last executing test programs: 1m6.756081904s ago: executing program 1 (id=1653): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x63, 0x1000) 1m5.425707975s ago: executing program 0 (id=1654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff91, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000000)=ANY=[], 0x0) 48.89207714s ago: executing program 1 (id=1655): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 48.89177451s ago: executing program 0 (id=1656): r0 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 34.429646399s ago: executing program 0 (id=1657): setresgid(0xee00, 0xee01, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4000}}], 0x1, 0x0) 33.496434237s ago: executing program 1 (id=1658): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) 20.264486377s ago: executing program 1 (id=1659): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 18.763941818s ago: executing program 0 (id=1660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) 10.468920551s ago: executing program 0 (id=1661): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)="373a3076864808a19c5513d03113af3140d9d6b43c733e6d63c371e42b8f4ac1", 0x20) 9.404729549s ago: executing program 1 (id=1662): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xfff, 0x64b, 0x4, 0x800d, 0x5, "ea710000000000f9000000024200000200", 0x4000000, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xa) 4.221815368s ago: executing program 1 (id=1663): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108000604"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 0 (id=1664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000021c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000022c0)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:52334' (ED25519) to the list of known hosts. syzkaller login: [ 497.857198][ T3211] cgroup: Unknown subsys name 'net' [ 498.654044][ T3211] cgroup: Unknown subsys name 'cpuset' [ 498.861255][ T3211] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 581.083186][ T3211] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 750.297954][ T3223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.855657][ T3223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.935047][ T3225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.239895][ T3225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.206460][ T3223] hsr_slave_0: entered promiscuous mode [ 766.234822][ T3223] hsr_slave_1: entered promiscuous mode [ 771.624191][ T3225] hsr_slave_0: entered promiscuous mode [ 771.642963][ T3225] hsr_slave_1: entered promiscuous mode [ 771.655971][ T3225] debugfs: 'hsr0' already exists in 'hsr' [ 771.657381][ T3225] Cannot create hsr debugfs directory [ 775.288072][ T3223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 775.454007][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 775.981884][ T3223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 776.144543][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.891024][ T3223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 776.976280][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 777.364853][ T3223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 777.437962][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 782.565400][ T3225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 782.742966][ T3225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 782.874637][ T3225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 783.071989][ T3225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 783.136322][ T3225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 783.326484][ T3225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 783.371595][ T3225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 783.661131][ T3225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 803.436397][ T3223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.495212][ T3225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.871517][ T3223] veth0_vlan: entered promiscuous mode [ 882.318315][ T3223] veth1_vlan: entered promiscuous mode [ 886.418367][ T3223] veth0_macvtap: entered promiscuous mode [ 888.934504][ T3223] veth1_macvtap: entered promiscuous mode [ 891.126374][ T3225] veth0_vlan: entered promiscuous mode [ 893.106652][ T3225] veth1_vlan: entered promiscuous mode [ 893.741246][ T3350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.817721][ T3524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.851997][ T3350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.853934][ T3350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.987633][ T3225] veth0_macvtap: entered promiscuous mode [ 900.457183][ T3223] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 