last executing test programs: 771.569098ms ago: executing program 4 (id=657): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000001040)=[{&(0x7f0000000000)="007c0985dd164473618115ad53aa95e4485b369705c617b7d4fd56b3ae03c2d640f1f92505b839d4c80dfb539ef3154ecdadb85bb3c60c729434fee5cecc3560af78d0a68443289e9e16e31e82bcfc5db532bad95fde4fc9d4b50a655737af94b6bb0c6c1b25e048fc3b78b8edc23aeca1977266cb11175de87a972eb09524fa2ee5c6d549592272c2d71c574fdf2752ea26f7adc50b3a716161d23c88381bf08181cc7f9e54d630377e6aef5c3da18fd0c0319c231df8d0693edf934641edc81e24b7682274ede9848973932df9234f79d29a26f9cdef1121cc0e6946f453ece2d6ed347b6355b08f03d4b98564d744e57b5f3df0b2fe478dcea1a305fd942903285d94dcecdda18e14866e106ef524f6263a0a1c75d4c0bc1e8cd9165284f853e4943d0ec0fca6ed0add859a6e36c4f948a9ffc3ba119ae81c75577f7351af74a7d13bac23e32cf1629756680996a68085e12d82a57dd1264cb201045840c67e3b23519109279a6eb5a7d714ac4f5df52476005b874d394219aee9874c47500f1d0d9a0b74535ccc0d50be607381758a9157f73c85a0275aa18782fc49b28d49b2b985eda2bdc7b1196bb016c4981f4728aaa3ec7f030255de1b5e5a8bdf400c9b00cda70675568bd926bff77aef4ab6ba41fb8df596b1f8b0aa33a5ba556eacb6c1577f2515aec09886180cc83e73f266a64114869294406a08b051afa464fa2b41af0c01f456de5274175d04e28fa354cb2f777de68528a104748631911b1d379534aa349355ecec32ee02d8dcd7770599ec7d2619bc132978f54fc7de588ef7175452ee0824eb1cb77b844fe94cfacd62386d283efb43d133e91cf75a97238a0abe44c718df523cfa06ab9a3c8921b5d32918a9c0fc97c56855dad782904eee4a7cb9945b15463d6d4cdc9c9a14fdc878c06018e6e790cbf21f8a95d330ee5a38dc3a64233e3e3ebf0a3ff9a767bf048b18643d6c927dbc7fc3e8c5594fdb5494c5c9ccc8ff3ecd970821957880d87e02cbdfbe645dd12208d7551b751d307c8f8a54af6858891507fa13cd0d4095a4648763ba97771092d50e5027b9bff4bee54495ebb6ca12aa5a64edf23f74252cc864cc04d25d94bee5bb594bcd00b45bbdeea465666a0e9b34316d", 0x32d}], 0x1) 612.79271ms ago: executing program 4 (id=666): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) 540.477491ms ago: executing program 4 (id=674): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 385.269924ms ago: executing program 4 (id=683): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x15, 0x0, @val=@iter={0x0}}, 0x20) 384.964274ms ago: executing program 1 (id=684): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300001b00000000000000000000000400030000000000000000000000000000000000000000000000000000000000050006006c0000000a00000000000000fc0100000000000000000000000000000000000000000000040004000000000027000000000000000000000000000000ad0c00000000000002000100000000000000fe030000000005000500002000000a00000000000000ff010000000000000000000000000001000000000000000005000700000000000a"], 0xd8}}, 0x0) 329.412094ms ago: executing program 4 (id=696): r0 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000000240), 0x40000000, 0x0) 311.003725ms ago: executing program 1 (id=689): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{0x3}], 0x1, 0xe4, 0xa, 0x0, 0x0, 0x2}) 310.889845ms ago: executing program 2 (id=690): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1030000, 0x1000, 0x5, 0x4}, 0x20) 281.285176ms ago: executing program 2 (id=692): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x39, 0x0, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0xfffffffc}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 259.373876ms ago: executing program 1 (id=694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x190, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_DESC={0x154, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x150, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11f0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x4, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5658}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x113772c4}, @NFTA_SET_FIELD_LEN={0xffffffffffffff4c, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x68}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbcd0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8800}, 0x4080) 220.301336ms ago: executing program 3 (id=695): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 220.002986ms ago: executing program 2 (id=697): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x80, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x6c, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xffffffffffffff83, 0x1, {{0x4, 0xa, 0x0, 0x0, 0x400}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x4, 0x6, 0xfffffff9}, 0x64}}]}, {}, {0xc}, {0xc}}}, @m_ct={0x0, 0x8, 0x0, 0x0, {{}, {}, {0x0, 0x6, "e830c8665a28ac2985aa212e0edb79a0da0f5035458330b899fb93"}, {}, {0x0, 0x8, {0x6}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 219.956466ms ago: executing program 0 (id=698): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x19, 0x0, &(0x7f0000000080)) 219.860266ms ago: executing program 3 (id=699): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f00000001c0)) 217.882286ms ago: executing program 1 (id=700): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 178.733237ms ago: executing program 0 (id=701): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x1411, 0x923, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x2400e0c5}, 0x4040004) 168.494627ms ago: executing program 3 (id=702): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000002900000005"], 0x18}}], 0x1, 0x800) 167.999887ms ago: executing program 2 (id=703): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x0, 0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 154.693457ms ago: executing program 0 (id=704): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r0, 0x0, 0x1) 130.675367ms ago: executing program 3 (id=705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newlink={0x28, 0x10, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x42838, 0x1823}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x4008000) 101.595448ms ago: executing program 2 (id=706): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) 