last executing test programs: 32.342422691s ago: executing program 1 (id=1233): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0xffdffffc, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 30.431049083s ago: executing program 0 (id=1234): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="11d6cb557c8496a2fe7a819cb4f43f304ff5104eaf63976b35c107f8a2f912ffaf9171c6bb0967d84206642ef84e6e3830c5f9e350d487f9f592cf76506c65384fac04d6e522a4ace35f0c06028c8af370881ea01b38760205cfb9d3b5423ec691b759204506947a0306b36ede417b03fbdeecbf14b24755654c41bbe70936c6fa14c416c53ef2471a65dd7203d59e45c053edc319a09c81af23bb96f9da17efc6535b5ca6595efdbecfa29563fdf35eaae283b8f308c47714443d1a652075d72e3e19ebf311f5a126c52b7669", 0xcd}], 0x1}, 0x4000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={0x0, r0}, 0x18) 27.174074813s ago: executing program 0 (id=1235): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r1 = syz_io_uring_setup(0xf02, &(0x7f0000000000)={0x0, 0x8dac, 0x2, 0x3, 0x40058}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 24.779509307s ago: executing program 1 (id=1236): socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4010) 20.303339115s ago: executing program 0 (id=1237): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x7, 0x100, @void}}}}}}}, 0x0) 14.523905711s ago: executing program 1 (id=1238): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu +pids'], 0xb) 12.97368347s ago: executing program 0 (id=1239): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 9.6817059s ago: executing program 1 (id=1240): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='never', 0x5) write(r0, &(0x7f0000000280)='always', 0x6) 5.820403214s ago: executing program 0 (id=1241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x44, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0xb, 0xb4, [@remote, @multicast2]}, @timestamp_prespec={0x44, 0x4, 0x78, 0x3, 0x9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x1}]}}}}}}}, 0x0) 5.269505707s ago: executing program 1 (id=1242): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) 1.143390763s ago: executing program 0 (id=1243): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') 0s ago: executing program 1 (id=1244): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x49845) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x3cae, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:25398' (ED25519) to the list of known hosts. syzkaller login: [ 518.596149][ T3210] cgroup: Unknown subsys name 'net' [ 519.434973][ T3210] cgroup: Unknown subsys name 'cpuset' [ 519.667090][ T3210] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 610.636258][ T3210] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 787.133853][ T3220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.298016][ T3220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.586124][ T3223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.970712][ T3223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.628711][ T3223] hsr_slave_0: entered promiscuous mode [ 805.667653][ T3223] hsr_slave_1: entered promiscuous mode [ 806.654919][ T3220] hsr_slave_0: entered promiscuous mode [ 806.746296][ T3220] hsr_slave_1: entered promiscuous mode [ 806.822775][ T3220] debugfs: 'hsr0' already exists in 'hsr' [ 806.898351][ T3220] Cannot create hsr debugfs directory [ 817.359574][ T3223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 817.690583][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.728863][ T3223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 817.836989][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.905811][ T3223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 817.994770][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.040788][ T3223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 