901.595849][ T3225] veth1_macvtap: entered promiscuous mode [ 904.652878][ T3350] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.655881][ T3350] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.691723][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.697088][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.770818][ T3861] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.9'. [ 1190.348390][ T3990] random: crng reseeded on system resumption [ 1205.664436][ T4011] capability: warning: `syz.1.67' uses deprecated v2 capabilities in a way that may be insecure [ 1246.384545][ T4022] netlink: 72 bytes leftover after parsing attributes in process `syz.1.72'. [ 1285.734707][ T4036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 1285.735302][ T4036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 1501.955747][ T4140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 1671.950877][ T4222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 1671.951787][ T4222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 1671.954752][ T4222] netlink: 'syz.1.156': attribute type 11 has an invalid length. [ 1680.075630][ T4230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.158'. [ 1700.237241][ T4238] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1710.182485][ T4242] ======================================================= [ 1710.182485][ T4242] WARNING: The mand mount option has been deprecated and [ 1710.182485][ T4242] and is ignored by this kernel. Remove the mand [ 1710.182485][ T4242] option from the mount to silence this warning. [ 1710.182485][ T4242] ======================================================= [ 1744.424136][ T4257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.171'. [ 1806.030520][ T4298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.184'. [ 1806.066643][ T4298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.184'. [ 1913.756647][ T4352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 1924.340433][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.213'. [ 1924.341180][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.213'. [ 1953.344755][ T4373] Invalid logical block size (-4) [ 1965.395591][ T4383] netlink: 'syz.1.225': attribute type 3 has an invalid length. [ 1990.108288][ T4398] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 2003.308683][ T4404] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 2003.308683][ T4404] The task syz.1.234 (4404) triggered the difference, watch for misbehavior. [ 2146.848543][ T4473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.262'. [ 2215.759956][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 2215.761596][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 2241.531345][ T4523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.286'. [ 2265.677739][ T4533] syz.1.290 uses obsolete (PF_INET,SOCK_PACKET) [ 2286.352374][ T4550] vlan2: entered allmulticast mode [ 2286.353213][ T4550] bond0: entered allmulticast mode [ 2286.356323][ T4550] bond_slave_0: entered allmulticast mode [ 2286.358383][ T4550] bond_slave_1: entered allmulticast mode [ 2330.902392][ T4569] UHID_CREATE from different security context by process 325 (syz.0.305), this is not allowed. [ 2339.631359][ T4577] dvmrp6: entered allmulticast mode [ 2368.003344][ T3842] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2368.202441][ T3842] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2392.358566][ T4618] Device tree not included in the provided image [ 2398.002414][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 2406.593213][ T4634] random: crng reseeded on system resumption [ 2427.017857][ T4643] netlink: 'syz.0.330': attribute type 12 has an invalid length. [ 2463.471718][ T4667] netlink: 'syz.0.339': attribute type 58 has an invalid length. [ 2463.472544][ T4667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 2476.591246][ T4673] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 2476.591808][ T4673] netlink: 100 bytes leftover after parsing attributes in process `syz.1.341'. [ 2511.167946][ T3208] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2511.535082][ T3208] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 2511.953318][ T3208] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2511.956838][ T3208] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2511.974362][ T3208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2513.843040][ T3208] rtsx_usb 1-1:1.0: probe with driver rtsx_usb failed with error -110 [ 2522.002597][ T4713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.355'. [ 2522.008310][ T4713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.355'. [ 2526.779277][ T4589] usb 1-1: USB