T4329] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.178949][ T4328] ocfs2: Unmounting device (7,3) on (node local) [ 134.204014][ T7211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.215902][ T7211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.279645][ T7218] netlink: 64 bytes leftover after parsing attributes in process `syz.3.719'. [ 134.292036][ T7221] loop1: detected capacity change from 0 to 512 [ 134.318568][ T5665] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.710460][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 134.802611][ T7233] loop4: detected capacity change from 0 to 256 [ 134.815409][ T7233] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 134.883972][ T7233] exFAT-fs (loop4): hint_cluster is invalid (17) [ 134.998706][ T7235] nvme_fcloop: unknown parameter or missing value 'lpwwpn=' [ 135.012983][ T7239] loop3: detected capacity change from 0 to 32768 [ 135.213199][ T7239] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.727 (7239) [ 135.286469][ T7239] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.288123][ T7239] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 135.289688][ T7239] BTRFS info (device loop3): use zlib compression, level 3 [ 135.291057][ T7239] BTRFS info (device loop3): turning on sync discard [ 135.292284][ T7239] BTRFS info (device loop3): using free space tree [ 135.405460][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.407881][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.419070][ T7239] BTRFS info (device loop3): enabling ssd optimizations [ 135.766631][ T7273] loop4: detected capacity change from 0 to 32768 [ 135.776019][ T7273] JBD2: Ignoring recovery information on journal [ 135.777787][ T7273] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 135.779262][ T7273] JBD2: bad block at offset 32 [ 135.781316][ T7273] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 135.915317][ T7278] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 135.919595][ T7278] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 135.921347][ T7278] OCFS2: File system is now read-only. [ 135.922200][ T7278] (syz.4.731,7278,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 135.923673][ T7278] (syz.4.731,7278,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 135.925332][ T7278] (syz.4.731,7278,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 135.926790][ T7278] (syz.4.731,7278,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 135.928320][ T7278] (syz.4.731,7278,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 135.929755][ T7278] (syz.4.731,7278,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 135.931357][ T7278] (syz.4.731,7278,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 135.933016][ T7278] (syz.4.731,7278,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 135.976762][ T7283] loop0: detected capacity change from 0 to 32768 [ 135.993478][ T7283] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 135.999459][ T7283] JBD2: Ignoring recovery information on journal [ 136.001289][ T7283] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 136.002711][ T7283] JBD2: bad block at offset 32 [ 136.013312][ T7283] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 136.121623][ T7291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.123971][ T7291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.455088][ T7294] netlink: 64 bytes leftover after parsing attributes in process `syz.1.736'. [ 136.477921][ T4328] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.545297][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 136.621732][ T7301] loop4: detected capacity change from 0 to 512 [ 136.687265][ T5665] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.066034][ T7310] loop1: detected capacity change from 0 to 256 [ 137.074198][ T7310] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 137.081239][ T7310] exFAT-fs (loop1): hint_cluster is invalid (17) [ 137.128266][ T7306] nvme_fcloop: unknown parameter or missing value 'lpwwpn=' [ 137.145295][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 137.162411][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.164714][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.627023][ T7328] netlink: 64 bytes leftover after parsing attributes in process `syz.0.747'. [ 137.681719][ T7327] loop3: detected capacity change from 0 to 32768 [ 137.785851][ T7333] loop0: detected capacity change from 0 to 32768 [ 137.790163][ T7327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.748 (7327) [ 137.800544][ T7327] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.802459][ T7327] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 137.803846][ T7327] BTRFS info (device loop3): use zlib compression, level 3 [ 137.805152][ T7327] BTRFS info (device loop3): turning on sync discard [ 137.806189][ T7327] BTRFS info (device loop3): using free space tree [ 137.816375][ T7333] JBD2: Ignoring recovery information on journal [ 137.818281][ T7333] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 137.819614][ T7333] JBD2: bad block at offset 32 [ 137.829068][ T7333] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.944592][ T7346] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 137.948805][ T7346] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 137.950441][ T7346] OCFS2: File system is now read-only. [ 137.951464][ T7346] (syz.0.749,7346,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 137.952858][ T7346] (syz.0.749,7346,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 137.954641][ T7346] (syz.0.749,7346,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 137.956186][ T7346] (syz.0.749,7346,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 137.957735][ T7346] (syz.0.749,7346,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 137.959258][ T7346] (syz.0.749,7346,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 137.960907][ T7346] (syz.0.749,7346,0):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 137.962493][ T7346] (syz.0.749,7346,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 137.975242][ T7327] BTRFS info (device loop3): enabling ssd optimizations [ 