syzkaller login: [ 312.037314][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 312.149492][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 312.210496][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 354.887383][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:54051' (ECDSA) to the list of known hosts. 1970/01/01 00:06:25 fuzzer started 1970/01/01 00:06:39 dialing manager at localhost:45323 [ 405.637314][ T2045] cgroup: Unknown subsys name 'net' [ 406.916177][ T2045] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:46 syscalls: 2870 1970/01/01 00:06:46 code coverage: enabled 1970/01/01 00:06:46 comparison tracing: enabled 1970/01/01 00:06:46 extra coverage: enabled 1970/01/01 00:06:46 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:46 setuid sandbox: enabled 1970/01/01 00:06:46 namespace sandbox: enabled 1970/01/01 00:06:46 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:46 fault injection: enabled 1970/01/01 00:06:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:46 net packet injection: enabled 1970/01/01 00:06:46 net device setup: enabled 1970/01/01 00:06:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:46 USB emulation: enabled 1970/01/01 00:06:46 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:46 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:46 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:47 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:51 fetching corpus: 50, signal 29816/33200 (executing program) 1970/01/01 00:06:55 fetching corpus: 100, signal 43718/48317 (executing program) 1970/01/01 00:07:00 fetching corpus: 149, signal 53966/59625 (executing program) 1970/01/01 00:07:04 fetching corpus: 197, signal 60134/66898 (executing program) 1970/01/01 00:07:07 fetching corpus: 247, signal 66262/74013 (executing program) 1970/01/01 00:07:10 fetching corpus: 297, signal 70803/79518 (executing program) 1970/01/01 00:07:13 fetching corpus: 345, signal 74691/84301 (executing program) 1970/01/01 00:07:16 fetching corpus: 395, signal 78613/89037 (executing program) 1970/01/01 00:07:18 fetching corpus: 445, signal 80948/92301 (executing program) 1970/01/01 00:07:20 fetching corpus: 495, signal 84234/96337 (executing program) 1970/01/01 00:07:23 fetching corpus: 545, signal 87758/100511 (executing program) 1970/01/01 00:07:26 fetching corpus: 595, signal 90716/104141 (executing program) 1970/01/01 00:07:30 fetching corpus: 645, signal 94834/108649 (executing program) 1970/01/01 00:07:33 fetching corpus: 694, signal 98771/113001 (executing program) 1970/01/01 00:07:35 fetching corpus: 744, signal 101227/115975 (executing program) 1970/01/01 00:07:38 fetching corpus: 794, signal 103924/119112 (executing program) 1970/01/01 00:07:41 fetching corpus: 843, signal 108038/123371 (executing program) 1970/01/01 00:07:44 fetching corpus: 893, signal 110283/126013 (executing program) 1970/01/01 00:07:47 fetching corpus: 941, signal 112799/128819 (executing program) 1970/01/01 00:07:50 fetching corpus: 990, signal 115655/131830 (executing program) 1970/01/01 00:07:53 fetching corpus: 1039, signal 117475/133951 (executing program) 1970/01/01 00:07:56 fetching corpus: 1089, signal 119395/136161 (executing program) 1970/01/01 00:07:58 fetching corpus: 1139, signal 120537/137724 (executing program) 1970/01/01 00:08:01 fetching corpus: 1188, signal 122777/140074 (executing program) 1970/01/01 00:08:06 fetching corpus: 1236, signal 124410/141966 (executing program) 1970/01/01 00:08:09 fetching corpus: 1286, signal 126878/144429 (executing program) 1970/01/01 00:08:13 fetching corpus: 1336, signal 128909/146471 (executing program) 1970/01/01 00:08:17 fetching corpus: 1385, signal 130793/148437 (executing program) 1970/01/01 00:08:20 fetching corpus: 1434, signal 132041/149877 (executing program) 1970/01/01 00:08:23 fetching corpus: 1484, signal 133316/151332 (executing program) 1970/01/01 00:08:26 fetching corpus: 1534, signal 134921/152985 (executing program) 1970/01/01 00:08:29 fetching corpus: 1584, signal 136608/154588 (executing program) 1970/01/01 00:08:32 fetching corpus: 1634, signal 137722/155853 (executing program) 1970/01/01 00:08:35 fetching corpus: 1684, signal 138493/156900 (executing program) 1970/01/01 00:08:38 fetching corpus: 1734, signal 141014/158970 (executing program) 1970/01/01 00:08:40 fetching corpus: 1784, signal 142190/160170 (executing program) 1970/01/01 00:08:44 fetching corpus: 1833, signal 143614/161579 (executing program) 1970/01/01 00:08:47 fetching corpus: 1883, signal 145204/163023 (executing program) 1970/01/01 00:08:50 fetching corpus: 1933, signal 146421/164208 (executing program) 1970/01/01 00:08:53 fetching corpus: 1982, signal 147645/165321 (executing program) 1970/01/01 00:08:56 fetching corpus: 2032, signal 149204/166623 (executing program) 1970/01/01 00:08:58 fetching corpus: 2082, signal 150246/167567 (executing program) 1970/01/01 00:09:00 fetching corpus: 2132, signal 151487/168605 (executing program) 1970/01/01 00:09:04 fetching corpus: 2181, signal 152658/169639 (executing program) 1970/01/01 