last executing test programs:

38.040452811s ago: executing program 2 (id=358):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0)

37.948074462s ago: executing program 2 (id=362):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0xd27}}, 0x1006)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a", 0x88}], 0x1)
syz_mount_image$hfsplus(&(0x7f0000000c80), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000011c0)={[{@force}, {@part={'part', 0x3d, 0x1}}, {@nodecompose}, {@umask={'umask', 0x3d, 0x6872}}, {}, {@nls={'nls', 0x3d, 'iso8859-3'}}, {@creator={'creator', 0x3d, "01844587"}}, {@nobarrier}, {@gid}]}, 0x3, 0x6dd, &(0x7f00000024c0)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x1a)

37.815551138s ago: executing program 2 (id=366):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000007c0)={@flat=@handle={0x73682a85, 0x81bba07169ee07ad, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x38}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

37.700127431s ago: executing program 2 (id=369):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX=r0, @ANYBLOB='A\x00'], 0x1, 0x193, &(0x7f0000000b00)="$eJzs281qE10YB/B/+vataV0kC1fiYpauQtMrMEgFMSAoWSgIim1AOlKwENCF7c6FN+HluNUrcdmFMNJOYz9IQEGb2Px+m3ngzB+ec2A+zsA8v/V6Z2t3b/hs+DnNRiNLd1LksJF2ljJ2EADgKjmsqnyrqqq6dpDVT6mqatYdAQB/m+c/ACyex0+ePuj1+5uPiqKZlB9Gg9GgPtbjvWFepcx21tPK9xy9IJyo63v3+5vrxbF2Ppb7J/n90eC/8/luWmlPznfrfHE+/3/WzuY30sqNyfmNifmV3F45k++kla8vs5syWznKnubfd4vi7sP+hfz14/MAAADgKugUP03cv3c608brfK/xy98HLuyvl3NzebZzB4BFtff23c6Lstx+M6/Fl7W60XnpZ3oxXtJ56ef3i9XMRRt/sGgkmYM2/qGiOV6xGd6UgEtxevXPuhMAAAAAAAAAAAAAAGCay/ivaNZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDx/AgAAP//fVyNVw==")
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xb438c4, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xadc51, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020)

37.45194524s ago: executing program 2 (id=373):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4000000000010500000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000700"], 0x40}, 0x1, 0x0, 0x0, 0x4091}, 0x0)

36.67478489s ago: executing program 2 (id=382):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)

36.535880516s ago: executing program 32 (id=382):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)

21.91771439s ago: executing program 0 (id=575):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)="f4000900062b8925fe80000000000000dc8b850f", 0x14}], 0x1}, 0x0)

21.823968931s ago: executing program 0 (id=576):
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
dup(r0)
userfaultfd(0x801)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa)
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

21.57791146s ago: executing program 0 (id=584):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a00000000000000fe8000000000000000000000000000bb000000"], 0x210)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

21.500915809s ago: executing program 0 (id=587):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f00000006c0)={[{@codepage={'codepage', 0x3d, 'cp949'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x3}}, {@file_umask={'file_umask', 0x3d, 0x6}}, {@gid}]}, 0x7, 0x2db, &(0x7f0000000240)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

21.243653248s ago: executing program 0 (id=595):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r2 = syz_open_pts(r1, 0x141601)
ioctl$TIOCSETD(r2, 0x5423, 0x0)

20.595959683s ago: executing program 0 (id=607):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe80"], 0xfdef)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

20.387360567s ago: executing program 33 (id=607):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe80"], 0xfdef)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

6.464052161s ago: executing program 1 (id=699):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1}, 0x14)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0)

6.30020382s ago: executing program 1 (id=702):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28c, &(0x7f0000001980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x22)

6.219183029s ago: executing program 1 (id=706):
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0)
r0 = syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c4}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x497c, 0x0, 0x0, 0x0, 0x0)

6.024169181s ago: executing program 1 (id=709):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6c756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c6e6f636173652c756e695f786c6174653d302c696f636861727365743d69736f383835392d31342c696f636861727365743d6d616363656e746575726f2c696f63682efffd416c38a3866f383835392d31342c757466383d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c00"], 0x4, 0x362, &(0x7f0000000900)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44)

5.95075743s ago: executing program 5 (id=711):
ioctl$TCSETSW2(0xffffffffffffffff, 0x4b6a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "37896b26ec0180214633f7cfe2edb9060d66a4"})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003, 0x0, "f13d760700"})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x33a})

5.824191014s ago: executing program 5 (id=713):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]})

5.715928377s ago: executing program 5 (id=715):
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
sigaltstack(&(0x7f0000000440)={0x0}, &(0x7f0000000480)={0x0})

5.637933486s ago: executing program 5 (id=717):
syz_open_procfs$pagemap(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)

5.556826195s ago: executing program 4 (id=719):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015", @ANYRES8=r1], 0x3c}}, 0x0)

5.163310352s ago: executing program 1 (id=720):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)

1.744257258s ago: executing program 3 (id=735):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f00000001c0)={0x2a, 0x0, 0x1}, 0xc)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
write(r0, 0x0, 0x0)

1.697615323s ago: executing program 3 (id=736):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f00000068c0)=ANY=[], 0x5, 0x6130, &(0x7f0000000780)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

1.432217753s ago: executing program 3 (id=737):
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)='dn\t')

1.343334684s ago: executing program 3 (id=738):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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")
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x80000004, 0x7ec83d65, 0x0, 0x0, 0x4, 0xfffffff1, 0x0, 0x8}})

654.311174ms ago: executing program 1 (id=739):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6c756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c6e6f636173652c756e695f786c6174653d302c696f636861727365743d69736f383835392d31342c696f636861727365743d6d616363656e746575726f2c696f63682efffd416c38a3866f383835392d31342c757466383d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c00"], 0x4, 0x362, &(0x7f0000000900)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44)

608.184589ms ago: executing program 4 (id=740):
r0 = syz_open_dev$vbi(&(0x7f00000013c0), 0x0, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000700)=@multiplanar_userptr={0x4, 0x9, 0x4, 0x4000, 0x1e6205cb, {0x0, 0xea60}, {0x2, 0x8, 0x8, 0x3, 0x3, 0x2b, "45a88cf6"}, 0x8000, 0x2, {&(0x7f0000000640)=[{0x100, 0x100, {0x0}, 0xc7}, {0x6, 0x849, {0x0}, 0x4}]}, 0x7})

607.966049ms ago: executing program 3 (id=741):
unshare(0xa040400)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0)

549.804786ms ago: executing program 4 (id=742):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001b40)=@newtaction={0x60, 0x30, 0x727, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x7d3, 0x10000004, 0xa3e7, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)

522.877969ms ago: executing program 5 (id=743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x4000002, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffa, 0xf}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x2c}}, 0x0)

432.18131ms ago: executing program 4 (id=744):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x542f, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0xbd, 0x1, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x20000000}, 0x20)

407.442052ms ago: executing program 5 (id=745):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000140)={[{@journal_async_commit}, {@heartbeat_none}, {@localflocks}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0xfffffffffffffffa}}, {@noacl}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)

390.384384ms ago: executing program 3 (id=746):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
unshare(0x24020400)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
accept4$unix(r1, 0x0, 0x0, 0x80800)

296.220965ms ago: executing program 4 (id=747):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x0)
lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0)

