last executing test programs: 1m27.977759643s ago: executing program 0 (id=407): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x1, 0x11, r0, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) 1m11.686166292s ago: executing program 1 (id=408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe40, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m1.961744653s ago: executing program 0 (id=409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x431, 0x70bd28, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x3c}}, 0x0) 1m1.961446933s ago: executing program 1 (id=410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="94120000180029"], 0x1294}}, 0x0) 49.412551752s ago: executing program 0 (id=411): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r0, r1, 0x2f, 0x2028, 0x4, @void, @void, @value=0xffffffffffffffff}, 0x20) 41.171110619s ago: executing program 1 (id=412): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) 41.170869469s ago: executing program 0 (id=413): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)='\a', 0x1, r0) keyctl$clear(0x7, r0) 20.288103912s ago: executing program 1 (id=414): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000340)=""/141}, 0x20) 15.004098211s ago: executing program 0 (id=415): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11.884198501s ago: executing program 1 (id=416): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000240)=@abs={0x1}, 0x6e, 0x0, 0x0, 0x0, 0x128}}], 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x1f, &(0x7f0000000240)=ANY=[], 0x8) 2.004780555s ago: executing program 0 (id=417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000004401050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400000000000000000000fe5c00000000000000000000000000000000000001000000006c0000000a000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000320000000a0000002001000000000000000000000000000100000000000000000300000000000000000000000000000000000000000000000000000000000000320000000a000000ff0100000000000000000000000000010000000000020000000000000000000000000000ac1414aa000000000000000000000000000000003200000000000000ac1414bb0000000000000000000000000000000004"], 0x1fc}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000400)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x19, 0x60, 0x67, 0x0, 0x3, 0x11, 0x0, @private=0xa010182, @remote, {[@end]}}, {0x4e21, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "3d1cbb3ff7c7632ad22a2d6513735e7a841d61eaf4c7acc9", "40bc309a9b47bdc43ee211295bf7ddaf621a8ed8e0d6ce2f22494a09a25f5530"}}}}}}, 0x0) 0s ago: executing program 1 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x14, &(0x7f0000000440)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:55733' (ED25519) to the list of known hosts. syzkaller login: [ 338.272054][ T3182] cgroup: Unknown subsys name 'net' [ 338.694912][ T3182] cgroup: Unknown subsys name 'cpuset' [ 338.758320][ T3182] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 393.082116][ T3182] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 503.732638][ T3187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.171829][ T3187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.273217][ T3190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.819376][ T3190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.115965][ T3190] hsr_slave_0: entered promiscuous mode [ 515.177861][ T3190] hsr_slave_1: entered promiscuous mode [ 520.410262][ T3187] hsr_slave_0: entered promiscuous mode [ 520.519936][ T3187] hsr_slave_1: entered promiscuous mode [ 520.537678][ T3187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.540602][ T3187] Cannot create hsr debugfs directory [ 522.616528][ T3190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 523.050756][ T3190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 523.302385][ T3190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 523.589788][ T3190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 527.688111][ T3187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 527.968570][ T3187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 528.162125][ T3187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 528.316101][ T3187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 534.143410][ T3190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.900839][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.023659][ T3190] veth0_vlan: entered promiscuous mode [ 581.297894][ T3190] veth1_vlan: entered promiscuous mode [ 583.712236][ T3190] veth0_macvtap: entered promiscuous mode [ 584.331196][ T3190] veth1_macvtap: entered promiscuous mode [ 585.156220][ T3187] veth0_vlan: entered promiscuous mode [ 585.852331][ T3187] veth1_vlan: entered promiscuous mode [ 587.090042][ T3190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.092435][ T3190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.093696][ T3190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.098648][ T3190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.343292][ T3187] veth0_macvtap: entered promiscuous mode [ 588.932690][ T3187] veth1_macvtap: entered promiscuous mode [ 590.995379][ T3190] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 591.190826][ T3187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.193185][ T3187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.199930][ T3187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.221602][ T3187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.059207][ T3910] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7'. [ 631.477590][ T3938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 641.248230][ T3946] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 641.846058][ T3946] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 641.848434][ T3946] netlink: 2 bytes leftover after parsing attributes in process `syz.1.22'. [ 641.852237][ T3946] nlmon0: entered promiscuous mode [ 645.092744][ T3950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 645.127351][ T3950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 645.129824][ T3950] netlink: 'syz.1.24': attribute type 18 has an invalid length. [ 653.342628][ T3961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 653.347337][ T3961] Zero length message leads to an empty skb [ 655.153085][ T3965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 661.451741][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 661.465282][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 661.468871][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.470624][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.472276][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.526176][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.528290][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.530003][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.531655][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.533270][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.555577][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.557680][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.559427][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.561122][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.562795][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.585295][ T3737] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 661.669675][ T3737] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 705.529863][ T4021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 705.561873][ T4021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 705.597334][ T4021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 708.059997][ T4023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 722.687527][ T4037] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 730.866653][ T35] audit: type=1800 audit(730.030:2): pid=4047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.69" name="memory.events" dev="tmpfs" ino=195 res=0 errno=0 [ 731.088160][ T35] audit: type=1804 audit(730.260:3): pid=4047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.69" name="/newroot/35/memory.events" dev="tmpfs" ino=195 res=1 errno=0 [ 739.390175][ T4055] netlink: 71 bytes leftover after parsing attributes in process `syz.0.72'. [ 740.046706][ T35] audit: type=1326 audit(739.