101.261618ms ago: executing program 0 (id=707): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='gid_map\x00') writev(r0, &(0x7f0000001400)=[{&(0x7f0000000040)='1', 0x1}, {0x0}], 0x2) 63.485328ms ago: executing program 3 (id=708): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x800) 63.048119ms ago: executing program 4 (id=709): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt(r0, 0x9, 0x1000, 0x0, 0x0) 42.602909ms ago: executing program 0 (id=710): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 42.452579ms ago: executing program 3 (id=711): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000380), 0x4) 42.074839ms ago: executing program 1 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}]}, 0x44}}, 0x0) 437.63µs ago: executing program 2 (id=713): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500"], 0xfc}}, 0x0) 322.79µs ago: executing program 0 (id=714): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0xaf5, 0x2, 0x85, 0x5bd64ffe, 0x7, 0x9, 0x6, 0x9}}) 0s ago: executing program 1 (id=715): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 30.463774][ T29] audit: type=1400 audit(1753242424.602:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.464989][ T3295] cgroup: Unknown subsys name 'net' [ 30.486531][ T29] audit: type=1400 audit(1753242424.602:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.513951][ T29] audit: type=1400 audit(1753242424.632:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.626858][ T3295] cgroup: Unknown subsys name 'cpuset' [ 30.633282][ T3295] cgroup: Unknown subsys name 'rlimit' [ 30.725175][ T29] audit: type=1400 audit(1753242424.862:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.750607][ T29] audit: type=1400 audit(1753242424.872:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.771185][ T29] audit: type=1400 audit(1753242424.872:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.791605][ T29] audit: type=1400 audit(1753242424.872:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.800817][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.812037][ T29] audit: type=1400 audit(1753242424.872:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.845384][ T29] audit: type=1400 audit(1753242424.872:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.868740][ T29] audit: type=1400 audit(1753242424.962:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.904161][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.028865][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 32.099855][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.107162][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.114338][ T3310] bridge_slave_0: entered allmulticast mode [ 32.120871][ T3310] bridge_slave_0: entered promiscuous mode [ 32.127600][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.134747][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.142054][ T3310] bridge_slave_1: entered allmulticast mode [ 32.148509][ T3310] bridge_slave_1: entered promiscuous mode [ 32.154910][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 32.189750][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 32.205568][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.223145][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.271423][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 32.290548][ T3310] team0: Port device team_slave_0 added [ 32.303211][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 32.317343][ T3310] team0: Port device team_slave_1 added [ 32.323366][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.330494][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.337711][ T3306] bridge_slave_0: entered allmulticast mode [ 32.344263][ T3306] bridge_slave_0: entered promiscuous mode [ 32.372791][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.380025][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.387350][ T3306] bridge_slave_1: entered allmulticast mode [ 32.393857][ T3306] bridge_slave_1: entered promiscuous mode [ 32.411280][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.418380][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.444363][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.473206][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.480365][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.506309][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.528431][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.535529][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.542895][ T3314] bridge_slave_0: entered allmulticast mode [ 32.549501][ T3314] bridge_slave_0: entered promiscuous mode [ 32.556258][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.563392][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.570651][ T3314] bridge_slave_1: entered allmulticast mode [ 32.577235][ T3314] bridge_slave_1: entered promiscuous mode [ 32.593443][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.622159][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.631366][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.638582][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.646007][ T3305] bridge_slave_0: entered allmulticast mode [ 32.652541][ T3305] bridge_slave_0: entered promiscuous mode [ 32.659230][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.666339][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.673483][ T3305] bridge_slave_1: entered allmulticast mode [ 32.680125][ T3305] bridge_slave_1: entered promiscuous mode [ 32.693151][ T3310] hsr_slave_0: entered promiscuous mode [ 32.699289][ T3310] hsr_slave_1: entered promiscuous mode [ 32.726165][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.740566][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.747743][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.754881][ T3312] bridge_slave_0: entered allmulticast