0s ago: executing program 4 (id=748):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xe5)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts.
[   35.218953][ T4290] cgroup: Unknown subsys name 'net'
[   35.441098][ T4290] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   35.762006][ T4290] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   36.871440][ T4306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   36.880473][ T4309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   36.882855][ T4309] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   36.887026][ T4309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   36.889957][ T4316] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   36.892173][ T4316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   36.893900][ T4316] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   36.895217][ T4313] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   36.896058][ T4316] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   36.898772][ T4316] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   36.899514][ T4313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   36.900723][ T4316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   36.902608][ T4313] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   36.904426][ T4317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   36.905446][ T4313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   36.906913][ T4317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   36.909254][ T4313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   36.910502][ T4317] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   36.912375][ T4318] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   36.912890][ T4317] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   36.916493][ T4317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   36.918210][ T4317] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   36.919595][ T4316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   36.920193][ T4317] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   36.922318][ T4318] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   36.923616][ T4317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   36.924932][ T4318] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   36.926269][ T4317] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   36.927694][ T4313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   36.938046][ T4317] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.104727][ T4314] chnl_net:caif_netlink_parms(): no params data found
[   37.189714][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.191357][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.193590][ T4314] device bridge_slave_0 entered promiscuous mode
[   37.221529][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.223160][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.225285][ T4314] device bridge_slave_1 entered promiscuous mode
[   37.251338][ T4314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.267642][ T4314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.307984][ T4311] chnl_net:caif_netlink_parms(): no params data found
[   37.311215][ T4301] chnl_net:caif_netlink_parms(): no params data found
[   37.319324][ T4314] team0: Port device team_slave_0 added
[   37.338623][ T4314] team0: Port device team_slave_1 added
[   37.367495][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.368971][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.374235][ T4314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.388071][ T4308] chnl_net:caif_netlink_parms(): no params data found
[   37.401739][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.403199][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.409424][ T4314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.418586][ T4302] chnl_net:caif_netlink_parms(): no params data found
[   37.430735][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.432261][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.434298][ T4311] device bridge_slave_0 entered promiscuous mode
[   37.451257][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.452648][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.454787][ T4301] device bridge_slave_0 entered promiscuous mode
[   37.460198][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.461728][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.464047][ T4301] device bridge_slave_1 entered promiscuous mode
[   37.472161][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.473649][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.476033][ T4311] device bridge_slave_1 entered promiscuous mode
[   37.587467][ T4314] device hsr_slave_0 entered promiscuous mode
[   37.635926][ T4314] device hsr_slave_1 entered promiscuous mode
[   37.705775][ T4311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.714485][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.718315][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.736158][ T4311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.742967][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.744437][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.746917][ T4302] device bridge_slave_0 entered promiscuous mode
[   37.749615][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.751049][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.753238][ T4302] device bridge_slave_1 entered promiscuous mode
[   37.771555][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.773050][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.775216][ T4308] device bridge_slave_0 entered promiscuous mode
[   37.789030][ T4301] team0: Port device team_slave_0 added
[   37.791987][ T4311] team0: Port device team_slave_0 added
[   37.793530][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.795173][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.797366][ T4308] device bridge_slave_1 entered promiscuous mode
[   37.811899][ T4301] team0: Port device team_slave_1 added
[   37.825059][ T4311] team0: Port device team_slave_1 added
[   37.832263][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.849890][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.853213][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.858173][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.859642][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.864898][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.873801][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.888273][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.889815][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.895063][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.898396][ T4311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.899868][ T4311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.904906][ T4311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.927588][ T4311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.929054][ T4311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   37.934392][ T4311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.939384][ T4308] team0: Port device team_slave_0 added
[   37.942592][ T4302] team0: Port device team_slave_0 added
[   37.945141][ T4308] team0: Port device team_slave_1 added
[   37.967002][ T4302] team0: Port device team_slave_1 added
[   38.000493][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.002070][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.007801][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.057905][ T4311] device hsr_slave_0 entered promiscuous mode
[   38.101320][ T4311] device hsr_slave_1 entered promiscuous mode
[   38.135812][ T4311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.137575][ T4311] Cannot create hsr debugfs directory
[   38.153397][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.155192][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.161012][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.187859][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.189320][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.194806][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.198766][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.200266][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.206146][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.258349][ T4301] device hsr_slave_0 entered promiscuous mode
[   38.296294][ T4301] device hsr_slave_1 entered promiscuous mode
[   38.345806][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.347557][ T4301] Cannot create hsr debugfs directory
[   38.447316][ T4308] device hsr_slave_0 entered promiscuous mode
[   38.485977][ T4308] device hsr_slave_1 entered promiscuous mode
[   38.525677][ T4308] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.527234][ T4308] Cannot create hsr debugfs directory
[   38.637387][ T4302] device hsr_slave_0 entered promiscuous mode
[   38.686055][ T4302] device hsr_slave_1 entered promiscuous mode
[   38.735770][ T4302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   38.737346][ T4302] Cannot create hsr debugfs directory
[   38.814743][ T4314] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.860196][ T4314] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.907567][ T4314] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.951774][ T4314] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.976200][ T4319] Bluetooth: hci0: command tx timeout
[   38.977473][ T4319] Bluetooth: hci3: command tx timeout
[   38.978707][ T4319] Bluetooth: hci1: command tx timeout
[   38.979816][ T4319] Bluetooth: hci4: command tx timeout
[   39.044902][ T4311] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.066578][   T47] Bluetooth: hci2: command tx timeout
[   39.081934][ T4311] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.117413][ T4311] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.157482][ T4311] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.240541][ T4301] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.268660][ T4301] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.317863][ T4301] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.358178][ T4301] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.433651][ T4308] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.459333][ T4308] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.528888][ T4308] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.582674][ T4308] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   39.653854][ T4302] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   39.682012][ T4302] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   39.720047][ T4302] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   39.760494][ T4311] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.771353][ T4314] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.772942][ T4302] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   39.815995][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   39.819125][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.824515][ T4311] 8021q: adding VLAN 0 to HW filter on device team0
[   39.843517][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   39.846961][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   39.849098][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   39.851255][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.853418][  T219] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.854991][  T219] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.858324][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   39.860363][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.862315][  T219] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.863953][  T219] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.866518][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   39.878287][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   39.882066][ T4314] 8021q: adding VLAN 0 to HW filter on device team0
[   39.894102][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   39.898394][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   39.901009][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   39.903166][  T219] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.904719][  T219] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.921926][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   39.923980][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   39.927585][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   39.929714][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   39.946428][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   39.948794][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   39.950938][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   39.953120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   39.955079][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.956532][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.964363][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   39.973032][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.989068][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   39.991181][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   39.993533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   39.996288][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   39.998912][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.001219][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.007689][ T4311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.010375][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.024113][ T4301] 8021q: adding VLAN 0 to HW filter on device team0
[   40.027439][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.029528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.031528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.033476][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.054291][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.056738][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.060843][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.063080][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.083815][ T4314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.091738][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.102208][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.104312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.106627][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.108152][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.110031][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.112138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.114353][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.131561][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.133759][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.140082][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.141618][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.143513][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.164633][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.179277][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.190961][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.203855][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.206634][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.211621][ T4308] 8021q: adding VLAN 0 to HW filter on device team0
[   40.225022][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.228604][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.230727][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.232263][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.250601][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.252625][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.254604][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.263590][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.265416][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.267778][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.270241][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.272464][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.274665][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.277308][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.278870][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.280650][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.282810][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.284969][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.293576][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.303715][ T4311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.308387][ T4302] 8021q: adding VLAN 0 to HW filter on device team0