00:09:07 fetching corpus: 2231, signal 154016/170731 (executing program) 1970/01/01 00:09:09 fetching corpus: 2279, signal 154799/171497 (executing program) 1970/01/01 00:09:13 fetching corpus: 2329, signal 156107/172489 (executing program) 1970/01/01 00:09:16 fetching corpus: 2378, signal 157321/173441 (executing program) 1970/01/01 00:09:18 fetching corpus: 2428, signal 158192/174171 (executing program) 1970/01/01 00:09:20 fetching corpus: 2478, signal 158935/174829 (executing program) 1970/01/01 00:09:23 fetching corpus: 2527, signal 160072/175695 (executing program) 1970/01/01 00:09:25 fetching corpus: 2577, signal 160994/176373 (executing program) 1970/01/01 00:09:28 fetching corpus: 2626, signal 161819/177041 (executing program) 1970/01/01 00:09:30 fetching corpus: 2676, signal 162991/177836 (executing program) 1970/01/01 00:09:33 fetching corpus: 2726, signal 163971/178498 (executing program) 1970/01/01 00:09:35 fetching corpus: 2776, signal 164746/179104 (executing program) 1970/01/01 00:09:38 fetching corpus: 2826, signal 165802/179774 (executing program) 1970/01/01 00:09:41 fetching corpus: 2876, signal 166453/180247 (executing program) 1970/01/01 00:09:44 fetching corpus: 2926, signal 167336/180809 (executing program) 1970/01/01 00:09:47 fetching corpus: 2976, signal 168132/181290 (executing program) 1970/01/01 00:09:49 fetching corpus: 3024, signal 168998/181847 (executing program) 1970/01/01 00:09:52 fetching corpus: 3073, signal 169692/182295 (executing program) 1970/01/01 00:09:54 fetching corpus: 3123, signal 170771/182860 (executing program) 1970/01/01 00:09:57 fetching corpus: 3173, signal 171378/183231 (executing program) 1970/01/01 00:10:01 fetching corpus: 3222, signal 172423/183748 (executing program) 1970/01/01 00:10:02 fetching corpus: 3270, signal 173184/184150 (executing program) 1970/01/01 00:10:05 fetching corpus: 3320, signal 173894/184503 (executing program) 1970/01/01 00:10:08 fetching corpus: 3370, signal 174502/184845 (executing program) 1970/01/01 00:10:10 fetching corpus: 3420, signal 175272/185201 (executing program) 1970/01/01 00:10:12 fetching corpus: 3470, signal 175864/185528 (executing program) 1970/01/01 00:10:15 fetching corpus: 3520, signal 176579/185826 (executing program) 1970/01/01 00:10:18 fetching corpus: 3570, signal 177254/186119 (executing program) 1970/01/01 00:10:20 fetching corpus: 3619, signal 177831/186360 (executing program) 1970/01/01 00:10:22 fetching corpus: 3669, signal 178393/186602 (executing program) 1970/01/01 00:10:25 fetching corpus: 3718, signal 179011/186860 (executing program) 1970/01/01 00:10:28 fetching corpus: 3767, signal 179785/187163 (executing program) 1970/01/01 00:10:31 fetching corpus: 3816, signal 180509/187390 (executing program) 1970/01/01 00:10:35 fetching corpus: 3866, signal 181195/187601 (executing program) 1970/01/01 00:10:38 fetching corpus: 3914, signal 181846/187794 (executing program) 1970/01/01 00:10:40 fetching corpus: 3964, signal 182502/187985 (executing program) 1970/01/01 00:10:43 fetching corpus: 4014, signal 183093/188150 (executing program) 1970/01/01 00:10:46 fetching corpus: 4063, signal 183759/188292 (executing program) 1970/01/01 00:10:48 fetching corpus: 4113, signal 184469/188421 (executing program) 1970/01/01 00:10:50 fetching corpus: 4163, signal 185227/188544 (executing program) 1970/01/01 00:10:55 fetching corpus: 4212, signal 186152/188681 (executing program) 1970/01/01 00:10:57 fetching corpus: 4260, signal 186674/188748 (executing program) 1970/01/01 00:10:58 fetching corpus: 4291, signal 187019/188832 (executing program) 1970/01/01 00:10:59 fetching corpus: 4291, signal 187019/188859 (executing program) 1970/01/01 00:10:59 fetching corpus: 4291, signal 187019/188876 (executing program) 1970/01/01 00:10:59 fetching corpus: 4291, signal 187019/188899 (executing program) 1970/01/01 00:10:59 fetching corpus: 4291, signal 187019/188924 (executing program) 1970/01/01 00:10:59 fetching corpus: 4291, signal 187019/188945 (executing program) 1970/01/01 00:10:59 fetching corpus: 4291, signal 187019/188971 (executing program) 1970/01/01 00:10:59 fetching corpus: 4291, signal 187019/189000 (executing program) 1970/01/01 00:11:00 fetching corpus: 4291, signal 187019/189000 (executing program) 1970/01/01 00:13:15 starting 2 fuzzer processes 00:13:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000480)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000000140)="003f343c35ce400000002528f1ffdbe3cc138d186472764c0ab6f31aba35513085193bd8de5e36d198813aaa9f257eb7723d3ad0c54061a43f2eb18de837da5e440afc9b538449952b4a2c66bafccbb391e4aea375f5194cf17347942514d28f85dc4a1466e2183265b06b57def86caa3ff56bcba231556e8491f1bf85cb539aeac6a069593100071b8337ff81cbc5c1a485e3f8c0697fa6a8b3a535c19791a96d", 0xa1, 0x560}, {&(0x7f0000000040)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000012f00)=ANY=[]) 00:13:16 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000014000102000000000000000001c6de04079a96a8e6d45bff7c"], 0x54}}, 0x0) [ 838.739225][ T2052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.120884][ T2052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.959583][ T2053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.062848][ T2053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.593338][ T2052] device hsr_slave_0 entered promiscuous mode [ 858.680559][ T2052] device hsr_slave_1 entered promiscuous mode [ 862.289413][ T2053] device hsr_slave_0 entered promiscuous mode [ 862.332090][ T2053] device hsr_slave_1 entered promiscuous mode [ 862.376243][ T2053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.380770][ T2053] Cannot create hsr debugfs directory [ 869.853440][ T2052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 870.091883][ T2052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 870.428462][ T2052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 870.720033][ T2052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 871.838454][ T2053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 871.986035][ T2053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 872.235554][ T2053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 872.393830][ T2053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 885.748871][ T2052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.480474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 886.598056][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 887.733387][ T2053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.850672][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 888.943043][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 897.703298][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 897.790300][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 898.050923][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 898.161752][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 898.432861][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 898.676713][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 899.907346][ T2217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 899.951428][ T2217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 900.002049][ T2217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 900.026868][ T2217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 900.203635][ T2052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 900.630033][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 900.670558][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 901.677676][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 901.721486][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 901.772965][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 901.781418][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 901.788258][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 901.933389][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 902.902268][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 903.011618][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 903.431375][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 903.503658][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 903.800142][ T2053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 904.760249][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 904.800243][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 933.581302][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 933.683882][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 935.200252][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 935.273228][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 948.769419][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 948.852080][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 949.207803][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 949.328696][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 949.661216][ T2052] device veth0_vlan entered promiscuous mode [ 951.088186][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 951.130568][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 951.533358][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 951.600038][ T2559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 951.741846][ T2052] device veth1_vlan entered promiscuous mode [ 952.112386][ T2053] device veth0_vlan entered promiscuous mode [ 953.040807][ T2053] device veth1_vlan entered promiscuous mode [ 954.437593][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 954.479563][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 954.809067][ T2052] device veth0_macvtap entered promiscuous mode [ 955.200193][ T2052] device veth1_macvtap entered promiscuous mode [ 955.720358][ T2217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 955.963912][ T2123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 956.090318][ T2123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 956.509887][ T2053] device veth0_macvtap entered promiscuous mode [ 956.769828][ T2123] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 956.853861][ T2123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 956.889457][ T2123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 957.063814][ T2053] device veth1_macvtap entered promiscuous mode [ 957.333047][ T2217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 957.372606][ T2217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 957.750981][ T2052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.767829][ T2052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.769918][ T2052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.781054][ T2052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.287809][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 959.369446][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 959.453420][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 959.538225][ T2408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 960.062480][ T2053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.078600][ T2053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.080955][ T2053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.082908][ T2053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.700533][ T2751] loop0: detected capacity change from 0 to 2048 [ 967.212108][ T2751] EXT4-fs (loop0): failed to parse options in superblock: m [ 967.371626][ T2751] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock 00:16:08 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000014000102000000000000000001c6de04079a96a8e6d45bff7c"], 0x54}}, 0x0) 00:16:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000480)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000000140)="003f343c35ce400000002528f1ffdbe3cc138d186472764c0ab6f31aba35513085193bd8de5e36d198813aaa9f257eb7723d3ad0c54061a43f2eb18de837da5e440afc9b538449952b4a2c66bafccbb391e4aea375f5194cf17347942514d28f85dc4a1466e2183265b06b57def86caa3ff56bcba231556e8491f1bf85cb539aeac6a069593100071b8337ff81cbc5c1a485e3f8c0697fa6a8b3a535c19791a96d", 0xa1, 0x560}, {&(0x7f0000000040)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000012f00)=ANY=[]) 00:16:12 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000014000102000000000000000001c6de04079a96a8e6d45bff7c"], 0x54}}, 0x0) [ 973.339494][ T2759] loop0: detected capacity change from 0 to 2048 [ 973.717007][ T2759] EXT4-fs (loop0): failed to parse options in superblock: m [ 973.850992][ T2759] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock 00:16:15 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000014000102000000000000000001c6de04079a96a8e6d45bff7c"], 0x54}}, 0x0) 00:16:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000480)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000000140)="003f343c35ce400000002528f1ffdbe3cc138d186472764c0ab6f31aba35513085193bd8de5e36d198813aaa9f257eb7723d3ad0c54061a43f2eb18de837da5e440afc9b538449952b4a2c66bafccbb391e4aea375f5194cf17347942514d28f85dc4a1466e2183265b06b57def86caa3ff56bcba231556e8491f1bf85cb539aeac6a069593100071b8337ff81cbc5c1a485e3f8c0697fa6a8b3a535c19791a96d", 0xa1, 0x560}, {&(0x7f0000000040)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000012f00)=ANY=[]) [ 978.682370][ T2768] loop0: detected capacity change from 0 to 2048 [ 978.887132][ T2768] EXT4-fs (loop0): failed to parse options in superblock: m [ 978.993614][ T2768] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock 00:16:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_FLAGS={0x8}]}}}]}, 0x50}}, 0x0) 00:16:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000480)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000000140)="003f343c35ce400000002528f1ffdbe3cc138d186472764c0ab6f31aba35513085193bd8de5e36d198813aaa9f257eb7723d3ad0c54061a43f2eb18de837da5e440afc9b538449952b4a2c66bafccbb391e4aea375f5194cf17347942514d28f85dc4a1466e2183265b06b57def86caa3ff56bcba231556e8491f1bf85cb539aeac6a069593100071b8337ff81cbc5c1a485e3f8c0697fa6a8b3a535c19791a96d", 0xa1, 0x560}, {&(0x7f0000000040)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000012f00)=ANY=[]) 00:16:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_FLAGS={0x8}]}}}]}, 0x50}}, 0x0) [ 984.493828][ T2777] loop0: detected capacity change from 0 to 2048 [ 984.793793][ T2777] EXT4-fs (loop0): failed to parse options in superblock: m [ 984.867999][ T2777] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock 00:16:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_FLAGS={0x8}]}}}]}, 0x50}}, 0x0) 00:16:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @empty}, @IFLA_GRE_FLAGS={0x8}]}}}]}, 0x50}}, 0x0) 00:16:32 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x2d) 00:16:35 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x2d) 00:16:36 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:16:38 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:16:39 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x2d) 00:16:42 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x2d) 00:16:42 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:16:46 executing program 0: setreuid(0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = getuid() setreuid(0xee00, r1) fchown(r0, 0x0, 0xee00) 00:16:46 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) 