mode [ 32.761503][ T3312] bridge_slave_0: entered promiscuous mode [ 32.768779][ T3306] team0: Port device team_slave_0 added [ 32.774570][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.781700][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.788951][ T3312] bridge_slave_1: entered allmulticast mode [ 32.795390][ T3312] bridge_slave_1: entered promiscuous mode [ 32.807521][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.817777][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.833234][ T3306] team0: Port device team_slave_1 added [ 32.855635][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.875320][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.882331][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.908276][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.939377][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.946409][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.972393][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.987135][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.002786][ T3314] team0: Port device team_slave_0 added [ 33.011536][ T3314] team0: Port device team_slave_1 added [ 33.017907][ T3305] team0: Port device team_slave_0 added [ 33.025376][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.035149][ T3305] team0: Port device team_slave_1 added [ 33.074098][ T3312] team0: Port device team_slave_0 added [ 33.087092][ T3306] hsr_slave_0: entered promiscuous mode [ 33.093347][ T3306] hsr_slave_1: entered promiscuous mode [ 33.099476][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.107393][ T3306] Cannot create hsr debugfs directory [ 33.120462][ T3312] team0: Port device team_slave_1 added [ 33.126459][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.133678][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.159768][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.176590][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.183669][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.209647][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.228560][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.235570][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.261636][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.276018][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.282994][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.308941][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.351352][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.358356][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.384395][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.403323][ T3314] hsr_slave_0: entered promiscuous mode [ 33.409578][ T3314] hsr_slave_1: entered promiscuous mode [ 33.415380][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.422979][ T3314] Cannot create hsr debugfs directory [ 33.432113][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.439160][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.465144][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.497853][ T3305] hsr_slave_0: entered promiscuous mode [ 33.503802][ T3305] hsr_slave_1: entered promiscuous mode [ 33.509729][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.517365][ T3305] Cannot create hsr debugfs directory [ 33.583176][ T3312] hsr_slave_0: entered promiscuous mode [ 33.589359][ T3312] hsr_slave_1: entered promiscuous mode [ 33.595299][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.602987][ T3312] Cannot create hsr debugfs directory [ 33.697443][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.706560][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.727284][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.743464][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.772284][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.787849][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.800365][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.813280][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.822082][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.833926][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.845630][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.862881][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.900464][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.922526][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.940169][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.949947][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.961365][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.989135][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.007710][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.016899][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.030229][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.044373][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.059162][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.066291][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.075125][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.082216][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.108897][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.120993][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.153513][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.163681][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.182462][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.197176][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.204284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.213346][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.220443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.230865][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.255732][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.277099][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.284233][ T579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.292972][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.300151][ T579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.324385][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.331507][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.341831][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.348944][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.393885][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.408368][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.437745][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.454502][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.487093][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.494296][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.503542][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.510643][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.568729][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.583845][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.613474][ T3310] veth0_vlan: entered promiscuous mode [ 34.646617][ T3310] veth1_vlan: entered promiscuous mode [ 34.692438][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.743204][ T3310] veth0_macvtap: entered promiscuous mode [ 34.765746][ T3306] veth0_vlan: entered promiscuous mode [ 34.779183][ T3310] veth1_macvtap: entered promiscuous mode [ 34.788608][ T3305] veth0_vlan: entered promiscuous mode [ 34.801119][ T3306] veth1_vlan: entered promiscuous mode [ 34.812010][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.825588][ T3305] veth1_vlan: entered promiscuous mode [ 34.840620][ T3306] veth0_macvtap: entered promiscuous mode [ 34.852686][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.862537][ T3306] veth1_macvtap: entered promiscuous mode [ 34.879223][ T3310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.888031][ T3310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.896853][ T3310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.905596][ T3310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.922031][ T3314] veth0_vlan: entered promiscuous mode [ 34.931746][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.952541][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.964288][ T3314] veth1_vlan: entered promiscuous mode [ 34.979425][ T3312] veth0_vlan: entered promiscuous mode [ 34.993497][ T3314] veth0_macvtap: entered promiscuous mode [ 35.007925][ T3305] veth0_macvtap: entered promiscuous mode [ 35.021078][ T3312] veth1_vlan: entered promiscuous mode [ 35.028682][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.055112][ T3305] veth1_macvtap: entered promiscuous mode [ 35.067021][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.075820][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.084670][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.093537][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.109098][ T3312] veth0_macvtap: entered promiscuous mode [ 35.118952][ T3314] veth1_macvtap: entered promiscuous mode [ 35.129543][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.137838][ T3312] veth1_macvtap: entered promiscuous mode [ 35.154497][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.171291][ T3474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 35.183559][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.194266][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.210542][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.219425][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.228237][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.236999][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.250734][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.259713][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.268464][ T3314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.277256][ T3314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.286043][ T3314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.294854][ T3314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.315567][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.324503][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.333367][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.342214][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.466810][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 35.466849][ T29] audit: type=1400 audit(1753242429.612:98): avc: denied { getopt } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.516443][ T3491] loop0: detected capacity change from 0 to 512 [ 35.539042][ T3491] ======================================================= [ 35.539042][ T3491] WARNING: The mand mount option has been deprecated and [ 35.539042][ T3491] and is ignored by this kernel. Remove the mand [ 35.539042][ T3491] option from the mount to silence this warning. [ 35.539042][ T3491] ======================================================= [ 35.585218][ T29] audit: type=1400 audit(1753242429.722:99): avc: denied { create } for pid=3498 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.642877][ T3507] netlink: 'syz.2.14': attribute type 22 has an invalid length. [ 35.650637][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 35.655893][ T29] audit: type=1400 audit(1753242429.722:100): avc: denied { write } for pid=3498 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.679386][ T29] audit: type=1400 audit(1753242429.722:101): avc: denied { nlmsg_write } for pid=3498 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.706596][ T3491] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.719847][ T3491] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.765695][ T3518] netlink: 404 bytes leftover after parsing attributes in process `syz.2.19'. [ 35.774708][ T3518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 35.783585][ T3518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 35.792601][ T3518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19'. [ 35.813854][ T29] audit: type=1326 audit(1753242429.882:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3c1be9a9 code=0x7ffc0000 [ 35.837173][ T29] audit: type=1326 audit(1753242429.882:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3c1be9a9 code=0x7ffc0000 [ 35.860448][ T29] audit: type=1326 audit(1753242429.892:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f9a3c1be9a9 code=0x7ffc0000 [ 35.864622][ T3520] bridge1: entered promiscuous mode [ 35.883658][ T29] audit: type=1326 audit(1753242429.892:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3c1be9a9 code=0x7ffc0000 [ 35.883722][ T29] audit: type=1326 audit(1753242429.892:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.1.