[   40.314579][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.316958][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.318993][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.321174][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.323152][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.324640][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.328635][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.331095][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.342788][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.344863][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.348011][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.349782][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.351375][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.353734][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.357234][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.359349][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.361229][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.362645][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.364404][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.374936][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.379344][ T4314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.382957][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.385194][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.387476][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   40.391651][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.394307][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.415327][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   40.418209][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.420287][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.425263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   40.427762][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   40.430083][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   40.452436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   40.454650][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   40.472278][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.474658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.478025][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.480221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.482266][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.484362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.490358][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.499605][ T4302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   40.501745][ T4302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.505309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.507828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.509682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.511832][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.514081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.522640][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.531031][ T4314] device veth0_vlan entered promiscuous mode
[   40.535268][ T4311] device veth0_vlan entered promiscuous mode
[   40.548117][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   40.550294][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.552470][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.569520][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.571785][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.575220][ T4314] device veth1_vlan entered promiscuous mode
[   40.592992][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   40.595164][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.597700][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.603424][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.616625][ T4311] device veth1_vlan entered promiscuous mode
[   40.632487][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   40.634655][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   40.638283][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   40.651686][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   40.653806][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   40.663632][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.669109][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.686951][ T4311] device veth0_macvtap entered promiscuous mode
[   40.698530][ T4314] device veth0_macvtap entered promiscuous mode
[   40.702530][ T4314] device veth1_macvtap entered promiscuous mode
[   40.717155][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   40.719170][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   40.721115][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   40.723787][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   40.732338][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   40.735173][ T4311] device veth1_macvtap entered promiscuous mode
[   40.745096][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   40.753652][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.755286][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.771114][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   40.772896][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   40.781358][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.783430][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.785542][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.788586][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.797784][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.802038][ T4301] device veth0_vlan entered promiscuous mode
[   40.807428][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.812319][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.817516][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   40.819811][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   40.851997][ T4301] device veth1_vlan entered promiscuous mode
[   40.855318][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.859294][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.862324][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.864331][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   40.866523][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.869747][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.871952][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   40.874242][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   40.882120][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.892184][ T4311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.894035][ T4311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.898317][ T4311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.900143][ T4311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.905782][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   40.908013][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   40.919715][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.921961][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.924866][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.931004][ T4314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.932935][ T4314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.934731][ T4314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.937201][ T4314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.941172][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.943353][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.947298][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   40.949408][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   40.951592][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.953579][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.959194][ T4308] device veth0_vlan entered promiscuous mode
[   40.964331][ T4308] device veth1_vlan entered promiscuous mode
[   41.017269][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   41.019308][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   41.021444][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   41.023612][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.027119][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.049447][ T4301] device veth0_macvtap entered promiscuous mode
[   41.056017][   T47] Bluetooth: hci4: command tx timeout
[   41.056184][ T4319] Bluetooth: hci1: command tx timeout
[   41.057138][   T47] Bluetooth: hci3: command tx timeout
[   41.058333][ T4319] Bluetooth: hci0: command tx timeout
[   41.068558][ T4308] device veth0_macvtap entered promiscuous mode
[   41.080700][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.082810][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.084995][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.088138][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   41.090391][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   41.092757][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.118116][ T4301] device veth1_macvtap entered promiscuous mode
[   41.120718][ T4308] device veth1_macvtap entered promiscuous mode
[   41.131645][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.133746][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.136483][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.138671][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.141714][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.145939][   T47] Bluetooth: hci2: command tx timeout
[   41.150950][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.152610][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.168964][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.171074][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.173156][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.175204][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.178280][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.184070][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.187382][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.189308][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.191514][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.194678][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.214358][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.216943][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.234110][ T4308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.236474][ T4308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.238258][ T4308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.240215][ T4308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.246791][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.248989][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.251165][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.253309][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.255297][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.258513][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.261767][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.264059][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.265304][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   41.268321][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   41.270538][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.270705][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.272568][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.275563][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.280263][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   41.282345][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   41.286952][ T4302] device veth0_vlan entered promiscuous mode
[   41.294113][ T4302] device veth1_vlan entered promiscuous mode
[   41.312061][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.314275][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.318125][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.320362][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.322349][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.324354][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.329902][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.334622][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.337158][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.340424][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   41.342601][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   41.344752][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.349844][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.352219][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.363457][ T4301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.365248][ T4301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.368148][ T4301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.369984][ T4301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.378473][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.380397][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.382991][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.447254][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   41.449612][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   41.485563][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.487743][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.490047][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.498772][ T4302] device veth0_macvtap entered promiscuous mode
[   41.528360][ T4302] device veth1_macvtap entered promiscuous mode
[   41.591488][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.593396][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.615116][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   41.618632][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   41.621323][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.638341][  T472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.640112][  T472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.643633][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.653602][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.656881][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.658984][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.661457][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.663721][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.666211][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.668300][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.670376][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.673781][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.680934][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.683251][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.685256][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.689122][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.691150][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.693465][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.695530][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.698531][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.703234][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.706190][  T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.707933][  T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.715531][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   41.717642][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.719819][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.722137][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.724267][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.733576][ T4302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.738925][ T4302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.740858][ T4302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.742651][ T4302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.808421][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.810430][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.813060][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   41.865051][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.867068][ T4352] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   41.869520][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.872918][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   42.116746][ T4352] usb 1-1: Using ep0 maxpacket: 32