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.1.73" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb906 code=0x0 [ 745.803258][ T4062] syz.1.75 uses obsolete (PF_INET,SOCK_PACKET) [ 752.727393][ T3893] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 753.373699][ T3893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.380634][ T3893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.385849][ T3893] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 753.388910][ T3893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.878581][ T3893] usb 2-1: config 0 descriptor?? [ 756.921890][ T3893] viewsonic 0003:0543:E621.0002: unknown main item tag 0x0 [ 756.955031][ T3893] viewsonic 0003:0543:E621.0002: unknown main item tag 0x0 [ 756.956424][ T3893] viewsonic 0003:0543:E621.0002: unknown main item tag 0x0 [ 756.957780][ T3893] viewsonic 0003:0543:E621.0002: unknown main item tag 0x0 [ 756.959014][ T3893] viewsonic 0003:0543:E621.0002: unknown main item tag 0x0 [ 757.083473][ T3893] viewsonic 0003:0543:E621.0002: hidraw0: USB HID v1.01 Device [HID 0543:e621] on usb-dummy_hcd.1-1/input0 [ 757.446313][ T3893] usb 2-1: USB disconnect, device number 2 [ 766.687953][ T4097] ======================================================= [ 766.687953][ T4097] WARNING: The mand mount option has been deprecated and [ 766.687953][ T4097] and is ignored by this kernel. Remove the mand [ 766.687953][ T4097] option from the mount to silence this warning. [ 766.687953][ T4097] ======================================================= [ 802.322170][ T4142] trusted_key: encrypted_key: key user:syz not found [ 837.342413][ T4177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 844.217787][ T4185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 847.257104][ T4075] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 847.623824][ T4075] usb 2-1: config 0 has no interfaces? [ 847.765536][ T4075] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=a1.69 [ 847.776248][ T4075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.780052][ T4075] usb 2-1: Product: syz [ 847.782062][ T4075] usb 2-1: Manufacturer: syz [ 847.783867][ T4075] usb 2-1: SerialNumber: syz [ 848.003498][ T4075] usb 2-1: config 0 descriptor?? [ 850.697207][ T24] usb 2-1: USB disconnect, device number 3 [ 852.498274][ T4203] ubi31: attaching mtd0 [ 852.502654][ T4203] ubi31 error: ubi_attach_mtd_dev: bad VID header (46848) or data offsets (46912) [ 859.299308][ T4207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 879.938524][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 892.913083][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 893.000485][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 895.938473][ T4250] capability: warning: `syz.0.144' uses deprecated v2 capabilities in a way that may be insecure [ 935.838708][ T4289] could not allocate digest TFM handle crc32-generic [ 947.519658][ T4302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.168'. [ 953.280503][ T4305] ptrace attach of "/syz-executor exec"[4307] was attempted by "/syz-executor exec"[4305] [ 959.369826][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 1009.346675][ T3737] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1009.779045][ T3737] usb 1-1: Using ep0 maxpacket: 16 [ 1009.862067][ T3737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.877484][ T3737] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1009.879722][ T3737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.321561][ T3737] usb 1-1: config 0 descriptor?? [ 1012.396395][ T3737] apple 0003:05AC:024B.0003: item fetching failed at offset 2/69 [ 1012.449810][ T3737] apple 0003:05AC:024B.0003: parse failed [ 1012.453370][ T3737] apple 0003:05AC:024B.0003: probe with driver apple failed with error -22 [ 1012.757011][ T3737] usb 1-1: USB disconnect, device number 2 [ 1030.666350][ T4393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.200'. [ 1030.669306][ T4393] netlink: 6 bytes leftover after parsing attributes in process `syz.0.200'. [ 1035.167391][ T4332] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1035.509013][ T4332] usb 2-1: Using ep0 maxpacket: 32 [ 1035.652189][ T4332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1036.106977][ T4332] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1036.109209][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.111961][ T4332] usb 2-1: Product: syz [ 1036.113432][ T4332] usb 2-1: Manufacturer: syz [ 1036.136961][ T4332] usb 2-1: SerialNumber: syz [ 1036.428445][ T4332] usb 2-1: config 0 descriptor?? [ 1038.028610][ T4332] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 1038.031617][ T4332] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 1053.718440][ T4332] usb 2-1: USB disconnect, device number 4 [ 1077.452666][ T4436] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1102.996431][ T35] audit: type=1800 