818.228060][ T3223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 821.477864][ T3220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 821.809585][ T3220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.917313][ T3220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 822.666400][ T3220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.865454][ T3220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 823.726300][ T3220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 823.855202][ T3220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 823.996062][ T3220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 835.516107][ T3223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.855124][ T3220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.063557][ T3223] veth0_vlan: entered promiscuous mode [ 898.627529][ T3223] veth1_vlan: entered promiscuous mode [ 903.863410][ T3220] veth0_vlan: entered promiscuous mode [ 904.054407][ T3223] veth0_macvtap: entered promiscuous mode [ 904.636725][ T3223] veth1_macvtap: entered promiscuous mode [ 905.374406][ T3220] veth1_vlan: entered promiscuous mode [ 910.403852][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.498503][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.618334][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.803199][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.094863][ T3220] veth0_macvtap: entered promiscuous mode [ 915.048032][ T3220] veth1_macvtap: entered promiscuous mode [ 920.586372][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.807246][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.808067][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.830420][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.890884][ T3223] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 950.948967][ T3848] ip_tables: iptables: counters copy to user failed while replacing table [ 952.268541][ T3848] ip_tables: iptables: counters copy to user failed while replacing table [ 1009.733807][ T3879] input: syz0 as /devices/virtual/input/input0 [ 1032.889868][ T3901] input: syz0 as /devices/virtual/input/input1 [ 1052.848829][ T3913] Zero length message leads to an empty skb [ 1056.360414][ T3915] process 'syz.1.28' launched './file1' with NULL argv: empty string added [ 1069.502476][ T3922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30'. [ 1069.607841][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 1069.609772][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 1076.647596][ T3926] loop1: detected capacity change from 0 to 8 [ 1088.985655][ T3939] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1204.098040][ T3997] Console: switching to colour dummy device 80x25 [ 1210.334389][ T3998] block nbd0: shutting down sockets [ 1222.539311][ T4007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 1314.200719][ T31] audit: type=1400 audit(1313.090:2): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=4063 comm="syz.1.89" name="/" offset=64 [ 1344.183976][ T4079] input: syz1 as /devices/virtual/input/input3 [ 1358.428998][ T31] audit: type=1326 audit(1357.310:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4090 comm="syz.1.100" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9273427a code=0x7fc00000 [ 1368.396044][ T4103] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1368.436850][ T3150] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1427.109421][ T4143] netlink: 332 bytes leftover after parsing attributes in process `syz.0.122'. [ 1427.126162][ T4143] netlink: 196 bytes leftover after parsing attributes in process `syz.0.122'. [ 1499.410740][ T820] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1504.385275][ T820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1504.559157][ T820] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 1504.744463][ T820] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1504.746891][ T820] usb 2-1: can't read configurations, error -71 [ 1517.432324][ T4201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 1517.644252][ T4201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 1588.234880][ T4249] capability: warning: `syz.0.163' uses deprecated v2 capabilities in a way that may be insecure [ 1605.868977][ T4263] netlink: 'syz.0.169': attribute type 11 has an invalid length. [ 1605.869575][ T4263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.169'. [ 1605.878092][ T4263] netlink: 'syz.0.169': attribute type 11 has an invalid length. [ 1605.878519][ T4263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.169'. [ 1625.589056][ T4285] input: syz1 as /devices/virtual/input/input4 [ 1653.600036][ T4309] dyndbg: expected <4096 bytes into control [ 1665.526017][ T4321] input: syz0 as /devices/virtual/input/input5 [ 1667.876670][ T4327] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1668.096516][ T4327] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1668.098192][ T4327] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1668.099618][ T4327] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1668.103128][ T4327] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1668.105187][ T4327] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1668.106945][ T4327] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1668.108531][ T4327] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1668.110233][ T4327] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1668.112328][ T4327] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1724.604520][ T4371] syz_tun: entered allmulticast mode [ 1724.656738][ T4371] syz_tun: left allmulticast mode [ 1744.090524][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 1846.177981][ T4449] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1846.439865][ T4451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.243'. [ 1846.440511][ T4451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'. [ 1896.484204][ T4497] vxcan1: tx address claim with dest, not broadcast [ 1899.362507][ T4501] binder: 4500:4501 ioctl 4018620d 0 returned -22 [ 1904.362919][ T4505] netlink: 564 bytes leftover after parsing attributes in process `syz.1.268'. [ 1904.366135][ T4505] netlink: 564 bytes leftover after parsing attributes in process `syz.1.268'. [ 1911.807992][ T4511] netlink: 'syz.0.271': attribute type 8 has an invalid length. [ 1933.699335][ T4527] netlink: 422 bytes leftover after parsing attributes in process `syz.0.279'. [ 1971.954981][ T4556] bonding: unable to delete non-existent œ [ 2005.546820][ T4581] syz.1.302 uses obsolete (PF_INET,SOCK_PACKET) [ 2044.640097][ T4605] bonding: no command found in bonding_masters - use +ifname or -ifname [ 2046.815655][ T4609] syz_tun: entered allmulticast mode [ 2047.188480][ T4608] syz_tun: left allmulticast mode [ 2135.922883][ T4678] veth1_macvtap: left promiscuous mode [ 2135.925186][ T4678] macsec0: entered promiscuous mode [ 2136.796460][ T4678] veth1_macvtap: entered promiscuous mode [ 2136.816732][ T4678] macsec0: left promiscuous mode [ 2229.945881][ T4739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.364'. [ 2230.972560][ T4740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.364'. [ 2314.660796][ T4794] netlink: 'syz.0.386': attribute type 4 has an invalid length. [ 2319.404768][ T4800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 2330.530603][ T4809] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.392'. [ 2342.708901][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 2342.767108][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 2391.033582][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 