00:16:49 executing program 0: setreuid(0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = getuid() setreuid(0xee00, r1) fchown(r0, 0x0, 0xee00) 00:16:50 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x9, 0x9}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c00)={r0}, 0x20) 00:16:52 executing program 0: setreuid(0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = getuid() setreuid(0xee00, r1) fchown(r0, 0x0, 0xee00) 00:16:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x9, 0x9}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c00)={r0}, 0x20) 00:16:55 executing program 0: setreuid(0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = getuid() setreuid(0xee00, r1) fchown(r0, 0x0, 0xee00) 00:16:56 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x9, 0x9}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c00)={r0}, 0x20) 00:16:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x9, 0x9}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c00)={r0}, 0x20) 00:17:00 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x1000}) 00:17:04 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000040)={'lo\x00', 0x0}) 00:17:04 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x1000}) 00:17:07 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x1000}) 00:17:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000040)={'lo\x00', 0x0}) 00:17:11 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x1000}) 00:17:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000040)={'lo\x00', 0x0}) 00:17:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000040)={'lo\x00', 0x0}) 00:17:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:17:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[], 0x10) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 00:18:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') lseek(r0, 0x0, 0x1) 00:18:09 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @multicast1=0xd420d52f, {[@ssrr={0x89, 0x7, 0xc8, [@local]}, @ssrr={0x89, 0x3}]}}, @timestamp}}}}, 0x0) 00:18:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') lseek(r0, 0x0, 0x1) 00:18:11 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @multicast1=0xd420d52f, {[@ssrr={0x89, 0x7, 0xc8, [@local]}, @ssrr={0x89, 0x3}]}}, @timestamp}}}}, 0x0) 00:18:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') lseek(r0, 0x0, 0x1) 00:18:14 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @multicast1=0xd420d52f, {[@ssrr={0x89, 0x7, 0xc8, [@local]}, @ssrr={0x89, 0x3}]}}, @timestamp}}}}, 0x0) 00:18:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') lseek(r0, 0x0, 0x1) 00:18:18 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @multicast1=0xd420d52f, {[@ssrr={0x89, 0x7, 0xc8, [@local]}, @ssrr={0x89, 0x3}]}}, @timestamp}}}}, 0x0) 00:18:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') lseek(r0, 0x0, 0x1) 00:18:24 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) 00:18:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') lseek(r0, 0x0, 0x1) 00:18:26 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) 00:18:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') lseek(r0, 0x0, 0x1) 00:18:30 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) 00:18:35 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) 00:18:35 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) 00:18:37 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) 00:18:39 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) 00:18:42 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) 00:18:43 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) 00:18:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000000c0)='A', 0x1, 0x80ee, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x27}, 0x1c) 00:18:47 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) 00:18:50 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) 00:18:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000000c0)='A', 0x1, 0x80ee, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x27}, 0x1c) 00:18:53 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) [ 1136.758115][ T2696] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1137.278468][ T2696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.291354][ T2696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.319034][ T2696] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1137.321533][ T2696] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1137.322979][ T2696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.587038][ T2696] usb 2-1: config 0 descriptor?? 