audit(1102.160:5): pid=4459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.223" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1114.071131][ T4467] lo speed is unknown, defaulting to 1000 [ 1114.221704][ T4467] lo speed is unknown, defaulting to 1000 [ 1114.487719][ T4467] lo speed is unknown, defaulting to 1000 [ 1115.623195][ T4467] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1116.743094][ T4467] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1119.381574][ T4467] lo speed is unknown, defaulting to 1000 [ 1119.632130][ T4467] lo speed is unknown, defaulting to 1000 [ 1142.258371][ T3891] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1143.378275][ T3891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.380051][ T3891] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1143.381753][ T3891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.483652][ T3891] usb 2-1: config 0 descriptor?? [ 1146.381828][ T3891] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 1146.578657][ T3891] hid-rmi 0003:06CB:81A7.0004: hidraw0: USB HID vff.ff Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 1146.803179][ T3891] usb 2-1: USB disconnect, device number 5 [ 1150.594699][ T4519] (unnamed net_device) (uninitialized): (slave tunl0): Device is not bonding slave [ 1150.597258][ T4519] (unnamed net_device) (uninitialized): option active_slave: invalid value (tunl0) [ 1177.657960][ T4540] autofs: Bad value for 'fd' [ 1182.247795][ T4542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'. [ 1187.752109][ T4546] fuse: Invalid rootmode [ 1237.891788][ T4585] CUSE: info not properly terminated [ 1263.502400][ T4604] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1283.217151][ T3792] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1283.791288][ T3792] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1283.798761][ T3792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.083379][ T3792] usb 2-1: config 0 descriptor?? [ 1284.386488][ T3792] cp210x 2-1:0.0: cp210x converter detected [ 1286.798544][ T3792] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1286.802368][ T3792] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1287.246953][ T3792] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1287.473615][ T3792] usb 2-1: USB disconnect, device number 6 [ 1287.959748][ T3792] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1288.050085][ T3792] cp210x 2-1:0.0: device disconnected [ 1295.306448][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 1321.671437][ T4661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.296'. [ 1346.748059][ T4681] lo speed is unknown, defaulting to 1000 [ 1346.752452][ T4681] lo speed is unknown, defaulting to 1000 [ 1346.778653][ T4681] lo speed is unknown, defaulting to 1000 [ 1347.521992][ T4681] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1348.840274][ T4681] lo speed is unknown, defaulting to 1000 [ 1349.098402][ T4681] lo speed is unknown, defaulting to 1000 [ 1378.066215][ T4710] mmap: syz.1.316 (4710) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1411.921219][ T4732] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1513.536852][ T3792] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1515.945852][ T3792] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1515.948531][ T3792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.187666][ T3792] usb 2-1: config 0 descriptor?? [ 1523.438481][ T3792] usb 2-1: can't set config #0, error -110 [ 1527.849734][ T24] usb 2-1: USB disconnect, device number 7 [ 1612.330492][ T35] audit: type=1800 audit(1611.470:6): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.344" name="memory.events" dev="tmpfs" ino=791 res=0 errno=0 [ 1613.029738][ T35] audit: type=1800 audit(1612.080:7): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.344" name="memory.events" dev="tmpfs" ino=791 res=0 errno=0 [ 1637.512828][ T4799] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1714.960108][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1715.137872][ T24] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1747.059818][ T4831] [U] [ 2017.761449][ T4908] new mount options do not match the existing superblock, will be ignored [ 2018.732236][ T4908] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 2054.069641][ T4917] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 2065.257621][ T4919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 2283.547409][ T37] INFO: task kworker/u10:5:4726 blocked for more than 429 seconds. [ 2283.607468][ T37] Not tainted 6.16.0-rc1-syzkaller-g19272b37aa4f #0 [ 2283.611485][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2283.663203][ T37] task:kworker/u10:5 state:D stack:0 pid:4726 tgid:4726 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 2283.683540][ T37] Workqueue: events_unbound bpf_map_free_deferred [ 2283.733616][ T37] Call Trace: [ 2283.776193][ T37] [] __schedule+0x1022/0x4094 [ 2283.780080][ T37] [] schedule+0xc4/0x35e [ 2283.782931][ T37] [] schedule_timeout+0x1c6/0x2ae [ 2283.830644][ T37] [] __wait_for_common+0x1d2/0x3e8 [ 2283.875799][ T37] [] wait_for_completion+0x1a/0x22 [ 2283.879364][ T37] [] rcu_barrier+0x2dc/0x6cc [ 2283.882113][ T37] [] dev_map_free+0x11c/0x6bc [ 2283.927024][ T37] [] bpf_map_free_deferred+0x226/0x47a [ 2283.938803][ T37] [] process_one_work+0x96a/0x1f32 [ 2283.941765][ T37] [] worker_thread+0x5ce/0xde8 [ 2283.999735][ T37] [] kthread+0x39c/0x7d4 [ 2284.003148][ T37] [] ret_from_fork_kernel+0x2a/0xbb2 [ 2284.096248][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [ 2284.100133][ T37] [ 2284.100133][ T37] Showing all locks held in the system: [ 2284.102027][ T37] 1 lock held by khungtaskd/37: [ 2284.103678][ T37] #0: ffffffff883dc3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2a/0x1a0 [ 2284.310196][ T37] 1 lock held by klogd/2987: [ 2284.312221][ T37] 2 locks held by getty/3155: [ 2284.313696][ T37] #0: ffffaf80133f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 2284.409755][ T37] #1: ffff8f800008b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x3e4/0x12b6 [ 2284.506787][ T37] 3 locks held by kworker/u10:3/3851: [ 2284.567814][ T37] 2 locks held by kworker/0:3/3892: [ 2284.579386][ T37] 2 locks held by kworker/0:5/4075: [ 2284.582679][ T37] 4 locks held by kworker/0:6/4076: [ 2284.616906][ T37] 3 locks held by kworker/u10:5/4726: [ 2284.625908][ T37] #0: ffffaf8011a89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x848/0x1f32 [ 2284.632332][ T37] #1: ffff8f8003477b70 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x870/0x1f32 [ 2284.683748][ T37] #2: ffffffff883ec5c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x56/0x6cc [ 2284.781851][ T37] 2 locks held by kworker/0:1/4751: [ 2284.858511][ T37] 3 locks held by kworker/u10:0/4830: [ 2284.860213][ T37] 2 locks held by kworker/0:7/4852: [ 2284.861362][ T37] 2 locks held by kworker/0:8/4857: [ 2284.863605][ T37] 2 locks held by kworker/1:2/4872: [ 2284.896804][ T37] 2 locks held by kworker/0:10/4913: [ 2284.899839][ T37] [ 2284.901444][ T37] ============================================= [ 2284.901444][ T37] [ 2284.986244][ T37] NMI backtrace for cpu 1 [ 2284.987275][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-g19272b37aa4f #0 PREEMPT [ 2284.987871][ T37] Hardware name: riscv-virtio,qemu (DT) [ 2284.988119][ T37] Call Trace: [ 2284.988287][ T37] [] dump_backtrace+0x2e/0x3c [ 2284.988855][ T37] [] show_stack+0x30/0x3c [ 2284.989251][ T37] [] dump_stack_lvl+0x12e/0x1a6 [ 2284.989831][ T37] [] dump_stack+0x1c/0x24 [ 2284.990387][ T37] [] nmi_cpu_backtrace+0x3b0/0x3b2 [ 2284.990850][ T37] [] nmi_trigger_cpumask_backtrace+0x2b6/0x458 [ 2284.991330][ T37] [] arch_trigger_cpumask_backtrace+0x2c/0x3c [ 2284.991933][ T37] [] watchdog+0xcea/0x1618 [ 2284.992365][ T37] [] kthread+0x39c/0x7d4 [ 2284.992943][ T37] [] ret_from_fork_kernel+0x2a/0xbb2 [ 2284.993364][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [ 2285.027373][ T37] Sending NMI from CPU 1 to CPUs 0: [ 2285.031595][ C0] NMI backtrace for cpu 0 [ 2285.032124][ C0] CPU: 0 UID: 0 PID: 4075 Comm: kworker/0:5 Not tainted 6.16.0-rc1-syzkaller-g19272b37aa4f #0 PREEMPT [ 2285.032650][ C0] Hardware name: riscv-virtio,qemu (DT) [ 2285.032892][ C0] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 2285.033831][ C0] epc : __local_bh_enable_ip+0x38e/0x5e8 [ 2285.034330][ C0] ra : __local_bh_enable_ip+0x38a/0x5e8 [ 2285.034897][ C0] epc : ffffffff8015edbe ra : ffffffff8015edba sp : ffff8f80000073a0 [ 2285.035245][ C0] gp : ffffffff89c4eee0 tp : ffffaf8018761a40 t0 : ffff8f80000073c0 [ 2285.035579][ C0] t1 : 0000000000000000 t2 : fffffffff2f20000 s0 : ffff8f80000073f0 [ 2285.035912][ C0] s1 : 0000000000000101 a0 : 0000000000000000 a1 : ffffffff87d48a70 [ 2285.036234][ C0] a2 : 0000000000000003 a3 : 0000000000000100 