last executing test programs: 29m18.233853137s ago: executing program 0 (id=24): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000240), &(0x7f00000004c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29m6.159004432s ago: executing program 0 (id=27): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe}) io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 28m44.926120869s ago: executing program 0 (id=29): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1a, 0x0, 0xfffffff5, 0x400, 0x300, 0xffffffffffffffff, 0x8f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) 28m34.376958912s ago: executing program 0 (id=31): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000240), &(0x7f00000004c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28m20.71386149s ago: executing program 0 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000f4ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 28m11.256934585s ago: executing program 0 (id=34): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) syz_open_dev$loop(0x0, 0x6b, 0x901) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) ptrace$setregs(0xd, r0, 0x9, &(0x7f0000000540)="16a73dd58a1b7175bd069f450f318762cbf74a623044a5f9bf832509e090a3e2a6959165bec066ac8be912269565e74b4f0baa0500eb03ac2ef5299387a37d846301b41730e5acf08d3e4c84aa6ac09c8d5728cc065d1d926451b1e51535e045d341bc01439aa94f36911df383b3655f1392ff87d4fbec15d86177b85166fae9611ca642d1876288f1fab962727470776d21d49c5908396893d42adc9bd52dbb9a14e26081dcbb92bc84354ecf5c39754b2a17f797a99df754ff00c8c7513b") socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) 27m21.631379025s ago: executing program 32 (id=34): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) syz_open_dev$loop(0x0, 0x6b, 0x901) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) ptrace$setregs(0xd, r0, 0x9, &(0x7f0000000540)="16a73dd58a1b7175bd069f450f318762cbf74a623044a5f9bf832509e090a3e2a6959165bec066ac8be912269565e74b4f0baa0500eb03ac2ef5299387a37d846301b41730e5acf08d3e4c84aa6ac09c8d5728cc065d1d926451b1e51535e045d341bc01439aa94f36911df383b3655f1392ff87d4fbec15d86177b85166fae9611ca642d1876288f1fab962727470776d21d49c5908396893d42adc9bd52dbb9a14e26081dcbb92bc84354ecf5c39754b2a17f797a99df754ff00c8c7513b") socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) 1m8.515176514s ago: executing program 2 (id=213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) 1m0.951127104s ago: executing program 1 (id=214): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 57.094350794s ago: executing program 2 (id=215): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r0, &(0x7f0000005ec0)="b9", 0x1) read$rfkill(r0, &(0x7f0000000040), 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x109000, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) 55.213721999s ago: executing program 1 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 30.233998995s ago: executing program 1 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="a80200002f000b00000000000100000002"], 0x2a8}, 0x1, 0x0, 0x0, 0x8050}, 0x8000) 29.829500738s ago: executing program 2 (id=218): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9eaa316c9c74f0b64c6c546c1d0000007ea60864160af36514001ac00800020007000200060906c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77c", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 23.402849888s ago: executing program 1 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bfca3958f2206cdc7095682c14f10ba1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b8ee8d414e757b6cce3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b5e749bf5271efd93ce76e67758fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29142a369b14607b5e48987541ed2cb5a3512a877da93174aa5bf4ee9fbf1bd0f42d221d7cbfec3feff2ef0a1d3316421ee72754aea5b5abb253295c2d87aeb468bd4f73d391c07a4831b4b0bf962e6cfa0f0445ba37524c8c062c4787f9bff922b012e833c08ff0c365c289657b88ff8aa4c26260956f6e9b640f90cacb464007c3717fd9ec6d618bd3ff950b9dc4d7f9c94205db3b47bdded6a47911088f1a1d06649c3ac08c7f6194604786d0a1fe96667fcf082caac73dda1b9c0dda7dd90c38107b8a016132b63ec21a988cc2788efc9d5f6fbfd7ddbe800a5382bbc4b2624a4b9976b2c5f4c611e88370a5dff77de5d0960a3bd91321a8e0b27a48cbc2607a4c6c406cd4ac5d5a18ba185ad620beeb77f1c6bc1697151600bd3491d5a8358ef635d50d54af5b24d11d52eb75c970ab41ee0afbd2a01d249fabacc95695efc923da1800f1439d385bbb00ac0d7c8043f4e2661ffec2eafbac5b