138.332822][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.338882][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.469366][ T7373] loop4: detected capacity change from 0 to 512 [ 138.872175][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 139.003373][ T4328] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.035879][ T7381] nvme_fcloop: unknown parameter or missing value 'lpwwpn=' [ 139.098158][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.100932][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.115700][ T7390] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 139.122406][ T7390] exFAT-fs (loop3): hint_cluster is invalid (17) [ 139.456455][ T7400] netlink: 64 bytes leftover after parsing attributes in process `syz.2.764'. [ 139.486351][ T7403] ip_tables: iptables: counters copy to user failed while replacing table [ 139.603044][ T7406] set_capacity_and_notify: 1 callbacks suppressed [ 139.603055][ T7406] loop2: detected capacity change from 0 to 32768 [ 139.682237][ T7406] JBD2: Ignoring recovery information on journal [ 139.684116][ T7406] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 139.685749][ T7406] JBD2: bad block at offset 32 [ 139.692515][ T7406] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.838611][ T7412] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 139.842217][ T7412] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 139.843812][ T7412] OCFS2: File system is now read-only. [ 139.844842][ T7412] (syz.2.767,7412,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 139.846286][ T7412] (syz.2.767,7412,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 139.847661][ T7412] (syz.2.767,7412,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 139.849031][ T7412] (syz.2.767,7412,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 139.850487][ T7412] (syz.2.767,7412,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 139.851712][ T7412] (syz.2.767,7412,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 139.853052][ T7412] (syz.2.767,7412,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 139.854514][ T7412] (syz.2.767,7412,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 139.864547][ T5623] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 139.948568][ T7416] loop1: detected capacity change from 0 to 32768 [ 139.953333][ T7416] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.770 (7416) [ 139.958279][ T7416] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.960245][ T7416] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 139.961529][ T7416] BTRFS info (device loop1): use zlib compression, level 3 [ 139.962649][ T7416] BTRFS info (device loop1): turning on sync discard [ 139.963781][ T7416] BTRFS info (device loop1): using free space tree [ 140.009770][ T7416] BTRFS info (device loop1): enabling ssd optimizations [ 140.044561][ T5623] usb 1-1: Using ep0 maxpacket: 16 [ 140.048167][ T5623] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.049772][ T5623] usb 1-1: config 0 has no interface number 0 [ 140.050964][ T5623] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.052973][ T5623] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.059672][ T5623] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.066405][ T5623] usb 1-1: config 0 interface 1 has no altsetting 0 [ 140.068405][ T5623] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 140.078420][ T5623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.089190][ T5623] usb 1-1: config 0 descriptor?? [ 140.098811][ T5623] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 140.387502][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 140.464735][ T7449] loop4: detected capacity change from 0 to 512 [ 140.498554][ T5623] usbhid 1-1:0.1: can't add hid device: -71 [ 140.499736][ T5623] usbhid: probe of 1-1:0.1 failed with error -71 [ 140.502462][ T5623] usb 1-1: USB disconnect, device number 17 [ 140.947734][ T7453] netlink: 64 bytes leftover after parsing attributes in process `syz.3.777'. [ 140.993650][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.995831][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.092039][ T4329] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.126967][ T7463] loop2: detected capacity change from 0 to 256 [ 141.153442][ T7463] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 141.161507][ T7463] exFAT-fs (loop2): hint_cluster is invalid (17) [ 141.683504][ T7474] loop1: detected capacity change from 0 to 32768 [ 141.699834][ T7474] JBD2: Ignoring recovery information on journal [ 141.701735][ T7474] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 141.703302][ T7474] JBD2: bad block at offset 32 [ 141.743735][ T7474] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 141.865713][ T7484] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 141.870063][ T7484] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 141.871981][ T7484] OCFS2: File system is now read-only. [ 141.872891][ T7484] (syz.1.785,7484,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 141.874676][ T7484] (syz.1.785,7484,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 141.876249][ T7484] (syz.1.785,7484,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 141.877845][ T7484] (syz.1.785,7484,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 141.879362][ T7484] (syz.1.785,7484,1):ocfs2_write_cluster:1155 ERROR: status = -30 [ 141.880774][ T7484] (syz.1.785,7484,0):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 141.882398][ T7484] (syz.1.785,7484,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 141.884053][ T7484] (syz.1.785,7484,0):ocfs2_write_begin:1909 ERROR: status = -30 [ 142.018643][ T7488] device syzkaller0 entered promiscuous mode [ 142.176042][ T7491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.789'. [ 142.428271][ T7494] loop3: detected capacity change from 0 to 32768 [ 142.432333][ T7494] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.790 (7494) [ 142.481978][ T7494] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.483459][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 142.483809][ T7494] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 142.486915][ T7494] BTRFS info (device loop3): use zlib