last executing test programs: 2m15.408800373s ago: executing program 2 (id=2316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}}, 0x0) 2m15.261663852s ago: executing program 2 (id=2319): r0 = socket(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 2m15.171693047s ago: executing program 2 (id=2322): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x8800) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000080)={0x0, 0x0}) 2m15.015731616s ago: executing program 2 (id=2323): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m14.552941772s ago: executing program 2 (id=2330): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m14.015097003s ago: executing program 2 (id=2335): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000be6000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2m13.500775813s ago: executing program 32 (id=2335): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000be6000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 49.65188621s ago: executing program 4 (id=3354): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x416eb135, 0x12) 49.220986645s ago: executing program 4 (id=3358): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 48.818744129s ago: executing program 3 (id=3361): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0xfffffff1, 0x80000000}, 0xc) 48.492095257s ago: executing program 1 (id=3362): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x80, 0x0, {0xfffffffffffffffe, 0x3, 0x9dba, 0x1, 0x5}, 0x2}) 48.403871312s ago: executing program 3 (id=3364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000006800f97800000000000000000a0000000000000004000400140002000200000006005e5103661bd686c0d591070007"], 0x38}}, 0x0) 48.131092608s ago: executing program 1 (id=3365): r0 = eventfd2(0xfbf, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x3) 48.10528157s ago: executing program 0 (id=3366): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r0], 0x38}, 0x0) 48.10346849s ago: executing program 4 (id=3367): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) socket$caif_stream(0x25, 0x1, 0x2) 47.896744181s ago: executing program 3 (id=3368): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x780, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000040)={0x18}) 47.696645393s ago: executing program 0 (id=3369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1f, &(0x7f0000000040)=0x5, 0x4) 47.695277113s ago: executing program 1 (id=3370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, 0x0, 0x0) 47.566745231s ago: executing program 4 (id=3371): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') getdents64(r0, &(0x7f0000002840)=""/4118, 0x1077) 47.470455326s ago: executing program 3 (id=3372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000190a01040000000000000000020000010900020073797a3200000400090001"], 0x34}}, 0x48084) 47.307687865s ago: executing program 0 (id=3373): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 47.266911028s ago: executing program 1 (id=3374): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fa01ffff00000000010000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="23a041a3be48678ea61eef0ff1ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 47.093412358s ago: executing program 4 (id=3375): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) 47.079562909s ago: executing program 3 (id=3376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 46.962755005s ago: executing program 0 (id=3377): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fchmodat(0xffffffffffffff9c, 0x0, 0x17f) 46.788601156s ago: executing program 1 (id=3378): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0) 46.671638332s ago: executing program 0 (id=3379): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x4c47504a, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0xe7, 0xffffff80, 0x1}}) 46.655900103s ago: executing program 4 (id=3380): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 46.508465422s ago: executing program 3 (id=3381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) 46.443247836s ago: executing program 1 (id=3382): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x6, 0x0, &(0x7f0000000000)=0x42) 31.723398646s ago: executing program 0 (id=3383): r0 = socket(0x840000000002, 0x3, 0xfa) getpeername$packet(r0, 0x0, 0x0) 24.498616694s ago: executing program 33 (id=3380): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 0s ago: executing program 34 (id=3382): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x6, 0x0, &(0x7f0000000000)=0x42) kernel console output (not intermixed with test programs): 0x0c03 length: 249 > 1 [ 220.894880][ T5770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.909258][ T5770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.919264][ T5770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.933020][ T5770] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.948471][ T5770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.193023][T11025] capability: warning: `syz.1.2356' uses 32-bit capabilities (legacy support in use) [ 222.080231][T11057] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2367'. [ 222.107014][T11057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2367'. [ 222.531828][T11068] netlink: 'syz.3.2372': attribute type 2 has an invalid length. [ 222.618679][T11074] Unsupported ieee802154 address type: 0 [ 222.845477][T11053] loop1: detected capacity change from 0 to 32768 [ 222.920467][T11053] jfs_strtoUCS: char2uni returned -22. [ 222.940469][T11053] charset = cp1251, char = 0x98 [ 223.057835][ T5776] Bluetooth: hci2: command tx timeout [ 