483885d76ff5b2358986923a5fa8aad707a0aba60e4fae6dd3decf94ead2dfb52fd0be70d5d14a5f6c6a6786b0ce6a5eeeae8fb8c6ed627c348d9bf64a7aa47e02b8dd67c12141bfd5efb2b05501f57bcf3f0660dd63cb4f4912fd386647f9a9e32f5e7f00f21063f4d262bc29e8a4edd8cba7ee7fd9cf4a21cb93a9eb232acbce357044d3c99154e4ba0ed25e2ecbad23b08b2073a8a7de2c6dac3cfcab3fd33b082ddc278776963c5ad1fa244360716dc571d6e95a767ad6bf69d4c8d132155ad94b610d4a42161e7532dd5fe80556dc149d70f002ce4006bbac4549e4b48f8360e1b2353cf636ca348db1c5e8335066efe415560683c7b5eadcffe56a58093756d20609a1ea83831a430818d1e5090b2608290469eede3f81e0e4f402b63c2b54374af37aafcae614bb3936cf952f2f944f5740c4c2c629a7935eb86abb14cfcdde8b371119f1ccda5850d8c6194775b8a5f8de7000000000000a1c7e2233be2fe4254f6a9c1fc414252a4ceefd417f37b4a1507da7b4d870f3fea9757a8c24e6a72e9e3a41da13496e27952b373c776a939540527c01661ed7d0026ad4b6ee543cfac2b7f48916212dddb2eca1e2ab0861ab94a693f6b9fc9a9c2ec231588ecef2907c47fe1344eee20d3c1024ebbfbe50d6bf4543db64f8cc0d82c532d75479ad8afe72cffbd569f448d6f2f88d88b9f12ce5b56cb0731ee8e5c70598f5608726a0a5a7d57352a996722"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x0) 21.717687091s ago: executing program 2 (id=220): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 14.336615759s ago: executing program 1 (id=221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 14.336253429s ago: executing program 2 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x0) 414.268817ms ago: executing program 2 (id=223): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mremap$dontunmap(&(0x7f000018b000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000458000/0x14000)=nil) 0s ago: executing program 1 (id=224): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9eaa316c9c74f0b64c6c546c1d0000007ea60864160af36514001ac00800020007000200060906c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77c", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:50072' (ED25519) to the list of known hosts. syzkaller login: [ 584.275072][ T3209] cgroup: Unknown subsys name 'net' [ 585.032625][ T3209] cgroup: Unknown subsys name 'cpuset' [ 585.207623][ T3209] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 673.034125][ T3209] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 836.687779][ T3217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.983361][ T3217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.074253][ T3216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.497772][ T3216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.667782][ T3217] hsr_slave_0: entered promiscuous mode [ 859.829236][ T3217] hsr_slave_1: entered promiscuous mode [ 864.757984][ T3216] hsr_slave_0: entered promiscuous mode [ 864.838510][ T3216] hsr_slave_1: entered promiscuous mode [ 864.907189][ T3216] debugfs: 'hsr0' already exists in 'hsr' [ 864.913156][ T3216] Cannot create hsr debugfs directory [ 880.067766][ T3217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 880.527063][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 880.705269][ T3217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 881.190719][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 881.564992][ T3217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 881.875517][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 882.406896][ T3217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 882.629366][ T3217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 887.858689][ T3216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 888.285666][ T3216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.535893][ T3216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 888.943880][ T3216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.100531][ T3216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 889.357634][ T3216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.654067][ T3216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 889.968607][ T3216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 907.510035][ T3217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.780703][ T3216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.892364][ T3217] veth0_vlan: entered promiscuous mode [ 1017.174477][ T3217] veth1_vlan: entered promiscuous mode [ 1021.988497][ T3217] veth0_macvtap: entered promiscuous mode [ 1022.785866][ T3217] veth1_macvtap: entered promiscuous mode [ 1027.820689][ T3216] veth0_vlan: entered promiscuous mode [ 1029.004746][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.086688][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.209956][ T3216] veth1_vlan: entered promiscuous mode [ 1029.799380][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.329026][ T3521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.577396][ T3216] veth0_macvtap: entered promiscuous mode [ 1035.845801][ T3216] veth1_macvtap: entered promiscuous mode [ 1039.238677][ T3217] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1040.927605][ T54] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.023125][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.193872][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.336779][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.795712][ T3850] tc_dump_action: action bad kind [ 1115.883821][ T3861] netlink: 'syz.0.9': attribute type 2 has an invalid length. [ 1115.892788][ T3861] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9'. [ 1123.949163][ T31] audit: type=1326 audit(1122.710:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3862 comm="syz.1.10" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1124.099489][ T31] audit: type=1326 audit(1122.800:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3862 comm="syz.1.10" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1125.180269][ T31] audit: type=1326 audit(1123.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3862 comm="syz.1.10" exe="/syz-executor" sig=0 arch=c00000f3 syscall=212 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1125.199496][ T31] audit: type=1326 audit(1123.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3862 comm="syz.1.10" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1125.254417][ T31] audit: type=1326 audit(1123.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3862 comm="syz.1.10" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1133.850645][ T31] audit: type=1326 audit(1132.620:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3866 comm="syz.0.12" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9e7341ea code=0x0 [ 1175.812230][ T31] audit: type=1326 audit(1174.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.1.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1175.829462][ T31] audit: type=1326 audit(1174.610:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.1.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1176.198007][ T31] audit: type=1326 audit(1174.980:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.1.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1176.240506][ T31] audit: type=1326 audit(1174.990:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.1.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=56 compat=0 ip=0x7fff82f1e7cc code=0x7ffc0000 [ 1176.268857][ T31] audit: type=1326 audit(1175.000:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.1.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1176.349455][ T31] audit: type=1326 audit(1175.120:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.1.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=56 compat=0 ip=0x7fff82f1e7cc code=0x7ffc0000 [ 1176.437589][ T31] audit: type=1326 audit(1175.210:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.1.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1176.525988][ T31] audit: type=1326 audit(1175.260:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.1.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1176.579792][ T31] audit: type=1326 audit(1175.350:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.1.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1176.613656][ T31] audit: type=1326 audit(1175.370:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3879 comm="syz.1.16" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff82f341ea code=0x7ffc0000 [ 1197.456318][ T3889] capability: warning: `syz.1.20' uses 32-bit capabilities (legacy support in use) [ 1283.667352][ T3930] futex_wake_op: syz.0.34 tries to shift op by 144; fix this program [ 1403.245883][ T3977] xt_hashlimit: size too large, truncated to 1048576 [ 1464.299961][ T3220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.775064][ T3220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.455348][ T3220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.538700][ T3220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.540025][ T3949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.058189][ T3949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.313065][ T3220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1507.897310][ T3220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.146343][ T3220] bond0 (unregistering): Released all slaves [ 1511.493445][ T3220] hsr_slave_0: left promiscuous mode [ 1511.558570][ T3220] hsr_slave_1: left promiscuous mode [ 1512.826687][ T3220] veth1_macvtap: left promiscuous mode [ 1512.829031][ T3220] veth0_macvtap: left promiscuous mode [ 1512.885692][ T3220] veth1_vlan: left promiscuous mode [ 1512.925941][ T3220] veth0_vlan: left promiscuous mode [ 1550.145833][ T3837] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1550.753823][ T3837] usb 2-1: Using ep0 maxpacket: 16 [ 1550.953275][ T3837] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 1551.379025][ T3837] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 1551.395238][ T3837] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.415565][ T3837] usb 2-1: config 0 has no interface number 0 [ 1551.456660][ T3837] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 1551.495642][ T3837] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1551.509889][ T3837] usb 2-1: config 0 interface 98 has no altsetting 0 [ 1552.993459][ T3837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.999904][ T3837] usb 2-1: Product: syz [ 1553.009845][ T3837] usb 2-1: Manufacturer: syz [ 1553.018204][ T3837] usb 2-1: SerialNumber: syz [ 1554.252881][ T3837] usb 2-1: config 0 descriptor?? [ 1554.575394][ T4148] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1554.688358][ T4148] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1560.625652][ T3837] asix 2-1:0.98: probe with driver asix failed with error -110 [ 1564.317210][ T3837] usb 2-1: USB disconnect, device number 2 [ 1595.717547][ T3949] hsr_slave_0: entered promiscuous mode [ 1595.943525][ T3949] hsr_slave_1: entered promiscuous mode [ 1596.125344][ T3949] debugfs: 'hsr0' already exists in 'hsr' [ 1596.149115][ T3949] Cannot create hsr debugfs directory [ 1602.279707][ T3072] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1627.425769][ T3949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1627.920373][ T3949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1628.016050][ T3949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1628.678340][ T3949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1628.977120][ T3949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1629.574598][ T3949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1629.775337][ T3949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1630.606823][ T3949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1648.538662][ T3072] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1675.785400][ T3949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.088367][ T3072] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1759.820677][ T3072] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1833.303127][ T3837] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 1833.340788][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1833.726338][ T3837] usb 2-1: device descriptor read/64, error -32 [ 1834.214730][ T3837] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 1834.245670][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1834.574587][ T3837] usb 2-1: device descriptor read/64, error -32 [ 1834.815167][ T3837] usb usb2-port1: attempt power cycle [ 1835.716347][ T3837] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 1839.819475][ T3837] usb 2-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c [ 1845.243736][ T3837] usb 2-1: unable to read config index 0 descriptor/start: -110 [ 1845.285762][ T3837] usb 2-1: can't read configurations, error -110 [ 1845.625990][ T3837] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 1845.727777][ T3837] usb 2-1: device descriptor read/8, error -32 [ 1845.918493][ T3837] usb usb2-port1: unable to enumerate USB device [ 1865.420377][ T3949] veth0_vlan: entered promiscuous mode [ 1867.820154][ T3949] veth1_vlan: entered promiscuous mode [ 1876.318135][ T3949] veth0_macvtap: entered promiscuous mode [ 1878.484660][ T3949] veth1_macvtap: entered