[   42.122913][  T111] kernel write not supported for file /sysvipc/sem (pid: 111 comm: kworker/1:2)
[   42.189532][ T4407] device syzkaller0 entered promiscuous mode
[   42.245913][ T4352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   42.248559][ T4352] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   42.250389][ T4352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.256787][ T4352] usb 1-1: config 0 descriptor??
[   42.307732][ T4352] hub 1-1:0.0: USB hub found
[   42.376618][ T4412] loop3: detected capacity change from 0 to 128
[   42.422808][ T4295] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   42.516374][ T4352] hub 1-1:0.0: 1 port detected
[   42.570405][ T4418] loop3: detected capacity change from 0 to 1024
[   42.576261][ T4418] EXT4-fs: Ignoring removed orlov option
[   42.577471][ T4418] EXT4-fs: Ignoring removed nomblk_io_submit option
[   42.600059][ T4418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   42.641734][ T4308] EXT4-fs (loop3): unmounting filesystem.
[   42.981712][ T4431] loop4: detected capacity change from 0 to 8192
[   43.000056][ T4431] =======================================================
[   43.000056][ T4431] WARNING: The mand mount option has been deprecated and
[   43.000056][ T4431]          and is ignored by this kernel. Remove the mand
[   43.000056][ T4431]          option from the mount to silence this warning.
[   43.000056][ T4431] =======================================================
[   43.019765][ T4429] loop3: detected capacity change from 0 to 32768
[   43.043100][ T4352] XFS (loop3): Metadata CRC error detected at xfs_sb_read_verify+0x328/0x44c, xfs_sb block 0x0 
[   43.047086][ T4352] XFS (loop3): Unmount and run xfs_repair
[   43.049526][ T4352] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   43.051346][ T4352] 00000000: 58 46 53 42 00 00 00 00 00 00 00 00 00 00 10 00  XFSB............
[   43.054869][ T4352] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   43.062352][ T4352] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab  ..*.w.B.....G.K.
[   43.064458][ T4352] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 04 20  ............... 
[   43.071759][ T4352] 00000040: 00 00 00 00 00 00 04 21 00 00 00 00 00 00 04 22  .......!......."
[   43.074863][ T4352] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[   43.077285][ T4352] 00000060: 00 00 02 04 b4 b5 02 00 08 00 00 02 00 00 00 00  ................
[   43.079245][ T4352] 00000070: 00 00 00 00 00 00 00 00 0c 09 0b 01 0c 00 00 64  ...............d
[   43.081073][ T4429] XFS (loop3): SB validate failed with error -74.
[   43.136390][ T4306] Bluetooth: hci0: command tx timeout
[   43.146590][   T47] Bluetooth: hci3: command tx timeout
[   43.147787][   T47] Bluetooth: hci1: command tx timeout
[   43.148939][   T47] Bluetooth: hci4: command tx timeout
[   43.224610][ T4306] Bluetooth: hci2: command tx timeout
[   43.386094][ T4442] loop4: detected capacity change from 0 to 32768
[   43.409593][ T4442] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   43.503320][ T4302] ocfs2: Unmounting device (7,4) on (node local)
[   43.618366][ T4354] usb 1-1: USB disconnect, device number 2
[   43.645963][ T4353] usb 1-1-port1: config error
[   43.876863][ T4452] loop4: detected capacity change from 0 to 32768
[   44.003508][ T4454] loop4: detected capacity change from 0 to 1024
[   44.006239][ T4454] EXT4-fs: Ignoring removed orlov option
[   44.007322][ T4454] EXT4-fs: Ignoring removed nomblk_io_submit option
[   44.022914][ T4454] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   44.051800][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   44.135130][ T4461] loop4: detected capacity change from 0 to 256
[   44.145011][ T4461] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   44.408566][ T4465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.33'.
[   44.614236][ T4467] loop4: detected capacity change from 0 to 32768
[   44.618735][ T4467] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.44 (4467)
[   44.632568][ T4467] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   44.634908][ T4467] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   44.637223][ T4467] BTRFS info (device loop4): using free space tree
[   44.661299][ T4467] BTRFS info (device loop4): enabling ssd optimizations
[   44.726157][ T4302] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   45.157922][ T4494] loop4: detected capacity change from 0 to 1024
[   45.216897][   T47] Bluetooth: hci4: command tx timeout
[   45.217976][   T47] Bluetooth: hci1: command tx timeout
[   45.219125][   T47] Bluetooth: hci3: command tx timeout
[   45.220222][   T47] Bluetooth: hci0: command tx timeout
[   45.229046][  T472] hfsplus: b-tree write err: -5, ino 4
[   45.296574][ T4306] Bluetooth: hci2: command tx timeout
[   45.395311][ T4503] loop4: detected capacity change from 0 to 1024
[   45.416430][ T4503] EXT4-fs: Ignoring removed orlov option
[   45.417616][ T4503] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.442348][ T4503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   45.473431][ T4499] loop0: detected capacity change from 0 to 32768
[   45.522403][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   45.657709][ T4511] loop0: detected capacity change from 0 to 4096
[   45.691012][ T4513] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   53.535163][ T4512] netlink: 'syz.4.43': attribute type 4 has an invalid length.
[   53.622517][ T4519] netlink: 48 bytes leftover after parsing attributes in process `syz.3.47'.
[   53.793208][ T4530] loop2: detected capacity change from 0 to 1024
[   53.883791][ T4532] loop4: detected capacity change from 0 to 1024
[   53.910191][ T4532] EXT4-fs: Ignoring removed orlov option
[   53.911522][ T4532] EXT4-fs: Ignoring removed nomblk_io_submit option
[   53.938794][ T4528] loop0: detected capacity change from 0 to 32768
[   53.952599][ T4528] JFS: metapage_get_blocks failed
[   53.954281][ T4528] ERROR: (device loop0): release_metapage: write_one_page() failed
[   53.954281][ T4528] 
[   53.957754][ T4528] ERROR: (device loop0): remounting filesystem as read-only
[   53.997825][ T4532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   54.021677][   T92] blkno = 5002c, nblocks = 1
[   54.022643][   T92] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[   54.022643][   T92] 
[   54.031861][ T4539] loop3: detected capacity change from 0 to 4096
[   54.084631][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   54.086428][ T4541] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   54.223057][ T4545] sp0: Synchronizing with TNC
[   54.232716][ T4550] loop3: detected capacity change from 0 to 64
[   54.454230][ T4556] netlink: 'syz.4.62': attribute type 10 has an invalid length.
[   54.496069][ T4556] device macvlan0 entered promiscuous mode
[   54.503313][ T4556] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   54.505458][ T4558] loop2: detected capacity change from 0 to 256
[   54.516693][ T4558] FAT-fs (loop2): Unrecognized mount option "nolumtail=0" or missing value
[   54.612545][ T4534] loop1: detected capacity change from 0 to 32768
[   54.922217][ T4573] loop3: detected capacity change from 0 to 4096
[   54.948632][ T4578] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   54.965913][ T4383] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   55.064455][ T4584] loop1: detected capacity change from 0 to 64
[   55.160448][ T4588] loop1: detected capacity change from 0 to 1024
[   55.205680][ T4383] usb 1-1: Using ep0 maxpacket: 16
[   55.326200][ T4383] usb 1-1: config 0 has no interfaces?
[   55.405938][ T4383] usb 1-1: config 0 has no interfaces?
[   55.430405][ T4598] loop3: detected capacity change from 0 to 2048
[   55.439180][ T4598] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   55.455547][ T4598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   55.501868][ T4598] EXT4-fs (loop3): shut down requested (2)
[   55.566013][ T4383] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06
[   55.573440][ T4383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.575071][ T4383] usb 1-1: Product: syz
[   55.576563][ T4383] usb 1-1: Manufacturer: syz
[   55.577451][ T4383] usb 1-1: SerialNumber: syz
[   55.591711][ T4383] usb 1-1: config 0 descriptor??
[   55.604201][ T4308] EXT4-fs (loop3): unmounting filesystem.
[   55.616052][ T4599] loop1: detected capacity change from 0 to 32768
[   55.788954][ T4612] loop2: detected capacity change from 0 to 1024
[   55.893592][ T4618] loop3: detected capacity change from 0 to 1024
[   55.928511][ T4569] device bond0 entered promiscuous mode
[   55.929691][ T4569] device bond_slave_0 entered promiscuous mode
[   55.930995][ T4569] device bond_slave_1 entered promiscuous mode
[   55.948523][ T4569] device bond0 left promiscuous mode
[   55.949695][ T4569] device bond_slave_0 left promiscuous mode
[   55.951095][ T4569] device bond_slave_1 left promiscuous mode
[   56.031997][ T4621] sp0: Synchronizing with TNC
[   56.141381][ T4630] loop1: detected capacity change from 0 to 2048
[   56.143578][  T111] usb 1-1: USB disconnect, device number 3
[   56.155290][ T4630] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   56.173996][ T4630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   56.223813][ T4630] EXT4-fs (loop1): shut down requested (2)
[   56.313027][ T4301] EXT4-fs (loop1): unmounting filesystem.
[   56.536493][ T4635] loop3: detected capacity change from 0 to 32768
[   56.546087][ T4649] binder: 4647:4649 ioctl c0306201 0 returned -14
[   56.548072][ T4649] binder: 4647:4649 got transaction to invalid handle, 1
[   56.549817][ T4649] binder: 4649:4647 cannot find target node
[   56.558080][ T4649] binder: 4647:4649 transaction call to 0:0 failed 4/29201/-22, size 88-24 line 3054
[   56.567471][ T4349] binder: undelivered TRANSACTION_ERROR: 29201
[   56.635282][ T4655] syz.4.105 uses obsolete (PF_INET,SOCK_PACKET)
[   56.657523][ T4652] sp0: Synchronizing with TNC
[   56.728242][ T4657] loop4: detected capacity change from 0 to 256
[   56.798892][ T4659] loop0: detected capacity change from 0 to 2048
[   56.822917][ T4659] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   56.851109][ T4659] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   56.874090][ T4659] EXT4-fs (loop0): shut down requested (2)
[   56.981900][ T4311] EXT4-fs (loop0): unmounting filesystem.
[   57.067857][ T4678] binder: 4677:4678 ioctl c0306201 0 returned -14
[   57.086956][ T4678] binder: 4677:4678 got transaction to invalid handle, 1
[   57.088451][ T4678] binder: 4678:4677 cannot find target node
[   57.089679][ T4678] binder: 4677:4678 transaction call to 0:0 failed 8/29201/-22, size 88-24 line 3054
[   57.111814][ T4383] binder: undelivered TRANSACTION_ERROR: 29201
[   57.199859][ T4688] loop0: detected capacity change from 0 to 256
[   57.201885][ T4688] FAT-fs (loop0): Unrecognized mount option "nolumtail=0" or missing value
[   57.242623][ T4692] netlink: 'syz.4.123': attribute type 10 has an invalid length.
[   57.432610][ T4698] loop2: detected capacity change from 0 to 2048
[   57.471693][ T4698] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   57.524584][ T4698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   57.535162][ T4698] EXT4-fs (loop2): shut down requested (2)
[   57.572751][ T4675] loop1: detected capacity change from 0 to 32768
[   57.637202][ T4314] EXT4-fs (loop2): unmounting filesystem.
[   57.724031][ T4712] binder: 4711:4712 got transaction to invalid handle, 1
[   57.731104][ T4712] binder: 4712:4711 cannot find target node
[   57.737054][ T4712] binder: 4711:4712 transaction call to 0:0 failed 12/29201/-22, size 88-24 line 3054
[   57.744810][  T111] binder: undelivered TRANSACTION_ERROR: 29201
[   57.837696][ T4723] netlink: 'syz.4.136': attribute type 10 has an invalid length.
[   58.121675][ T4732] loop4: detected capacity change from 0 to 2048
[   58.134024][ T4732] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   58.149237][ T4732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   58.205165][ T4732] EXT4-fs (loop4): shut down requested (2)
[   58.300649][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   58.348944][ T4744] binder: 4743:4744 got transaction to invalid handle, 1
[   58.358423][ T4744] binder: 4744:4743 cannot find target node
[   58.394889][ T4742] loop2: detected capacity change from 0 to 32768
[   58.398619][ T4742] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.145 (4742)
[   58.409304][ T4742] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   58.411436][ T4742] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   58.413283][ T4742] BTRFS info (device loop2): enabling ssd optimizations
[   58.414717][ T4742] BTRFS info (device loop2): enabling auto defrag
[   58.417031][ T4742] BTRFS info (device loop2): doing ref verification
[   58.418461][ T4742] BTRFS info (device loop2): max_inline at 6
[   58.419744][ T4742] BTRFS info (device loop2): max_inline at 4096
[   58.421145][ T4742] BTRFS info (device loop2): turning on sync discard
[   58.422538][ T4742] BTRFS info (device loop2): max_inline at 4096
[   58.423875][ T4742] BTRFS info (device loop2): not using ssd optimizations
[   58.425346][ T4742] BTRFS info (device loop2): setting nodatasum
[   58.426740][ T4742] BTRFS info (device loop2): doing ref verification
[   58.428103][ T4742] BTRFS info (device loop2): enabling disk space caching
[   58.429620][ T4742] BTRFS error (device loop2): cannot disable free space tree
[   58.433265][ T4742] BTRFS error (device loop2): open_ctree failed
[   58.539345][ T4552] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4552)
[   58.602348][ T4754] netlink: 'syz.2.149': attribute type 10 has an invalid length.
[   58.617189][ T4754] device macvlan0 entered promiscuous mode
[   58.671687][ T4754] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   58.773284][ T4729] loop3: detected capacity change from 0 to 32768
[   58.875319][ T4769] binder: 4768:4769 got transaction to invalid handle, 1
[   58.897904][ T4770] loop1: detected capacity change from 0 to 2048
[   58.907965][ T4770] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   58.944162][ T4770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   58.956743][ T4770] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.1.157: path /28/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   58.982277][ T4770] EXT4-fs (loop1): Remounting filesystem read-only
[   59.084713][ T4301] EXT4-fs (loop1): unmounting filesystem.
[   59.148063][ T4790] netlink: 'syz.0.167': attribute type 10 has an invalid length.
[   59.205783][ T4790] device macvlan0 entered promiscuous mode
[   59.253236][ T4790] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   59.313476][ T4799] binder: 4798:4799 got transaction to invalid handle, 1
[   59.457343][ T4806] loop2: detected capacity change from 0 to 2048
[   59.465074][ T4806] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   59.495716][ T4806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   59.534214][ T4806] EXT4-fs error (device loop2): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.2.175: path /27/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   59.561938][ T4806] EXT4-fs (loop2): Remounting filesystem read-only
[   59.595194][ T4793] loop3: detected capacity change from 0 to 32768
[   59.663913][ T4314] EXT4-fs (loop2): unmounting filesystem.
[   59.761954][ T4822] loop1: detected capacity change from 0 to 47
[   59.859363][ T4828] binder: 4826:4828 got transaction to invalid handle, 1
[   59.985672][ T4836] loop0: detected capacity change from 0 to 1024
[   60.073846][   T39] hfsplus: b-tree write err: -5, ino 4
[   60.119381][ T4846] loop3: detected capacity change from 0 to 2048
[   60.136410][ T4846] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   60.175466][ T4846] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   60.240300][ T4846] EXT4-fs error (device loop3): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.3.194: path /48/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   60.266607][ T4846] EXT4-fs (loop3): Remounting filesystem read-only
[   60.347776][ T4308] EXT4-fs (loop3): unmounting filesystem.
[   60.393572][ T4861] binder: 4860:4861 got transaction to invalid handle, 1