compression, level 3 [ 142.488087][ T7494] BTRFS info (device loop3): turning on sync discard [ 142.489362][ T7494] BTRFS info (device loop3): using free space tree [ 142.624114][ T7494] BTRFS info (device loop3): enabling ssd optimizations [ 142.793195][ T7522] loop0: detected capacity change from 0 to 512 [ 143.391990][ T4328] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.499599][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.501506][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.904386][ T4409] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 144.056922][ T4409] usb 1-1: device descriptor read/64, error -71 [ 144.324419][ T4409] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 144.474438][ T4409] usb 1-1: device descriptor read/64, error -71 [ 144.594505][ T4409] usb usb1-port1: attempt power cycle [ 145.014420][ T4409] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 145.054895][ T4409] usb 1-1: device descriptor read/8, error -71 [ 145.324415][ T4409] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 145.355777][ T4409] usb 1-1: device descriptor read/8, error -71 [ 145.476002][ T4409] usb usb1-port1: unable to enumerate USB device [ 146.670656][ T7545] loop0: detected capacity change from 0 to 256 [ 146.674235][ T7545] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 146.682428][ T7545] exFAT-fs (loop0): hint_cluster is invalid (17) [ 153.343751][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'. [ 153.380961][ T7555] netlink: 64 bytes leftover after parsing attributes in process `syz.4.802'. [ 153.461003][ T7558] loop2: detected capacity change from 0 to 32768 [ 153.476524][ T7565] loop4: detected capacity change from 0 to 512 [ 153.489589][ T7558] JBD2: Ignoring recovery information on journal [ 153.491458][ T7558] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 153.492852][ T7558] JBD2: bad block at offset 32 [ 153.509373][ T7558] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 153.594474][ T4335] Bluetooth: hci0: command 0x0406 tx timeout [ 153.595504][ T4335] Bluetooth: hci4: command 0x0406 tx timeout [ 153.596422][ T4335] Bluetooth: hci1: command 0x0406 tx timeout [ 153.597372][ T4335] Bluetooth: hci2: command 0x0406 tx timeout [ 153.617894][ T7560] loop3: detected capacity change from 0 to 32768 [ 153.619845][ T7560] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.804 (7560) [ 153.622813][ T7560] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.624767][ T7560] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 153.626148][ T7570] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 153.626234][ T7560] BTRFS info (device loop3): use zlib compression, level 3 [ 153.629685][ T7570] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 153.630692][ T7560] BTRFS info (device loop3): turning on sync discard [ 153.632149][ T7570] OCFS2: File system is now read-only. [ 153.633116][ T7560] BTRFS info (device loop3): using free space tree [ 153.633916][ T7570] (syz.2.803,7570,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 153.637429][ T7570] (syz.2.803,7570,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 153.638795][ T7570] (syz.2.803,7570,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 153.640034][ T7570] (syz.2.803,7570,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30 [ 153.641417][ T7570] (syz.2.803,7570,0):ocfs2_write_cluster:1155 ERROR: status = -30 [ 153.642700][ T7570] (syz.2.803,7570,1):ocfs2_write_cluster_by_desc:1250 ERROR: status = -30 [ 153.644102][ T7570] (syz.2.803,7570,1):ocfs2_write_begin_nolock:1822 ERROR: status = -30 [ 153.645733][ T7570] (syz.2.803,7570,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 153.929385][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.989560][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.058056][ T7560] BTRFS info (device loop3): enabling ssd optimizations [ 154.246788][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 154.352661][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.360390][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.429113][ T7606] loop2: detected capacity change from 0 to 256 [ 154.439355][ T7606] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 154.448313][ T7606] exFAT-fs (loop2): hint_cluster is invalid (17) [ 154.985955][ T7613] device syzkaller0 entered promiscuous mode [ 155.028737][ T4328] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.102971][ T7617] netlink: 64 bytes leftover after parsing attributes in process `syz.1.816'. [ 155.262681][ T7625] loop4: detected capacity change from 0 to 32768 [ 155.304008][ T7625] JBD2: Ignoring recovery information on journal [ 155.305970][ T7625] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 155.307462][ T7625] JBD2: bad block at offset 32 [ 155.311945][ T7630] loop2: detected capacity change from 0 to 512 [ 155.314279][ T7625] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 155.379198][ T7594] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 156.184691][ T4336] ocfs2: Unmounting device (7,4) on (node local) [ 156.278152][ T7644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.280932][ T7644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.248132][ T7653] loop2: detected capacity change from 0 to 32768 [ 157.254565][ T7653] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.825 (7653) [ 157.267022][ T7653] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.268912][ T7653] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 157.270240][ T7653] BTRFS info (device loop2): use zlib compression, level 3 [ 157.271370][ T7653] BTRFS info (device loop2): turning on sync discard [ 157.272429][ T7653] BTRFS info (device loop2): using free space tree [ 157.281248][ T7653] BTRFS info (device loop2): enabling ssd optimizations [ 158.031185][ T4337] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.198590][ T7678] nvme_fcloop: unknown parameter or missing value 'roles' [ 158.241959][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.244196][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.765756][ T7683] loop2: detected capacity change from 0 to 256 [ 158.777542][ T7683] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 158.784087][ T7683] exFAT-fs (loop2): hint_cluster is invalid (17) [ 167.108182][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.111848][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.143916][ T7706] loop4: detected capacity change from 0 to 512 [ 167.268548][ T7710] loop1: detected capacity change from 0 to 32768 [ 167.568010][ T7710] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.836 (7710) [ 167.723711][ T7710] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.725561][ T7710] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 167.726936][ T7710] BTRFS info (device loop1): use zlib compression, level 3 [ 167.728064][ T7710] BTRFS info (device loop1): turning on sync discard [ 167.729124][ T7710] BTRFS info (device loop1): using free space tree [ 167.901331][ T7710] BTRFS info (device loop1): enabling ssd optimizations [ 168.007101][ T7741] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.228115][ T7748] device syzkaller0 entered promiscuous mode [ 168.315350][ T7751] loop2: detected capacity change from 0 to 32768 [ 168.321393][ T7751] JBD2: Ignoring recovery information on journal [ 168.323269][ T7751] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 168.324795][ T7751] JBD2: bad block at offset 32 [ 168.340283][ T7751] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 168.403276][ T5826] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 168.554504][ T5826] usb 1-1: device descriptor read/64, error -71 [ 168.824457][ T5826] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 168.853323][ T4329] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.964523][ T4335] Bluetooth: hci3: command 0x0406 tx timeout [ 168.974567][ T5826] usb 1-1: device descriptor read/64, error -71 [ 169.088602][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 169.094729][ T5826] usb usb1-port1: attempt power cycle [ 169.504422][ T5826] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 169.534974][ T5826] usb 1-1: device descriptor read/8, error -71 [ 169.804416][ T5826] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 169.834925][ T5826] usb 1-1: device descriptor read/8, error -71 [ 169.955628][ T5826] usb usb1-port1: unable to enumerate USB device [ 172.737677][ T7791] loop0: detected capacity change from 0 to 512 [ 173.864376][ T4554] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 174.044370][ T4554] usb 1-1: Using ep0 maxpacket: 16 [ 174.046482][ T4554] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.047947][ T4554] usb 1-1: config 0 has no interface number 0 [ 174.048998][ T4554] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.051000][ T4554] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.052856][ T4554] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.055191][ T4554] usb 1-1: config 0 interface 1 has no altsetting 0 [ 174.056401][ T4554] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 174.057889][ T4554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.061031][ T4554] usb 1-1: config 0 descriptor?? [ 174.063615][ T4554] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 174.468987][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.470344][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.471469][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.472560][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.473623][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.474865][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.475892][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.476950][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.478026][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.479118][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.480200][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.481268][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.482370][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.483462][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.485002][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.486181][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.487333][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.488498][ T4554] elan 0003:04F3:074D.0001: unknown main item tag 0x0 [ 174.490278][ T4554] elan 0003:04F3:074D.0001: failed to start in urb: -90 [ 174.493044][ T4554] elan 0003:04F3:074D.0001: hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.0-1/input1 [ 174.495449][ T4554] elan 0003:04F3:074D.0001: Input device is not registered [ 174.497904][ T4554] elan: probe of 0003:04F3:074D.0001 failed with error -119 [ 174.669954][ T4554] usb 1-1: USB disconnect, device number 26 [ 179.559552][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.846'. [ 179.597063][ T7808] ip_tables: iptables: counters copy to user failed while replacing table [ 179.598938][ T7808] device syzkaller1 entered promiscuous mode [ 179.693398][ T7810] loop4: detected capacity change from 0 to 32768 [ 179.702691][ T7812] loop2: detected capacity change from 0 to 32768 [ 179.715601][ T7810] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.857 (7810) [ 179.725306][ T7810] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.727178][ T7810] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 179.728765][ T7810] BTRFS info (device loop4): use zlib compression, level 3 [ 179.729922][ T7810] BTRFS info (device loop4): turning on sync discard [ 179.730978][ T7810] BTRFS info (device loop4): using free space tree [ 179.737834][ T7812] JBD2: Ignoring recovery information on journal [ 179.739825][ T7812] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 179.741175][ T7812] JBD2: bad block at offset 32 [ 179.742873][ T7812] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 179.773951][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.789410][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.818676][ T7810] BTRFS info (device loop4): enabling ssd optimizations [ 180.203439][ T7846] loop0: detected capacity change from 0 to 512 [ 180.247003][ T7816] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.658033][ T4337] ocfs2: Unmounting device (7,2) on (node local) [ 180.851925][ T7862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.867'. [ 181.271755][ T7870] device