a4 : 0000000000000001 [ 2285.036560][ C0] a5 : 00000000000d263a a6 : 0000000000f00000 a7 : 0000000000000000 [ 2285.036881][ C0] s2 : ffffaf8018761a40 s3 : ffffffff8597b54e s4 : 0000000000000001 [ 2285.037223][ C0] s5 : ffffffff90fff2c0 s6 : 1ffff5f0030ec349 s7 : ffffffff89c8f3c0 [ 2285.037597][ C0] s8 : ffff8f8000007620 s9 : dfffffff00000000 s10: ffff8f80000075c0 [ 2285.037929][ C0] s11: ffffaf8031734a00 t3 : 1ffff5f0061dd002 t4 : ffffffff876919c8 [ 2285.038246][ C0] t5 : ffffaf801c378128 t6 : 0000000000000002 [ 2285.038526][ C0] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 2285.038946][ C0] [] __local_bh_enable_ip+0x38e/0x5e8 [ 2285.039597][ C0] [] ipt_do_table+0xe88/0x1c82 [ 2285.040092][ C0] [] nf_hook_slow+0xb8/0x1ec [ 2285.040563][ C0] [] ip_local_deliver+0x2ea/0x568 [ 2285.041026][ C0] [] ip_rcv_finish+0x1b0/0x2d2 [ 2285.041503][ C0] [] ip_rcv+0xd6/0x44e [ 2285.041929][ C0] [] __netif_receive_skb_one_core+0x106/0x16e [ 2285.042564][ C0] [] __netif_receive_skb+0x2c/0x144 [ 2285.043140][ C0] [] process_backlog+0x4f6/0x1cb0 [ 2285.043795][ C0] [] __napi_poll.constprop.0+0xaa/0x4ba [ 2285.044400][ C0] [] net_rx_action+0xad4/0xefc [ 2285.045013][ C0] [] handle_softirqs+0x4b2/0x132e [ 2285.045511][ C0] [] __irq_exit_rcu+0x18c/0x550 [ 2285.045973][ C0] [] irq_exit_rcu+0x10/0xf8 [ 2285.046431][ C0] [] handle_riscv_irq+0x40/0x4c [ 2285.046890][ C0] [] call_on_irq_stack+0x32/0x40 [ 2285.422379][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 2285.426173][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-g19272b37aa4f #0 PREEMPT [ 2285.429295][ T37] Hardware name: riscv-virtio,qemu (DT) [ 2285.436251][ T37] Call Trace: [ 2285.437777][ T37] [] dump_backtrace+0x2e/0x3c [ 2285.439242][ T37] [] show_stack+0x30/0x3c [ 2285.440535][ T37] [] dump_stack_lvl+0x110/0x1a6 [ 2285.442066][ T37] [] dump_stack+0x1c/0x24 [ 2285.443485][ T37] [] panic+0x38c/0x86a [ 2285.444736][ T37] [] watchdog+0x77e/0x1618 [ 2285.446047][ T37] [] kthread+0x39c/0x7d4 [ 2285.447470][ T37] [] ret_from_fork_kernel+0x2a/0xbb2 [ 2285.448787][ T37] [] ret_from_fork_kernel_asm+0x16/0x18 [ 2285.450559][ T37] SMP: stopping secondary CPUs [ 2285.454414][ T37] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:29:03 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff8637e556 mhartid 0000000000000000 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff863a689c vstvec 0000000000000000 mepc ffffffff800783a4 sepc ffffffff854ed314 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000009 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp 9013f0000009f149 x0/zero 0000000000000000 x1/ra ffffffff80aa9154 x2/sp ffff8f8000007260 x3/gp ffffffff89c4eee0 x4/tp ffffaf8014f74ec0 x5/t0 ffff8f80000074c0 x6/t1 fffff1ef00000e54 x7/t2 fffffffff2f20000 x8/s0 ffff8f80000074a0 x9/s1 ffffaf8014be5658 x10/a0 ffffaf801d50e018 x11/a1 ffffffff90f497a0 x12/a2 ffffffff86859ca0 x13/a3 0000000000000000 x14/a4 1ffffffff0d0b396 x15/a5 ffffffffffffffff x16/a6 fffff1ef00000e55 x17/a7 0000000000000003 x18/s2 ffffaf8014f74ec0 x19/s3 1ffff5f00dda88b8 x20/s4 ffffaf806ed445c0 x21/s5 ffffffff90f497a0 x22/s6 ffffaf801da72270 x23/s7 ffffaf801da721f8 x24/s8 ffffffff90f497a0 x25/s9 ffffffff86859ca0 x26/s10 0000000200000022 x27/s11 1ffff5f0032efdc5 x28/t3 627a5db700000000 x29/t4 fffff1ef00000e54 x30/t5 fffff1ef00000e55 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff802d0cca mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff863a689c vstvec 0000000000000000 mepc ffffffff8008ce26 sepc ffffffff802fd8ce vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp 90145000000af48d x0/zero 0000000000000000 x1/ra ffffffff8042c69a x2/sp ffff8f8000017920 x3/gp ffffffff89c4eee0 x4/tp ffffaf8013ed1a40 x5/t0 00000213ae66b264 x6/t1 0000000000000001 x7/t2 ffffaf806ed4f6c0 x8/s0 ffff8f80000179f0 x9/s1 ffffffff8820e000 x10/a0 000000000000003f x11/a1 000000000000003f x12/a2 0000000000000018 x13/a3 ffffffff8042caa2 x14/a4 0000000000000000 x15/a5 ffffaf8013ed1a40 x16/a6 0000000000ff0100 x17/a7 ffffffff803ec120 x18/s2 ffffffff90e51590 x19/s3 002c1b8100000000 x20/s4 00000000000008ea x21/s5 fffffffef1041c12 x22/s6 fffffffef21ca2b5 x23/s7 1ffffffff21ca2b5 x24/s8 000000003b9aca00 x25/s9 1ffffffff1041c00 x26/s10 0000000000000007 x27/s11 0000000000000018 x28/t3 dad5170900000000 x29/t4 0000000000000000 x30/t5 0000000000000000 x31/t6 0000000000000002 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000