disconnect, device number 2 [ 2604.245984][ T4770] xt_policy: neither incoming nor outgoing policy selected [ 2614.643992][ T4776] ucma_write: process 406 (syz.0.382) changed security contexts after opening file descriptor, this is not allowed. [ 2620.984307][ T4780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 2620.984978][ T4780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 2628.380818][ T4783] scsi_nl_rcv_msg: discarding partial skb [ 2684.815671][ T4815] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 2709.921824][ T4834] capability: warning: `syz.1.410' uses 32-bit capabilities (legacy support in use) [ 2715.766067][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.413'. [ 2735.438374][ T4850] netlink: 'syz.0.418': attribute type 16 has an invalid length. [ 2735.473198][ T4850] netlink: 64130 bytes leftover after parsing attributes in process `syz.0.418'. [ 2759.553294][ T3208] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2759.865291][ T3208] usb 1-1: Using ep0 maxpacket: 32 [ 2760.011651][ T3208] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2760.275315][ T3208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2760.277387][ T3208] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2760.278678][ T3208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2760.290948][ T3208] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2760.294533][ T3208] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2760.296819][ T3208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2761.503621][ T3208] usb 1-1: config 0 descriptor?? [ 2765.361848][ T3208] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2768.710871][ T4883] cgroup: fork rejected by pids controller in /syz1 [ 2778.807621][ T3791] usb 1-1: USB disconnect, device number 3 [ 2781.131101][ T3791] usblp0: removed [ 2784.118614][ T984] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2788.932873][ T984] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2791.486557][ T984] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2793.267450][ T984] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2813.803284][ T984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2813.912840][ T984] bond_slave_0: left allmulticast mode [ 2814.288336][ T984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2814.398367][ T984] bond_slave_1: left allmulticast mode [ 2814.618150][ T984] bond0 (unregistering): Released all slaves [ 2814.768528][ T31] audit: type=1326 audit(2813.470:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.433" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa773429a code=0x0 [ 2817.177069][ T984] hsr_slave_0: left promiscuous mode [ 2817.212950][ T984] hsr_slave_1: left promiscuous mode [ 2817.724806][ T984] veth1_macvtap: left promiscuous mode [ 2817.738285][ T984] veth0_macvtap: left promiscuous mode [ 2817.763897][ T984] veth1_vlan: left promiscuous mode [ 2817.766182][ T984] veth0_vlan: left promiscuous mode [ 2825.541311][ T4919] ptrace attach of "/syz-executor exec"[3225] was attempted by ""[4919] [ 2887.455443][ T3078] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2894.915857][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 2921.654861][ T3078] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2940.165497][ T4920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2940.993235][ T4920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2945.781829][ T3078] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2966.977430][ T31] audit: type=1800 audit(2965.680:3): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.446" name="dummy_udc" dev="gadgetfs" ino=3345 res=0 errno=0 [ 2987.405739][ T4920] hsr_slave_0: entered promiscuous mode [ 2987.971306][ T4920] hsr_slave_1: entered promiscuous mode [ 2990.026514][ T3078] 8021q: adding VLAN 0 to HW filter on device eth4 [ 3035.757679][ T4920] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3036.163573][ T4920] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3036.326440][ T4920] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3036.916575][ T4920] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3037.060472][ T4920] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3037.389474][ T4920] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3037.524549][ T4920] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3038.307861][ T4920] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3071.827204][ T4920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3126.126340][ T5323] netlink: 504 bytes leftover after parsing attributes in process `syz.0.456'. [ 3189.238292][ T4920] veth0_vlan: entered promiscuous mode [ 3190.206449][ T4920] veth1_vlan: entered promiscuous mode [ 