223.613036][T11010] chnl_net:caif_netlink_parms(): no params data found [ 223.702543][T11107] tmpfs: Bad value for 'mpol' [ 223.863891][T11114] loop1: detected capacity change from 0 to 512 [ 223.915958][T11112] loop3: detected capacity change from 0 to 1024 [ 223.929244][T11114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.968550][T11112] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.982352][T11114] ext4 filesystem being mounted at /595/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.040914][T11112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.062969][T11114] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #12: block 32: comm syz.1.2388: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 224.120055][T11114] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz.1.2388: directory missing '.' [ 224.156452][T11112] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2387: missing EA_INODE flag [ 224.210679][T11112] EXT4-fs (loop3): Remounting filesystem read-only [ 224.218077][T11112] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 224.285539][T11122] loop0: detected capacity change from 0 to 4096 [ 224.296492][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.336020][T11128] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.348159][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.535330][T11010] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.604935][T11010] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.638490][T11010] bridge_slave_0: entered allmulticast mode [ 224.748436][T11010] bridge_slave_0: entered promiscuous mode [ 224.770964][T11010] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.813946][T11010] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.839470][T11010] bridge_slave_1: entered allmulticast mode [ 224.857016][T11010] bridge_slave_1: entered promiscuous mode [ 224.888455][ T42] hsr_slave_0: left promiscuous mode [ 224.905104][ T42] hsr_slave_1: left promiscuous mode [ 224.916711][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.934925][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.976455][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.985914][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.995896][ T42] bridge_slave_1: left allmulticast mode [ 225.007931][ T42] bridge_slave_1: left promiscuous mode [ 225.015174][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.036635][ T42] bridge_slave_0: left allmulticast mode [ 225.047707][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.146055][ T42] veth1_macvtap: left promiscuous mode [ 225.147879][ T5776] Bluetooth: hci2: command tx timeout [ 225.159849][ T42] veth0_macvtap: left promiscuous mode [ 225.165512][ T42] veth1_vlan: left promiscuous mode [ 225.171342][ T42] veth0_vlan: left promiscuous mode [ 225.385263][ T42] bond1 (unregistering): Released all slaves [ 225.833177][T11168] loop3: detected capacity change from 0 to 1024 [ 225.865192][T11168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.924249][T11168] EXT4-fs error (device loop3): ext4_get_first_dir_block:3595: inode #11: comm syz.3.2403: directory missing '.' [ 226.001952][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.300324][ T42] team0 (unregistering): Port device team_slave_1 removed [ 226.353629][ T42] team0 (unregistering): Port device team_slave_0 removed [ 226.401111][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.447311][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.791048][ T42] bond0 (unregistering): Released all slaves [ 226.931348][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 227.014970][T11010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.040321][T11010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.198046][T11010] team0: Port device team_slave_0 added [ 227.216420][T11010] team0: Port device team_slave_1 added [ 227.222536][ T5776] Bluetooth: hci2: command tx timeout [ 227.289058][T11010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.296043][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.349193][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 227.350968][T11185] loop0: detected capacity change from 0 to 8 [ 227.397416][T11010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.444038][T11010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.479554][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.551609][T11010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.587640][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 227.600614][ T9] usb 2-1: config 0 has no interfaces? [ 227.646689][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 227.659684][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.683251][ T9] usb 2-1: Product: syz [ 227.697242][ T9] usb 2-1: Manufacturer: syz [ 227.701951][ T9] usb 2-1: SerialNumber: syz [ 227.716271][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 227.743106][T11010] hsr_slave_0: entered promiscuous mode [ 227.794156][T11010] hsr_slave_1: entered promiscuous mode [ 227.813651][T11010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.822622][T11010] Cannot create hsr debugfs directory [ 227.957520][ T9] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 228.178200][ T8] usb 2-1: USB disconnect, device number 14 [ 228.252873][T11211] loop3: detected capacity change from 0 to 2048 [ 228.320166][T11214] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.360178][T11211] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=255 [ 228.421505][T11010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.427132][T11211] Remounting filesystem read-only [ 