2391.641748][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 2400.090579][ T4867] veth1_macvtap: left promiscuous mode [ 2400.109165][ T4867] macsec0: entered promiscuous mode [ 2400.848698][ T4868] veth1_macvtap: entered promiscuous mode [ 2400.880850][ T4868] macsec0: left promiscuous mode [ 2444.969133][ T4893] input: syz1 as /devices/virtual/input/input6 [ 2512.638642][ T4957] input: syz1 as /devices/virtual/input/input7 [ 2528.390605][ T4973] ubi31: attaching mtd0 [ 2565.785439][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 2577.134542][ T5004] batadv_slave_1: entered promiscuous mode [ 2577.247867][ T5003] batadv_slave_1: left promiscuous mode [ 2641.499161][ T5048] sch_tbf: burst 1347 is lower than device lo mtu (1550) ! [ 2658.727006][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 2677.597461][ T5073] mmap: syz.1.502 (5073) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2682.295351][ T5078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'. [ 2933.507794][ T5257] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2950.179212][ T5275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 2989.123993][ T5301] netlink: 87 bytes leftover after parsing attributes in process `syz.1.598'. [ 3018.789731][ T5327] xt_hashlimit: size too large, truncated to 1048576 [ 3045.803695][ T5342] FAULT_INJECTION: forcing a failure. [ 3045.803695][ T5342] name failslab, interval 1, probability 1, space 0, times 1 [ 3045.805519][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.611 Tainted: G L syzkaller #0 PREEMPT [ 3045.806118][ T5342] Tainted: [L]=SOFTLOCKUP [ 3045.806282][ T5342] Hardware name: riscv-virtio,qemu (DT) [ 3045.806722][ T5342] Call Trace: [ 3045.807038][ T5342] [] dump_backtrace+0x2e/0x3c [ 3045.807729][ T5342] [] show_stack+0x30/0x3c [ 3045.808056][ T5342] [] dump_stack_lvl+0x114/0x1aa [ 3045.808357][ T5342] [] dump_stack+0x1c/0x24 [ 3045.808691][ T5342] [] should_fail_ex+0x5ac/0x5b6 [ 3045.809103][ T5342] [] should_failslab+0xb2/0xfa [ 3045.809510][ T5342] [] kmem_cache_alloc_noprof+0x74/0x6a2 [ 3045.809858][ T5342] [] radix_tree_node_alloc.constprop.0+0xaa/0x34c [ 3045.810306][ T5342] [] idr_get_free+0x362/0xb8a [ 3045.810714][ T5342] [] idr_alloc_u32+0x192/0x2d0 [ 3045.811112][ T5342] [] idr_alloc_cyclic+0x110/0x220 [ 3045.811499][ T5342] [] map_create+0x27e/0xb9e [ 3045.811963][ T5342] [] __sys_bpf+0x63a/0x53da [ 3045.812268][ T5342] [] __riscv_sys_bpf+0xaa/0x144 [ 3045.812619][ T5342] [] syscall_handler+0x92/0x114 [ 3045.813048][ T5342] [] do_trap_ecall_u+0x4ca/0x658 [ 3045.813423][ T5342] [] handle_exception+0x168/0x174 [ 3065.204187][ T5364] input: syz0 as /devices/virtual/input/input8 [ 3105.897329][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 3111.018304][ T5396] netpci0: tun_chr_ioctl cmd 1074025677 [ 3111.034995][ T5396] netpci0: linktype set to 6 [ 3114.557119][ T5404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 3119.103950][ T5408] FAULT_INJECTION: forcing a failure. [ 3119.103950][ T5408] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3119.104969][ T5408] CPU: 0 UID: 0 PID: 5408 Comm: syz.1.635 Tainted: G L syzkaller #0 PREEMPT [ 3119.105725][ T5408] Tainted: [L]=SOFTLOCKUP [ 3119.105946][ T5408] Hardware name: riscv-virtio,qemu (DT) [ 3119.106223][ T5408] Call Trace: [ 3119.106460][ T5408] [] dump_backtrace+0x2e/0x3c [ 3119.107310][ T5408] [] show_stack+0x30/0x3c [ 3119.107905][ T5408] [] dump_stack_lvl+0x114/0x1aa [ 3119.108482][ T5408] [] dump_stack+0x1c/0x24 [ 3119.109049][ T5408] [] should_fail_ex+0x5ac/0x5b6 [ 3119.109784][ T5408] [] should_fail+0xe/0x16 [ 3119.110494][ T5408] [] should_fail_usercopy+0x1e/0x26 [ 3119.111277][ T5408] [] strncpy_from_user+0x9a/0x9a8 [ 3119.112130][ T5408] [] __riscv_sys_memfd_create+0x1d2/0x428 [ 3119.112990][ T5408] [] syscall_handler+0x92/0x114 [ 3119.113792][ T5408] [] do_trap_ecall_u+0x4ca/0x658 [ 3119.114613][ T5408] [] handle_exception+0x168/0x174 [ 3163.610894][ T5445] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 3254.332685][ T5516] ======================================================= [ 3254.332685][ T5516] WARNING: The mand mount option has been deprecated and [ 3254.332685][ T5516] and is ignored by this kernel. Remove the mand [ 3254.332685][ T5516] option from the mount to silence this warning. [ 3254.332685][ T5516] ======================================================= [ 3284.625327][ T5532] ./file0: Can't lookup blockdev [ 3302.409443][ T5547] syzkaller1: entered promiscuous mode [ 3302.410405][ T5547] syzkaller1: entered allmulticast mode [ 3308.610103][ T5558] __vm_enough_memory: pid: 5558, comm: syz.1.688, bytes: 4278190080 not enough memory for the allocation [ 3314.010522][ T5562] FAULT_INJECTION: forcing a failure. [ 3314.010522][ T5562] name failslab, interval 1, probability 1, space 0, times 0 [ 3314.012915][ T5562] CPU: 1 UID: 0 PID: 5562 Comm: syz.1.691 Tainted: G L syzkaller #0 PREEMPT [ 3314.013547][ T5562] Tainted: [L]=SOFTLOCKUP [ 3314.013684][ T5562] Hardware name: riscv-virtio,qemu (DT) [ 3314.013828][ T5562] Call Trace: [ 3314.013979][ T5562] [] dump_backtrace+0x2e/0x3c [ 3314.014580][ T5562] [] show_stack+0x30/0x3c [ 3314.014915][ T5562] [] dump_stack_lvl+0x114/0x1aa [ 3314.015314][ T5562] [] dump_stack+0x1c/0x24 [ 3314.015620][ T5562] [] should_fail_ex+0x5ac/0x5b6 [ 3314.016043][ T5562] [] should_failslab+0xb2/0xfa [ 3314.016429][ T5562] [] __kvmalloc_node_noprof+0xde/0x994 [ 3314.016823][ T5562] [] alloc_fdtable+0x1a0/0x4f4 [ 3314.017280][ T5562] [] dup_fd+0x85a/0xbac [ 3314.017720][ T5562] [] ksys_unshare+0x78c/0x9f4 [ 3314.018131][ T5562] [] __riscv_sys_unshare+0x34/0x48 [ 3314.018515][ T5562] [] syscall_handler+0x92/0x114 [ 3314.018941][ T5562] [] do_trap_ecall_u+0x4ca/0x658 [ 3314.019329][ T5562] [] handle_exception+0x168/0x174 [ 3342.357890][ T5580] binder: 5579:5580 ioctl c0306201 200000000480 returned -14 [ 3387.419891][ T5618] input: syz0 as /devices/virtual/input/input9 [ 3400.356640][ T5629] Illegal XDP return value 5629 on prog (id 38) dev syz_tun, expect packet loss! [ 3412.190998][ T5643] FAULT_INJECTION: forcing a failure. [ 3412.190998][ T5643] name failslab, interval 1, probability 1, space 0, times 0 [ 3412.193633][ T5643] CPU: 0 UID: 0 PID: 5643 Comm: syz.1.720 Tainted: G L syzkaller #0 PREEMPT [ 3412.194151][ T5643] Tainted: [L]=SOFTLOCKUP [ 3412.194278][ T5643] Hardware name: riscv-virtio,qemu (DT) [ 3412.194422][ T5643] Call Trace: [ 3412.194558][ T5643] [] dump_backtrace+0x2e/0x3c [ 3412.195093][ T5643] [] show_stack+0x30/0x3c [ 3412.195433][ T5643] [] dump_stack_lvl+0x114/0x1aa [ 3412.195765][ T5643] [] dump_stack+0x1c/0x24 [ 3412.196122][ T5643] [] should_fail_ex+0x5ac/0x5b6 [ 3412.196523][ T5643] [] should_failslab+0xb2/0xfa [ 3412.196965][ T5643] [] __kmalloc_cache_noprof+0x342/0x6aa [ 3412.197309][ T5643] [] call_usermodehelper_setup+0xae/0x2e2 [ 3412.197792][ T5643] [] __request_module+0x3ac/0x8a2 [ 3412.198256][ T5643] [] inet6_create+0xc02/0x1150 [ 3412.198734][ T5643] [] __sock_create+0x340/0x8d4 [ 3412.199108][ T5643] [] __sys_socket+0x152/0x260 [ 3412.199477][ T5643] [] __riscv_sys_socket+0x70/0xa2 [ 3412.199859][ T5643] [] syscall_handler+0x92/0x114 [ 3412.200282][ T5643] [] do_trap_ecall_u+0x4ca/0x658 [ 3412.200676][ T5643] [] handle_exception+0x168/0x174 [ 3434.923772][ T5661] net_ratelimit: 567 callbacks suppressed [ 3434.925351][ T5661] sock: sock_set_timeout: `syz.0.727' (pid 5661) tries to set negative timeout [ 3480.677488][ T5691] could not open pipe file descriptor [ 3567.879708][ T5733] syz_tun: entered allmulticast mode [ 3568.306425][ T5732] syz_tun: left