promiscuous mode [ 1884.777177][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.496754][ T3948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.723836][ T3221] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.294437][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.217120][ T4439] input: syz1 as /devices/virtual/input/input1 [ 2032.254215][ T4487] Zero length message leads to an empty skb [ 2054.097892][ T4493] input: syz1 as /devices/virtual/input/input2 [ 2088.057041][ T4510] netlink: 71 bytes leftover after parsing attributes in process `syz.1.86'. [ 2138.696270][ T4535] syz.1.96 uses obsolete (PF_INET,SOCK_PACKET) [ 2139.508261][ T4533] xt_hashlimit: size too large, truncated to 1048576 [ 2164.956744][ T4542] input: syz1 as /devices/virtual/input/input3 [ 2165.225216][ T3248] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 2165.253771][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 2165.520399][ T3248] usb 2-1: device descriptor read/64, error -32 [ 2165.919584][ T3248] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 2166.243992][ T3248] usb 2-1: device descriptor read/64, error -71 [ 2166.397238][ T3248] usb usb2-port1: attempt power cycle [ 2167.014878][ T3248] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 2167.223070][ T3248] usb 2-1: device descriptor read/8, error -71 [ 2167.589254][ T3248] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 2168.803375][ T3248] usb 2-1: device descriptor read/8, error -71 [ 2168.972179][ T3248] usb usb2-port1: unable to enumerate USB device [ 2181.120364][ T4559] xt_hashlimit: size too large, truncated to 1048576 [ 2200.555926][ T4566] FAULT_INJECTION: forcing a failure. [ 2200.555926][ T4566] name failslab, interval 1, probability 0, space 0, times 1 [ 2200.560756][ T4566] CPU: 1 UID: 0 PID: 4566 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT [ 2200.561576][ T4566] Hardware name: riscv-virtio,qemu (DT) [ 2200.562235][ T4566] Call Trace: [ 2200.562811][ T4566] [] dump_backtrace+0x2e/0x3c [ 2200.565395][ T4566] [] show_stack+0x30/0x3c [ 2200.566022][ T4566] [] dump_stack_lvl+0x114/0x1aa [ 2200.566654][ T4566] [] dump_stack+0x1c/0x24 [ 2200.567214][ T4566] [] should_fail_ex+0x5ac/0x5b6 [ 2200.567864][ T4566] [] should_failslab+0xb2/0xfa [ 2200.568743][ T4566] [] __kmalloc_cache_noprof+0x366/0x676 [ 2200.569560][ T4566] [] alloc_pipe_info+0x106/0x52a [ 2200.570249][ T4566] [] create_pipe_files+0x8a/0x822 [ 2200.570986][ T4566] [] do_pipe2+0xbe/0x1da [ 2200.571650][ T4566] [] __riscv_sys_pipe2+0x52/0x72 [ 2200.572341][ T4566] [] syscall_handler+0x92/0x114 [ 2200.573109][ T4566] [] do_trap_ecall_u+0x4ca/0x658 [ 2200.573928][ T4566] [] handle_exception+0x168/0x174 [ 2211.835444][ T4571] netlink: 'syz.2.105': attribute type 2 has an invalid length. [ 2211.837810][ T4571] netlink: 132 bytes leftover after parsing attributes in process `syz.2.105'. [ 2238.288977][ T4584] netlink: 'syz.2.111': attribute type 2 has an invalid length. [ 2238.290601][ T4584] netlink: 132 bytes leftover after parsing attributes in process `syz.2.111'. [ 2250.976697][ T4589] input: syz1 as /devices/virtual/input/input4 [ 2252.426235][ T4589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2252.744667][ T4589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2278.838688][ T4604] netlink: 'syz.1.117': attribute type 2 has an invalid length. [ 2278.840249][ T4604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.117'. [ 2342.614759][ T4634] input: syz1 as /devices/virtual/input/input5 [ 2344.509179][ T24] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 2346.672902][ T24] usb 2-1: device descriptor read/64, error -71 [ 2347.138242][ T24] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 2347.434039][ T24] usb 2-1: device descriptor read/64, error -71 [ 2347.565533][ T24] usb usb2-port1: attempt power cycle [ 2348.195021][ T24] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 2348.304086][ T24] usb 2-1: device descriptor read/8, error -71 [ 2348.664645][ T24] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 2348.879636][ T24] usb 2-1: device descriptor read/8, error -71 [ 2349.069184][ T24] usb usb2-port1: unable to enumerate USB device [ 2386.299789][ T4661] input: syz1 as /devices/virtual/input/input6 [ 2388.010470][ T24] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 