[   60.481749][ T4842] loop4: detected capacity change from 0 to 32768
[   60.541598][ T4869] loop2: detected capacity change from 0 to 1024
[   60.639554][    T9] hfsplus: b-tree write err: -5, ino 4
[   60.766123][ T4880] loop0: detected capacity change from 0 to 2048
[   60.781875][ T4880] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   60.805515][ T4880] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   60.831974][ T4891] binder: 4890:4891 tried to acquire reference to desc 0, got 1 instead
[   60.834296][ T4891] binder: 4890:4891 ioctl c0306201 0 returned -14
[   60.867648][ T4880] EXT4-fs error (device loop0): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.0.212: path /35/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   60.898802][ T4892] loop1: detected capacity change from 0 to 2048
[   60.900972][ T4880] EXT4-fs (loop0): Remounting filesystem read-only
[   60.998798][ T4892] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   61.006549][ T4311] EXT4-fs (loop0): unmounting filesystem.
[   61.152095][ T4301] EXT4-fs (loop1): unmounting filesystem.
[   61.225112][   T47] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[   61.227323][   T47] Bluetooth: hci4: Injecting HCI hardware error event
[   61.229786][ T4306] Bluetooth: hci4: hardware error 0x00
[   61.309713][ T4917] binder: 4916:4917 tried to acquire reference to desc 0, got 1 instead
[   61.349264][ T4917] binder: 4916:4917 ioctl c0306201 0 returned -14
[   61.448516][ T4901] loop4: detected capacity change from 0 to 32768
[   61.510681][ T4927] loop0: detected capacity change from 0 to 256
[   61.512729][ T4927] FAT-fs (loop0): Unrecognized mount option "nolumtail=0" or missing value
[   61.586567][ T4931] Zero length message leads to an empty skb
[   61.694462][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'.
[   61.701146][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'.
[   61.707425][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'.
[   61.713908][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'.
[   61.776578][ T4939] loop4: detected capacity change from 0 to 2048
[   61.795017][ T4939] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   61.846481][ T4939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   61.889355][ T4939] EXT4-fs error (device loop4): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.4.231: path /48/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   61.909383][ T4939] EXT4-fs (loop4): Remounting filesystem read-only
[   61.961714][ T4951] loop3: detected capacity change from 0 to 1024
[   62.005133][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   62.021879][  T219] hfsplus: b-tree write err: -5, ino 4
[   62.043521][ T4953] binder: 4952:4953 tried to acquire reference to desc 0, got 1 instead
[   62.056248][ T4953] binder: 4952:4953 ioctl c0306201 0 returned -14
[   62.110952][ T4956] loop4: detected capacity change from 0 to 64
[   62.184776][ T4962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.473715][ T4973] process 'syz.1.246' launched '/dev/fd/3' with NULL argv: empty string added
[   62.701973][ T4982] loop0: detected capacity change from 0 to 1024
[   62.720918][ T4980] loop4: detected capacity change from 0 to 2048
[   62.734374][ T4980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   62.741178][  T472] hfsplus: b-tree write err: -5, ino 4
[   62.754941][ T4980] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   62.780950][ T4980] EXT4-fs error (device loop4): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.4.249: path /54/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   62.795136][ T4980] EXT4-fs (loop4): Remounting filesystem read-only
[   62.823869][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   62.829613][ T4961] loop2: detected capacity change from 0 to 32768
[   62.942016][ T4993] tmpfs: Bad value for 'mpol'
[   63.015265][ T4997] binder: 4995:4997 tried to acquire reference to desc 0, got 1 instead
[   63.082951][ T4999] loop4: detected capacity change from 0 to 4096
[   63.105517][ T4999] NILFS (loop4): invalid segment: Checksum error in segment payload
[   63.107697][ T4999] NILFS (loop4): trying rollback from an earlier position
[   63.143023][ T4999] NILFS (loop4): recovery complete
[   63.175665][ T5005] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   63.220167][ T5006] loop0: detected capacity change from 0 to 1024
[   63.269529][  T219] hfsplus: b-tree write err: -5, ino 4
[   63.405301][ T5024] binder: 5023:5024 tried to acquire reference to desc 0, got 1 instead
[   63.450627][ T5028] loop0: detected capacity change from 0 to 64
[   63.508683][ T5032] sp0: Synchronizing with TNC
[   63.535861][ T4306] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[   63.649979][ T5038] loop4: detected capacity change from 0 to 1024
[   63.674417][   T27] audit: type=1326 audit(63.640:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.0.279" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f4afa8 code=0x0
[   63.680123][ T5022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.727284][ T5022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.749427][  T472] hfsplus: b-tree write err: -5, ino 4
[   63.854664][ T5055] binder: 5053:5055 tried to acquire reference to desc 0, got 1 instead
[   63.893872][ T5058] tmpfs: Bad value for 'mpol'
[   63.962562][ T5062] loop4: detected capacity change from 0 to 64
[   64.021507][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'.
[   64.044094][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'.
[   64.093706][ T5070] loop2: detected capacity change from 0 to 1024
[   64.144214][    T9] hfsplus: b-tree write err: -5, ino 4
[   64.292847][ T5080] binder: 5079:5080 tried to acquire reference to desc 0, got 1 instead
[   64.373632][ T5089] loop2: detected capacity change from 0 to 256
[   64.377231][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'.
[   64.437283][ T5089] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   64.477642][ T5093] loop3: detected capacity change from 0 to 2048
[   64.484339][ T5093] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   64.497821][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[   64.499498][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[   64.503405][ T5096] loop1: detected capacity change from 0 to 1024
[   64.556358][ T5093] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   64.565192][ T5093] EXT4-fs error (device loop3): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.3.303: path /67/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   64.597335][ T5093] EXT4-fs (loop3): Remounting filesystem read-only
[   64.615385][ T4382] hfsplus: b-tree write err: -5, ino 4
[   64.704529][ T5111] binder: 5110:5111 tried to acquire reference to desc 0, got 1 instead
[   64.754974][ T4308] EXT4-fs (loop3): unmounting filesystem.
[   64.858007][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'.
[   64.888881][ T5127] loop0: detected capacity change from 0 to 1024
[   64.964167][   T11] hfsplus: b-tree write err: -5, ino 4
[   65.028667][ T5136] binder: 5135:5136 tried to acquire reference to desc 0, got 1 instead
[   65.037711][ T5136] binder: 5135:5136 got transaction with invalid data ptr
[   65.039540][ T5136] binder_debug: 14 callbacks suppressed
[   65.039551][ T5136] binder: 5135:5136 transaction call to 5135:0 failed 69/29201/-14, size 0-24 line 3342
[   65.058482][ T5139] loop2: detected capacity change from 0 to 64
[   65.060673][ T4292] binder: undelivered TRANSACTION_ERROR: 29201
[   65.236480][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'.
[   65.268038][ T5154] Bluetooth: MGMT ver 1.22
[   65.362155][ T5158] loop0: detected capacity change from 0 to 1024
[   65.404053][    T9] hfsplus: b-tree write err: -5, ino 4
[   65.533758][ T5169] binder: 5168:5169 tried to acquire reference to desc 0, got 1 instead
[   65.542173][ T5169] binder: 5168:5169 got transaction with invalid data ptr
[   65.548406][ T5169] binder: 5168:5169 transaction call to 5168:0 failed 74/29201/-14, size 0-24 line 3342
[   65.555273][ T4383] binder: undelivered TRANSACTION_ERROR: 29201
[   65.567464][ T5167] loop0: detected capacity change from 0 to 4096
[   65.613069][ T5167] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   65.620254][ T5167] ntfs3: loop0: Failed to load $Extend.
[   65.692785][ T5177] tipc: Started in network mode
[   65.694396][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'.
[   65.699623][ T5177] tipc: Node identity 5ea19079b5b9, cluster identity 4711
[   65.703638][ T5177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.713877][ T5177] ªªªªªª: renamed from syzkaller0
[   65.746690][ T5177] tipc: Disabling bearer <eth:syzkaller0>
[   65.896554][ T5189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.910235][ T5188] loop4: detected capacity change from 0 to 1024
[   65.923869][ T5181] loop3: detected capacity change from 0 to 32768
[   65.962625][ T5181] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   66.099141][ T4308] ocfs2: Unmounting device (7,3) on (node local)
[   66.160356][  T219] hfsplus: b-tree write err: -5, ino 4
[   66.230041][ T5200] binder: 5199:5200 transaction call to 5199:0 failed 79/29201/-14, size 0-24 line 3342
[   66.232920][ T4349] binder: undelivered TRANSACTION_ERROR: 29201
[   66.473875][ T5221] loop3: detected capacity change from 0 to 16
[   66.493684][ T5220] loop2: detected capacity change from 0 to 1024
[   66.521747][ T5221] erofs: (device loop3): mounted with root inode @ nid 36.
[   66.563484][  T219] hfsplus: b-tree write err: -5, ino 4
[   66.607198][ T5228] random: crng reseeded on system resumption
[   66.624916][ T5230] loop1: detected capacity change from 0 to 512
[   66.639814][ T4349] binder: release 5227:5232 transaction 84 out, still active
[   66.641538][ T4349] binder: undelivered TRANSACTION_COMPLETE
[   66.651934][ T5230] EXT4-fs: Ignoring removed bh option
[   66.665474][ T4349] binder: send failed reply for transaction 84, target dead
[   66.724544][ T5237] loop2: detected capacity change from 0 to 128
[   66.726457][ T5240] loop4: detected capacity change from 0 to 2048
[   66.730058][ T5230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   66.734791][ T5240] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   66.770164][ T5237] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   66.779089][ T5240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   66.792467][ T5240] EXT4-fs error (device loop4): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.4.370: path /81/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   66.815472][ T5230] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #15: comm syz.1.368: corrupted xattr block 32
[   66.824578][ T5240] EXT4-fs (loop4): Remounting filesystem read-only
[   66.830159][ T5230] EXT4-fs (loop1): Remounting filesystem read-only
[   66.831499][ T5230] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117)
[   66.875229][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   67.136976][ T5249] loop0: detected capacity change from 0 to 256
[   67.139037][ T5249] FAT-fs (loop0): Unrecognized mount option "nolumtail=0" or missing value
[   67.168658][ T4672] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   67.374806][ T4301] EXT4-fs (loop1): unmounting filesystem.
[   67.531887][ T5252] loop1: detected capacity change from 0 to 1024
[   67.643525][    T9] hfsplus: b-tree write err: -5, ino 4
[   67.659036][ T5258] binder_user_error: 3 callbacks suppressed
[   67.659049][ T5258] binder: 5257:5258 tried to acquire reference to desc 0, got 1 instead
[   67.666273][ T4380] binder: release 5257:5258 transaction 89 out, still active
[   67.799202][ T5264] loop1: detected capacity change from 0 to 2048
[   67.806181][ T5264] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   67.812556][ T5264] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   67.836719][ T5264] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 9: comm syz.1.383: path /64/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[   67.865874][ T5264] EXT4-fs (loop1): Remounting filesystem read-only
[   67.937948][   T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   67.940921][   T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   67.943197][   T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   67.944409][ T4301] EXT4-fs (loop1): unmounting filesystem.
[   67.947390][ T4319] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   67.949391][ T4319] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   67.951172][ T4319] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   68.040730][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.114595][ T5286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.134962][ T5288] loop3: detected capacity change from 0 to 22
[   68.150231][ T5288] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   68.170052][ T5288] VFS: Can't find a romfs filesystem on dev loop3.
[   68.170052][ T5288] 
[   68.199334][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.210853][ T5291] loop4: detected capacity change from 0 to 1024
[   68.304409][   T39] hfsplus: b-tree write err: -5, ino 4
[   68.317742][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.409585][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.442086][ T5298] binder: 5297:5298 tried to acquire reference to desc 0, got 1 instead
[   68.574715][ T5303] loop3: detected capacity change from 0 to 256
[   68.577330][ T5303] FAT-fs (loop3): Unrecognized mount option "nolumtail=0" or missing value
[   68.644312][ T5272] chnl_net:caif_netlink_parms(): no params data found
[   68.680497][ T5308] usb usb8: usbfs: process 5308 (syz.3.399) did not claim interface 0 before use
[   68.716667][ T5309] loop4: detected capacity change from 0 to 2048
[   68.742639][ T5309] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   68.768286][ T5309] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   68.775419][ T5309] EXT4-fs (loop4): shut down requested (2)
[   68.791092][   T11] tipc: Left network mode
[   68.890024][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   68.892418][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.893951][ T5272] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.901870][ T5272] device bridge_slave_0 entered promiscuous mode
[   68.965438][ T5321] loop3: detected capacity change from 0 to 2048
[   68.966241][ T5327] loop4: detected capacity change from 0 to 1024
[   69.010187][ T5321] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.039856][ T4958] hfsplus: b-tree write err: -5, ino 4
[   69.167074][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.168607][ T5272] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.171438][ T5272] device bridge_slave_1 entered promiscuous mode
[   69.178999][ T5338] loop4: detected capacity change from 0 to 256
[   69.180821][ T5338] FAT-fs (loop4): Unrecognized mount option "nolumtail=0" or missing value
[   69.255865][ T5325] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   69.296444][ T5272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.305173][ T5272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.339626][ T5272] team0: Port device team_slave_0 added
[   69.343324][ T5272] team0: Port device team_slave_1 added
[   69.468193][ T5272] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.470896][ T5272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.485307][ T5272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.517024][ T5356] loop1: detected capacity change from 0 to 2048
[   69.533170][ T5356] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   69.545211][ T5356] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   69.560470][ T5272] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.561997][ T5272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.563732][ T5356] EXT4-fs (loop1): shut down requested (2)
[   69.597681][ T5272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.615079][ T5363] loop3: detected capacity change from 0 to 1024
[   69.620985][ T1515] cfg80211: failed to load regulatory.db
[   69.654110][ T4301] EXT4-fs (loop1): unmounting filesystem.
[   69.721183][ T4382] hfsplus: b-tree write err: -5, ino 4
[   69.832513][ T5370] loop3: detected capacity change from 0 to 256
[   69.894612][ T5370] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[   69.918996][ T5272] device hsr_slave_0 entered promiscuous mode
[   69.930386][ T5374] loop4: detected capacity change from 0 to 512