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3c1be9a9 code=0x7ffc0000 [ 35.889029][ T3520] bridge1: entered allmulticast mode [ 35.912111][ T29] audit: type=1400 audit(1753242429.902:107): avc: denied { prog_load } for pid=3516 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.946878][ T3491] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.9: corrupted xattr entries [ 36.048370][ T3491] EXT4-fs (loop0): Remounting filesystem read-only [ 36.054965][ T3491] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.095816][ T3533] loop4: detected capacity change from 0 to 1024 [ 36.105064][ T3491] EXT4-fs (loop0): 1 truncate cleaned up [ 36.112464][ T3491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.156121][ T3533] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.26: Failed to acquire dquot type 0 [ 36.170944][ T3533] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 36.185845][ T3533] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.26: corrupted inode contents [ 36.198819][ T3533] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.26: mark_inode_dirty error [ 36.210230][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.221003][ T3533] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.26: corrupted inode contents [ 36.233337][ T3533] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.26: mark_inode_dirty error [ 36.245188][ T3533] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.26: corrupted inode contents [ 36.260467][ T3533] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 36.273916][ T3533] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.26: corrupted inode contents [ 36.295623][ T3533] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.26: mark_inode_dirty error [ 36.309589][ T3533] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 36.326554][ T3533] EXT4-fs (loop4): 1 truncate cleaned up [ 36.343000][ T3533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.367072][ T3558] loop1: detected capacity change from 0 to 256 [ 36.398817][ T3533] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.26: Failed to acquire dquot type 0 [ 36.422322][ T3558] FAT-fs (loop1): Directory bread(block 64) failed [ 36.441715][ T3558] FAT-fs (loop1): Directory bread(block 65) failed [ 36.452680][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.464692][ T3558] FAT-fs (loop1): Directory bread(block 66) failed [ 36.496938][ T3567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 36.500486][ T3558] FAT-fs (loop1): Directory bread(block 67) failed [ 36.535990][ T3558] FAT-fs (loop1): Directory bread(block 68) failed [ 36.552145][ T3558] FAT-fs (loop1): Directory bread(block 69) failed [ 36.578151][ T3558] FAT-fs (loop1): Directory bread(block 70) failed [ 36.584839][ T3558] FAT-fs (loop1): Directory bread(block 71) failed [ 36.584875][ T3558] FAT-fs (loop1): Directory bread(block 72) failed [ 36.584896][ T3558] FAT-fs (loop1): Directory bread(block 73) failed [ 36.676987][ T3584] syz.0.51 uses obsolete (PF_INET,SOCK_PACKET) [ 36.782392][ T3597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 36.886968][ T3614] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (5), value rounded to 0 ms [ 36.898885][ T3614] (unnamed net_device) (uninitialized): peer notification delay (7) is not a multiple of miimon (5), value rounded to 5 ms [ 37.038914][ T3633] syz.4.74: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 37.053610][ T3633] CPU: 0 UID: 0 PID: 3633 Comm: syz.4.74 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 37.053649][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.053672][ T3633] Call Trace: [ 37.053680][ T3633] [ 37.053690][ T3633] __dump_stack+0x1d/0x30 [ 37.053718][ T3633] dump_stack_lvl+0xe8/0x140 [ 37.053796][ T3633] dump_stack+0x15/0x1b [ 37.053818][ T3633] warn_alloc+0x12b/0x1a0 [ 37.053854][ T3633] ? audit_log_end+0x1d7/0x1f0 [ 37.054022][ T3633] ? audit_log_end+0x1d7/0x1f0 [ 37.054135][ T3633] __vmalloc_node_range_noprof+0x9c/0xe00 [ 37.054169][ T3633] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 37.054200][ T3633] ? __rcu_read_unlock+0x4f/0x70 [ 37.054266][ T3633] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 37.054322][ T3633] ? xfd_validate_state+0x45/0xf0 [ 37.054374][ T3633] ? save_fpregs_to_fpstate+0x100/0x160 [ 37.054456][ T3633] ? should_fail_ex+0x30/0x280 [ 37.054498][ T3633] ? xskq_create+0x36/0xe0 [ 37.054533][ T3633] vmalloc_user_noprof+0x7d/0xb0 [ 37.054583][ T3633] ? xskq_create+0x80/0xe0 [ 37.054607][ T3633] xskq_create+0x80/0xe0 [ 37.054697][ T3633] xsk_init_queue+0x95/0xf0 [ 37.054723][ T3633] xsk_setsockopt+0x35c/0x510 [ 37.054822][ T3633] ? __pfx_xsk_setsockopt+0x10/0x10 [ 37.054852][ T3633] __sys_setsockopt+0x184/0x200 [ 37.054898][ T3633] __x64_sys_setsockopt+0x64/0x80 [ 37.054946][ T3633] x64_sys_call+0x2bd5/0x2fb0 [ 37.055030][ T3633] do_syscall_64+0xd2/0x200 [ 37.055055][ T3633] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.055154][ T3633] ? clear_bhb_loop+0x40/0x90 [ 37.055181][ T3633] ? clear_bhb_loop+0x40/0x90 [ 37.055208][ T3633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.055285][ T3633] RIP: 0033:0x7f4363fee9a9 [ 37.055312][ T3633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.055335][ T3633] RSP: 002b:00007f436264f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 37.055362][ T3633] RAX: ffffffffffffffda RBX: 00007f4364215fa0 RCX: 00007f4363fee9a9 [ 37.055380][ T3633] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 37.055394][ T3633] RBP: 00007f4364070d69 R08: 0000000000000004 R09: 0000000000000000 [ 37.055434][ T3633] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.055447][ T3633] R13: 0000000000000000 R14: 00007f4364215fa0 R15: 00007ffca3cb8198 [ 37.055466][ T3633] [ 37.055477][ T3633] Mem-Info: [ 37.300997][ T3633] active_anon:6304 inactive_anon:0 isolated_anon:0 [ 37.300997][ T3633] active_file:5717 inactive_file:2200 isolated_file:0 [ 37.300997][ T3633] unevictable:0 dirty:1360 writeback:0 [ 37.300997][ T3633] slab_reclaimable:2863 slab_unreclaimable:13665 [ 37.300997][ T3633] mapped:28976 shmem:178 pagetables:1175 [ 37.300997][ T3633] sec_pagetables:0 bounce:0 [ 37.300997][ T3633] kernel_misc_reclaimable:0 [ 37.300997][ T3633] free:1908101 free_pcp:7020 free_cma:0 [ 37.304024][ T3641] loop2: detected capacity change from 0 to 128 [ 37.345823][ T3633] Node 0 active_anon:25216kB inactive_anon:0kB active_file:22868kB inactive_file:8800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115904kB dirty:5440kB writeback:0kB shmem:712kB writeback_tmp:0kB kernel_stack:3264kB pagetables:4700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 37.345889][ T3633] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 37.409989][ T3633] lowmem_reserve[]: 0 2882 7860 7860 [ 37.415350][ T3633] Node 0 DMA32 free:2947720kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951348kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 37.445776][ T3633] lowmem_reserve[]: 0 0 4978 4978 [ 37.450911][ T3633] Node 0 Normal free:4669092kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25100kB inactive_anon:0kB active_file:22868kB inactive_file:8800kB unevictable:0kB writepending:5440kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:24596kB local_pcp:20172kB free_cma:0kB [ 37.452035][ T3643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 37.482969][ T3633] lowmem_reserve[]: 0 0 0 0 [ 37.483075][ T3633] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 37.497503][ T3645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 37.509387][ T3633] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947720kB [ 37.534392][ T3633] Node 0 Normal: 3*4kB (UME) 1*8kB (M) 2*16kB (ME) 3*32kB (UME) 4*64kB (ME) 10*128kB (M) 5*256kB (UME) 3*512kB (UME) 1*1024kB (M) 1*2048kB (U) 1138*4096kB (M) = 4668820kB [ 37.551897][ T3633] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 37.558566][ T3641] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.561261][ T3633] 8091 total pagecache pages [ 37.561270][ T3633] 0 pages in swap cache [ 37.561276][ T3633] Free swap = 124996kB [ 37.561285][ T3633] Total swap = 124996kB [ 37.590626][ T3633] 2097051 pages RAM [ 37.594450][ T3633] 0 pages HighMem/MovableOnly [ 37.599180][ T3633] 80814 pages reserved [ 37.648569][ T3641] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.661736][ T3643] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 37.726137][ T3641] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 37.834199][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.972349][ T3684] loop4: detected capacity change from 0 to 1024 [ 37.998970][ T3692] netlink: 'syz.3.102': attribute type 10 has an invalid length. [ 38.023737][ T3684] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.034774][ T3684] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 38.057798][ T3684] JBD2: no valid journal superblock found [ 38.063604][ T3684] EXT4-fs (loop4): Could not load journal inode [ 38.334679][ T3718] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 38.398238][ T3720] loop4: detected capacity change from 0 to 2048 [ 38.618636][ T3720] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.644532][ T3314] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 39.014250][ T3764] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.141981][ T3785] ip6t_srh: unknown srh match flags 4000 [ 39.241143][ T3801] xt_TCPMSS: Only works on TCP SYN packets [ 39.391410][ T3825] netlink: 'syz.0.166': attribute type 12 has an invalid length. [ 39.673192][ T3859] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 40.173842][ T3924] loop4: detected capacity change from 0 to 512 [ 40.197342][ T3924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.209262][ T3931] __nla_validate_parse: 6 callbacks suppressed [ 40.209281][ T3931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.217'. [ 40.224547][ T3931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.217'. [ 40.233727][ T3931] netlink: 56 bytes leftover after parsing attributes in process `syz.0.217'. [ 40.254260][ T3924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=800ec018, mo2=0082] [ 40.269594][ T3924] EXT4-fs (loop4): 1 truncate cleaned up [ 40.304723][ T3924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.319837][ T3944] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 40.381100][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.498136][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 40.498152][ T29] audit: type=1400 audit(1753242434.642:180): avc: denied { tracepoint } for pid=3961 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.558645][ T29] audit: type=1400 audit(1753242434.682:181): avc: denied { create } for pid=3963 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 40.578091][ T29] audit: type=1400 audit(1753242434.692:182): avc: denied { connect } for pid=3963 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 