allmulticast mode [ 3693.769916][ T5796] input: syz0 as /devices/virtual/input/input10 [ 3742.613070][ T5825] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3742.614264][ T5825] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 3785.568268][ T5855] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 3842.942458][ T5889] netlink: 'syz.1.815': attribute type 4 has an invalid length. [ 3852.899749][ T5901] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.820'. [ 3869.817144][ T5913] gadgetfs: bound to dummy_udc driver [ 3886.245013][ T5930] netlink: 2 bytes leftover after parsing attributes in process `syz.0.829'. [ 3917.259267][ T5957] binder: 5955:5957 ioctl c0306201 2000000001c0 returned -14 [ 3936.985499][ T5971] GUP no longer grows the stack in syz.0.848 (5971): 200000006000-20000000a000 (200000002000) [ 3936.988726][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.0.848 Tainted: G L syzkaller #0 PREEMPT [ 3936.989241][ T5971] Tainted: [L]=SOFTLOCKUP [ 3936.989367][ T5971] Hardware name: riscv-virtio,qemu (DT) [ 3936.989539][ T5971] Call Trace: [ 3936.989684][ T5971] [] dump_backtrace+0x2e/0x3c [ 3936.990295][ T5971] [] show_stack+0x30/0x3c [ 3936.990632][ T5971] [] dump_stack_lvl+0x114/0x1aa [ 3936.991059][ T5971] [] dump_stack+0x1c/0x24 [ 3936.991448][ T5971] [] gup_vma_lookup+0x1e6/0x1fc [ 3936.991809][ T5971] [] __get_user_pages+0x174/0x209a [ 3936.992188][ T5971] [] get_user_pages_remote+0x33e/0xa78 [ 3936.992618][ T5971] [] __access_remote_vm+0x4b6/0x9c0 [ 3936.993127][ T5971] [] access_remote_vm+0x32/0x44 [ 3936.993528][ T5971] [] proc_pid_cmdline_read+0x4d2/0x81e [ 3936.994024][ T5971] [] vfs_readv+0x532/0x776 [ 3936.994623][ T5971] [] do_preadv+0x1a6/0x266 [ 3936.995181][ T5971] [] __riscv_sys_preadv+0x88/0xd4 [ 3936.995518][ T5971] [] syscall_handler+0x92/0x114 [ 3936.995933][ T5971] [] do_trap_ecall_u+0x4ca/0x658 [ 3936.996373][ T5971] [] handle_exception+0x168/0x174 [ 3961.354348][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 4014.365058][ T6030] FAULT_INJECTION: forcing a failure. [ 4014.365058][ T6030] name failslab, interval 1, probability 1, space 0, times 0 [ 4014.365680][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.0.874 Tainted: G L syzkaller #0 PREEMPT [ 4014.366183][ T6030] Tainted: [L]=SOFTLOCKUP [ 4014.366307][ T6030] Hardware name: riscv-virtio,qemu (DT) [ 4014.366452][ T6030] Call Trace: [ 4014.366584][ T6030] [] dump_backtrace+0x2e/0x3c [ 4014.367096][ T6030] [] show_stack+0x30/0x3c [ 4014.367437][ T6030] [] dump_stack_lvl+0x114/0x1aa [ 4014.367746][ T6030] [] dump_stack+0x1c/0x24 [ 4014.368085][ T6030] [] should_fail_ex+0x5ac/0x5b6 [ 4014.368474][ T6030] [] should_failslab+0xb2/0xfa [ 4014.368866][ T6030] [] kmem_cache_alloc_noprof+0x342/0x6a2 [ 4014.369295][ T6030] [] alloc_empty_file+0x86/0x20e [ 4014.369656][ T6030] [] alloc_file_pseudo+0x168/0x264 [ 4014.370031][ T6030] [] anon_inode_getfile_fmode+0xc0/0x20c [ 4014.370445][ T6030] [] __riscv_sys_fanotify_init+0x946/0xcdc [ 4014.371024][ T6030] [] syscall_handler+0x92/0x114 [ 4014.371506][ T6030] [] do_trap_ecall_u+0x4ca/0x658 [ 4014.371893][ T6030] [] handle_exception+0x168/0x174 [ 4019.326856][ T6034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.877'. [ 4043.543534][ T31] audit: type=1400 audit(2000000379.050:4): apparmor="STATUS" operation="profile_load" info="not privileged for target profile" error=-13 profile="unconfined" pid=6045 comm="syz.1.882" [ 4152.527617][ T6089] xt_hashlimit: size too large, truncated to 1048576 [ 4272.116657][ T6160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.927'. [ 4312.539666][ T6193] netlink: 'syz.1.939': attribute type 4 has an invalid length. [ 4331.904857][ T6207] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 4380.170285][ T6248] block nbd1: shutting down sockets [ 4396.120022][ T6261] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 4399.220692][ T6263] xt_hashlimit: max too large, truncated to 1048576 [ 4427.378164][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.980'. [ 4427.398122][ T6286] bond0: ARP target 170.170.170.170 is already present [ 4427.427744][ T6286] bond0: option arp_ip_target: invalid value (2863311530) [ 4479.461544][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.997'. [ 4491.966286][ T6328] input: syz1 as /devices/virtual/input/input11 [ 4539.394719][ T6375] CPU1: off [ 4553.977736][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 4553.982963][ T6384] netlink: 'syz.1.1018': attribute type 30 has an invalid length. [ 4553.997533][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 4632.489950][ T31] audit: type=1326 audit(2000000967.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.0.1049" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9bb3427a code=0x0 [ 4639.720594][ T6464] input: syz1 as /devices/virtual/input/input12 [ 4674.599790][ T6318] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 4674.604273][ T6318] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 4674.608833][ T6318] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 4674.609570][ T6318] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 4914.317663][ T6682] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1139'. [ 4919.308845][ T6688] ALSA: mixer_oss: invalid OSS volume '' [ 4943.729576][ T6710] macvlan0: entered promiscuous mode [ 4943.780509][ T6710] netlink: 'syz.0.1153': attribute type 1 has an invalid length. [ 4943.785309][ T6710] netlink: 'syz.0.1153': attribute type 2 has an invalid length. [ 4968.763058][ T6729] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1160'. [ 4973.706412][ T6733] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1162'. [ 4973.707288][ T6733] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1162'. [ 5030.947647][ T6776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1181'. [ 5038.050352][ T6775] syz.1.1180 (6775): drop_caches: 2 [ 5049.946302][ T6777] syz.1.1180 (6777): drop_caches: 2 [ 5059.577217][ T6795] syzkaller1: entered promiscuous mode [ 5059.577735][ T6795] syzkaller1: entered allmulticast mode [ 5174.866773][ T6892] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 5174.868553][ T6892] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 5209.036232][ T6919] xt_CONNSECMARK: invalid mode: 66 [ 5221.371983][ C1] ------------[ cut here ]------------ [ 5221.372260][ C1] kernel BUG at [] mm/page_table_check.c:118! [ 5221.373182][ C1] Kernel BUG [#1] [ 5221.378204][ C1] Modules linked in: [ 5221.380028][ C1] CPU: 1 UID: 0 PID: 6929 Comm: syz.0.1243 Tainted: G L syzkaller #0 PREEMPT [ 5221.382173][ C1] Tainted: [L]=SOFTLOCKUP [ 5221.383099][ C1] Hardware name: riscv-virtio,qemu (DT) [ 5221.384355][ C1] epc : page_table_check_set+0x9ca/0xc72 [ 5221.385734][ C1] ra : page_table_check_set+0x9ca/0xc72 [ 5221.387245][ C1] epc : ffffffff80cbd16e ra : ffffffff80cbd16e sp : ffff8f8002586ff0 [ 5221.388850][ C1] gp : ffffffff8a6d9c00 tp : ffffaf8014759ac0 t0 : ffff8f80025875b8 [ 5221.390576][ C1] t1 : fffff5ef0281cc09 t2 : ffffffff9191b3a8 s0 : ffff8f8002587070 [ 5221.392159][ C1] s1 : 0000000000000001 a0 : 0000000000000001 a1 : 0000000000000000 [ 5221.393700][ C1] a2 : 0000000000080000 a3 : ffffffff80cbd16e a4 : ffff8f80046c5a60 [ 5221.395387][ C1] a5 : 000000000002ba60 a6 : 0000000000000003 a7 : ffffaf80140e604b [ 5221.396892][ C1] s2 : 00000000000bae00 s3 : 0000000000000000 s4 : ffffaf80140e6000 [ 5221.398433][ C1] s5 : 0000000000000200 s6 : 0000000000000001 s7 : dfffffff00000000 [ 5221.399948][ C1] s8 : ffffffff88e6d260 s9 : 0000000000007fff s10: 0000000000000000 [ 5221.401534][ C1] s11: ffffffff8a7f9d60 t3 : 00000000000000c8 