[   69.946089][ T5272] device hsr_slave_1 entered promiscuous mode
[   69.957684][ T5374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   69.985935][ T5272] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   69.987686][ T5272] Cannot create hsr debugfs directory
[   70.015747][ T4306] Bluetooth: hci4: command tx timeout
[   70.050546][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   70.116005][ T5378] loop4: detected capacity change from 0 to 256
[   70.117983][ T5378] FAT-fs (loop4): Unrecognized mount option "nolumtail=0" or missing value
[   70.253827][ T5383] loop1: detected capacity change from 0 to 1024
[   70.276427][ T5385] capability: warning: `syz.0.423' uses deprecated v2 capabilities in a way that may be insecure
[   70.328926][ T5383] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=800ec119, mo2=0002]
[   70.331309][ T5383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   70.369202][ T5387] loop4: detected capacity change from 0 to 2048
[   70.397378][ T5387] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   70.407517][ T4301] EXT4-fs (loop1): unmounting filesystem.
[   70.417685][ T5392] __nla_validate_parse: 2 callbacks suppressed
[   70.417699][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'.
[   70.487769][ T5387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   70.494316][ T5387] EXT4-fs (loop4): shut down requested (2)
[   70.557587][ T5397] loop0: detected capacity change from 0 to 1024
[   70.635712][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   70.720875][ T4382] hfsplus: b-tree write err: -5, ino 4
[   70.832706][ T5272] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   70.858557][ T5422] loop4: detected capacity change from 0 to 256
[   70.860525][ T5422] FAT-fs (loop4): Unrecognized mount option "nolumtail=0" or missing value
[   70.900267][ T5272] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   70.903422][ T5419] loop0: detected capacity change from 0 to 2048
[   70.926096][ T5419] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576
[   70.932359][ T5424] loop3: detected capacity change from 0 to 1024
[   70.938449][ T5272] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   70.946279][ T5419] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   70.952030][ T5424] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   70.954591][ T5424] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[   70.958461][ T5424] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[   71.049590][ T5428] Bluetooth: MGMT ver 1.22
[   71.262174][ T5434] loop0: detected capacity change from 0 to 2048
[   71.265094][ T5434] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   71.279372][ T5434] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   71.322430][ T5434] EXT4-fs (loop0): shut down requested (2)
[   71.352713][ T5272] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   71.360353][ T4311] EXT4-fs (loop0): unmounting filesystem.
[   71.468722][ T5439] loop0: detected capacity change from 0 to 1024
[   71.580856][ T4382] hfsplus: b-tree write err: -5, ino 4
[   71.683553][ T5453] loop1: detected capacity change from 0 to 256
[   71.903238][ T5464] loop4: detected capacity change from 0 to 2048
[   71.945783][ T5464] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   71.987790][ T5464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   72.105739][   T47] Bluetooth: hci4: command tx timeout
[   72.151107][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   72.293987][ T5486] loop4: detected capacity change from 0 to 1024
[   72.322951][   T11] device hsr_slave_0 left promiscuous mode
[   72.361103][  T219] hfsplus: b-tree write err: -5, ino 4
[   72.415732][   T11] device hsr_slave_1 left promiscuous mode
[   72.430453][ T5491] loop3: detected capacity change from 0 to 1024
[   72.448552][ T5491] EXT4-fs (loop3): INFO: recovery required on readonly filesystem
[   72.450359][ T5491] EXT4-fs (loop3): write access will be enabled during recovery
[   72.461031][ T5491] JBD2: no valid journal superblock found
[   72.462316][ T5491] EXT4-fs (loop3): error loading journal
[   72.474954][ T5496] loop1: detected capacity change from 0 to 256
[   72.486287][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.487899][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.491533][ T5496] FAT-fs (loop1): Unrecognized mount option "nolumtail=0" or missing value
[   72.502736][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.504450][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.517408][   T11] device bridge_slave_1 left promiscuous mode
[   72.519926][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.610604][   T11] device bridge_slave_0 left promiscuous mode
[   72.612152][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.704049][ T5505] loop3: detected capacity change from 0 to 2048
[   72.713504][ T5505] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   72.725401][ T5505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   72.741747][ T5505] EXT4-fs (loop3): shut down requested (2)
[   72.779240][ T4308] EXT4-fs (loop3): unmounting filesystem.
[   72.798735][   T11] device veth1_macvtap left promiscuous mode
[   72.800331][   T11] device veth0_macvtap left promiscuous mode
[   72.802013][   T11] device veth1_vlan left promiscuous mode
[   72.803457][   T11] device veth0_vlan left promiscuous mode
[   73.038212][ T5514] loop3: detected capacity change from 0 to 1024
[   73.081082][ T5306] hfsplus: b-tree write err: -5, ino 4
[   73.445210][   T11] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[   73.479899][ T5520] loop3: detected capacity change from 0 to 40427
[   73.489007][ T5520] F2FS-fs (loop3): invalid crc value
[   73.520361][ T5520] F2FS-fs (loop3): Found nat_bits in checkpoint
[   73.548346][ T5520] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   73.576757][ T5530] loop1: detected capacity change from 0 to 4096
[   73.629436][ T5531] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   73.898860][ T5539] loop1: detected capacity change from 0 to 1024
[   73.952976][ T5192] hfsplus: b-tree write err: -5, ino 4
[   73.970788][ T5543] loop3: detected capacity change from 0 to 256
[   73.972653][ T5543] FAT-fs (loop3): Unrecognized mount option "nolumtail=0" or missing value
[   74.185707][ T4306] Bluetooth: hci4: command tx timeout
[   74.750573][   T11] team0 (unregistering): Port device team_slave_1 removed
[   74.928571][   T11] team0 (unregistering): Port device team_slave_0 removed
[   75.121257][ T5555] loop3: detected capacity change from 0 to 1024
[   75.126170][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.131834][ T5555] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   75.134073][ T5555] EXT4-fs (loop3): orphan cleanup on readonly fs
[   75.141752][ T5555] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem
[   75.147118][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.148701][ T5555] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #3: comm syz.3.484: mark_inode_dirty error
[   75.151397][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.152876][ T5555] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.484: Invalid block bitmap block 3 in block_group 0
[   75.157557][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.159127][ T5555] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem
[   75.164423][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.168933][ T5555] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #3: comm syz.3.484: mark_inode_dirty error
[   75.171594][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.172973][ T5555] Quota error (device loop3): write_blk: dquota write failed
[   75.174860][ T5555] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 1: comm syz.3.484: lblock 6 mapped to illegal pblock 1 (length 1)
[   75.181576][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.182875][ T5555] Quota error (device loop3): write_blk: dquota write failed
[   75.184801][ T5555] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[   75.187443][ T5555] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 48: comm syz.3.484: lblock 0 mapped to illegal pblock 48 (length 1)
[   75.190903][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.192299][ T5555] Quota error (device loop3): v2_write_file_info: Can't write info structure
[   75.194330][ T5555] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.484: Failed to acquire dquot type 0
[   75.197609][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.198919][ T5555] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 49: comm syz.3.484: lblock 1 mapped to illegal pblock 49 (length 1)
[   75.202433][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.203822][ T5555] Quota error (device loop3): do_insert_tree: Can't read tree quota block 1
[   75.205884][ T5555] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   75.207986][ T5555] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.484: Failed to acquire dquot type 0
[   75.211089][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.212600][ T5555] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem
[   75.217339][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.218853][ T5555] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #15: comm syz.3.484: mark_inode_dirty error
[   75.221810][ T5555] EXT4-fs (loop3): Remounting filesystem read-only
[   75.223224][ T5555] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   75.225705][ T5555] EXT4-fs (loop3): 1 orphan inode deleted
[   75.233441][ T5555] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   75.252283][ T4308] EXT4-fs (loop3): unmounting filesystem.
[   75.362007][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.655351][ T5566] loop3: detected capacity change from 0 to 40427
[   75.663291][ T5566] F2FS-fs (loop3): invalid crc value
[   75.673654][ T5566] F2FS-fs (loop3): Found nat_bits in checkpoint
[   75.694506][ T5566] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   75.740956][ T4308] syz-executor: attempt to access beyond end of device
[   75.740956][ T4308] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   75.970915][ T5574] loop3: detected capacity change from 0 to 256
[   75.972877][ T5574] FAT-fs (loop3): Unrecognized mount option "nolumtail=0" or missing value
[   76.017191][ T4554] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   76.255730][   T47] Bluetooth: hci4: command tx timeout
[   76.893429][ T5577] loop3: detected capacity change from 0 to 8192
[   76.898734][ T5577] REISERFS warning (device loop3): super-6509 reiserfs_parse_options: nolargeio option is no longer supported
[   77.672760][ T5598] loop3: detected capacity change from 0 to 1024
[   77.677634][ T5598] EXT4-fs (loop3): Can't support bigalloc feature without extents feature
[   77.677634][ T5598] 
[   77.680118][ T5598] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   77.818322][   T11] bond0 (unregistering): Released all slaves
[   78.006936][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'.
[   78.332747][ T5619] loop4: detected capacity change from 0 to 32768
[   78.350677][ T5619] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   78.459388][ T4302] ocfs2: Unmounting device (7,4) on (node local)
[   78.784832][ T5272] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.798648][ T5634] tipc: Started in network mode
[   78.800206][ T5634] tipc: Node identity 36a18bd74927, cluster identity 4711
[   78.802704][ T5634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.837229][ T5272] 8021q: adding VLAN 0 to HW filter on device team0
[   78.845387][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.857862][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.897229][ T5631] tipc: Disabling bearer <eth:syzkaller0>
[   78.907438][ T5647] loop1: detected capacity change from 0 to 64
[   78.918444][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.920574][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.922550][  T219] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.923917][  T219] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.928410][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.934718][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.953215][  T219] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.954712][  T219] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.968518][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.026104][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.028389][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.031558][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.036071][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.043130][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.050052][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.068306][ T5272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   79.070469][ T5272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.100569][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.102945][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.105120][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.112203][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.120195][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.192312][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.438452][ T5677] loop0: detected capacity change from 0 to 256
[   79.440379][ T5677] FAT-fs (loop0): Unrecognized mount option "nolumtail=0" or missing value
[   79.552222][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   79.554137][  T472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   79.562024][ T5686] loop3: detected capacity change from 0 to 64
[   79.574207][ T5688] loop4: detected capacity change from 0 to 512
[   79.585732][ T5272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.654557][ T5688] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   79.663958][ T5689] tipc: Started in network mode
[   79.665062][ T5689] tipc: Node identity de66483f8a8, cluster identity 4711
[   79.673898][ T5689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.677605][ T5689] ªªªªªª: renamed from syzkaller0
[   79.718543][ T5689] tipc: Disabling bearer <eth:syzkaller0>
[   79.797272][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   80.096992][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   80.099260][  T219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.173975][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   80.177226][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.179633][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   80.181719][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   80.185681][ T5272] device veth0_vlan entered promiscuous mode
[   80.210525][ T5272] device veth1_vlan entered promiscuous mode
[   80.232204][ T5722] loop4: detected capacity change from 0 to 1024
[   80.268070][ T5722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.284255][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   80.286344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   80.288377][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   80.290416][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.311616][ T5272] device veth0_macvtap entered promiscuous mode
[   80.315233][ T5272] device veth1_macvtap entered promiscuous mode
[   80.349713][ T5727] loop0: detected capacity change from 0 to 64
[   80.365181][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.376873][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.378808][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.385075][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.388959][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.391169][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.393195][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.395427][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.405446][ T5272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.412094][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   80.414207][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   80.424212][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.457584][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.471020][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.473387][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.475548][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.497289][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.499564][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.501863][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.504021][ T5272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.516931][ T5272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.520076][ T5272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.525372][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.536382][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.566487][ T5272] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.570203][ T5272] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.572011][ T5272] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.573775][ T5272] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.746339][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.748225][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.805232][ T5743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.541'.