syzkaller0 entered promiscuous mode [ 181.281133][ T7874] ip_tables: iptables: counters copy to user failed while replacing table [ 181.283206][ T7874] device syzkaller1 entered promiscuous mode [ 181.345734][ T4336] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.354719][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.355856][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.126920][ T7901] loop3: detected capacity change from 0 to 512 [ 192.195131][ T7910] Unknown metaid 8705 dlen 4 [ 192.254722][ T7908] loop0: detected capacity change from 0 to 32768 [ 192.607142][ T7908] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.883 (7908) [ 192.735491][ T7908] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.737314][ T7908] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 192.738790][ T7908] BTRFS info (device loop0): use zlib compression, level 3 [ 192.739923][ T7908] BTRFS info (device loop0): turning on sync discard [ 192.740978][ T7908] BTRFS info (device loop0): using free space tree [ 192.906547][ T7908] BTRFS info (device loop0): enabling ssd optimizations [ 193.066332][ T7938] device syzkaller0 entered promiscuous mode [ 193.163285][ T7950] netlink: 276 bytes leftover after parsing attributes in process `syz.1.890'. [ 193.360266][ T7963] loop2: detected capacity change from 0 to 512 [ 193.954593][ T7975] device geneve1 entered promiscuous mode [ 194.087028][ T4334] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.190723][ T7985] netlink: 276 bytes leftover after parsing attributes in process `syz.0.902'. [ 194.542675][ T8002] syz.0.909 uses obsolete (PF_INET,SOCK_PACKET) [ 194.686771][ T8009] device geneve1 entered promiscuous mode [ 194.732218][ T8014] ip_tables: iptables: counters copy to user failed while replacing table [ 194.766284][ T8010] device syzkaller1 entered promiscuous mode [ 194.907091][ T8016] device syzkaller0 entered promiscuous mode [ 195.239541][ T8025] device syzkaller0 entered promiscuous mode [ 195.435345][ T8039] device geneve1 entered promiscuous mode [ 195.477526][ T8046] ip_tables: iptables: counters copy to user failed while replacing table [ 195.482304][ T8044] netlink: 'syz.2.926': attribute type 4 has an invalid length. [ 195.698907][ T8059] device syzkaller0 entered promiscuous mode [ 195.896691][ T8076] loop4: detected capacity change from 0 to 512 [ 195.955808][ T8081] ip_tables: iptables: counters copy to user failed while replacing table [ 196.568547][ T8104] device syzkaller0 entered promiscuous mode [ 196.803877][ T8112] netlink: 56 bytes leftover after parsing attributes in process `syz.3.953'. [ 197.087527][ T8141] rxe_eth0 speed is unknown, defaulting to 1000 [ 197.235327][ T8155] loop1: detected capacity change from 0 to 256 [ 197.257792][ T8155] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 197.284192][ T8155] exFAT-fs (loop1): hint_cluster is invalid (17) [ 197.688885][ T8163] device syzkaller0 entered promiscuous mode [ 197.943159][ T8181] device syzkaller1 entered promiscuous mode [ 198.156396][ T8196] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.346315][ T8196] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.351823][ T8209] device syzkaller0 entered promiscuous mode [ 198.412240][ T8228] loop2: detected capacity change from 0 to 256 [ 198.426933][ T8196] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.444618][ T8228] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 198.451711][ T8228] exFAT-fs (loop2): hint_cluster is invalid (17) [ 198.874201][ T8241] netlink: 48 bytes leftover after parsing attributes in process `syz.0.999'. [ 198.897193][ T8196] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.063349][ T8196] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.067685][ T8196] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.076559][ T8196] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.080083][ T8196] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.142079][ T8262] ip_tables: iptables: counters copy to user failed while replacing table [ 199.181068][ T8266] Unknown metaid 8705 dlen 4 [ 199.347265][ T8269] device syzkaller0 entered promiscuous mode [ 199.406527][ T8275] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1011'. [ 199.449063][ T8277] device syzkaller0 entered promiscuous mode [ 199.758661][ T8301] loop0: detected capacity change from 0 to 256 [ 199.769474][ T8301] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 199.780728][ T8301] exFAT-fs (loop0): hint_cluster is invalid (17) [ 210.315161][ T8310] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1020'. [ 210.331086][ T8323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1022'. [ 210.380340][ T8327] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1023'. [ 210.427451][ T8333] device syzkaller0 entered promiscuous mode [ 210.517454][ T8345] loop2: detected capacity change from 0 to 256 [ 210.521648][ T8345] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 210.527834][ T8345] exFAT-fs (loop2): hint_cluster is invalid (17) [ 210.552524][ T8348] device syzkaller1 entered promiscuous mode [ 210.924585][ T8352] device syzkaller0 entered promiscuous mode [ 211.133955][ T8360] device syzkaller0 entered promiscuous mode [ 211.139248][ T8360] 0: reclassify loop, rule prio 0, protocol 800 [ 211.334576][ T8365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1037'. [ 211.509783][ T8375] device syzkaller1 entered promiscuous mode [ 211.517096][ T8378] device syzkaller0 entered promiscuous mode [ 211.566661][ T8362] tipc: Started in network mode [ 211.567822][ T8362] tipc: Node identity 7294c8fe8fef, cluster identity 4711 [ 211.569136][ T8362] tipc: Enabled bearer , priority 0 [ 211.571224][ T8361] tipc: Resetting bearer [ 211.618209][ T8361] tipc: Disabling bearer [ 211.759438][ T8407] loop2: detected capacity change from 0 to 256 [ 211.769205][ T8407] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 211.777605][ T8407] exFAT-fs (loop2): hint_cluster is invalid (17) [ 211.781385][ T8408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1049'. [ 211.889435][ T8419] device syzkaller1 entered promiscuous mode [ 212.299633][ T8431] device syzkaller0 entered promiscuous mode [ 212.302861][ T8431] tipc: Started in network mode [ 212.303715][ T8431] tipc: Node identity 4aca35f5c3da, cluster identity 4711 [ 212.307861][ T8431] tipc: Enabled bearer , priority 0 [ 212.309527][ T8430] tipc: Resetting bearer [ 212.346667][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1061'. [ 212.385377][ T8430] tipc: Disabling bearer [ 212.706285][ T8464] device syzkaller1 entered promiscuous mode [ 212.724971][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1072'. [ 212.757776][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1075'. [ 212.779003][ T8474] device syzkaller0 entered promiscuous mode [ 212.780309][ T8476] loop2: detected capacity change from 0 to 256 [ 212.792072][ T8474] tipc: Enabled bearer , priority 0 [ 212.797515][ T8473] tipc: Resetting bearer [ 212.806573][ T8476] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 212.817154][ T8476] exFAT-fs (loop2): hint_cluster is invalid (17) [ 212.897257][ T8473] tipc: Disabling bearer [ 213.299985][ T8496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1084'. [ 213.382728][ T8505] device syzkaller1 entered promiscuous mode [ 213.450739][ T8511] device syzkaller0 entered promiscuous mode [ 213.453674][ T8511] tipc: Enabled bearer , priority 0 [ 213.457794][ T8510] tipc: Resetting bearer [ 213.535457][ T8510] tipc: Disabling bearer [ 213.591843][ T8524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1096'. [ 213.596697][ T8520] device syzkaller0 entered promiscuous mode [ 213.876761][ T8550] device syzkaller1 entered promiscuous mode [ 213.925516][ T8557] loop0: detected capacity change from 0 to 256 [ 213.945803][ T8557] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 213.959476][ T8557] exFAT-fs (loop0): hint_cluster is invalid (17) [ 214.000632][ T8553] device syzkaller0 entered promiscuous mode [ 225.158517][ T8604] device syzkaller1 entered promiscuous mode [ 225.230706][ T8617] loop3: detected capacity change from 0 to 256 [ 225.246609][ T8617] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 225.278560][ T8617] exFAT-fs (loop3): hint_cluster is invalid (17) [ 225.781372][ T8645] device syzkaller0 entered promiscuous mode [ 226.209264][ T8658] device syzkaller1 entered promiscuous mode [ 226.265075][ T8657] device syzkaller0 entered promiscuous mode [ 237.145768][ T8706] device syzkaller0 entered promiscuous mode [ 237.544232][ T8711] device syzkaller1 entered promiscuous mode [ 237.552541][ T8725] batman_adv: batadv0: Adding interface: syzkaller0 [ 237.554763][ T8725] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.565950][ T8725] batman_adv: batadv0: Interface activated: syzkaller0 [ 237.641641][ T8732] device syzkaller0 entered promiscuous mode [ 237.648787][ T8720] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 237.718339][ T8720] batman_adv: batadv0: Removing interface: syzkaller0 [ 248.490389][ T8785] xt_TCPMSS: Only works on TCP SYN packets [ 248.492890][ T8786] device syzkaller1 entered promiscuous mode [ 248.548346][ T8785] batman_adv: batadv0: Adding interface: ip6gretap1 [ 248.550901][ T8785] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 248.554250][ T8785] batman_adv: batadv0: Interface activated: ip6gretap1 [ 248.559401][ T8794] batman_adv: batadv0: Adding interface: syzkaller0 [ 248.560557][ T8794] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.564306][ T8794] batman_adv: batadv0: Interface activated: syzkaller0 [ 248.784996][ T8788] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 248.805147][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.806499][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.837153][ T8788] batman_adv: batadv0: Removing interface: syzkaller0 [ 248.855452][ T8815] device syzkaller0 entered promiscuous mode [ 248.858311][ T8806] device syzkaller0 entered promiscuous mode [ 249.198732][ T8832] batman_adv: batadv0: Adding interface: ip6gretap2 [ 249.199850][ T8832] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 249.203090][ T8832] batman_adv: batadv0: Interface activated: ip6gretap2 [ 249.225083][ T8831] device syzkaller0 entered promiscuous mode [ 260.174990][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 260.229456][ T8915] batman_adv: batadv0: Adding interface: ip6gretap1 [ 260.230746][ T8915] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.248498][ T8915] batman_adv: batadv0: Interface activated: ip6gretap1 [ 260.291636][ T8917] batman_adv: batadv0: Adding interface: syzkaller0 [ 260.292802][ T8917] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 260.304413][ T8917] batman_adv: batadv0: Interface activated: syzkaller0 [ 260.490179][ T8924] device syzkaller0 entered promiscuous mode [ 260.587179][ T8916] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 260.645410][ T8916] batman_adv: batadv0: Removing interface: syzkaller0 [ 260.684630][ T8946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1233'. [ 260.705999][ T8948] xt_TCPMSS: Only works on TCP SYN packets [ 260.709808][ T8948] batman_adv: batadv0: Adding interface: ip6gretap1 [ 260.713531][ T8948] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.722083][ T8948] batman_adv: batadv0: Interface activated: ip6gretap1 [ 260.850952][ T8966] Unknown metaid 8705 dlen 4 [ 260.917371][ T8979] xt_TCPMSS: Only works on TCP SYN packets [ 260.929583][ T8979] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 260.932847][ T8979] batman_adv: batadv0: Adding interface: ip6gretap3 [ 260.933976][ T8979] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 260.938072][ T8979] batman_adv: batadv0: Interface activated: ip6gretap3 [ 260.941466][ T8973] batman_adv: batadv0: Adding interface: syzkaller0 [ 260.942872][ T8973] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.952648][ T8973] batman_adv: batadv0: Interface activated: syzkaller0 [ 260.956160][ T8981] device syzkaller0 entered promiscuous mode [ 261.137021][ T8968] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 261.176396][ T8968] batman_adv: batadv0: Removing interface: syzkaller0 [ 261.277602][ T9005] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 261.449984][ T9028] batman_adv: batadv0: Adding interface: syzkaller0 [ 261.452563][ T9028] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.465326][ T9028] batman_adv: batadv0: Interface activated: syzkaller0 [ 261.679611][ T9027] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 261.726322][ T9027] batman_adv: batadv0: Removing interface: syzkaller0 [ 261.765035][ T9044] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 262.027227][ T9077] netlink: 'syz.3.1288': attribute type 1 has an invalid length. [ 262.059286][ T9084] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.061065][ T9084] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.062728][ T9084] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.064625][ T9084] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.066633][ T9084] bond0: (slave geneve2): making interface the new active one [ 262.068639][ T9084] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 262.070886][ T9088] batman_adv: batadv0: Adding interface: syzkaller0 [ 262.072264][ T9088] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.084464][ T9088] batman_adv: batadv0: Interface activated: syzkaller0 [ 262.262133][ T9078] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 262.305556][ T9078] batman_adv: batadv0: Removing interface: syzkaller0 [ 262.497903][ T9116] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 262.559463][ T9127] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.561021][ T9127] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.562523][ T9127] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.565022][ T9127] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.567681][ T9127] bond0: (slave geneve2): making interface the new active one [ 262.569408][ T9127] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 262.570670][ T9127] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 262.628249][ T9120] device syzkaller0 entered promiscuous mode [ 262.630941][ T9134] batman_adv: batadv0: Adding interface: syzkaller0 [ 262.637928][ T9134] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 262.642464][ T9134] batman_adv: batadv0: Interface activated: syzkaller0 [ 262.748347][ T9130] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 262.817716][ T9130] batman_adv: batadv0: Removing interface: syzkaller0 [ 262.875893][ T9169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1322'. [ 262.947838][ T9177] netlink: 'syz.3.1324': attribute type 1 has an invalid length. [ 262.964091][ T9175] device syzkaller0 entered promiscuous mode [ 263.008569][ T9184] device syzkaller0 entered promiscuous mode [ 273.992308][ T9218] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1338'. [ 274.063837][ T9224] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 274.169363][ T9244] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1349'. [ 274.207165][ T9240] device syzkaller0 entered promiscuous mode [ 274.215725][ T9237] device syzkaller0 entered promiscuous mode [ 274.296164][ T9250] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 285.055381][ T9256] bond2: (slave veth3): Enslaving as an active interface with a down link [ 285.059892][ T9250] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 285.071828][ T9273] device macvlan2 entered promiscuous mode [ 285.073531][ T9273] device bond2 entered promiscuous mode [ 285.075149][ T9273] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 285.108234][ T9273] device bond2 left promiscuous mode [ 285.192876][ T9279] netlink: 'syz.1.1358': attribute type 1 has an invalid length. [ 285.219111][ T9289] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.220877][ T9289] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.222627][ T9289] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.227159][ T9289] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.230257][ T9289] bond0: (slave geneve2): making interface the new active one [ 285.232060][ T9289] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 285.233336][ T9289] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 285.252221][ T9299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1365'. [ 285.271264][ T9302] device syzkaller0 entered promiscuous mode [ 285.390395][ T9310] device syzkaller0 entered promiscuous mode [ 285.951369][ T9356] tipc: Can't bind to reserved service type 2 [ 296.789502][ T9350] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 296.919211][ T9389] xt_TCPMSS: Only works on TCP SYN packets [ 296.954037][ T9394] device syzkaller1 entered promiscuous mode [ 297.006754][ T9399] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 297.012998][ T9399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.133682][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.136075][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.499458][ T9401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.511975][ T9401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.725909][ T9401] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.727593][ T9401] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.729132][ T9401] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.730693][ T9401] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.948743][ T9401] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 297.950437][ T9401] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 297.952039][ T9401] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 297.953739][ T9401] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 297.999264][ T9405] bond1: (slave ip6erspan0): making interface the new active one [ 298.001811][ T9405] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 298.048795][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 298.056062][ T9426] netlink: 'syz.4.1402': attribute type 1 has an invalid length. [ 298.656885][ T9491] device syzkaller1 entered promiscuous mode [ 298.706998][ T9492] tipc: Started in network mode [ 298.708020][ T9492] tipc: Node identity f67b065c08ef, cluster identity 4711 [ 298.709394][ T9492] tipc: Enabled bearer , priority 0 [ 298.794070][ T9481] tipc: Disabling bearer [ 298.796855][ T9530] netlink: 'syz.2.1413': attribute type 1 has an invalid length. [ 298.802463][ T9530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.852685][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1415'. [ 298.876633][ T9539] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 298.893326][ T9530] bond0: (slave ip6erspan0): making interface the new active one [ 298.895829][ T9530] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 298.901820][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 299.159258][ T9581] device syzkaller1 entered promiscuous mode [ 299.208796][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1427'. [ 299.229857][ T9589] device syzkaller0 entered promiscuous mode [ 299.230793][ T9596] x_tables: unsorted entry at hook 3 [ 299.235850][ T9589] tipc: Enabled bearer , priority 0 [ 299.243223][ T9588] tipc: Resetting bearer [ 299.295916][ T9588] tipc: Disabling bearer [ 299.299630][ T9600] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 299.464299][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1439'. [ 299.548733][ T9632] netlink: 'syz.3.1443': attribute type 1 has an invalid length. [ 299.556385][ T9631] device syzkaller1 entered promiscuous mode [ 299.609703][ T9639] device syzkaller0 entered promiscuous mode [ 299.613152][ T9639] tipc: Started in network mode [ 299.614002][ T9639] tipc: Node identity d225182657f5, cluster identity 4711 [ 299.618767][ T9639] tipc: Enabled bearer , priority 0 [ 299.620518][ T9638] tipc: Resetting bearer [ 299.680176][ T9638] tipc: Disabling bearer [ 299.761614][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1453'. [ 299.898177][ T9669] netlink: 'syz.1.1458': attribute type 1 has an invalid length. [ 299.910395][ T9676] device syzkaller0 entered promiscuous mode [ 299.912439][ T9674] device syzkaller1 entered promiscuous mode [ 299.914735][ T9676] tipc: Enabled bearer , priority 0 [ 299.967052][ T9675] tipc: Resetting bearer [ 300.015882][ T9675] tipc: Disabling bearer [ 300.065526][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1466'. [ 300.094776][ T9694] netlink: 'syz.3.1467': attribute type 1 has an invalid length. [ 300.096320][ T9694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1467'. [ 300.142134][ T9699] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1470'. [ 300.148872][ T9701] netlink: 'syz.2.1472': attribute type 1 has an invalid length. [ 300.285413][ T9721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1478'. [ 300.286940][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1478'. [ 300.288488][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1478'. [ 300.322909][ T9723] device syzkaller0 entered promiscuous mode [ 300.334917][ T9723] tipc: Started in network mode [ 300.335879][ T9723] tipc: Node identity fe5af852e2fe, cluster identity 4711 [ 300.337554][ T9723] tipc: Enabled bearer , priority 0 [ 300.339863][ T9722] tipc: Resetting bearer [ 300.395747][ T9722] tipc: Disabling bearer [ 300.694567][ T9765] device syzkaller0 entered promiscuous mode [ 300.697470][ T9765] tipc: Enabled bearer , priority 0 [ 300.699092][ T9764] tipc: Resetting bearer [ 300.785702][ T9764] tipc: Disabling bearer [ 300.877065][ T9794] device syzkaller0 entered promiscuous mode [ 300.898723][ T9794] [ 300.899199][ T9794] ============================================ [ 300.900373][ T9794] WARNING: possible recursive locking detected [ 300.901634][ T9794] syzkaller #0 Not tainted [ 300.902465][ T9794] -------------------------------------------- [ 300.903576][ T9794] syz.1.1508/9794 is trying to acquire lock: [ 300.904633][ T9794] ffff0000edea8108 (&sch->root_lock_key#263){+...}-{2:2}, at: __dev_queue_xmit+0x998/0x3154 [ 300.906415][ T9794] [ 300.906415][ T9794] but task is already holding lock: [ 300.907738][ T9794] ffff0000edea8108 (&sch->root_lock_key#263){+...}-{2:2}, at: __dev_queue_xmit+0x998/0x3154 [ 300.909567][ T9794] [ 300.909567][ T9794] other info that might help us debug this: [ 300.911127][ T9794] Possible unsafe locking scenario: [ 300.911127][ T9794] [ 300.912451][ T9794] CPU0 [ 300.913041][ T9794] ---- [ 300.913638][ T9794] lock(&sch->root_lock_key#263); [ 300.914603][ T9794] lock(&sch->root_lock_key#263); [ 300.915573][ T9794] [ 300.915573][ T9794] *** DEADLOCK *** [ 300.915573][ T9794] [ 300.916987][ T9794] May be due to missing lock nesting notation [ 300.916987][ T9794] [ 300.918459][ T9794] 3 locks held by syz.1.1508/9794: [ 300.919367][ T9794] #0: ffff8000165f7560 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 300.921186][ T9794] #1: ffff0000edea8108 (&sch->root_lock_key#263){+...}-{2:2}, at: __dev_queue_xmit+0x998/0x3154 [ 300.923180][ T9794] #2: ffff8000165f7560 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 300.924992][ T9794] [ 300.924992][ T9794] stack backtrace: [ 300.926037][ T9794] CPU: 1 PID: 9794 Comm: syz.1.1508 Not tainted syzkaller #0 [ 300.927381][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 300.929162][ T9794] Call trace: [ 300.929745][ T9794] dump_backtrace+0x1c4/0x1f0 [ 300.930562][ T9794] show_stack+0x2c/0x3c [ 300.931288][ T9794] __dump_stack+0x30/0x40 [ 300.932069][ T9794] dump_stack_lvl+0xf4/0x15c [ 300.932893][ T9794] dump_stack+0x1c/0x5c [ 300.933641][ T9794] print_deadlock_bug+0x454/0x5c8 [ 300.934536][ T9794] __lock_acquire+0x6020/0x7280 [ 300.935418][ T9794] lock_acquire+0x210/0x63c [ 300.936210][ T9794] _raw_spin_lock+0x54/0x6c [ 300.937024][ T9794] __dev_queue_xmit+0x998/0x3154 [ 300.937915][ T9794] dev_queue_xmit+0x24/0x34 [ 300.938732][ T9794] sch_frag_xmit_hook+0x228/0xf34 [ 300.939629][ T9794] tcf_dev_queue_xmit+0x4c/0x50 [ 300.940512][ T9794] tcf_mirred_act+0xa90/0x1394 [ 300.941350][ T9794] tcf_action_exec+0x164/0x544 [ 300.942181][ T9794] basic_classify+0x1ec/0x314 [ 300.943010][ T9794] tcf_classify+0x1b4/0x9d4 [ 300.943968][ T9794] qfq_enqueue+0x288/0xf74 [ 300.944901][ T9794] dev_qdisc_enqueue+0x5c/0x388 [ 300.945816][ T9794] __dev_queue_xmit+0xaf0/0x3154 [ 300.946784][ T9794] dev_queue_xmit+0x24/0x34 [ 300.947636][ T9794] packet_sendmsg+0x2de8/0x3d64 [ 300.948511][ T9794] ____sys_sendmsg+0x588/0x90c [ 300.949401][ T9794] __sys_sendmsg+0x288/0x374 [ 300.950248][ T9794] __arm64_sys_sendmsg+0x80/0x94 [ 300.951142][ T9794] invoke_syscall+0x98/0x290 [ 300.951981][ T9794] el0_svc_common+0x13c/0x258 [ 300.952851][ T9794] do_el0_svc+0x5c/0x134 [ 300.953631][ T9794] el0_svc+0x58/0x12c [ 300.954468][ T9794] el0t_64_sync_handler+0x84/0xf0 [ 300.955499][ T9794] el0t_64_sync+0x18c/0x190