3193.273418][ T4920] veth0_macvtap: entered promiscuous mode [ 3194.070928][ T4920] veth1_macvtap: entered promiscuous mode [ 3195.681707][ T4897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3195.686190][ T4897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3195.766096][ T4479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3195.833885][ T3524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3277.271201][ T5405] netlink: 68 bytes leftover after parsing attributes in process `syz.1.464'. [ 3277.304473][ T5405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.464'. [ 3314.673050][ T5422] ptrace attach of ""[5423] was attempted by "/syz-executor exec"[5422] [ 3404.899841][ T5449] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 3696.333110][ T5526] netlink: 72 bytes leftover after parsing attributes in process `syz.1.510'. [ 3734.250443][ T5537] ptrace attach of ""[5538] was attempted by "/syz-executor exec"[5537] [ 3916.717752][ T5593] netlink: 792 bytes leftover after parsing attributes in process `syz.0.536'. [ 4018.165165][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 4137.733765][ T5669] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 4241.853918][ T5714] xt_hashlimit: size too large, truncated to 1048576 [ 4348.050047][ T5768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.605'. [ 4348.054216][ T5768] Zero length message leads to an empty skb [ 4372.301177][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 4374.685217][ T31] audit: type=1326 audit(4373.390:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.0.613" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa773429a code=0x0 [ 4397.080502][ T5798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.620'. [ 4397.111310][ T5798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'. [ 4436.985467][ T5811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.627'. [ 4467.452456][ T5825] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 4591.746312][ T5884] netlink: 277 bytes leftover after parsing attributes in process `syz.0.659'. [ 4638.013296][ T5906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'. [ 4754.065691][ T31] audit: type=1800 audit(4752.800:5): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.690" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 4766.630680][ T5963] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 4782.082368][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.0.695'. [ 4782.506683][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.0.695'. [ 4831.872016][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'. [ 4832.458507][ T5996] xfrm1: entered promiscuous mode [ 4832.474444][ T5996] xfrm1: entered allmulticast mode [ 4834.002238][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'. [ 4836.024245][ T6001] fuse: blksize only supported for fuseblk [ 4853.957729][ T6010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.711'. [ 4898.657628][ T6036] binder: 6035:6036 unknown command 224 [ 4898.665313][ T6036] binder: 6035:6036 ioctl c0306201 200000000080 returned -22 [ 4920.236940][ T6052] ip_tables: iptables: counters copy to user failed while replacing table [ 5038.460081][ T6106] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.756'. [ 5038.519987][ T6106] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.756'. [ 5353.638489][ T6210] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 5444.246731][ T6232] netlink: 104 bytes leftover after parsing attributes in process `syz.1.806'. [ 5469.601733][ T31] audit: type=1326 audit(5468.340:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.0.813" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa773429a code=0x7ffc0000 [ 5469.677969][ T31] audit: type=1326 audit(5468.380:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.0.813" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa773429a code=0x7ffc0000 [ 5470.947195][ T31] audit: type=1326 audit(5469.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.0.813" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa773429a code=0x7ffc0000 [ 5471.011335][ T31] audit: type=1326 audit(5469.710:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.0.813" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa773429a code=0x7ffc0000 [ 5471.057260][ T31] audit: type=1326 audit(5469.680:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.0.813" exe="/syz-executor" sig=0 arch=c00000f3 syscall=167 compat=0 ip=0x7fffa773429a code=0x7ffc0000 [ 5471.108344][ T31] audit: type=1326 audit(5469.790:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.0.813" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa773429a code=0x7ffc0000 [ 5471.153627][ T31] audit: type=1326 