228.466181][T11010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.527313][T11010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.549459][T11010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.876561][T11010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.948431][T11010] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.000701][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.007920][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.063081][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.070276][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.245177][T11248] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2428'. [ 229.297711][ T5776] Bluetooth: hci2: command tx timeout [ 229.489033][T11257] loop1: detected capacity change from 0 to 8 [ 229.496215][T11257] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 229.570292][ T8028] udevd[8028]: incorrect cramfs checksum on /dev/loop1 [ 229.636080][ T8028] udevd[8028]: incorrect cramfs checksum on /dev/loop1 [ 229.881666][T11010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.177003][T11277] xt_TPROXY: Can be used only with -p tcp or -p udp [ 230.204853][T11244] loop3: detected capacity change from 0 to 32768 [ 230.278875][T11244] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 230.444650][T11244] XFS (loop3): Ending clean mount [ 230.459942][T11244] XFS (loop3): Quotacheck needed: Please wait. [ 230.618009][T11299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2439'. [ 230.661833][T11244] XFS (loop3): Quotacheck: Done. [ 230.774165][T11010] veth0_vlan: entered promiscuous mode [ 230.795917][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 230.855135][T11010] veth1_vlan: entered promiscuous mode [ 230.998217][T11010] veth0_macvtap: entered promiscuous mode [ 231.051295][T11010] veth1_macvtap: entered promiscuous mode [ 231.123479][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.155828][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.174384][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.185803][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.210352][T11010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.269370][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.305492][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.347306][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.372575][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.415580][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.457615][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.480234][T11010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.531294][T11010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.568638][T11010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.611875][T11010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.628054][T11010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.907140][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.930595][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.105389][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.131040][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.306652][T11357] loop1: detected capacity change from 0 to 1024 [ 232.374533][T11357] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.453534][T11357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.552379][T11368] loop4: detected capacity change from 0 to 4096 [ 232.608390][T11371] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 232.639517][T11357] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.2459: missing EA_INODE flag [ 232.686130][T11375] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.715153][T11357] EXT4-fs (loop1): Remounting filesystem read-only [ 232.869518][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.131173][T11385] netlink: 'syz.4.2467': attribute type 7 has an invalid length. [ 233.192041][T11385] netlink: 'syz.4.2467': attribute type 8 has an invalid length. [ 233.207914][T11385] netlink: 'syz.4.2467': attribute type 15 has an invalid length. [ 233.755174][T11404] loop0: detected capacity change from 0 to 8192 [ 233.833672][T11415] netlink: 115 bytes leftover after parsing attributes in process `syz.4.2478'. [ 234.055796][T11420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2481'. [ 234.107771][T11426] netlink: 'syz.4.2482': attribute type 29 has an invalid length. [ 234.350025][ T27] audit: type=1400 audit(1770723805.792:85): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=11432 comm="syz.0.2486" [ 234.858058][T11459] loop0: detected capacity change from 0 to 16 [ 234.908774][T11459] erofs: (device loop0): mounted with root inode @ nid 36. [ 234.968282][ T5776] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 235.036894][T11459] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 235.097697][ T27] audit: type=1800 audit(1770723806.542:86): pid=11459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2494" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 235.344680][T11480] loop1: detected capacity change from 0 to 256 [ 235.358133][T11481] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.385220][T11480] FAT-fs (loop1): Directory bread(block 1285) failed [ 235.407382][T11480] FAT-fs (loop1): Directory bread(block 1286) failed [ 235.441548][T11480] FAT-fs (loop1): Directory bread(block 1287) failed [ 235.490401][T11480] FAT-fs (loop1): Directory bread(block 1288) failed [ 235.540297][T11480] FAT-fs (loop1): Directory bread(block 1285) failed [ 235.573735][T11480] FAT-fs (loop1): Directory bread(block 1286) failed [ 235.600264][T11480] FAT-fs (loop1): Directory bread(block 1287) failed [ 235.610653][T11480] FAT-fs (loop1): Directory bread(block 1288) failed [ 