t4 : fffff5ef0281cc09 [ 5221.403135][ C1] t5 : fffff5ef0281cc0a t6 : 0000000000000002 ssp : 0000000000000000 [ 5221.404715][ C1] status: 0000000200000120 badaddr: ffffffff80cbd16e cause: 0000000000000003 [ 5221.406449][ C1] [] page_table_check_set+0x9ca/0xc72 [ 5221.408045][ C1] [] __page_table_check_ptes_set+0x23c/0x4a4 [ 5221.409632][ C1] [] split_huge_pmd_locked+0x1f00/0x241e [ 5221.411156][ C1] [] __split_huge_pmd+0x2aa/0x3d4 [ 5221.412541][ C1] [] vma_adjust_trans_huge+0x272/0x4b2 [ 5221.414088][ C1] [] __split_vma+0xbce/0x1f38 [ 5221.415515][ C1] [] vma_modify+0xc92/0x23be [ 5221.416941][ C1] [] vma_modify_flags+0x278/0x3a4 [ 5221.418392][ C1] [] mprotect_fixup+0x1c8/0xa56 [ 5221.419787][ C1] [] do_mprotect_pkey.constprop.0+0x660/0xb1c [ 5221.421462][ C1] [] __riscv_sys_mprotect+0x6c/0x112 [ 5221.423040][ C1] [] syscall_handler+0x92/0x114 [ 5221.424558][ C1] [] do_trap_ecall_u+0x4ca/0x658 [ 5221.426115][ C1] [] handle_exception+0x168/0x174 [ 5221.428176][ C1] Code: 3097 ff88 80e7 a900 82e3 e404 3097 ff88 80e7 f8e0 (9002) 3097 [ 5221.430539][ C1] ---[ end trace 0000000000000000 ]--- [ 5221.432657][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 5221.434754][ C1] SMP: stopping secondary CPUs [ 5221.437277][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:03:53 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff8053fbea mhartid 0000000000000000 mstatus 0000000a000000a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f4b509 hedeleg 0000000000000000 mtvec 00000000800004f8 stvec ffffffff8663b0b0 vstvec 0000000000000000 mepc ffffffff8660fa44 sepc ffffffff805400f4 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080049000 sscratch 0000000000000000 satp 90131000000a0eef x0/zero 0000000000000000 x1/ra ffffffff8538cdd8 x2/sp ffff8f80000071f0 x3/gp ffffffff8a6d9c00 x4/tp ffffaf801b923580 x5/t0 1ffff1f000000e64 x6/t1 fffffffff1f1f1f1 x7/t2 ffffaf805cbbd8a8 x8/s0 ffff8f8000007500 x9/s1 ffffaf801a15e940 x10/a0 0000000000000005 x11/a1 0000000000000000 x12/a2 0000000000000000 x13/a3 ffffffff8538d2ce x14/a4 0000000000000000 x15/a5 ffffaf801b923580 x16/a6 0000080800000000 x17/a7 fffffffff204f1f1 x18/s2 0000000000000008 x19/s3 0000000000000800 x20/s4 0000000000000000 x21/s5 ffffaf801bcbc158 x22/s6 ffffaf801e1f2d1c x23/s7 ffff8f80000075a0 x24/s8 dfffffff00000000 x25/s9 ffffaf801e1f2c80 x26/s10 ffff8f8000007480 x27/s11 ffffffff91bfe560 x28/t3 fffffffff2f20000 x29/t4 0000000041b58ab3 x30/t5 ffffffff8538c8b2 x31/t6 ffffffff884592e0 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8660affe mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f4b509 hedeleg 0000000000000000 mtvec 00000000800004f8 stvec ffffffff8663b0b0 vstvec 0000000000000000 mepc ffffffff80095c36 sepc ffffffff80cbd16e vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000003 vscause 0000000000000000 mtval 0000000000000000 stval ffffffff80cbd16e htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080047000 sscratch 0000000000000000 satp 906fc0000009ea99 x0/zero 0000000000000000 x1/ra ffffffff80c137aa x2/sp ffff8f8002586b70 x3/gp ffffffff8a6d9c00 x4/tp ffffaf8014759ac0 x5/t0 ffff8f80025869c4 x6/t1 fffffffef150c5e4 x7/t2 6c2073656c75646f x8/s0 ffff8f8002586ba0 x9/s1 0000000000000008 x10/a0 ffffffff8a862f20 x11/a1 ffffffff86c49d40 x12/a2 0000000000000008 x13/a3 ffffffff86c49d48 x14/a4 ffffffff8a862f20 x15/a5 fffffffef150c5e5 x16/a6 fffffffef150c5e5 x17/a7 ffffffff8a862f27 x18/s2 ffffffff86c49d40 x19/s3 ffffffff8a862f20 x20/s4 ffffffff865dc0c4 x21/s5 0000000000000008 x22/s6 0000000000000000 x23/s7 0000000000001b11 x24/s8 ffffffff88e6d260 x25/s9 0000000000007fff x26/s10 0000000000000000 x27/s11 ffffffff8a7f9d60 x28/t3 ffffffff865f682e x29/t4 fffffffef150c5e4 x30/t5 fffffffef150c5e5 x31/t6 ffffffff8a862f20 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000