[   80.807746][ T5743] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   80.840965][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.886113][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.889137][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.896581][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.959796][ T5756] loop3: detected capacity change from 0 to 256
[   80.961581][ T5756] FAT-fs (loop3): Unrecognized mount option "nolumtail=0" or missing value
[   81.035808][ T5761] loop0: detected capacity change from 0 to 64
[   81.274094][ T5760] loop4: detected capacity change from 0 to 8192
[   81.319925][ T5760] Dev loop4: RDB in block 1 has bad checksum
[   81.354999][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.371033][ T3912] Dev loop4: RDB in block 1 has bad checksum
[   81.397215][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.764426][ T5798] loop1: detected capacity change from 0 to 47
[   81.883964][ T5805] loop3: detected capacity change from 0 to 64
[   82.096421][ T4292] atkbd serio0: keyboard reset failed on 
[   82.146718][ T5811] loop5: detected capacity change from 0 to 4096
[   82.171088][ T5811] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[   82.268285][ T5830] loop0: detected capacity change from 0 to 256
[   82.298378][ T5830] FAT-fs (loop0): Unrecognized mount option "nolumtail=0" or missing value
[   82.351554][ T5325] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   82.489873][ T5844] loop5: detected capacity change from 0 to 64
[   82.829904][ T5870] loop3: detected capacity change from 0 to 256
[   82.847221][ T5870] FAT-fs (loop3): Unrecognized mount option "nolumtail=0" or missing value
[   82.958647][ T5879] loop0: detected capacity change from 0 to 64
[   82.991366][ T5881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'.
[   83.022074][ T5883] loop1: detected capacity change from 0 to 64
[   83.223084][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'.
[   83.334412][ T5902] loop1: detected capacity change from 0 to 64
[   83.391220][ T5906] loop4: detected capacity change from 0 to 256
[   83.406347][ T5906] FAT-fs (loop4): Unrecognized mount option "nolumtail=0" or missing value
[   83.685414][ T5918] loop4: detected capacity change from 0 to 64
[   84.037063][   T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.177731][   T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.259798][   T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.262937][   T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.265165][   T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.273540][   T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.276665][   T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.289584][   T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.365032][ T5963] loop1: detected capacity change from 0 to 64
[   84.378835][   T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.530607][   T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.855076][ T5981] loop3: detected capacity change from 0 to 4096
[   84.911169][ T5952] chnl_net:caif_netlink_parms(): no params data found
[   85.228631][ T5999] loop5: detected capacity change from 0 to 512
[   85.238747][ T5999] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   85.249069][ T5999] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   85.288440][ T5999] EXT4-fs (loop5): 1 truncate cleaned up
[   85.290224][ T5999] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   85.335350][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.337963][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.340077][ T5952] device bridge_slave_0 entered promiscuous mode
[   85.413603][ T6010] loop4: detected capacity change from 0 to 64
[   85.446358][ T5272] EXT4-fs (loop5): unmounting filesystem.
[   85.466351][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.467939][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.470143][ T5952] device bridge_slave_1 entered promiscuous mode
[   85.543509][ T6018] loop5: detected capacity change from 0 to 512
[   85.552433][ T6018] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[   85.559156][ T6018] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   85.561399][ T6018] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)!
[   85.569246][ T6018] EXT4-fs (loop5): group descriptors corrupted!
[   85.599156][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.603012][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.724294][ T5952] team0: Port device team_slave_0 added
[   85.841656][ T5952] team0: Port device team_slave_1 added
[   85.851122][ T6037] loop1: detected capacity change from 0 to 2048
[   85.871892][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[   85.889963][ T6037] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   85.924198][ T6042] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.002194][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.003728][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.026095][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.073838][ T6049] loop5: detected capacity change from 0 to 64
[   86.091593][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.093262][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.107800][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.244588][ T6051] device syzkaller0 entered promiscuous mode
[   86.307778][ T5952] device hsr_slave_0 entered promiscuous mode
[   86.335703][   T47] Bluetooth: hci3: command tx timeout
[   86.336158][ T5952] device hsr_slave_1 entered promiscuous mode
[   86.861772][ T6079] loop5: detected capacity change from 0 to 32768
[   86.905786][ T6079] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[   86.998126][ T5272] ocfs2: Unmounting device (7,5) on (node local)
[   87.035371][ T6088] loop4: detected capacity change from 0 to 64
[   87.170235][ T6092] loop4: detected capacity change from 0 to 512
[   87.182945][ T6092] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[   87.192766][ T6092] System zones: 1-12
[   87.195938][ T6092] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.657: corrupted in-inode xattr
[   87.199822][ T6092] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.657: couldn't read orphan inode 15 (err -117)
[   87.202701][ T6092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   87.285414][ T4302] EXT4-fs (loop4): unmounting filesystem.
[   88.232977][ T6112] loop5: detected capacity change from 0 to 64
[   88.415781][   T47] Bluetooth: hci3: command tx timeout
[   88.471329][ T6114] loop5: detected capacity change from 0 to 32768
[   88.499219][ T1515] XFS (loop5): Metadata CRC error detected at xfs_sb_read_verify+0x328/0x44c, xfs_sb block 0x0 
[   88.501981][ T1515] XFS (loop5): Unmount and run xfs_repair
[   88.503121][ T1515] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[   88.505805][ T1515] 00000000: 58 46 53 42 00 00 00 00 00 00 00 00 00 00 10 00  XFSB............
[   88.507701][ T1515] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   88.509676][ T1515] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab  ..*.w.B.....G.K.
[   88.511469][ T1515] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 04 20  ............... 
[   88.513315][ T1515] 00000040: 00 00 00 00 00 00 04 21 00 00 00 00 00 00 04 22  .......!......."
[   88.515226][ T1515] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[   88.517268][ T1515] 00000060: 00 00 02 04 b4 b5 02 00 08 00 00 02 00 00 00 00  ................
[   88.519163][ T1515] 00000070: 00 00 00 00 00 00 00 00 0c 09 0b 01 0c 00 00 64  ...............d
[   88.522418][ T6114] XFS (loop5): SB validate failed with error -74.
[   89.000286][ T6123] loop5: detected capacity change from 0 to 4096
[   89.003501][ T6123] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[   89.183623][ T6127] loop5: detected capacity change from 0 to 8
[   89.192810][ T6127] MTD: Attempt to mount non-MTD device "/dev/loop5"
[   89.211396][ T6127] cramfs: unsupported filesystem features
[   89.368031][ T6133] loop5: detected capacity change from 0 to 256
[   89.382945][ T6133] FAT-fs (loop5): Unrecognized mount option "nolumtail=0" or missing value
[   89.412889][ T4554] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   89.523705][ T6137] loop5: detected capacity change from 0 to 64
[   89.598702][ T6139] loop5: detected capacity change from 0 to 512
[   89.639079][ T6139] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   89.688624][ T5272] EXT4-fs (loop5): unmounting filesystem.
[   89.858323][ T6148] loop5: detected capacity change from 0 to 1024
[   89.887270][ T6148] hfsplus: bad catalog entry type
[   89.911357][ T5306] hfsplus: b-tree write err: -5, ino 4
[   90.050433][ T6156] loop5: detected capacity change from 0 to 256
[   90.058181][ T6156] FAT-fs (loop5): Unrecognized mount option "nolumtail=0" or missing value
[   90.091810][ T4554] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   90.168154][ T6160] loop5: detected capacity change from 0 to 64
[   90.234743][ T6162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.263586][ T6162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.495713][ T4306] Bluetooth: hci3: command tx timeout
[   92.575711][ T4306] Bluetooth: hci3: command tx timeout
[   97.868245][ T6189] loop3: detected capacity change from 0 to 256
[   97.870150][ T6189] FAT-fs (loop3): Unrecognized mount option "nolumtail=0" or missing value
[   98.084349][ T6201] loop1: detected capacity change from 0 to 64
[   98.100390][ T6204] loop3: detected capacity change from 0 to 64
[   98.368692][ T6222] loop1: detected capacity change from 0 to 256
[   98.370612][ T6222] FAT-fs (loop1): Unrecognized mount option "nolumtail=0" or missing value
[   98.547722][ T6234] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[   98.639754][   T39] device hsr_slave_0 left promiscuous mode
[   98.704195][   T39] device hsr_slave_1 left promiscuous mode
[   98.776627][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.778346][   T39] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.780496][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.782279][   T39] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.799226][   T39] device bridge_slave_1 left promiscuous mode
[   98.803047][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.858463][   T39] device bridge_slave_0 left promiscuous mode
[   98.859979][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.995827][   T39] device veth1_macvtap left promiscuous mode
[   98.997241][   T39] device veth0_macvtap left promiscuous mode
[   98.998656][   T39] device veth1_vlan left promiscuous mode
[   98.999870][   T39] device veth0_vlan left promiscuous mode
[   99.587281][   T39] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[   99.618939][ T6266] sctp: [Deprecated]: syz.3.722 (pid 6266) Use of int in max_burst socket option deprecated.
[   99.618939][ T6266] Use struct sctp_assoc_value instead
[   99.940332][ T6270] loop3: detected capacity change from 0 to 32768
[  100.961439][ T6275] binder: 6274:6275 tried to acquire reference to desc 0, got 1 instead
[  100.965015][ T6275] binder: 6274:6275 got transaction with invalid offsets size, 108
[  100.965138][   T39] team0 (unregistering): Port device team_slave_1 removed
[  100.967969][ T6275] binder_debug: 5 callbacks suppressed
[  100.967979][ T6275] binder: 6274:6275 transaction call to 6274:0 failed 99/29201/-22, size 88-108 line 3286
[  100.973058][ T4383] binder: undelivered TRANSACTION_ERROR: 29201
[  101.089313][ T6281] loop3: detected capacity change from 0 to 256
[  101.091169][ T6281] FAT-fs (loop3): Unrecognized mount option "nolumtail=0" or missing value
[  101.159342][   T39] team0 (unregistering): Port device team_slave_0 removed
[  101.343090][   T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.562548][   T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.705031][ T6284] loop3: detected capacity change from 0 to 32768
[  102.050674][   T27] audit: type=1326 audit(102.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014afa8 code=0x7ffc0000
[  102.055369][   T27] audit: type=1326 audit(102.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=192 compat=0 ip=0xffff9014afa8 code=0x7ffc0000
[  102.073066][   T27] audit: type=1326 audit(102.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014afa8 code=0x7ffc0000
[  102.110302][ T6291] loop3: detected capacity change from 0 to 1024
[  102.132793][ T6291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  102.285067][ T6296] EXT4-fs (loop3): shut down requested (0)
[  102.405256][  T219] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  102.412552][  T219] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  102.415388][  T219] EXT4-fs (loop3): This should not happen!! Data will be lost
[  102.415388][  T219] 
[  102.417501][  T219] EXT4-fs (loop3): Total free blocks count 0
[  102.418841][  T219] EXT4-fs (loop3): Free/Dirty block details
[  102.420098][  T219] EXT4-fs (loop3): free_blocks=68451041280
[  102.421292][  T219] EXT4-fs (loop3): dirty_blocks=5104
[  102.422390][  T219] EXT4-fs (loop3): Block reservation details
[  102.423615][  T219] EXT4-fs (loop3): i_reserved_data_blocks=319
[  102.865264][ T6303] loop3: detected capacity change from 0 to 32768
[  103.043171][ T6307] loop3: detected capacity change from 0 to 512
[  103.064714][ T6307] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  103.070968][ T6307] EXT4-fs (loop3): 1 truncate cleaned up
[  103.072213][ T6307] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  103.399568][   T39] bond0 (unregistering): Released all slaves
[  103.654434][ T6255] tun0: tun_chr_ioctl cmd 1074025675
[  103.655920][ T6255] tun0: persist enabled
[  103.657022][ T6256] tun0: tun_chr_ioctl cmd 1074025675
[  103.658299][ T6256] tun0: persist disabled
[  103.660109][ T6260] netlink: 'syz.1.720': attribute type 4 has an invalid length.
[  103.688302][ T6261] netlink: 'syz.1.720': attribute type 4 has an invalid length.
[  103.727165][ T5952] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  103.771804][ T6314] loop1: detected capacity change from 0 to 256
[  103.773829][ T6314] FAT-fs (loop1): Unrecognized mount option "nolumtail=0" or missing value
[  103.805375][ T4308] EXT4-fs (loop3): unmounting filesystem.
[  103.816138][ T5952] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  103.864767][ T5952] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  103.946787][ T5952] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  104.174621][ T6330] loop4: detected capacity change from 0 to 1024
[  104.182440][ T6330] EXT4-fs: Ignoring removed oldalloc option
[  104.216985][ T6327] loop5: detected capacity change from 0 to 32768
[  104.229283][ T6327] (syz.5.745,6327,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  104.232389][ T6327] (syz.5.745,6327,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  104.265759][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.284476][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.288325][ T6330] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  104.291121][ T6327] JBD2: Ignoring recovery information on journal
[  104.299772][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.337092][ T5952] 8021q: adding VLAN 0 to HW filter on device team0