2388.382892][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c [ 2389.013306][ T24] usb 2-1: config 8 has an invalid descriptor of length 233, skipping remainder of the config [ 2389.016369][ T24] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 2389.883568][ T24] usb 2-1: string descriptor 0 read error: -22 [ 2389.896087][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.962138][ T24] usb 2-1: USB disconnect, device number 15 [ 2432.055853][ T4694] xt_hashlimit: size too large, truncated to 1048576 [ 2478.773664][ T4711] xt_hashlimit: size too large, truncated to 1048576 [ 2493.515613][ T4716] netlink: 'syz.1.154': attribute type 2 has an invalid length. [ 2493.540646][ T4716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.154'. [ 2526.389899][ T4731] netlink: 'syz.1.159': attribute type 2 has an invalid length. [ 2526.410109][ T4731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.159'. [ 2526.556719][ T4730] xt_hashlimit: size too large, truncated to 1048576 [ 2574.496145][ T4746] netlink: 'syz.1.165': attribute type 2 has an invalid length. [ 2574.498264][ T4746] netlink: 132 bytes leftover after parsing attributes in process `syz.1.165'. [ 2580.790525][ T4749] xt_hashlimit: size too large, truncated to 1048576 [ 2610.217385][ T4763] netlink: 'syz.1.171': attribute type 2 has an invalid length. [ 2610.223430][ T4763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.171'. [ 2651.079973][ T4778] netlink: 72 bytes leftover after parsing attributes in process `syz.1.179'. [ 2787.667247][ T4845] netlink: 'syz.1.198': attribute type 10 has an invalid length. [ 2838.230141][ T4809] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2838.908880][ T4809] usb 2-1: Using ep0 maxpacket: 32 [ 2839.030696][ T4809] usb 2-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00 [ 2839.425006][ T4809] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2839.446221][ T4809] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1584, setting to 1024 [ 2839.449900][ T4809] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2839.480800][ T4809] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2839.507170][ T4809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2839.906497][ T4809] usb 2-1: config 0 descriptor?? [ 2840.176440][ T4866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2846.100281][ T4809] usbhid 2-1:0.0: can't add hid device: -32 [ 2846.138305][ T4809] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 2851.449766][ T4809] usb 2-1: USB disconnect, device number 16 [ 2873.078544][ T4888] FAULT_INJECTION: forcing a failure. [ 2873.078544][ T4888] name failslab, interval 1, probability 0, space 0, times 0 [ 2873.084609][ T4888] CPU: 0 UID: 0 PID: 4888 Comm: syz.1.209 Not tainted syzkaller #0 PREEMPT [ 2873.085117][ T4888] Hardware name: riscv-virtio,qemu (DT) [ 2873.085278][ T4888] Call Trace: [ 2873.085410][ T4888] [] dump_backtrace+0x2e/0x3c [ 2873.085990][ T4888] [] show_stack+0x30/0x3c [ 2873.086345][ T4888] [] dump_stack_lvl+0x114/0x1aa [ 2873.086868][ T4888] [] dump_stack+0x1c/0x24 [ 2873.087378][ T4888] [] should_fail_ex+0x5ac/0x5b6 [ 2873.087987][ T4888] [] should_failslab+0xb2/0xfa [ 2873.088642][ T4888] [] kmem_cache_alloc_lru_noprof+0x370/0x67a [ 2873.089134][ T4888] [] alloc_inode+0x158/0x204 [ 2873.089582][ T4888] [] alloc_anon_inode+0x70/0x3e2 [ 2873.089990][ T4888] [] anon_inode_make_secure_inode+0x2c/0x126 [ 2873.090458][ T4888] [] __riscv_sys_memfd_secret+0x108/0x3a0 [ 2873.090946][ T4888] [] syscall_handler+0x92/0x114 [ 2873.091334][ T4888] [] do_trap_ecall_u+0x4ca/0x658 [ 2873.091766][ T4888] [] handle_exception+0x168/0x174 [ 2929.714754][ T4914] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 2977.927422][ C0] ------------[ cut here ]------------ [ 2977.927841][ C0] kernel BUG at [] mm/page_table_check.c:118! [ 2977.929108][ C0] Kernel BUG [#1] [ 2977.929432][ C0] Modules linked in: [ 2977.929938][ C0] CPU: 0 UID: 0 PID: 4935 Comm: syz.2.223 Not tainted syzkaller #0 PREEMPT [ 2977.930443][ C0] Hardware name: riscv-virtio,qemu (DT) [ 2977.930709][ C0] epc : page_table_check_set+0x9ca/0xc72 [ 2977.931448][ C0] ra : page_table_check_set+0x9ca/0xc72 [ 2977.932094][ C0] epc : ffffffff80ca1b5e ra : ffffffff80ca1b5e sp : ffff8f8003586fe0 [ 2977.932442][ C0] gp : ffffffff8a4c0280 tp : ffffaf801bc2cf80 t0 : ffffaf8019431590 [ 2977.932780][ C0] t1 : fffff5ef027a8009 t2 : ffffffff80ab9300 s0 : ffff8f8003587060 [ 2977.933120][ C0] s1 : 0000000000000001 a0 : 0000000000000001 a1 : 0000000000000000 [ 2977.933438][ C0] a2 : 0000000000080000 a3 : ffffffff80ca1b5e a4 : ffff8f800b181a60 [ 2977.933765][ C0] a5 : 00000000000b3a60 a6 : 0000000000000003 a7 : ffffaf8013d4004b [ 2977.934085][ C0] s2 : 00000000000b4000 s3 : 0000000000000000 s4 : ffffaf8013d40000 [ 2977.934456][ C0] s5 : 0000000000000200 s6 : 0000000000000001 s7 : dfffffff00000000 [ 2977.934785][ C0] s8 : ffffffff88c66940 s9 : 0000000000007fff s10: 0000000000000000 [ 2977.935107][ C0] s11: ffffffff8a5dfd20 t3 : 0000000000000001 t4 : fffff5ef027a8009 [ 2977.935434][ C0] t5 : fffff5ef027a800a t6 : 0000000000000002 ssp : 0000000000000000 [ 2977.935768][ C0] status: 0000000200000120 badaddr: ffffffff80ca1b5e cause: 0000000000000003 [ 2977.936178][ C0] [] page_table_check_set+0x9ca/0xc72 [ 2977.936991][ C0] [] __page_table_check_ptes_set+0x23c/0x4a4 [ 2977.937684][ C0] [] split_huge_pmd_locked+0x1eb2/0x23f0 [ 2977.938306][ C0] [] __split_huge_pmd+0x2aa/0x3d4 [ 2977.939099][ C0] [] move_page_tables+0x9f6/0x3cc4 [ 2977.939656][ C0] [] copy_vma_and_data+0x236/0x692 [ 2977.940201][ C0] [] move_vma+0x500/0x16d6 [ 2977.940737][ C0] [] mremap_to+0x21c/0x474 [ 2977.941244][ C0] [] __do_sys_mremap+0x6f8/0x16ca [ 2977.941754][ C0] [] __riscv_sys_mremap+0xa0/0x124 [ 2977.942245][ C0] [] syscall_handler+0x92/0x114 [ 2977.942865][ C0] [] do_trap_ecall_u+0x4ca/0x658 [ 2977.943490][ C0] [] handle_exception+0x168/0x174 [ 2977.944954][ C0] Code: 3097 ff89 80e7 d400 82e3 e404 3097 ff89 80e7 23e0 (9002) 3097 [ 2977.946584][ C0] ---[ end trace 0000000000000000 ]--- [ 2977.948325][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 2977.949483][ C0] SMP: stopping secondary CPUs VM DIAGNOSIS: 10:39:05 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff8037bca0 mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000220 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f4b509 hedeleg 0000000000000000 mtvec 00000000800004f8 stvec ffffffff865c0ba0 vstvec 0000000000000000 mepc ffffffff80094c9e sepc ffffffff80ca1b5e vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000003 vscause 0000000000000000 mtval 0000000000000000 stval ffffffff80ca1b5e htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080049000 sscratch 0000000000000000 satp 903690000009e51c x0/zero 0000000000000000 x1/ra ffffffff80322112 x2/sp ffff8f8003586950 x3/gp ffffffff8a4c0280 x4/tp ffffaf801bc2cf80 x5/t0 ffff8f8003586a54 x6/t1 fffffffef1498964 x7/t2 676170203a206370 x8/s0 ffff8f80035869a0 x9/s1 fffff1ef006b0d74 x10/a0 ffffffff888ffbc0 x11/a1 0000000000000000 x12/a2 0000000000000002 x13/a3 ffffffff8031c8e0 x14/a4 1ffffffff111ff78 x15/a5 0000000000000000 x16/a6 000000001f000100 x17/a7 0000000000000003 x18/s2 ffffffff888ffbc0 x19/s3 ffff8f8003586ba0 x20/s4 ffffffff8686a940 x21/s5 0000000200000120 x22/s6 ffff8f8003586bc0 x23/s7 dfffffff00000000 x24/s8 ffffffff88c66940 x25/s9 0000000000007fff x26/s10 1ffff1f0006b0d74 x27/s11 ffff8f8003586b90 x28/t3 ffffffff80322030 x29/t4 fffffffef1498964 x30/t5 fffffffef1498965 x31/t6 ffffffff916941f7 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8008b3e0 mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f4b509 hedeleg 0000000000000000 mtvec 00000000800004f8 stvec ffffffff865c0ba0 vstvec 0000000000000000 mepc ffffffff8025d67c sepc ffffffff865a49de vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000001 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080047000 sscratch 0000000000000000 satp 903690000009e51c x0/zero 0000000000000000 x1/ra ffffffff8008b3dc x2/sp ffff8f8000017e10 x3/gp ffffffff8a4c0280 x4/tp ffffaf8015724f80 x5/t0 ffff8f8000010000 x6/t1 fffffffef14ba920 x7/t2 ffffaf8072c3d7e8 x8/s0 ffff8f8000017e40 x9/s1 ffffffff86a0cdc8 x10/a0 0000000000000001 x11/a1 0000000000000004 x12/a2 0000000000000001 x13/a3 ffffffff8008b3dc x14/a4 0000000000000000 x15/a5 ffffaf8015724f80 x16/a6 fffffffef14ba921 x17/a7 0000000000000003 x18/s2 0000000000000001 x19/s3 ffffffff86869000 x20/s4 ffffffff8008b126 x21/s5 ffffaf8012118800 x22/s6 0000000000000000 x23/s7 0000000000000001 x24/s8 0000000000000007 x25/s9 ffffffff91898ba8 x26/s10 ffffffff86a718e0 x27/s11 0000000000000004 x28/t3 ffffffff880d7100 x29/t4 fffffffef14ba920 x30/t5 fffffffef14ba921 x31/t6 ffffffff880d46b0 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000