00:18:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000000c0)='A', 0x1, 0x80ee, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x27}, 0x1c) [ 1138.647207][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.650936][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.652268][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.653571][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.673573][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.696381][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.697952][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.699270][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.700544][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.717976][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.719582][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.720908][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.722223][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.723555][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.736538][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.738087][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.739428][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.740689][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.776237][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.780354][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.781769][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.783046][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.797922][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.799786][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.818017][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.819571][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.820875][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.822178][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.823468][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.861829][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.888942][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.891319][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.897094][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.899890][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.902415][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.928378][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.930052][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.931262][ T2696] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 1138.993622][ T2696] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 1139.739504][ T2696] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1140.150652][ T2696] usb 2-1: USB disconnect, device number 2 00:19:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 00:19:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000000c0)='A', 0x1, 0x80ee, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x27}, 0x1c) [ 1145.907303][ T2744] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1146.377538][ T2744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.379233][ T2744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.380492][ T2744] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1146.382105][ T2744] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1146.383428][ T2744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.678634][ T2744] usb 2-1: config 0 descriptor?? [ 1147.883450][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.906941][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.908705][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.910055][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.911798][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.913148][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.929040][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.931303][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.932605][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.933954][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.947374][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.948863][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.950252][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.951651][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.952942][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.997037][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1147.998687][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1148.000027][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1148.001330][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1148.002596][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1148.003925][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1148.072933][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1148.113437][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1148.117500][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1148.118766][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1148.119968][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1148.121081][ T2744] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 1148.127305][ T2744] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 1148.128985][ T2744] CPU: 0 PID: 2744 Comm: kworker/0:4 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1148.130941][ T2744] Hardware name: riscv-virtio,qemu (DT) [ 1148.132854][ T2744] Workqueue: usb_hub_wq hub_event [ 1148.135010][ T2744] Call Trace: [ 1148.136481][ T2744] [] dump_backtrace+0x2e/0x3c [ 1148.138004][ T2744] [] show_stack+0x34/0x40 [ 