235.626694][T11489] loop4: detected capacity change from 0 to 64 [ 235.637661][T11480] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 236.367292][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 236.567447][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 236.585073][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.620577][ T8] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 236.623778][T11520] loop4: detected capacity change from 0 to 4096 [ 236.637228][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.655518][ T8] usb 4-1: Product: syz [ 236.662972][T11523] loop0: detected capacity change from 0 to 4096 [ 236.689974][ T8] usb 4-1: Manufacturer: syz [ 236.706334][ T8] usb 4-1: SerialNumber: syz [ 236.729594][ T8] usb 4-1: config 0 descriptor?? [ 236.754338][ T8] usb 4-1: bad CDC descriptors [ 236.786980][ T8] usb 4-1: unsupported MDLM descriptors [ 236.791791][T11529] comedi comedi0: board detection failed [ 236.885650][T11523] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 236.975403][ T9] usb 4-1: USB disconnect, device number 13 [ 237.105294][ T5764] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22. [ 237.300010][T11540] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 237.831000][T11558] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~)V' [ 237.866103][T11558] ALSA: mixer_oss: invalid OSS volume '*bbX-]OF{T0pc' [ 237.911656][T11558] ALSA: mixer_oss: invalid OSS volume 'gI"4-Z' [ 237.948170][T11558] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 237.956479][T11558] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 237.992525][T11568] netlink: 'syz.4.2539': attribute type 21 has an invalid length. [ 238.006101][T11568] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.018176][T11558] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 238.026549][T11558] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 238.027467][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2539'. [ 238.042338][T11558] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 238.052888][T11558] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 238.062059][T11558] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 238.088152][T11558] ALSA: mixer_oss: invalid OSS volume '[' [ 238.094508][T11558] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 238.125132][T11558] ALSA: mixer_oss: invalid OSS volume '$Pxi9 h~)V' [ 246.377102][T11837] ALSA: mixer_oss: invalid OSS volume '*bbX-]OF{T0pc' [ 246.387001][T11837] ALSA: mixer_oss: invalid OSS volume 'gI"4-Z' [ 246.424576][T11837] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 246.446530][T11837] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 246.460673][T11837] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 246.469572][T11837] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 246.481247][T11837] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 246.490052][T11837] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 246.519742][T11837] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 246.528621][T11837] ALSA: mixer_oss: invalid OSS volume '[' [ 246.536236][T11837] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 246.543951][T11837] ALSA: mixer_oss: invalid OSS volume '$Pxi9 h~)V' [ 247.387148][T11880] ALSA: mixer_oss: invalid OSS volume '*bbX-]OF{T0pc' [ 247.424033][T11880] ALSA: mixer_oss: invalid OSS volume 'gI"4-Z' [ 247.437352][T11880] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 247.477321][T11880] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 247.485739][T11880] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 247.527304][T11880] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 247.567579][T11880] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 247.575438][T11880] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 247.601115][T11880] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 247.627258][T11880] ALSA: mixer_oss: invalid OSS volume '[' [ 247.633283][T11880] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 247.657435][T11880] ALSA: mixer_oss: invalid OSS volume '$ /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.587620][ C1] net_ratelimit: 19475 callbacks suppressed [ 472.587639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.587753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:45:d4:d6:0d:7b, vlan:0) [ 472.593991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.605861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.617906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.629963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:74:aa:d4:d7:4a, vlan:0) [ 472.641837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.654544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:74:aa:d4:d7:4a, vlan:0) [ 472.665886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.679118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.597434][ C1] net_ratelimit: 19959 callbacks suppressed [ 477.597452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.597745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.603785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.616074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0a:45:d4:d6:0d:7b, vlan:0) [ 477.627778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.639480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.651696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.663667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:74:aa:d4:d7:4a, vlan:0) [ 477.675445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.688469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:74:aa:d4:d7:4a, vlan:0)