[  104.362246][ T5952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  104.364631][ T5952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  104.375349][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.378001][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.380087][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.381691][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.393173][ T6327] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  104.413803][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.418206][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.420313][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.421675][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.423404][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.438469][ T6327] 
[  104.438960][ T6327] ======================================================
[  104.440424][ T6327] WARNING: possible circular locking dependency detected
[  104.441825][ T6327] 6.1.114-syzkaller #0 Not tainted
[  104.442866][ T6327] ------------------------------------------------------
[  104.444400][ T6327] syz.5.745/6327 is trying to acquire lock:
[  104.445656][ T6327] ffff0000cc28e650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x3d8/0xb1c
[  104.447610][ T6327] 
[  104.447610][ T6327] but task is already holding lock:
[  104.449118][ T6327] ffff0000e15f22e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1d4/0x260
[  104.451490][ T6327] 
[  104.451490][ T6327] which lock already depends on the new lock.
[  104.451490][ T6327] 
[  104.453753][ T6327] 
[  104.453753][ T6327] the existing dependency chain (in reverse order) is:
[  104.455784][ T6327] 
[  104.455784][ T6327] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  104.457749][ T6327]        down_write+0x5c/0x88
[  104.458840][ T6327]        ocfs2_lock_global_qf+0x1d4/0x260
[  104.460120][ T6327]        ocfs2_acquire_dquot+0x27c/0xb1c
[  104.461365][ T6327]        dqget+0x660/0xcec
[  104.462305][ T6327]        __dquot_initialize+0x344/0xc04
[  104.463485][ T6327]        dquot_initialize+0x24/0x34
[  104.464639][ T6327]        ocfs2_get_init_inode+0x14c/0x1b8
[  104.465863][ T6327]        ocfs2_mknod+0x8ac/0x2560
[  104.466916][ T6327]        ocfs2_create+0x1a8/0x560
[  104.467973][ T6327]        path_openat+0xeac/0x2548
[  104.469080][ T6327]        do_filp_open+0x1bc/0x3cc
[  104.470175][ T6327]        do_sys_openat2+0x128/0x3e0
[  104.471268][ T6327]        __arm64_sys_openat+0x1f0/0x240
[  104.472519][ T6327]        invoke_syscall+0x98/0x2c0
[  104.473664][ T6327]        el0_svc_common+0x138/0x258
[  104.474732][ T6327]        do_el0_svc+0x64/0x218
[  104.475769][ T6327]        el0_svc+0x58/0x168
[  104.476830][ T6327]        el0t_64_sync_handler+0x84/0xf0
[  104.478046][ T6327]        el0t_64_sync+0x18c/0x190
[  104.479210][ T6327] 
[  104.479210][ T6327] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}:
[  104.481611][ T6327]        down_write+0x5c/0x88
[  104.482579][ T6327]        ocfs2_lock_global_qf+0x1b8/0x260
[  104.483928][ T6327]        ocfs2_acquire_dquot+0x27c/0xb1c
[  104.485097][ T6327]        dqget+0x660/0xcec
[  104.486120][ T6327]        __dquot_initialize+0x344/0xc04
[  104.487434][ T6327]        dquot_initialize+0x24/0x34
[  104.488494][ T6327]        ocfs2_get_init_inode+0x14c/0x1b8
[  104.489758][ T6327]        ocfs2_mknod+0x8ac/0x2560
[  104.490914][ T6327]        ocfs2_create+0x1a8/0x560
[  104.491996][ T6327]        path_openat+0xeac/0x2548
[  104.493125][ T6327]        do_filp_open+0x1bc/0x3cc
[  104.494233][ T6327]        do_sys_openat2+0x128/0x3e0
[  104.495364][ T6327]        __arm64_sys_openat+0x1f0/0x240
[  104.496493][ T6327]        invoke_syscall+0x98/0x2c0
[  104.497562][ T6327]        el0_svc_common+0x138/0x258
[  104.498712][ T6327]        do_el0_svc+0x64/0x218
[  104.499757][ T6327]        el0_svc+0x58/0x168
[  104.500733][ T6327]        el0t_64_sync_handler+0x84/0xf0
[  104.501908][ T6327]        el0t_64_sync+0x18c/0x190
[  104.502991][ T6327] 
[  104.502991][ T6327] -> #4 (&dquot->dq_lock){+.+.}-{3:3}:
[  104.504823][ T6327]        __mutex_lock_common+0x190/0x21a0
[  104.506134][ T6327]        mutex_lock_nested+0x38/0x44
[  104.507225][ T6327]        dquot_commit+0x54/0x240
[  104.508300][ T6327]        ext4_write_dquot+0x1b4/0x314
[  104.509469][ T6327]        ext4_mark_dquot_dirty+0xe8/0x140
[  104.510799][ T6327]        mark_all_dquot_dirty+0x108/0x424
[  104.512014][ T6327]        __dquot_free_space+0x840/0xce4
[  104.513223][ T6327]        ext4_free_blocks+0x1b14/0x2b64
[  104.514491][ T6327]        ext4_ext_remove_space+0x1bd0/0x4544
[  104.515860][ T6327]        ext4_ext_truncate+0x168/0x210
[  104.517052][ T6327]        ext4_truncate+0xa08/0x1178
[  104.518188][ T6327]        ext4_evict_inode+0xc3c/0x12cc
[  104.519400][ T6327]        evict+0x418/0x894
[  104.520373][ T6327]        iput+0x7c0/0x8a4
[  104.521304][ T6327]        do_unlinkat+0x530/0x70c
[  104.522311][ T6327]        __arm64_sys_unlinkat+0xcc/0xfc
[  104.523413][ T6327]        invoke_syscall+0x98/0x2c0
[  104.524597][ T6327]        el0_svc_common+0x138/0x258
[  104.525783][ T6327]        do_el0_svc+0x64/0x218
[  104.526754][ T6327]        el0_svc+0x58/0x168
[  104.527885][ T6327]        el0t_64_sync_handler+0x84/0xf0
[  104.529068][ T6327]        el0t_64_sync+0x18c/0x190
[  104.530236][ T6327] 
[  104.530236][ T6327] -> #3 (&ei->i_data_sem){++++}-{3:3}:
[  104.531939][ T6327]        down_write+0x5c/0x88
[  104.532920][ T6327]        ext4_map_blocks+0x77c/0x1810
[  104.534119][ T6327]        ext4_writepages+0x1050/0x32b4
[  104.535274][ T6327]        do_writepages+0x2e8/0x56c
[  104.536386][ T6327]        __writeback_single_inode+0x16c/0x1770
[  104.537681][ T6327]        writeback_sb_inodes+0x978/0x1718
[  104.538873][ T6327]        __writeback_inodes_wb+0x110/0x39c
[  104.540104][ T6327]        wb_writeback+0x428/0x1130
[  104.541315][ T6327]        wb_workfn+0xc98/0x1034
[  104.542346][ T6327]        process_one_work+0x7ac/0x1404
[  104.543512][ T6327]        worker_thread+0x8e4/0xfec
[  104.544656][ T6327]        kthread+0x250/0x2d8
[  104.545676][ T6327]        ret_from_fork+0x10/0x20
[  104.546947][ T6327] 
[  104.546947][ T6327] -> #2 (jbd2_handle){++++}-{0:0}:
[  104.548549][ T6327]        start_this_handle+0x1140/0x13ac
[  104.549704][ T6327]        jbd2__journal_start+0x298/0x544
[  104.550980][ T6327]        jbd2_journal_start+0x3c/0x4c
[  104.552079][ T6327]        ocfs2_start_trans+0x3e8/0x73c
[  104.553288][ T6327]        ocfs2_mknod+0xe64/0x2560
[  104.554404][ T6327]        ocfs2_create+0x1a8/0x560
[  104.555496][ T6327]        path_openat+0xeac/0x2548
[  104.556555][ T6327]        do_filp_open+0x1bc/0x3cc
[  104.557605][ T6327]        do_sys_openat2+0x128/0x3e0
[  104.558657][ T6327]        __arm64_sys_openat+0x1f0/0x240
[  104.559878][ T6327]        invoke_syscall+0x98/0x2c0
[  104.560976][ T6327]        el0_svc_common+0x138/0x258
[  104.562063][ T6327]        do_el0_svc+0x64/0x218
[  104.562771][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.563158][ T6327]        el0_svc+0x58/0x168
[  104.563177][ T6327]        el0t_64_sync_handler+0x84/0xf0
[  104.567003][ T6327]        el0t_64_sync+0x18c/0x190
[  104.568041][ T6327] 
[  104.568041][ T6327] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  104.570095][ T6327]        down_read+0x64/0x308
[  104.571091][ T6327]        ocfs2_start_trans+0x3dc/0x73c
[  104.572243][ T6327]        ocfs2_mknod+0xe64/0x2560
[  104.573324][ T6327]        ocfs2_create+0x1a8/0x560
[  104.574370][ T6327]        path_openat+0xeac/0x2548
[  104.574655][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.575530][ T6327]        do_filp_open+0x1bc/0x3cc
[  104.575546][ T6327]        do_sys_openat2+0x128/0x3e0
[  104.575559][ T6327]        __arm64_sys_openat+0x1f0/0x240
[  104.580558][ T6327]        invoke_syscall+0x98/0x2c0
[  104.581670][ T6327]        el0_svc_common+0x138/0x258
[  104.582826][ T6327]        do_el0_svc+0x64/0x218
[  104.583883][ T6327]        el0_svc+0x58/0x168
[  104.584987][ T6327]        el0t_64_sync_handler+0x84/0xf0
[  104.586221][ T6327]        el0t_64_sync+0x18c/0x190
[  104.587435][ T6327] 
[  104.587435][ T6327] -> #0 (sb_internal#2){.+.+}-{0:0}:
[  104.588884][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.589156][ T6327]        __lock_acquire+0x3338/0x7680
[  104.592083][ T6327]        lock_acquire+0x26c/0x7cc
[  104.593174][ T6327]        ocfs2_start_trans+0x260/0x73c
[  104.594337][ T6327]        ocfs2_acquire_dquot+0x3d8/0xb1c
[  104.595600][ T6327]        dqget+0x660/0xcec
[  104.596349][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  104.596599][ T6327]        __dquot_initialize+0x344/0xc04
[  104.599477][ T6327]        dquot_initialize+0x24/0x34
[  104.600539][ T6327]        ocfs2_get_init_inode+0x14c/0x1b8
[  104.601763][ T6327]        ocfs2_mknod+0x8ac/0x2560
[  104.602882][ T6327]        ocfs2_create+0x1a8/0x560
[  104.603999][ T6327]        path_openat+0xeac/0x2548
[  104.604452][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  104.605122][ T6327]        do_filp_open+0x1bc/0x3cc
[  104.605137][ T6327]        do_sys_openat2+0x128/0x3e0
[  104.608869][ T6327]        __arm64_sys_openat+0x1f0/0x240
[  104.610157][ T6327]        invoke_syscall+0x98/0x2c0
[  104.611318][ T6327]        el0_svc_common+0x138/0x258
[  104.612517][ T6327]        do_el0_svc+0x64/0x218
[  104.613614][ T6327]        el0_svc+0x58/0x168
[  104.614001][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  104.614576][ T6327]        el0t_64_sync_handler+0x84/0xf0
[  104.614594][ T6327]        el0t_64_sync+0x18c/0x190
[  104.618464][ T6327] 
[  104.618464][ T6327] other info that might help us debug this:
[  104.618464][ T6327] 
[  104.620780][ T6327] Chain exists of:
[  104.620780][ T6327]   sb_internal#2 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key
[  104.620780][ T6327] 
[  104.622930][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  104.624394][ T6327]  Possible unsafe locking scenario:
[  104.624394][ T6327] 
[  104.624401][ T6327]        CPU0                    CPU1
[  104.624404][ T6327]        ----                    ----
[  104.624408][ T6327]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  104.631393][ T6327]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7);
[  104.633453][ T6327]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  104.634463][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  104.635313][ T6327]   lock(sb_internal#2);
[  104.635329][ T6327] 
[  104.635329][ T6327]  *** DEADLOCK ***
[  104.635329][ T6327] 
[  104.635332][ T6327] 6 locks held by syz.5.745/6327:
[  104.640979][ T6327]  #0: ffff0000cc28e460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c
[  104.643208][ T6327]  #1: ffff0000e15f5f48 (&type->i_mutex_dir_key#8){+.+.}-{3:3}, at: path_openat+0x5ec/0x2548
[  104.644468][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  104.645492][ T6327]  #2: ffff0000f3551808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x164/0x4428
[  104.650214][ T6327]  #3: ffff0000f904e0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x270/0xb1c
[  104.652415][ T6327]  #4: ffff0000e15f2648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1b8/0x260
[  104.655282][ T6327]  #5: ffff0000e15f22e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1d4/0x260
[  104.657757][ T6327] 
[  104.657757][ T6327] stack backtrace:
[  104.659082][ T6327] CPU: 0 PID: 6327 Comm: syz.5.745 Not tainted 6.1.114-syzkaller #0
[  104.660866][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  104.663043][ T6327] Call trace:
[  104.663830][ T6327]  dump_backtrace+0x1c8/0x1f4
[  104.664835][ T6327]  show_stack+0x2c/0x3c
[  104.665714][ T6327]  dump_stack_lvl+0x108/0x170
[  104.666813][ T6327]  dump_stack+0x1c/0x58
[  104.667725][ T6327]  print_circular_bug+0x150/0x1b8
[  104.668999][ T6327]  check_noncircular+0x2cc/0x378
[  104.670117][ T6327]  __lock_acquire+0x3338/0x7680
[  104.671220][ T6327]  lock_acquire+0x26c/0x7cc
[  104.672260][ T6327]  ocfs2_start_trans+0x260/0x73c
[  104.673476][ T6327]  ocfs2_acquire_dquot+0x3d8/0xb1c
[  104.674645][ T6327]  dqget+0x660/0xcec
[  104.675570][ T6327]  __dquot_initialize+0x344/0xc04
[  104.676675][ T6327]  dquot_initialize+0x24/0x34
[  104.676876][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  104.677732][ T6327]  ocfs2_get_init_inode+0x14c/0x1b8
[  104.677750][ T6327]  ocfs2_mknod+0x8ac/0x2560
[  104.681436][ T6327]  ocfs2_create+0x1a8/0x560
[  104.682459][ T6327]  path_openat+0xeac/0x2548
[  104.683405][ T6327]  do_filp_open+0x1bc/0x3cc
[  104.684449][ T6327]  do_sys_openat2+0x128/0x3e0
[  104.685498][ T6327]  __arm64_sys_openat+0x1f0/0x240
[  104.686616][ T6327]  invoke_syscall+0x98/0x2c0
[  104.687707][ T6327]  el0_svc_common+0x138/0x258
[  104.688743][ T6327]  do_el0_svc+0x64/0x218
[  104.689651][ T6327]  el0_svc+0x58/0x168
[  104.689822][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  104.690516][ T6327]  el0t_64_sync_handler+0x84/0xf0
[  104.690532][ T6327]  el0t_64_sync+0x18c/0x190
[  104.729736][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  104.736489][ T4302] EXT4-fs (loop4): unmounting filesystem.
[  104.807439][ T5272] ocfs2: Unmounting device (7,5) on (node local)
[  104.870597][ T6352] loop3: detected capacity change from 0 to 32768
[  104.872301][ T6352] xfs: Unknown parameter 'smackfsfloor'
[  104.926181][ T6182] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  104.954767][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.986798][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  104.988587][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.164276][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.168195][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.186822][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.188907][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.192054][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.194070][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.201708][ T5952] device veth0_vlan entered promiscuous mode
[  105.208114][ T5952] device veth1_vlan entered promiscuous mode
[  105.221991][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  105.224223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  105.227419][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.229969][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.233730][ T5952] device veth0_macvtap entered promiscuous mode
[  105.240108][ T5952] device veth1_macvtap entered promiscuous mode
[  105.248265][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.250764][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.252862][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.255417][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.261156][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.263490][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.265792][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.268159][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.271264][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.273478][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.277961][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.279931][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  105.282255][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  105.285827][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.288281][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.290376][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.292665][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.295465][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.301129][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.303253][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.307050][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.310148][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.313371][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  105.315446][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  105.319900][ T5952] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.322146][ T5952] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.324000][ T5952] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.326289][ T5952] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.358783][ T5952] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht'
[  105.379116][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.380885][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.382520][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  105.389000][ T5952] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht'
[  105.403620][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.405357][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.407557][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready