last executing test programs: 1.686992351s ago: executing program 2 (id=136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 1.627219731s ago: executing program 2 (id=137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000007800000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 1.62216166s ago: executing program 0 (id=138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000d80)=ANY=[], 0x2) 1.525469858s ago: executing program 2 (id=142): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000b80)={0x2, 0x0, @remote}, &(0x7f0000002080)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000020c0)=ANY=[@ANYBLOB="3eb100000000000002004e247f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006bd1860800000000000000000000000000000000000000010000000500000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1e01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000320000000000000000000000000000000000000000000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e240a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffffff00"/784], 0x310) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x400}}) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@cgroup=r3, 0x2, 0x1, 0xf52f, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0]}, 0x40) getresuid(&(0x7f00000005c0)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2008800, &(0x7f0000000880)={[], [{@flag='nolazytime'}, {@fowner_eq={'fowner', 0x3d, r6}}, {@subj_type={'subj_type', 0x3d, '\xd87#R\xd8]kg\x13x$\xdf\x19\xd4\x11p\xc2\x8b(\b\xd5\x1d\x96\x99\x14\xe7\vC#\x9dIU\xf8:hl\xb5\x9b\xb8}J\nY\x0e7\x15'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x37, 0x38, 0x34, 0x3fb0c173230ef341, 0x31, 0x66, 0x66], 0x2d, [0x63, 0x63, 0x64, 0x66], 0x2d, [0x38, 0x36, 0x37, 0x48a638dc819d0b42], 0x2d, [0x64, 0x31, 0x33, 0x36], 0x2d, [0x38, 0x31, 0x34, 0x61, 0x31, 0x62, 0x36, 0x65]}}}, {@audit}, {@subj_user={'subj_user', 0x3d, 'kfree\x00'}}, {@obj_user}, {@obj_role={'obj_role', 0x3d, 'kfree\x00'}}, {@seclabel}]}, 0x1, 0x633, &(0x7f0000000bc0)="$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") r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udplite6\x00') preadv(r8, &(0x7f0000000100)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000540)=@can, 0x80, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000740)={'bridge_slave_1\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) write$P9_RXATTRCREATE(r9, &(0x7f0000002400)={0x7, 0x21, 0x2}, 0x7) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r11, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0x4}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000002440)) 1.507899096s ago: executing program 1 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x3e, 0x0, "bd1c790806ed6dcd18899f9ea77ca9fb5184ff0ba54b7dfe784d2f6b7dcd9474d9b295588ac0b991d5c66461eca3f1ff5543acc6c970d0ad22d692e84d692972368e64c272da633a217b45fcc8b1ff3b"}, 0xd8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190005090000000000000000e000000100000000000000000000000020010000000000000000000000000001000000000000000002"], 0xb8}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @dev, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0xff}}}}}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e0004"], 0x74}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7, 0x400000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000300)='./file0\x00', r8, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 1.499165756s ago: executing program 0 (id=144): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x70) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000016c0)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000001700)={@mcast1, 0x0}, &(0x7f0000001740)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001800)={'syztnl0\x00', &(0x7f0000001780)={'gretap0\x00', r1, 0x80, 0x80, 0x1823b8f0, 0xffff0001, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x66, 0x0, 0x40, 0x2f, 0x0, @multicast2, @broadcast, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xfd, [@multicast2, @local, @loopback, @local]}, @timestamp_addr={0x44, 0x1c, 0x45, 0x1, 0x0, [{@rand_addr=0x64010101, 0xfffffe01}, {@empty, 0x7fffffff}, {@multicast1, 0x8}]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240), 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006880)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_LINK={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000018c0)={'ip6gre0\x00', &(0x7f0000001840)={'syztnl2\x00', r1, 0x29, 0x4, 0x1, 0x1, 0x56, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8, 0x1, 0xc8f, 0x6}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0xc8, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') write$evdev(r11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001340)={'veth0_vlan\x00'}) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='net/sockstat6\x00') r13 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r13, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r13, &(0x7f0000001640)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xfc, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xfc}}, 0x90) write$evdev(r12, 0x0, 0x0) recvfrom$packet(r13, &(0x7f0000001a80)=""/156, 0x9c, 0x7, &(0x7f0000001b40)={0x11, 0x18, r14, 0x1, 0x3}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000007180000000000357c0800fcffffff182900"/33, @ANYRES32=0x1, @ANYBLOB="609d35bd03597eb30717ad8a37a62820ca697425546673eda2dea7dba28c903216a1da070b32e39d1bc859838184ffaee7c449defda7c39dd8e946794cbc15e9073b0445736f55bcca9f59ff7f98579d7b7fadde5d921eb3b739b06b2ea23fcba826cc36f80aba629a2eb71827c41997027196002c3523264aae68075ee8aa93861d71b9620abfa283c526ccef1d6c8e4cfe5226b69e6ed64ad4fd1525dd58fb884075c3ed7e36fc60da8117c2d0ae9a5973e00e25b9f3a4bdbaa00d9e85850000000000"], &(0x7f0000000140)='GPL\x00', 0x10000, 0x5e, &(0x7f0000000180)=""/94, 0x40f00, 0xa, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001240)={0x3, 0xc, 0x7fffffff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r12]}, 0x80) 1.335143863s ago: executing program 0 (id=145): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mount$fuse(0x20100000, 0x0, 0x0, 0x0, 0x0) 1.301307461s ago: executing program 0 (id=146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 1.24185861s ago: executing program 0 (id=147): syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000000000)='./bus\x00', 0x40, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x6, 0x5b1c, &(0x7f000000b6c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000280)={0xa, 0x0, 0x206, 0x7}) 1.223889693s ago: executing program 2 (id=148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10b}]}) 1.134494212s ago: executing program 1 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa567fab0c28cc905cd00c0947085ae6fdf8a3e4dcccaf1cf532bd0b982365fd"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x2000000, 0x10, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a88600", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.043270671s ago: executing program 2 (id=150): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e79c667119f2"}]}, 0x30}}, 0x0) 1.038172033s ago: executing program 2 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005f7d93f53ce2c404000000000000"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRESDEC], 0x5c}}, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000010c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3e8, 0xa8, 0x0, 0xffffffff, 0xa8, 0xa8, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @empty, @multicast2, @gre_key, @port=0x4e22}}}}, {{@ip={@private, @local, 0x0, 0x0, 'ip6erspan0\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@local, @ipv4=@remote}}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'bridge0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @broadcast, @gre_key=0x2}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x0, 0x4}, {}, {{0x800}, 0x87}, 0x6}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x3, 0x5, 0x6, 0x0, 0x1, 0x5]}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv6=@empty}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000080)={0x0, 0x0, 0xc00}) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = dup(r1) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000140)) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',']) write$RDMA_USER_CM_CMD_GET_EVENT(r6, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, &(0x7f0000000380)={0x0, 0x0, 0xb, &(0x7f00000002c0)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @generic={0x3}]}}) socket$inet6_udplite(0xa, 0x2, 0x88) 1.02351858s ago: executing program 3 (id=152): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x1) 611.079022ms ago: executing program 3 (id=153): r0 = io_uring_setup(0x48af, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xf, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}, 0x20) 610.741679ms ago: executing program 3 (id=154): r0 = getegid() syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB='quota,iocharset=cp437,noquota,gid=', @ANYRESHEX=r0, @ANYBLOB="2c646973636172643d307830303030303030303830303030300000000000000000733d6337a174696e75652c71756f74612c5c6973636172642c67727071756f74612c00"], 0x1, 0x60b9, &(0x7f00000033c0)="$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") setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 490.864696ms ago: executing program 1 (id=155): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mount$fuse(0x20100000, 0x0, 0x0, 0x0, 0x0) 400.908609ms ago: executing program 1 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 350.509974ms ago: executing program 1 (id=157): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x10001, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 339.474393ms ago: executing program 0 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=ANY=[@ANYBLOB="301400002800010026bd7000fedbdf2503"], 0x1430}}, 0x0) 295.120753ms ago: executing program 1 (id=159): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000004c0)) 271.718626ms ago: executing program 3 (id=160): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e79c667119f2"}]}, 0x30}}, 0x0) 83.927015ms ago: executing program 3 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000880)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortad}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@anchor={'anchor', 0x3d, 0x2}}]}, 0x10, 0xc34, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x64142, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) r2 = open(&(0x7f0000000480)='./file1\x00', 0x64142, 0x0) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) sendfile(r2, r3, 0x0, 0x1000000201005) kernel console output (not intermixed with test programs): [ 45.954603][ T39] audit: type=1400 audit(1719397366.314:82): avc: denied { siginh } for pid=5175 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.327779][ T39] audit: type=1400 audit(1719397366.724:83): avc: denied { write } for pid=5179 comm="sftp-server" path="pipe:[5685]" dev="pipefs" ino=5685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 48.609487][ T39] audit: type=1400 audit(1719397369.004:84): avc: denied { read } for pid=4670 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 48.618096][ T39] audit: type=1400 audit(1719397369.004:85): avc: denied { append } for pid=4670 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.630245][ T39] audit: type=1400 audit(1719397369.004:86): avc: denied { open } for pid=4670 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.640570][ T39] audit: type=1400 audit(1719397369.004:87): avc: denied { getattr } for pid=4670 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:31674' (ED25519) to the list of known hosts. [ 49.079199][ T5182] cgroup: Unknown subsys name 'net' [ 49.194795][ T5182] cgroup: Unknown subsys name 'rlimit' [ 49.482007][ T5184] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.686937][ T5182] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.209758][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 51.209775][ T39] audit: type=1400 audit(1719397371.594:106): avc: denied { mounton } for pid=5190 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 51.227710][ T39] audit: type=1400 audit(1719397371.594:107): avc: denied { mount } for pid=5190 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 51.240043][ T39] audit: type=1400 audit(1719397371.604:108): avc: denied { create } for pid=5190 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.247725][ T5196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.249302][ T39] audit: type=1400 audit(1719397371.604:109): avc: denied { read write } for pid=5190 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.250864][ T5200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.252930][ T5200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.253434][ T5196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.254099][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.256370][ T5201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.258547][ T5201] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.259166][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.259297][ T5201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.261191][ T5201] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.261527][ T5201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.262883][ T5201] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.262882][ T39] audit: type=1400 audit(1719397371.604:110): avc: denied { open } for pid=5190 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.262930][ T39] audit: type=1400 audit(1719397371.614:111): avc: denied { ioctl } for pid=5191 comm="syz-executor" path="socket:[1876]" dev="sockfs" ino=1876 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.264985][ T4632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.268404][ T39] audit: type=1400 audit(1719397371.664:112): avc: denied { read } for pid=5190 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.269228][ T5204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.269822][ T5201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.270933][ T5200] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.271544][ T5201] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.271782][ T5201] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.273751][ T4632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.277541][ T5201] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.280074][ T39] audit: type=1400 audit(1719397371.664:113): avc: denied { open } for pid=5190 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.283235][ T5201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.285166][ T5204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.285181][ T39] audit: type=1400 audit(1719397371.674:114): avc: denied { mounton } for pid=5190 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.387529][ T5204] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.391705][ T5204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.575128][ T39] audit: type=1400 audit(1719397371.974:115): avc: denied { module_request } for pid=5190 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.641527][ T5190] chnl_net:caif_netlink_parms(): no params data found [ 51.775758][ T5198] chnl_net:caif_netlink_parms(): no params data found [ 51.958691][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.962729][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.966580][ T5190] bridge_slave_0: entered allmulticast mode [ 51.970547][ T5190] bridge_slave_0: entered promiscuous mode [ 51.980723][ T5190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.984077][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.987198][ T5190] bridge_slave_1: entered allmulticast mode [ 51.990838][ T5190] bridge_slave_1: entered promiscuous mode [ 51.995122][ T5197] chnl_net:caif_netlink_parms(): no params data found [ 52.128260][ T5190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.159574][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.162690][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.167805][ T5198] bridge_slave_0: entered allmulticast mode [ 52.171461][ T5198] bridge_slave_0: entered promiscuous mode [ 52.176690][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.180217][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.182970][ T5198] bridge_slave_1: entered allmulticast mode [ 52.186379][ T5198] bridge_slave_1: entered promiscuous mode [ 52.190268][ T5191] chnl_net:caif_netlink_parms(): no params data found [ 52.198528][ T5190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.309476][ T5190] team0: Port device team_slave_0 added [ 52.348795][ T5198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.389316][ T5190] team0: Port device team_slave_1 added [ 52.450318][ T5198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.520516][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.525095][ T5197] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.527828][ T5197] bridge_slave_0: entered allmulticast mode [ 52.530724][ T5197] bridge_slave_0: entered promiscuous mode [ 52.619320][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.622819][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.626771][ T5197] bridge_slave_1: entered allmulticast mode [ 52.632039][ T5197] bridge_slave_1: entered promiscuous mode [ 52.661993][ T5198] team0: Port device team_slave_0 added [ 52.706181][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.709291][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.720833][ T5190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.751247][ T5197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.760695][ T5198] team0: Port device team_slave_1 added [ 52.765471][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.768733][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.771554][ T5191] bridge_slave_0: entered allmulticast mode [ 52.775475][ T5191] bridge_slave_0: entered promiscuous mode [ 52.779758][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.782796][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.794765][ T5190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.806583][ T5197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.864945][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.868372][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.872000][ T5191] bridge_slave_1: entered allmulticast mode [ 52.876162][ T5191] bridge_slave_1: entered promiscuous mode [ 52.906208][ T5198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.909582][ T5198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.920806][ T5198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.004357][ T5198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.007648][ T5198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.018957][ T5198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.052227][ T5191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.062923][ T5191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.070869][ T5197] team0: Port device team_slave_0 added [ 53.082626][ T5197] team0: Port device team_slave_1 added [ 53.211486][ T5190] hsr_slave_0: entered promiscuous mode [ 53.215385][ T5190] hsr_slave_1: entered promiscuous mode [ 53.222255][ T5191] team0: Port device team_slave_0 added [ 53.227081][ T5191] team0: Port device team_slave_1 added [ 53.272647][ T5197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.275614][ T5197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.286035][ T5197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.319670][ T5198] hsr_slave_0: entered promiscuous mode [ 53.324568][ T65] Bluetooth: hci2: command tx timeout [ 53.324640][ T5195] Bluetooth: hci3: command tx timeout [ 53.325906][ T5198] hsr_slave_1: entered promiscuous mode [ 53.327193][ T5204] Bluetooth: hci0: command tx timeout [ 53.329887][ T5198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.336655][ T5198] Cannot create hsr debugfs directory [ 53.366900][ T5197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.369808][ T5197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.381257][ T5197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.410795][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.413222][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.413977][ T5204] Bluetooth: hci1: command tx timeout [ 53.425691][ T5191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.507489][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.510643][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.522833][ T5191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.637123][ T5197] hsr_slave_0: entered promiscuous mode [ 53.640978][ T5197] hsr_slave_1: entered promiscuous mode [ 53.644906][ T5197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.648302][ T5197] Cannot create hsr debugfs directory [ 53.726003][ T5191] hsr_slave_0: entered promiscuous mode [ 53.729845][ T5191] hsr_slave_1: entered promiscuous mode [ 53.733396][ T5191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.736569][ T5191] Cannot create hsr debugfs directory [ 54.107934][ T5190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.156221][ T5190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.165041][ T5190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.173000][ T5190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.258256][ T5198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.265903][ T5198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.272978][ T5198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.282119][ T5198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.375825][ T5191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.407740][ T5191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.418275][ T5191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.428537][ T5191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.506711][ T5197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.513060][ T5197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.522022][ T5197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.530988][ T5197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.564154][ T5190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.618763][ T5190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.640341][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.643920][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.656977][ T5198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.675774][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.679067][ T5229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.738889][ T5198] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.779513][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.782766][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.815494][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.818248][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.841031][ T5191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.860886][ T5191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.875963][ T5197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.881476][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.884349][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.908445][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.911571][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.950162][ T5197] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.968008][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.971179][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.989474][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.992221][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.010903][ T5190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.094851][ T5190] veth0_vlan: entered promiscuous mode [ 55.113411][ T5190] veth1_vlan: entered promiscuous mode [ 55.128927][ T5197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.146399][ T5198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.178810][ T5190] veth0_macvtap: entered promiscuous mode [ 55.190393][ T5190] veth1_macvtap: entered promiscuous mode [ 55.221400][ T5198] veth0_vlan: entered promiscuous mode [ 55.229565][ T5198] veth1_vlan: entered promiscuous mode [ 55.242122][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.260851][ T5191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.268491][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.280452][ T5190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.284950][ T5190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.288359][ T5190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.292132][ T5190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.348433][ T5198] veth0_macvtap: entered promiscuous mode [ 55.362109][ T5197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.379775][ T5198] veth1_macvtap: entered promiscuous mode [ 55.403965][ T5204] Bluetooth: hci2: command tx timeout [ 55.404672][ T5195] Bluetooth: hci0: command tx timeout [ 55.404726][ T65] Bluetooth: hci3: command tx timeout [ 55.411914][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.416132][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.446146][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.449163][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.449854][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.453581][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.455491][ T5198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.479169][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.483970][ T5195] Bluetooth: hci1: command tx timeout [ 55.486864][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.494117][ T5198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.500538][ T5191] veth0_vlan: entered promiscuous mode [ 55.530130][ T5198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.533280][ T5198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.536464][ T5198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.539429][ T5198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.556154][ T5191] veth1_vlan: entered promiscuous mode [ 55.569628][ T5197] veth0_vlan: entered promiscuous mode [ 55.592996][ T5197] veth1_vlan: entered promiscuous mode [ 55.636813][ T5191] veth0_macvtap: entered promiscuous mode [ 55.640533][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.643586][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.649433][ T5191] veth1_macvtap: entered promiscuous mode [ 55.675086][ T5197] veth0_macvtap: entered promiscuous mode [ 55.679427][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.680128][ T5197] veth1_macvtap: entered promiscuous mode [ 55.682801][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.698048][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.702195][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.707536][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.711870][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.717954][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.733355][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.738758][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.743136][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.748576][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.754702][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.758705][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.762891][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.768083][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.780720][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.785294][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.788909][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.793172][ T5197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.804993][ T5191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.808860][ T5191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.812981][ T5191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.817531][ T5191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.827575][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.831427][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.836339][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.840973][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.846282][ T5197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.851045][ T5197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.857822][ T5197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.870683][ T5197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.875771][ T5197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.879967][ T5197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.880835][ T5256] loop3: detected capacity change from 0 to 32768 [ 55.884479][ T5197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.901561][ T5256] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6 (5256) [ 55.946565][ T5256] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 55.951541][ T5256] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 55.962105][ T5256] BTRFS info (device loop3): using free-space-tree [ 56.032094][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.038969][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.072211][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.080363][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.112104][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.115449][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.140676][ T5190] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.162212][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.169622][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.232221][ T5279] loop1: detected capacity change from 0 to 512 [ 56.320452][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 56.320468][ T39] audit: type=1400 audit(1719397376.714:135): avc: denied { prog_load } for pid=5280 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.327214][ T5279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.338496][ T5279] ext4 filesystem being mounted at /syzkaller.zd2pme/0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.353780][ T39] audit: type=1400 audit(1719397376.714:136): avc: denied { bpf } for pid=5280 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.377170][ T39] audit: type=1400 audit(1719397376.714:137): avc: denied { perfmon } for pid=5280 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.400824][ T39] audit: type=1400 audit(1719397376.744:139): avc: denied { prog_run } for pid=5280 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.410210][ T39] audit: type=1400 audit(1719397376.744:138): avc: denied { write } for pid=5278 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.423389][ T39] audit: type=1400 audit(1719397376.754:140): avc: denied { add_name } for pid=5278 comm="syz.1.2" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.432787][ T39] audit: type=1400 audit(1719397376.754:141): avc: denied { create } for pid=5278 comm="syz.1.2" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.442344][ T39] audit: type=1400 audit(1719397376.784:142): avc: denied { create } for pid=5287 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.451337][ T39] audit: type=1400 audit(1719397376.784:143): avc: denied { read append open } for pid=5278 comm="syz.1.2" path="/syzkaller.zd2pme/0/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.475147][ T39] audit: type=1400 audit(1719397376.794:144): avc: denied { map_create } for pid=5280 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.549275][ T5294] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #19: comm syz.1.2: corrupted inode contents [ 56.554793][ T5294] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #19: comm syz.1.2: mark_inode_dirty error [ 56.558845][ T5294] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #19: comm syz.1.2: corrupted inode contents [ 56.573933][ T5294] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #19: comm syz.1.2: mark_inode_dirty error [ 56.579101][ T5294] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #19: comm syz.1.2: mark inode dirty (error -117) [ 56.586377][ T5294] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 56.640867][ T5197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.891799][ T5305] loop0: detected capacity change from 0 to 32768 [ 56.898428][ T5305] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.14 (5305) [ 56.913385][ T5317] loop2: detected capacity change from 0 to 16 [ 56.913881][ T5305] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 56.923743][ T5305] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 56.928675][ T5305] BTRFS info (device loop0): using free-space-tree [ 56.940057][ T5317] erofs: (device loop2): mounted with root inode @ nid 36. [ 56.974626][ T5317] overlay: filesystem on ./file0 is read-only [ 57.047338][ T5191] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 57.339375][ T5354] loop2: detected capacity change from 0 to 128 [ 57.350580][ T5352] loop1: detected capacity change from 0 to 4096 [ 57.358506][ T5354] ======================================================= [ 57.358506][ T5354] WARNING: The mand mount option has been deprecated and [ 57.358506][ T5354] and is ignored by this kernel. Remove the mand [ 57.358506][ T5354] option from the mount to silence this warning. [ 57.358506][ T5354] ======================================================= [ 57.363905][ T5352] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 57.386434][ T5352] ntfs3: loop1: It is recommened to use chkdsk. [ 57.390637][ T5352] ntfs3: loop1: Failed to load $LogFile (-22). [ 57.394555][ T5356] warning: `syz.3.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.397036][ T5358] loop0: detected capacity change from 0 to 512 [ 57.427984][ T5358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.433375][ T5358] ext4 filesystem being mounted at /syzkaller.PRN1vF/4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.443477][ T5283] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 57.458592][ T5185] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 57.484182][ T5195] Bluetooth: hci0: command tx timeout [ 57.484313][ T5204] Bluetooth: hci3: command tx timeout [ 57.487416][ T5195] Bluetooth: hci2: command tx timeout [ 57.561415][ T5367] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #19: comm syz.0.22: corrupted inode contents [ 57.568528][ T5367] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #19: comm syz.0.22: mark_inode_dirty error [ 57.573919][ T5195] Bluetooth: hci1: command tx timeout [ 57.580711][ T5367] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #19: comm syz.0.22: corrupted inode contents [ 57.586129][ T5367] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #19: comm syz.0.22: mark_inode_dirty error [ 57.592507][ T5367] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #19: comm syz.0.22: mark inode dirty (error -117) [ 57.600460][ T5367] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 57.656680][ T5191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.704160][ T827] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.709864][ T5366] loop1: detected capacity change from 0 to 32768 [ 57.714517][ T5366] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.31 (5366) [ 57.722944][ T5366] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 57.728060][ T5366] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 57.731714][ T5366] BTRFS info (device loop1): using free-space-tree [ 57.855036][ T5197] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 57.905094][ T827] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.909552][ T827] usb 8-1: config 0 has no interfaces? [ 57.936354][ T827] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.939915][ T827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.944442][ T827] usb 8-1: Product: syz [ 57.947190][ T827] usb 8-1: Manufacturer: syz [ 57.949963][ T827] usb 8-1: SerialNumber: syz [ 57.956106][ T827] usb 8-1: config 0 descriptor?? [ 58.039635][ T5399] netdevsim netdevsim2: Direct firmware load for 0 01ae 012b 0000 0000 0000 [ 58.039635][ T5399] failed with error -2 [ 58.045600][ T5399] netdevsim netdevsim2: Falling back to sysfs fallback for: 0 01ae 012b 0000 0000 0000 [ 58.045600][ T5399] [ 58.155609][ T5406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 58.170292][ T5406] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.174736][ T5406] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.178665][ T5406] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.182773][ T5406] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.188470][ T5406] vxlan0: entered promiscuous mode [ 58.410900][ T5356] loop3: detected capacity change from 0 to 32768 [ 58.423907][ T5356] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.29 (5356) [ 58.443104][ T5356] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.452285][ T5356] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 58.456245][ T5356] BTRFS info (device loop3): using free-space-tree [ 58.567987][ T5356] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 58.580549][ T56] usb 8-1: USB disconnect, device number 2 [ 58.699622][ T5439] loop1: detected capacity change from 0 to 16 [ 58.703234][ T5439] erofs: (device loop1): mounted with root inode @ nid 36. [ 58.711467][ T5439] overlay: filesystem on ./file0 is read-only [ 58.980403][ T5455] loop0: detected capacity change from 0 to 128 [ 59.029333][ T5458] loop2: detected capacity change from 0 to 64 [ 59.051933][ T5361] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 59.107908][ T5190] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 59.246228][ T5469] random: crng reseeded on system resumption [ 59.423618][ T5481] loop3: detected capacity change from 0 to 16 [ 59.431470][ T5481] erofs: (device loop3): mounted with root inode @ nid 36. [ 59.453502][ T5195] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 59.467628][ T5481] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 59.500794][ T5481] syz.3.61 (5481) used greatest stack depth: 20672 bytes left [ 59.564856][ T5195] Bluetooth: hci2: command tx timeout [ 59.564891][ T65] Bluetooth: hci3: command tx timeout [ 59.568068][ T5195] Bluetooth: hci0: command tx timeout [ 59.614633][ T5486] loop2: detected capacity change from 0 to 64 [ 59.644278][ T65] Bluetooth: hci1: command tx timeout [ 60.287034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 60.310377][ T5510] loop0: detected capacity change from 0 to 512 [ 60.386785][ T5510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.399418][ T5510] ext4 filesystem being mounted at /syzkaller.PRN1vF/17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.407370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 60.411027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 60.423403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 60.434415][ T5518] loop1: detected capacity change from 0 to 128 [ 60.434676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.509039][ T5361] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 60.531612][ T5510] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #19: comm syz.0.78: corrupted inode contents [ 60.544033][ T5510] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #19: comm syz.0.78: mark_inode_dirty error [ 60.551531][ T5510] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #19: comm syz.0.78: corrupted inode contents [ 60.566424][ T5510] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #19: comm syz.0.78: mark_inode_dirty error [ 60.573580][ T5510] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #19: comm syz.0.78: mark inode dirty (error -117) [ 60.579033][ T5510] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 60.596020][ T5524] loop1: detected capacity change from 0 to 16 [ 60.607995][ T5524] erofs: (device loop1): mounted with root inode @ nid 36. [ 60.622232][ T5524] overlay: filesystem on ./file0 is read-only [ 60.649043][ T5191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.774764][ T5528] random: crng reseeded on system resumption [ 60.830925][ T5530] loop3: detected capacity change from 0 to 64 [ 60.917127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 60.968797][ T5535] fuse: Bad value for 'fd' [ 61.109884][ T5528] Unrecognized hibernate image header format! [ 61.136607][ T5528] PM: hibernation: Image mismatch: architecture specific data [ 61.177805][ T5539] loop1: detected capacity change from 0 to 16 [ 61.182959][ T5539] erofs: (device loop1): mounted with root inode @ nid 36. [ 61.203305][ T65] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 61.213480][ T5539] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 61.483175][ T5541] ALSA: mixer_oss: invalid OSS volume '' [ 61.510635][ T39] kauditd_printk_skb: 70 callbacks suppressed [ 61.510650][ T39] audit: type=1400 audit(1719397381.904:215): avc: denied { unmount } for pid=5190 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.686893][ T5548] loop0: detected capacity change from 0 to 512 [ 61.728613][ T5548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.734605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 61.746190][ T5548] ext4 filesystem being mounted at /syzkaller.PRN1vF/19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.747231][ T5544] loop1: detected capacity change from 0 to 32768 [ 61.778846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 61.780967][ T39] audit: type=1400 audit(1719397382.174:216): avc: denied { create } for pid=5552 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.791220][ T39] audit: type=1400 audit(1719397382.174:217): avc: denied { write } for pid=5552 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.801952][ T39] audit: type=1400 audit(1719397382.174:218): avc: denied { nlmsg_write } for pid=5552 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.806327][ T5553] loop3: detected capacity change from 0 to 512 [ 61.813157][ T39] audit: type=1400 audit(1719397382.194:219): avc: denied { mount } for pid=5552 comm="syz.3.92" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.826342][ T39] audit: type=1400 audit(1719397382.214:220): avc: denied { mounton } for pid=5552 comm="syz.3.92" path="/syzkaller.zhlSjh/23/file0/file0" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.846437][ T5544] read_mapping_page failed! [ 61.848934][ T5544] ERROR: (device loop1): txAbort: [ 61.848934][ T5544] [ 61.853744][ T39] audit: type=1400 audit(1719397382.244:221): avc: denied { setattr } for pid=5543 comm="syz.1.89" name="file0" dev="loop1" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.855887][ T5544] ERROR: (device loop1): remounting filesystem as read-only [ 61.861470][ T5553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.862268][ T5553] ext4 filesystem being mounted at /syzkaller.zhlSjh/23/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.873892][ T39] audit: type=1400 audit(1719397382.264:222): avc: denied { create } for pid=5552 comm="syz.3.92" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.896203][ T5553] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.92: corrupted inode contents [ 61.911621][ T5553] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz.3.92: mark_inode_dirty error [ 61.916495][ T5556] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #19: comm syz.0.91: corrupted inode contents [ 61.919408][ T5553] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.92: corrupted inode contents [ 61.922363][ T5556] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #19: comm syz.0.91: mark_inode_dirty error [ 61.929739][ T5553] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.92: mark_inode_dirty error [ 61.938106][ T5556] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #19: comm syz.0.91: corrupted inode contents [ 61.938526][ T5556] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #19: comm syz.0.91: mark_inode_dirty error [ 61.949314][ T5556] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #19: comm syz.0.91: mark inode dirty (error -117) [ 61.964045][ T39] audit: type=1400 audit(1719397382.354:223): avc: denied { write } for pid=5552 comm="syz.3.92" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.964873][ T5556] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 61.988334][ T39] audit: type=1400 audit(1719397382.364:224): avc: denied { add_name } for pid=5552 comm="syz.3.92" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 62.006734][ T5190] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.026296][ T5191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.160783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 62.183953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.269435][ T5566] loop1: detected capacity change from 0 to 1024 [ 62.345914][ T5566] hfsplus: bad catalog entry type [ 62.353881][ T5567] ALSA: mixer_oss: invalid OSS volume '' [ 62.405133][ T5559] loop3: detected capacity change from 0 to 32768 [ 62.410884][ T5559] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.94 (5559) [ 62.443196][ T5572] netlink: 'syz.1.99': attribute type 22 has an invalid length. [ 62.446871][ T5559] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 62.446910][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 62.451704][ T5559] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 62.467303][ T5559] BTRFS info (device loop3): using free-space-tree [ 62.655565][ T5190] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 62.744993][ T5584] loop1: detected capacity change from 0 to 32768 [ 62.792133][ T5584] read_mapping_page failed! [ 62.794543][ T5584] ERROR: (device loop1): txAbort: [ 62.794543][ T5584] [ 62.798062][ T5584] ERROR: (device loop1): remounting filesystem as read-only [ 63.043779][ T5194] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 63.123206][ T65] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 63.128566][ T5607] loop0: detected capacity change from 0 to 512 [ 63.137239][ T5607] EXT4-fs: Mount option(s) incompatible with ext3 [ 63.170462][ T5609] netlink: 'syz.1.110': attribute type 22 has an invalid length. [ 63.175358][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 63.178385][ T5361] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 63.179843][ T5610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'. [ 63.199631][ T5610] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.204411][ T5610] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.207969][ T5610] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.213064][ T5610] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.227310][ T5610] vxlan0: entered promiscuous mode [ 63.267712][ T5194] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.273003][ T5194] usb 8-1: config 0 has no interfaces? [ 63.281636][ T5194] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.282983][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 63.286280][ T5194] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.293462][ T5194] usb 8-1: Product: syz [ 63.296048][ T5194] usb 8-1: Manufacturer: syz [ 63.298292][ T5194] usb 8-1: SerialNumber: syz [ 63.304341][ T5194] usb 8-1: config 0 descriptor?? [ 63.468551][ T5630] random: crng reseeded on system resumption [ 63.648024][ T5630] Unrecognized hibernate image header format! [ 63.650297][ T5630] PM: hibernation: Image mismatch: architecture specific data [ 63.747663][ T5597] loop3: detected capacity change from 0 to 32768 [ 63.748210][ T5634] netdevsim netdevsim0: Direct firmware load for b 01fb 0167 0000 0001 0000 [ 63.748210][ T5634] failed with error -2 [ 63.752896][ T5597] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.104 (5597) [ 63.757489][ T5634] netdevsim netdevsim0: Falling back to sysfs fallback for: b 01fb 0167 0000 0001 0000 [ 63.757489][ T5634] [ 63.772133][ T5597] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 63.776818][ T5597] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 63.780336][ T5597] BTRFS info (device loop3): using free-space-tree [ 63.850124][ T5597] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.857643][ T8] usb 8-1: USB disconnect, device number 3 [ 64.125134][ T5656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 64.239383][ T5662] loop1: detected capacity change from 0 to 2048 [ 64.247498][ T5662] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 64.257585][ T5662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.390401][ T5190] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.432868][ T5668] loop2: detected capacity change from 0 to 512 [ 64.480593][ T5668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.491238][ T5668] ext4 filesystem being mounted at /syzkaller.Bh5IAG/26/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.513004][ T5668] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.128: corrupted inode contents [ 64.519438][ T5668] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.128: mark_inode_dirty error [ 64.524428][ T5668] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.128: corrupted inode contents [ 64.528669][ T5668] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.128: mark_inode_dirty error [ 64.582966][ T5198] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.659840][ T5680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 64.999539][ T5705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 65.001681][ T5703] loop1: detected capacity change from 0 to 512 [ 65.036826][ T5703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.042594][ T5703] ext4 filesystem being mounted at /syzkaller.zd2pme/49/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.062610][ T5709] loop2: detected capacity change from 0 to 1024 [ 65.075110][ T5703] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.143: corrupted inode contents [ 65.081964][ T5709] ext3: Unknown parameter 'fowner' [ 65.103745][ T5703] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.143: mark_inode_dirty error [ 65.113483][ T5703] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.143: corrupted inode contents [ 65.119000][ T5703] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.143: mark_inode_dirty error [ 65.148415][ T5361] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 65.161408][ T5701] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.173821][ T65] Bluetooth: hci1: command tx timeout [ 65.185225][ T5700] loop3: detected capacity change from 0 to 32768 [ 65.192179][ T5700] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.140 (5700) [ 65.233036][ T5700] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 65.237810][ T5700] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 65.252961][ T5700] BTRFS info (device loop3): using free-space-tree [ 65.261967][ T5197] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.416833][ T5740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32095 sclass=netlink_route_socket pid=5740 comm=syz.2.151 [ 65.465158][ T5190] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 65.523262][ T5715] loop0: detected capacity change from 0 to 32768 [ 65.851407][ T5715] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 65.865985][ T5715] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 65.922829][ T5715] bcachefs (loop0): alloc_read... done [ 65.929973][ T5715] bcachefs (loop0): stripes_read... done [ 65.932439][ T5715] bcachefs (loop0): snapshots_read... done [ 65.950708][ T5715] bcachefs (loop0): journal_replay... done [ 65.955998][ T5715] bcachefs (loop0): resume_logged_ops... done [ 65.960308][ T5715] bcachefs (loop0): going read-write [ 65.990573][ T5715] bcachefs (loop0): done starting filesystem [ 66.088537][ T5755] loop3: detected capacity change from 0 to 32768 [ 66.104552][ T5191] bcachefs (loop0): shutting down [ 66.107553][ T5191] bcachefs (loop0): going read-only [ 66.110224][ T5191] bcachefs (loop0): finished waiting for writes to stop [ 66.127571][ T5755] read_mapping_page failed! [ 66.129431][ T5755] ERROR: (device loop3): txAbort: [ 66.129431][ T5755] [ 66.136433][ T5191] bcachefs (loop0): flushing journal and stopping allocators, journal seq 9 [ 66.145628][ T5755] ERROR: (device loop3): remounting filesystem as read-only [ 66.160750][ T5191] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 66.174021][ T5191] bcachefs (loop0): shutdown complete, journal seq 12 [ 66.180842][ T5191] bcachefs (loop0): marking filesystem clean [ 66.265771][ T5191] bcachefs (loop0): shutdown complete [ 66.462013][ T5773] loop3: detected capacity change from 0 to 2048 [ 66.486629][ T5773] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 66.501990][ T5773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.521876][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 66.521891][ T39] audit: type=1800 audit(1719397386.914:259): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.162" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 66.534552][ T39] audit: type=1800 audit(1719397386.924:260): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.162" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 66.589709][ T39] audit: type=1800 audit(1719397386.984:261): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.162" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 66.595155][ T5773] ------------[ cut here ]------------ [ 66.597896][ T39] audit: type=1800 audit(1719397386.984:262): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.162" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 66.599735][ T5773] WARNING: CPU: 2 PID: 5773 at fs/udf/truncate.c:204 udf_truncate_extents+0x77a/0xa00 [ 66.599760][ T5773] Modules linked in: [ 66.599768][ T5773] CPU: 2 PID: 5773 Comm: syz.3.162 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 66.601828][ T5775] netlink: 5148 bytes leftover after parsing attributes in process `syz.0.158'. [ 66.622160][ T5773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.626674][ T5773] RIP: 0010:udf_truncate_extents+0x77a/0xa00 [ 66.629278][ T5773] Code: d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 cb 10 8c fe 31 ff 4c 89 ee e8 f1 0b 8c fe 4d 85 ed 74 86 e8 b7 10 8c fe 90 <0f> 0b 90 e9 78 ff ff ff c7 44 24 48 08 00 00 00 e9 5d fa ff ff e8 [ 66.636475][ T5773] RSP: 0018:ffffc9000377f5b0 EFLAGS: 00010287 [ 66.639055][ T5773] RAX: 0000000000008314 RBX: ffff888048899490 RCX: ffffc90004018000 [ 66.641893][ T5773] RDX: 0000000000040000 RSI: ffffffff8301d329 RDI: 0000000000000007 [ 66.644807][ T5773] RBP: ffff888024646000 R08: 0000000000000007 R09: 0000000000000000 [ 66.647494][ T5773] R10: 000000000000000a R11: 0000000000000003 R12: 00000000000000ff [ 66.650797][ T5773] R13: 000000000000000a R14: ffffc9000377f660 R15: ffffc9000377f6a0 [ 66.654160][ T5773] FS: 00007ff6f70d36c0(0000) GS:ffff88806b200000(0000) knlGS:0000000000000000 [ 66.657582][ T5773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.660178][ T5773] CR2: 0000001b306e4ff8 CR3: 00000000241c6000 CR4: 0000000000350ef0 [ 66.663328][ T5773] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.666679][ T5773] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.669677][ T5773] Call Trace: [ 66.670815][ T5773] [ 66.671933][ T5773] ? show_regs+0x8c/0xa0 [ 66.673422][ T5773] ? __warn+0xe5/0x3c0 [ 66.674904][ T5773] ? udf_truncate_extents+0x77a/0xa00 [ 66.676748][ T5773] ? report_bug+0x3c0/0x580 [ 66.678526][ T5773] ? handle_bug+0x3d/0x70 [ 66.680056][ T5773] ? exc_invalid_op+0x17/0x50 [ 66.682002][ T5773] ? asm_exc_invalid_op+0x1a/0x20 [ 66.684476][ T5773] ? udf_truncate_extents+0x779/0xa00 [ 66.686657][ T5773] ? udf_truncate_extents+0x77a/0xa00 [ 66.688526][ T5773] ? __pfx_udf_truncate_extents+0x10/0x10 [ 66.690744][ T5773] ? find_held_lock+0x2d/0x110 [ 66.692861][ T5773] ? udf_write_failed.isra.0+0x168/0x1c0 [ 66.695359][ T5773] ? do_raw_spin_lock+0x12d/0x2c0 [ 66.697218][ T5773] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.699510][ T5773] ? __pfx___might_resched+0x10/0x10 [ 66.701667][ T5773] udf_write_failed.isra.0+0x170/0x1c0 [ 66.704183][ T5773] udf_write_begin+0x207/0x270 [ 66.706160][ T5773] generic_perform_write+0x272/0x620 [ 66.708285][ T5773] ? __pfx_generic_perform_write+0x10/0x10 [ 66.710647][ T5773] ? kiocb_invalidate_pages+0x115/0x180 [ 66.713058][ T5773] ? generic_file_direct_write+0xca/0x3a0 [ 66.715639][ T5773] ? generic_update_time+0xcf/0xf0 [ 66.717457][ T5773] ? mnt_put_write_access_file+0x45/0xf0 [ 66.719715][ T5773] __generic_file_write_iter+0x1d4/0x240 [ 66.721917][ T5773] udf_file_write_iter+0x239/0x740 [ 66.724009][ T5773] iter_file_splice_write+0x906/0x10b0 [ 66.726153][ T5773] ? __pfx_iter_file_splice_write+0x10/0x10 [ 66.728520][ T5773] ? __pfx_lock_acquire+0x10/0x10 [ 66.730522][ T5773] ? __pfx_iter_file_splice_write+0x10/0x10 [ 66.732839][ T5773] direct_splice_actor+0x19b/0x6d0 [ 66.735036][ T5773] splice_direct_to_actor+0x346/0xa40 [ 66.737146][ T5773] ? __pfx_direct_splice_actor+0x10/0x10 [ 66.739357][ T5773] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 66.741669][ T5773] ? __pfx___might_resched+0x10/0x10 [ 66.743832][ T5773] ? __pfx_lock_release+0x10/0x10 [ 66.745838][ T5773] do_splice_direct+0x17e/0x250 [ 66.747898][ T5773] ? __pfx_do_splice_direct+0x10/0x10 [ 66.750047][ T5773] ? avc_policy_seqno+0x9/0x20 [ 66.751973][ T5773] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 66.754698][ T5773] do_sendfile+0xb1e/0xe50 [ 66.756863][ T5773] ? __pfx_do_sendfile+0x10/0x10 [ 66.758986][ T5773] ? __pfx___might_resched+0x10/0x10 [ 66.761095][ T5773] ? __x64_sys_futex+0x1e1/0x4c0 [ 66.763098][ T5773] ? __x64_sys_futex+0x1ea/0x4c0 [ 66.772105][ T5773] __x64_sys_sendfile64+0x1da/0x220 [ 66.774509][ T5773] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 66.776888][ T5773] do_syscall_64+0xcd/0x250 [ 66.778644][ T5773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.780933][ T5773] RIP: 0033:0x7ff6f6375ae9 [ 66.782560][ T5773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.790035][ T5773] RSP: 002b:00007ff6f70d3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 66.793232][ T5773] RAX: ffffffffffffffda RBX: 00007ff6f6503fa0 RCX: 00007ff6f6375ae9 [ 66.796385][ T5773] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 66.799357][ T5773] RBP: 00007ff6f63f6746 R08: 0000000000000000 R09: 0000000000000000 [ 66.802343][ T5773] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 66.805498][ T5773] R13: 000000000000000b R14: 00007ff6f6503fa0 R15: 00007fffe0a4d908 [ 66.808671][ T5773] [ 66.809970][ T5773] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 66.812865][ T5773] CPU: 2 PID: 5773 Comm: syz.3.162 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 66.816617][ T5773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.820709][ T5773] Call Trace: [ 66.822015][ T5773] [ 66.823170][ T5773] dump_stack_lvl+0x3d/0x1f0 [ 66.824984][ T5773] panic+0x6f5/0x7a0 [ 66.826518][ T5773] ? __pfx_panic+0x10/0x10 [ 66.828287][ T5773] ? show_trace_log_lvl+0x363/0x500 [ 66.830308][ T5773] ? udf_truncate_extents+0x77a/0xa00 [ 66.832515][ T5773] check_panic_on_warn+0xab/0xb0 [ 66.834612][ T5773] __warn+0xf1/0x3c0 [ 66.836249][ T5773] ? udf_truncate_extents+0x77a/0xa00 [ 66.838313][ T5773] report_bug+0x3c0/0x580 [ 66.840015][ T5773] handle_bug+0x3d/0x70 [ 66.841662][ T5773] exc_invalid_op+0x17/0x50 [ 66.843407][ T5773] asm_exc_invalid_op+0x1a/0x20 [ 66.845530][ T5773] RIP: 0010:udf_truncate_extents+0x77a/0xa00 [ 66.847914][ T5773] Code: d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 cb 10 8c fe 31 ff 4c 89 ee e8 f1 0b 8c fe 4d 85 ed 74 86 e8 b7 10 8c fe 90 <0f> 0b 90 e9 78 ff ff ff c7 44 24 48 08 00 00 00 e9 5d fa ff ff e8 [ 66.854809][ T5773] RSP: 0018:ffffc9000377f5b0 EFLAGS: 00010287 [ 66.857157][ T5773] RAX: 0000000000008314 RBX: ffff888048899490 RCX: ffffc90004018000 [ 66.860212][ T5773] RDX: 0000000000040000 RSI: ffffffff8301d329 RDI: 0000000000000007 [ 66.863278][ T5773] RBP: ffff888024646000 R08: 0000000000000007 R09: 0000000000000000 [ 66.866480][ T5773] R10: 000000000000000a R11: 0000000000000003 R12: 00000000000000ff [ 66.869805][ T5773] R13: 000000000000000a R14: ffffc9000377f660 R15: ffffc9000377f6a0 [ 66.873239][ T5773] ? udf_truncate_extents+0x779/0xa00 [ 66.875592][ T5773] ? __pfx_udf_truncate_extents+0x10/0x10 [ 66.878007][ T5773] ? find_held_lock+0x2d/0x110 [ 66.880110][ T5773] ? udf_write_failed.isra.0+0x168/0x1c0 [ 66.882564][ T5773] ? do_raw_spin_lock+0x12d/0x2c0 [ 66.884766][ T5773] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 66.887111][ T5773] ? __pfx___might_resched+0x10/0x10 [ 66.889224][ T5773] udf_write_failed.isra.0+0x170/0x1c0 [ 66.891556][ T5773] udf_write_begin+0x207/0x270 [ 66.893618][ T5773] generic_perform_write+0x272/0x620 [ 66.895911][ T5773] ? __pfx_generic_perform_write+0x10/0x10 [ 66.898492][ T5773] ? kiocb_invalidate_pages+0x115/0x180 [ 66.900927][ T5773] ? generic_file_direct_write+0xca/0x3a0 [ 66.903431][ T5773] ? generic_update_time+0xcf/0xf0 [ 66.905684][ T5773] ? mnt_put_write_access_file+0x45/0xf0 [ 66.908280][ T5773] __generic_file_write_iter+0x1d4/0x240 [ 66.910779][ T5773] udf_file_write_iter+0x239/0x740 [ 66.913047][ T5773] iter_file_splice_write+0x906/0x10b0 [ 66.915464][ T5773] ? __pfx_iter_file_splice_write+0x10/0x10 [ 66.918069][ T5773] ? __pfx_lock_acquire+0x10/0x10 [ 66.920323][ T5773] ? __pfx_iter_file_splice_write+0x10/0x10 [ 66.922961][ T5773] direct_splice_actor+0x19b/0x6d0 [ 66.925233][ T5773] splice_direct_to_actor+0x346/0xa40 [ 66.927611][ T5773] ? __pfx_direct_splice_actor+0x10/0x10 [ 66.930174][ T5773] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 66.932800][ T5773] ? __pfx___might_resched+0x10/0x10 [ 66.935101][ T5773] ? __pfx_lock_release+0x10/0x10 [ 66.937257][ T5773] do_splice_direct+0x17e/0x250 [ 66.939362][ T5773] ? __pfx_do_splice_direct+0x10/0x10 [ 66.941658][ T5773] ? avc_policy_seqno+0x9/0x20 [ 66.943817][ T5773] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 66.946698][ T5773] do_sendfile+0xb1e/0xe50 [ 66.949003][ T5773] ? __pfx_do_sendfile+0x10/0x10 [ 66.951284][ T5773] ? __pfx___might_resched+0x10/0x10 [ 66.953621][ T5773] ? __x64_sys_futex+0x1e1/0x4c0 [ 66.955844][ T5773] ? __x64_sys_futex+0x1ea/0x4c0 [ 66.958025][ T5773] __x64_sys_sendfile64+0x1da/0x220 [ 66.960313][ T5773] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 66.962665][ T5773] do_syscall_64+0xcd/0x250 [ 66.964613][ T5773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.967050][ T5773] RIP: 0033:0x7ff6f6375ae9 [ 66.968956][ T5773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.977188][ T5773] RSP: 002b:00007ff6f70d3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 66.980726][ T5773] RAX: ffffffffffffffda RBX: 00007ff6f6503fa0 RCX: 00007ff6f6375ae9 [ 66.984206][ T5773] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 66.987593][ T5773] RBP: 00007ff6f63f6746 R08: 0000000000000000 R09: 0000000000000000 [ 66.991477][ T5773] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 66.995170][ T5773] R13: 000000000000000b R14: 00007ff6f6503fa0 R15: 00007fffe0a4d908 [ 66.998670][ T5773] [ 67.000683][ T5773] Kernel Offset: disabled [ 67.002781][ T5773] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:23:07 Registers: info registers vcpu 0 CPU#0 RAX=00000000000a62f3 RBX=0000000000000000 RCX=ffffffff8ae74849 RDX=0000000000000000 RSI=ffffffff8b2caf60 RDI=ffffffff8b8ff980 RBP=fffffbfff1b12af8 RSP=ffffffff8d807e20 R8 =0000000000000001 R9 =ffffed100d606fdd R10=ffff88806b037eeb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8d8957c0 R14=ffffffff8fe44450 R15=0000000000000000 RIP=ffffffff8ae75c3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b30417ff8 CR3=000000002464a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0cf ffffffff8100a0cf ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0cf ffffffff8100a0cf ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a0cf ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9bc7e4256 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9bc7e4263 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9bc7e425d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9bc7e4271 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9bc7e42f7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9bc7e43d5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9bc8d4488 00007fa9bc8d4480 00007fa9bc8d4478 00007fa9bc8d4450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9bd43d100 00007fa9bc8d4440 00007fa900040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa9bc8d4498 00007fa9bc8d4490 00007fa9bc8d4488 00007fa9bc8d4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc90003a7f4b0 RCX=ffffc90003a7f4e4 RDX=ffff88802ba88000 RSI=ffffffff813ce7f8 RDI=ffffc90003a7f4f0 RBP=0000000000000001 RSP=ffffc90003a7f430 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff8880271c9c01 R13=0000000000000001 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff813ce7f8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff7b715010 CR3=000000002f85a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000001000 Opmask01=0000000000000000 Opmask02=00000000fffffffe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe0a4dc10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e4256 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e4263 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e425d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e4271 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e42f7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e43d5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fd3105 RDI=ffffffff94dd83e0 RBP=ffffffff94dd83a0 RSP=ffffc9000377efa0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=0000000000000079 R14=ffffffff84fd30a0 R15=0000000000000000 RIP=ffffffff84fd312f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff6f70d36c0 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b306e4ff8 CR3=00000000241c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8100a0b3 ffffffff8100a0b3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8100a0b3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e4256 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e4263 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e425d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e4271 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e42f7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6f63e43d5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43d0f4bd30da6ec8 d524125a985d4ae4 57002dcc50899640 1b669aabb8558a98 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697300040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000392a1 RBX=0000000000000003 RCX=ffffffff8ae74849 RDX=0000000000000000 RSI=ffffffff8b2caf60 RDI=ffffffff8b8ff980 RBP=ffffed1002fd9488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d666fdd R10=ffff88806b337eeb R11=0000000000000000 R12=0000000000000003 R13=ffff888017eca440 R14=ffffffff8fe44450 R15=0000000000000000 RIP=ffffffff8ae75c3f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b3071dff8 CR3=0000000024858000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=000000003c0f0000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000017 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555680e1844 00005555680e1840 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555680d1690 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555680d7a0c 00005555680d7900 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555680d46e4 00005555680d46e0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555568121630 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30e2007598 0000002000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4ae0030008004ad8 030008004ad00303 ffffffff044ac003 0008004ab8030008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c08001490030008 0014880301000002 080614800302a010 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03ec5b6f9bc8abe9 db87d37e54b9e01c 0817800317800414 a003000800149803 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080014d8030008 0014d00300080014 c80300080014c003 03ffffffff0414b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101a01000148004 141000060101dc00 0800159003000800 1588030008001580 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0303ffffffff0414 f00303ffffffff04 14e00300080014d8 0300080014d00300 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080014c803000800 14c00303ffffffff 0414b003ec5b6f9b c8abe9db87d37e54 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b9e01c0817800317 800414a003000800 1498031c08001490 0300080014880301 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 eefc0b08000cbf33 2e2e31fc11041214 bfefefefeff2bf33 322e272b20222e2b ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf c924bfbfbfbfbfbf bfbfdf2422bfbf33 322e272b20222e2b ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020