audit(5469.800:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.0.813" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa773429a code=0x7ffc0000 [ 5471.158327][ T31] audit: type=1326 audit(5469.830:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.0.813" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa773429a code=0x7ffc0000 [ 5471.176469][ T31] audit: type=1326 audit(5469.840:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.0.813" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fffa773429a code=0x7ffc0000 [ 5471.187915][ T31] audit: type=1326 audit(5469.830:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.0.813" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0x7fffa773429a code=0x7ffc0000 [ 5549.087132][ T6287] vxcan0: entered allmulticast mode [ 5549.227532][ T6284] vxcan0: left allmulticast mode [ 5578.997129][ T6297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.835'. [ 5589.504843][ T6304] mmap: syz.1.838 (6304) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 5628.184386][ T6324] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 5640.526952][ T6334] netlink: 'syz.1.853': attribute type 15 has an invalid length. [ 5691.207079][ T6362] block nbd0: Unsupported socket: should be TCP or UNIX. [ 5719.955940][ T6376] bridge_slave_1: entered promiscuous mode [ 5728.097674][ T6378] usb usb1: usbfs: process 6378 (syz.0.873) did not claim interface 8 before use [ 5779.722424][ T6405] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 5938.376081][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 5938.896368][ T6483] bond0: (slave bond_slave_0): Releasing backup interface [ 5939.217892][ T6483] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 5993.531715][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 6050.877570][ T6542] netlink: 36 bytes leftover after parsing attributes in process `syz.1.941'. [ 6096.087939][ T6569] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 6099.641175][ T6570] netlink: 168 bytes leftover after parsing attributes in process `syz.0.951'. [ 6110.364376][ T6574] process 'syz.0.954' launched '/dev/fd/3' with NULL argv: empty string added [ 6160.353879][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 6160.363279][ T6602] netlink: 120 bytes leftover after parsing attributes in process `syz.0.967'. [ 6160.368669][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 6171.146368][ T6605] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 6205.751696][ T6626] netlink: 1084 bytes leftover after parsing attributes in process `syz.1.978'. [ 6313.235342][ T6682] xt_IDLETIMER: label is empty or not nul-terminated [ 6346.872903][ T6694] netlink: 'syz.1.1008': attribute type 3 has an invalid length. [ 6408.682308][ T6733] CUSE: unknown device info "" [ 6408.682812][ T6733] CUSE: unknown device info "" [ 6408.683031][ T6733] CUSE: unknown device info "" [ 6408.683386][ T6733] CUSE: unknown device info "" [ 6408.683594][ T6733] CUSE: unknown device info "ðÿÿÿ" [ 6408.683832][ T6733] CUSE: unknown device info "ê" [ 6408.684010][ T6733] CUSE: unknown device info "" [ 6408.684230][ T6733] CUSE: unknown device info "ï‰" [ 6408.684475][ T6733] CUSE: unknown device info "" [ 6408.684742][ T6733] CUSE: unknown device info "" [ 6408.684957][ T6733] CUSE: unknown device info "" [ 6408.685145][ T6733] CUSE: unknown device info "€" [ 6408.685337][ T6733] CUSE: unknown device info "" [ 6408.685637][ T6733] CUSE: unknown device info "" [ 6408.685842][ T6733] CUSE: unknown device info "ûÿÿÿ" [ 6408.686177][ T6733] CUSE: DEVNAME unspecified [ 6516.015768][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1051'. [ 6516.023000][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 6855.533125][ T6891] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1089'. [ 6931.985663][ T6910] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1098'. [ 6966.314094][ T6921] atomic_op ffffaf8031f439e0 conn xmit_atomic 0000000000000000 [ 7178.614054][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 7308.317963][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 7400.972303][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 7400.995891][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 7400.996502][ T7101] netlink: 'syz.0.1180': attribute type 15 has an invalid length. [ 7508.141271][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 7529.937525][ T7148] binder: 7146:7148 ioctl c00c620f 200000000980 returned -22 [ 7544.106066][ T7154] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 7663.367861][ T7194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1221'. [ 7777.595069][ T7240] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1232'. [ 7916.717686][ T7294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1251'. [ 7916.752651][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 7985.953167][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 7985.953861][ T31] audit: type=1807 audit(7984.690:20): UNKNOWN=m res=0 [ 7986.052602][ T31] audit: type=1802 audit(7984.790:21): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1261" res=0 errno=0 [ 7986.138327][ T7313] ima: policy update failed [ 7986.157266][ T31] audit: type=1802 audit(7984.900:22): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1261" res=0 errno=0 [ 8006.903368][ T7323] veth1_macvtap: left promiscuous mode [ 8006.907260][ T7323] macsec0: entered promiscuous mode [ 8007.787100][ T7325] veth1_macvtap: entered promiscuous mode [ 8007.868119][ T7325] macsec0: left promiscuous mode [ 8045.208409][ T7344] misc userio: Can't change port type on an already running userio instance [ 8059.668676][ T7354] macvlan0: entered allmulticast mode [ 8059.697573][ T7354] veth1_vlan: entered allmulticast mode [ 8136.385963][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. E[ 8211.035868][ T7408] ptrace attach of "/syz-executor exec"[4920] was attempted by " Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ    ÿÿÿÿ   ÿÿÿÿ  [ 8299.288546][ T7439] dummy0: entered allmulticast mode [ 8382.879812][ T31] audit: type=1400 audit(8381.600:23): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=7466 comm="syz.0.1319" name="p" offset=92 [ 8391.846952][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf8022ec6400: Timeout. Failed to send simple message. [ 8500.634460][ T7506] random: crng reseeded on system resumption [ 8588.464671][ C1] vcan0: j1939_tp_rxtimer: 0xffffaf802a60dc00: Timeout. Failed to send simple message. [ 8603.014204][ T7544] veth1_macvtap: left promiscuous mode [ 8603.015662][ T7544] macsec0: entered promiscuous mode [ 8604.533378][ T7545] veth1_macvtap: entered promiscuous mode [ 8604.584566][ T7545] macsec0: left promiscuous mode [ 8685.125198][ T7568] veth1_macvtap: left promiscuous mode [ 8685.143715][ T7568] macsec0: entered promiscuous mode [ 8685.666360][ T7567] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 8685.681602][ T7567] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 8686.416665][ T7568] veth1_macvtap: entered promiscuous mode [ 8686.463227][ T7568] macsec0: left promiscuous mode [ 8698.725397][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 8984.418572][ T7673] bpf: Bad value for 'uid' [ 9034.567665][ T31] audit: type=1400 audit(9033.250:24): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=7689 comm="syz.0.1413" name=223A6F offset=61 [ 9185.793440][ T7745] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1432'. [ 9185.831732][ T7744] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1432'. [ 9215.096322][ T7754] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 9229.866078][ T7759] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1438'. [ 9571.090162][ T7863] input: syz1 as /devices/virtual/input/input5 [ 9941.661838][ T7986] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [10164.198572][ T8069] pim6reg0: tun_chr_ioctl cmd 1074025676 [10164.206146][ T8069] pim6reg0: owner set to 0 [10184.003524][ T8073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1569'. [10209.430041][ T6608] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [10210.087803][ T6608] wiimote 0005:057E:0306.0002: New device registered [10212.042510][ T7324] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [10215.390990][ T7324] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input7 [10216.354896][ T7324] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input8 [10216.902989][ T7324] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input6 [10222.807253][ T8083] wiimote 0005:057E:0306.0002: Device removed [10334.908499][ T8163] dyndbg: bad flag-op f, at start of f [10335.111883][ T8163] dyndbg: flags parse failed [10478.262588][ T8210] netlink: 'syz.0.1606': attribute type 12 has an invalid length. [10544.607275][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [10718.755639][ T8285] input: syz1 as /devices/virtual/input/input9 [10731.931032][ T8291] binder: 8290:8291 ioctl 4018620d 0 returned -22 [10895.411267][ T8348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1660'. [10917.116243][ C1] ------------[ cut here ]------------ [10917.116578][ C1] kernel BUG at [] mm/page_table_check.c:118! [10917.117578][ C1] Kernel BUG [#1] [10917.122528][ C1] Modules linked in: [10917.127042][ C1] CPU: 1 UID: 0 PID: 8357 Comm: syz.0.1664 Tainted: G L syzkaller #0 PREEMPT [10917.131460][ C1] Tainted: [L]=SOFTLOCKUP [10917.133340][ C1] Hardware name: riscv-virtio,qemu (DT) [10917.135940][ C1] epc : page_table_check_set+0x9ca/0xc72 [10917.139171][ C1] ra : page_table_check_set+0x9ca/0xc72 [10917.141993][ C1] epc : ffffffff80cbd16e ra : ffffffff80cbd16e sp : ffff8f8007756ff0 [10917.145294][ C1] gp : ffffffff8a6d9c00 tp : ffffaf801b9e3580 t0 : ffff8f80077575b8 [10917.148464][ C1] t1 : fffff5ef027abc09 t2 : ffffffff86c06cb0 s0 : ffff8f8007757070 [10917.151761][ C1] s1 : 0000000000000001 a0 : 0000000000000001 a1 : 0000000000000000 [10917.155139][ C1] a2 : 0000000000080000 a3 : ffffffff80cbd16e a4 : ffff8f8004844388 [10917.158413][ C1] a5 : 000000000002b388 a6 : 0000000000000003 a7 : ffffaf8013d5e04b [10917.160970][ C1] s2 : 00000000000b4600 s3 : 0000000000000000 s4 : ffffaf8013d5e000 [10917.162771][ C1] s5 : 0000000000000200 s6 : 0000000000000001 s7 : dfffffff00000000 [10917.164486][ C1] s8 : ffffffff88e6d260 s9 : 0000000000007fff s10: 0000000000000000 [10917.166316][ C1] s11: ffffffff8a7f9d60 t3 : 00000000000000c8 t4 : fffff5ef027abc09 [10917.168942][ C1] t5 : fffff5ef027abc0a t6 : 0000000000000002 ssp : 0000000000000000 [10917.171223][ C1] status: 0000000200000120 badaddr: ffffffff80cbd16e cause: 0000000000000003 [10917.173137][ C1] [] page_table_check_set+0x9ca/0xc72 [10917.174783][ C1] [] __page_table_check_ptes_set+0x23c/0x4a4 [10917.176752][ C1] [] split_huge_pmd_locked+0x1f00/0x241e [10917.178329][ C1] [] __split_huge_pmd+0x2aa/0x3d4 [10917.180013][ C1] [] vma_adjust_trans_huge+0x272/0x4b2 [10917.182384][ C1] [] __split_vma+0xbce/0x1f38 [10917.185287][ C1] [] vma_modify+0xc92/0x23be [10917.187931][ C1] [] vma_modify_flags+0x278/0x3a4 [10917.190883][ C1] [] mprotect_fixup+0x1c8/0xa56 [10917.193749][ C1] [] do_mprotect_pkey.constprop.0+0x660/0xb1c [10917.196893][ C1] [] __riscv_sys_mprotect+0x6c/0x112 [10917.199916][ C1] [] syscall_handler+0x92/0x114 [10917.202965][ C1] [] do_trap_ecall_u+0x4ca/0x658 [10917.205572][ C1] [] handle_exception+0x168/0x174 [10917.208032][ C1] Code: 3097 ff88 80e7 a900 82e3 e404 3097 ff88 80e7 f8e0 (9002) 3097 [10917.210492][ C1] ---[ end trace 0000000000000000 ]--- [10917.212445][ C1] Kernel panic - not syncing: Fatal exception in interrupt [10917.214355][ C1] SMP: stopping secondary CPUs [10917.217491][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:51:39 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff8053fc62 mhartid 0000000000000000 mstatus 0000000a000000a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f4b509 hedeleg 0000000000000000 mtvec 00000000800004f8 stvec ffffffff8663b0b0 vstvec 0000000000000000 mepc ffffffff8007eaa6 sepc ffffffff8017a2a0 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080049000 sscratch 0000000000000000 satp 909e2000000abdde x0/zero 0000000000000000 x1/ra ffffffff83554e90 x2/sp ffff8f80000078d0 x3/gp ffffffff8a6d9c00 x4/tp ffffaf801bb09ac0 x5/t0 ffffaf8020a26e60 x6/t1 fffff5ef0378fc48 x7/t2 ffffffff9191b3a0 x8/s0 ffff8f8000007b90 x9/s1 0000000000000000 x10/a0 ffffaf801a449200 x11/a1 0000000000000040 x12/a2 0000080800000000 x13/a3 ffffffff81f43b64 x14/a4 1ffff5f00348924c x15/a5 ffffaf801bb09ac0 x16/a6 0000080800000000 x17/a7 ffffaf801bc7e247 x18/s2 0000000000000000 x19/s3 0000000000000000 x20/s4 ffffaf801bc7e3a8 x21/s5 0000000000000040 x22/s6 ffffaf801a449200 x23/s7 0000000000000001 x24/s8 ffffaf801bc7e238 x25/s9 ffffaf801bc7e008 x26/s10 0000000000000001 x27/s11 0000000000000000 x28/t3 ffffffff883cb880 x29/t4 fffff5ef0378fc48 x30/t5 fffff5ef0378fc49 x31/t6 ffffaf801d4f9cb4 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8207b098 mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f4b509 hedeleg 0000000000000000 mtvec 00000000800004f8 stvec ffffffff8663b0b0 vstvec 0000000000000000 mepc ffffffff80095c36 sepc ffffffff80cbd16e vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000003 vscause 0000000000000000 mtval 0000000000000000 stval ffffffff80cbd16e htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080047000 sscratch 0000000000000000 satp 909e2000000abdde x0/zero 0000000000000000 x1/ra ffffffff8207b068 x2/sp ffff8f8007756480 x3/gp ffffffff8a6d9c00 x4/tp ffffaf801b9e3580 x5/t0 6c00000000000000 x6/t1 fffff1ef00eeac7c x7/t2 6c2073656c75646f x8/s0 ffff8f80077564c0 x9/s1 0000000000000000 x10/a0 ffffffff91aa0e28 x11/a1 000000000000001f x12/a2 0000000000000000 x13/a3 ffffffff8207b068 x14/a4 1ffffffff23541c5 x15/a5 ffff8f800006b000 x16/a6 000000001f000100 x17/a7 0000000000000003 x18/s2 ffffffff91aa0de0 x19/s3 000000000000004d x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 0000000000000010 x23/s7 dfffffff00000000 x24/s8 ffff8f80077568a0 x25/s9 ffffffff8207b004 x26/s10 0000000000000000 x27/s11 ffffaf801a5d802a x28/t3 ffffffff88371d68 x29/t4 fffff1ef00eeac7c x30/t5 fffff1ef00eeac7d x31/t6 ffffaf801a5d8017 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000