1148.139422][ T2744] [] dump_stack_lvl+0xe4/0x150 [ 1148.141129][ T2744] [] dump_stack+0x1c/0x24 [ 1148.142253][ T2744] [] panic+0x24a/0x634 [ 1148.143016][ T2744] [] schedule+0x0/0x14c [ 1148.144231][ T2744] [] preempt_schedule_common+0x4e/0xde [ 1148.145744][ T2744] [] preempt_schedule+0x34/0x36 [ 1148.146856][ T2744] [] vprintk_emit+0x126/0x416 [ 1148.147950][ T2744] [] dev_vprintk_emit+0x250/0x290 [ 1148.149172][ T2744] [] dev_printk_emit+0xa4/0xd0 [ 1148.150375][ T2744] [] __dev_printk+0x90/0xc4 [ 1148.151527][ T2744] [] _dev_warn+0xb8/0xe6 [ 1148.152688][ T2744] [] hid_parser_main+0x572/0x5ac [ 1148.153860][ T2744] [] hid_open_report+0x2aa/0x4d8 [ 1148.155369][ T2744] [] plantronics_probe+0x58/0x2a0 [ 1148.157420][ T2744] [] hid_device_probe+0x1b8/0x24c [ 1148.158708][ T2744] [] really_probe+0x1a6/0x89e [ 1148.159794][ T2744] [] __driver_probe_device+0x24a/0x2d4 [ 1148.161022][ T2744] [] driver_probe_device+0x60/0x1a4 [ 1148.162213][ T2744] [] __device_attach_driver+0x17c/0x224 [ 1148.163435][ T2744] [] bus_for_each_drv+0x132/0x1a6 [ 1148.165405][ T2744] [] __device_attach+0x1e0/0x372 [ 1148.167391][ T2744] [] device_initial_probe+0x1c/0x26 [ 1148.168683][ T2744] [] bus_probe_device+0x144/0x154 [ 1148.169870][ T2744] [] device_add+0x91e/0x129e [ 1148.171204][ T2744] [] hid_add_device+0x268/0x5ca [ 1148.172346][ T2744] [] usbhid_probe+0x6b6/0x8c0 [ 1148.173578][ T2744] [] usb_probe_interface+0x21c/0x57a [ 1148.175132][ T2744] [] really_probe+0x1a6/0x89e [ 1148.177066][ T2744] [] __driver_probe_device+0x24a/0x2d4 [ 1148.178422][ T2744] [] driver_probe_device+0x60/0x1a4 [ 1148.179560][ T2744] [] __device_attach_driver+0x17c/0x224 [ 1148.180930][ T2744] [] bus_for_each_drv+0x132/0x1a6 [ 1148.182839][ T2744] [] __device_attach+0x1e0/0x372 [ 1148.183925][ T2744] [] device_initial_probe+0x1c/0x26 [ 1148.185751][ T2744] [] bus_probe_device+0x144/0x154 [ 1148.187564][ T2744] [] device_add+0x91e/0x129e [ 1148.188757][ T2744] [] usb_set_configuration+0xafe/0xf6a [ 1148.189891][ T2744] [] usb_generic_driver_probe+0xb2/0x122 [ 1148.192017][ T2744] [] usb_probe_device+0xa8/0x204 [ 1148.193711][ T2744] [] really_probe+0x1a6/0x89e [ 1148.195302][ T2744] [] __driver_probe_device+0x24a/0x2d4 [ 1148.197386][ T2744] [] driver_probe_device+0x60/0x1a4 [ 1148.198695][ T2744] [] __device_attach_driver+0x17c/0x224 [ 1148.199924][ T2744] [] bus_for_each_drv+0x132/0x1a6 [ 1148.201076][ T2744] [] __device_attach+0x1e0/0x372 [ 1148.202650][ T2744] [] device_initial_probe+0x1c/0x26 [ 1148.204621][ T2744] [] bus_probe_device+0x144/0x154 [ 1148.206414][ T2744] [] device_add+0x91e/0x129e [ 1148.207785][ T2744] [] usb_new_device+0x5c8/0xd78 [ 1148.209096][ T2744] [] hub_event+0x1b3e/0x3364 [ 1148.210261][ T2744] [] process_one_work+0x654/0xffe [ 1148.212061][ T2744] [] worker_thread+0x360/0x8fa [ 1148.213920][ T2744] [] kthread+0x19e/0x1fa [ 1148.215764][ T2744] [] ret_from_exception+0x0/0x10 [ 1148.217679][ T2744] SMP: stopping secondary CPUs [ 1148.225633][ T2744] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:43:54 Registers: info registers vcpu 0 pc ffffffff8000a0ce mhartid 0000000000000000 mstatus 00000000000000a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff804757b8 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff82f2f6da x2/sp ffffaf80223b76d0 x3/gp ffffffff85863ac0 x4/tp ffffaf800dcb0000 x5/t0 fffff5ef01405e28 x6/t1 fffff5ef0438ad37 x7/t2 00007fff8db15867 x8/s0 ffffaf80223b7700 x9/s1 ffffaf8009eeae80 x10/a0 0000000000000000 x11/a1 ffffaf800dcb0000 x12/a2 ffff8f8010b1a000 x13/a3 ffffffff82f2f63c x14/a4 0000000000000003 x15/a5 0000000000000002 x16/a6 ffffaf800c34153d x17/a7 ffffaf8021c569bb x18/s2 ffffaf800c3419a0 x19/s3 ffffaf801093e088 x20/s4 0000000000000002 x21/s5 ffffffff85711b20 x22/s6 ffffffff85711b50 x23/s7 0000000000000002 x24/s8 ffffaf80223b77a0 x25/s9 0000000000000005 x26/s10 0000000000000002 x27/s11 0000000000000002 x28/t3 fffffffff3f3f300 x29/t4 fffff5ef0438ad34 x30/t5 fffff5ef0438ad38 x31/t6 ffffaf800a02f13c f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff800bab60 mhartid 0000000000000001 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff80122e5a mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80c0b512 x2/sp ffffaf800c3fdf10 x3/gp ffffffff85863ac0 x4/tp ffffaf800bf48000 x5/t0 ffffffff86bcb657 x6/t1 fffff5ef0187fb40 x7/t2 0000000000000000 x8/s0 ffffaf800c3fdf70 x9/s1 ffffffff838d2e20 x10/a0 ffffffff838d2e20 x11/a1 ffffaf800bf48000 x12/a2 ffff8f8013084000 x13/a3 ffffffff80c0b512 x14/a4 0000000000040000 x15/a5 0000000000040000 x16/a6 0000000000f00000 x17/a7 ffffaf800c3fda07 x18/s2 0000000000000072 x19/s3 ffffffff86e51420 x20/s4 0000000000000000 x21/s5 0000000000000ab8 x22/s6 ffffffff83623360 x23/s7 ffffffff8344cc80 x24/s8 ffffffff831a6b00 x25/s9 ffffaf800c3fc000 x26/s10 ffffffff83efc020 x27/s11 0000000000000000 x28/t3 fffffffff3f3f300 x29/t4 fffff5ef0187fb40 x30/t5 fffff5ef0187fb41 x31/t6 ffffaf800c3fda18 f0/ft0 0000000000000000 f1/ft1 40832060ecb94f47 f2/ft2 4126667000000000 f3/ft3 43e0000000000000 f4/ft4 3ffe000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000