40.705399][ T29] audit: type=1400 audit(1753242434.842:183): avc: denied { getopt } for pid=3981 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 40.866056][ T4002] tmpfs: Bad value for 'mpol' [ 41.012845][ T4022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 41.040495][ T4027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.263'. [ 41.066640][ T10] kernel write not supported for file /106/loginuid (pid: 10 comm: kworker/0:1) [ 41.112893][ T29] audit: type=1400 audit(1753242435.252:184): avc: denied { name_connect } for pid=4033 comm="syz.2.267" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 41.141712][ T4038] SELinux: Context system_u:object_r:nvram_device_t:s0 is not valid (left unmapped). [ 41.147322][ T29] audit: type=1400 audit(1753242435.282:185): avc: denied { relabelfrom } for pid=4036 comm="syz.4.268" name="NETLINK" dev="sockfs" ino=5792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 41.147419][ T29] audit: type=1400 audit(1753242435.282:186): avc: denied { relabelto } for pid=4036 comm="syz.4.268" name="NETLINK" dev="sockfs" ino=5792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:nvram_device_t:s0" [ 41.152610][ T4042] netlink: 'syz.0.269': attribute type 15 has an invalid length. [ 41.152632][ T4042] netlink: 723 bytes leftover after parsing attributes in process `syz.0.269'. [ 41.369500][ T4059] xt_TCPMSS: Only works on TCP SYN packets [ 41.433261][ T4068] xt_ipcomp: unknown flags 12 [ 41.490729][ T4074] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 41.531730][ T4081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.607146][ T29] audit: type=1400 audit(1753242435.742:187): avc: denied { ioctl } for pid=4087 comm="syz.0.292" path="socket:[5887]" dev="sockfs" ino=5887 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.633441][ T4096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.295'. [ 41.694685][ T29] audit: type=1400 audit(1753242435.832:188): avc: denied { create } for pid=4098 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 41.707232][ T4105] netlink: 'syz.4.300': attribute type 2 has an invalid length. [ 41.714100][ T29] audit: type=1400 audit(1753242435.832:189): avc: denied { read } for pid=4098 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 41.721735][ T4105] netlink: 'syz.4.300': attribute type 1 has an invalid length. [ 41.782572][ T4106] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 41.892686][ T4126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 41.932665][ T4126] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 41.940437][ T4126] netlink: 'syz.4.309': attribute type 2 has an invalid length. [ 41.948252][ T4126] netlink: 120 bytes leftover after parsing attributes in process `syz.4.309'. [ 42.126952][ T4161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.325'. [ 42.502702][ T4220] netlink: 'syz.1.355': attribute type 13 has an invalid length. [ 42.530832][ T4220] gretap0: refused to change device tx_queue_len [ 42.544153][ T4220] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 42.645801][ T4239] Cannot find del_set index 286 as target [ 42.715657][ T4253] netlink: 'syz.2.370': attribute type 2 has an invalid length. [ 42.988514][ T4298] netlink: 'syz.1.393': attribute type 4 has an invalid length. [ 42.999970][ T4300] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 43.031394][ T4306] loop3: detected capacity change from 0 to 128 [ 43.078048][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.107994][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.120320][ T4313] bond0 (unregistering): Released all slaves [ 43.150313][ T4324] netlink: 'syz.2.406': attribute type 21 has an invalid length. [ 43.158216][ T4324] netlink: 'syz.2.406': attribute type 4 has an invalid length. [ 43.218260][ T4332] mmap: syz.4.409 (4332) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.340994][ T4353] loop3: detected capacity change from 0 to 1024 [ 43.349255][ T4355] loop1: detected capacity change from 0 to 256 [ 43.373176][ T4355] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.388811][ T4353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.513462][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.605118][ T4393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.666873][ T4393] team0: Port device batadv0 added [ 43.683850][ T4413] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 43.714330][ T4393] syz.4.433 (4393) used greatest stack depth: 10664 bytes left [ 43.845772][ T4433] xt_TCPMSS: Only works on TCP SYN packets [ 43.863342][ T4436] loop3: detected capacity change from 0 to 512 [ 43.885353][ T4436] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.934819][ T4436] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.448: corrupted xattr entries [ 43.949172][ T4445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 43.985511][ T4436] EXT4-fs (loop3): Remounting filesystem read-only [ 43.992492][ T4447] bridge1: entered promiscuous mode [ 44.034095][ T4436] EXT4-fs (loop3): 1 truncate cleaned up [ 44.043960][ T4436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.116542][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.209922][ T4482] ip6erspan0: entered promiscuous mode [ 44.369129][ T4509] veth3: entered promiscuous mode [ 44.374268][ T4509] veth3: entered allmulticast mode [ 44.451327][ C0] hrtimer: interrupt took 39031 ns [ 44.597785][ T4546] loop4: detected capacity change from 0 to 128 [ 44.640537][ T4546] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.680734][ T4546] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.753776][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.938823][ T4595] loop2: detected capacity change from 0 to 512 [ 44.974657][ T4595] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.522: corrupted in-inode xattr: overlapping e_value [ 44.999832][ T4595] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.522: couldn't read orphan inode 15 (err -117) [ 45.034308][ T4595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.048978][ T4595] EXT4-fs error (device loop2): ext4_add_entry:2417: inode #2: comm syz.2.522: Directory hole found for htree leaf block 0 [ 45.303834][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.333924][ T4635] __nla_validate_parse: 8 callbacks suppressed [ 45.333945][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 45.354760][ T4613] bond0: entered promiscuous mode [ 45.359886][ T4613] bond0: entered allmulticast mode [ 45.380198][ T4613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.410461][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 45.519628][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 45.519646][ T29] audit: type=1400 audit(1753242439.662:282): avc: denied { getopt } for pid=4644 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.589466][ T29] audit: type=1400 audit(1753242439.732:283): avc: denied { create } for pid=4649 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.675957][ T29] audit: type=1400 audit(1753242439.752:284): avc: denied { read write } for pid=4648 comm="syz.4.548" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.699458][ T29] audit: type=1400 audit(1753242439.752:285): avc: denied { open } for pid=4648 comm="syz.4.548" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.722974][ T29] audit: type=1400 audit(1753242439.752:286): avc: denied { ioctl } for pid=4648 comm="syz.4.548" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.747817][ T29] audit: type=1400 audit(1753242439.772:287): avc: denied { write } for pid=4649 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.825273][ T4669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.556'. [ 45.888875][ T4675] xt_socket: unknown flags 0xc [ 45.911847][ T29] audit: type=1400 audit(1753242439.862:288): avc: denied { create } for pid=4660 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.932098][ T29] audit: type=1400 audit(1753242439.862:289): avc: denied { write } for pid=4660 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.952227][ T29] audit: type=1400 audit(1753242439.862:290): avc: denied { nlmsg_write } for pid=4660 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.979944][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 46.005411][ T4682] SET target dimension over the limit! [ 46.198586][ T29] audit: type=1400 audit(1753242440.332:291): avc: denied { nlmsg_write } for pid=4694 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 46.256990][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 46.294536][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'. [ 46.421478][ T4729] validate_nla: 1 callbacks suppressed [ 46.421492][ T4729] netlink: 'syz.4.584': attribute type 3 has an invalid length. [ 46.658903][ T4757] netlink: 68 bytes leftover after parsing attributes in process `syz.0.601'. [ 46.729161][ T4765] netlink: 'syz.0.605': attribute type 21 has an invalid length. [ 46.805521][ T4776] netlink: 'syz.3.611': attribute type 3 has an invalid length. [ 46.813760][ T4777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'. [ 47.028059][ T4809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.628'. [ 47.173680][ T4830] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 47.256829][ T4849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 47.330152][ T4857] loop2: detected capacity change from 0 to 512 [ 47.384388][ T4857] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.646: bad orphan inode 13 [ 47.397324][ T4857] ext4_test_bit(bit=12, block=4) = 1 [ 47.402676][ T4857] is_bad_inode(inode)=0 [ 47.406938][ T4857] NEXT_ORPHAN(inode)=0 [ 47.411021][ T4857] max_ino=32 [ 47.414301][ T4857] i_nlink=1 [ 47.417795][ T4857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.476272][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.490287][ T4883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4883 comm=syz.2.658 [ 47.636213][ T4904] netlink: 'syz.3.668': attribute type 12 has an invalid length. [ 47.798088][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 47.991672][ T4963] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 48.242614][ T3314] ================================================================== [ 48.250752][ T3314] BUG: KCSAN: data-race in pollwake / pollwake [ 48.256919][ T3314] [ 48.259253][ T3314] write to 0xffffc9000135b9e0 of 4 bytes by task 3305 on cpu 1: [ 48.266896][ T3314] pollwake+0xb6/0x100 [ 48.270974][ T3314] __wake_up_sync_key+0x52/0x80 [ 48.275847][ T3314] anon_pipe_write+0x8ba/0xaa0 [ 48.280630][ T3314] vfs_write+0x49d/0x8e0 [ 48.284896][ T3314] ksys_write+0xda/0x1a0 [ 48.289162][ T3314] __x64_sys_write+0x40/0x50 [ 48.293776][ T3314] x64_sys_call+0x2cdd/0x2fb0 [ 48.298476][ T3314] do_syscall_64+0xd2/0x200 [ 48.303001][ T3314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.308922][ T3314] [ 48.311258][ T3314] write to 0xffffc9000135b9e0 of 4 bytes by task 3314 on cpu 0: [ 48.318900][ T3314] pollwake+0xb6/0x100 [ 48.322983][ T3314] __wake_up_sync_key+0x52/0x80 [ 48.327853][ T3314] anon_pipe_write+0x8ba/0xaa0 [ 48.332631][ T3314] vfs_write+0x49d/0x8e0 [ 48.336896][ T3314] ksys_write+0xda/0x1a0 [ 48.341165][ T3314] __x64_sys_write+0x40/0x50 [ 48.345868][ T3314] x64_sys_call+0x2cdd/0x2fb0 [ 48.350565][ T3314] do_syscall_64+0xd2/0x200 [ 48.355081][ T3314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.360997][ T3314] [ 48.363329][ T3314] value changed: 0x00000000 -> 0x00000001 [ 48.369052][ T3314] [ 48.371388][ T3314] Reported by Kernel Concurrency Sanitizer on: [ 48.377545][ T3314] CPU: 0 UID: 0 PID: 3314 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 48.388582][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.398653][ T3314] ==================================================================