syzkaller login: [ 373.486596][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 373.504270][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 373.523232][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 373.545102][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:46034' (ECDSA) to the list of known hosts. 1970/01/01 00:07:02 fuzzer started 1970/01/01 00:07:11 dialing manager at localhost:40275 [ 434.670803][ T2031] cgroup: Unknown subsys name 'net' [ 435.273251][ T2031] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:07:15 syscalls: 2853 1970/01/01 00:07:15 code coverage: enabled 1970/01/01 00:07:15 comparison tracing: enabled 1970/01/01 00:07:15 extra coverage: enabled 1970/01/01 00:07:15 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:07:15 setuid sandbox: enabled 1970/01/01 00:07:15 namespace sandbox: enabled 1970/01/01 00:07:15 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:07:15 fault injection: enabled 1970/01/01 00:07:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:07:15 net packet injection: enabled 1970/01/01 00:07:15 net device setup: enabled 1970/01/01 00:07:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:07:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:07:15 USB emulation: enabled 1970/01/01 00:07:15 hci packet injection: /dev/vhci does not exist 1970/01/01 00:07:15 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:07:15 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:07:15 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:07:19 fetching corpus: 50, signal 37307/38475 (executing program) 1970/01/01 00:07:20 fetching corpus: 77, signal 47383/47946 (executing program) 1970/01/01 00:07:21 fetching corpus: 78, signal 47681/48346 (executing program) 1970/01/01 00:07:21 fetching corpus: 78, signal 47681/48526 (executing program) 1970/01/01 00:07:21 fetching corpus: 78, signal 47681/48678 (executing program) 1970/01/01 00:07:21 fetching corpus: 78, signal 47681/48840 (executing program) 1970/01/01 00:07:21 fetching corpus: 78, signal 47681/49008 (executing program) 1970/01/01 00:07:21 fetching corpus: 78, signal 47681/49156 (executing program) 1970/01/01 00:07:21 fetching corpus: 78, signal 47681/49307 (executing program) 1970/01/01 00:07:21 fetching corpus: 78, signal 47681/49480 (executing program) 1970/01/01 00:07:21 fetching corpus: 78, signal 47681/49641 (executing program) 1970/01/01 00:07:21 fetching corpus: 78, signal 47681/49811 (executing program) 1970/01/01 00:07:22 fetching corpus: 78, signal 47681/50000 (executing program) 1970/01/01 00:07:22 fetching corpus: 79, signal 47705/50187 (executing program) 1970/01/01 00:07:22 fetching corpus: 79, signal 47705/50349 (executing program) 1970/01/01 00:07:22 fetching corpus: 79, signal 47705/50503 (executing program) 1970/01/01 00:07:22 fetching corpus: 79, signal 47705/50672 (executing program) 1970/01/01 00:07:22 fetching corpus: 79, signal 47705/50832 (executing program) 1970/01/01 00:07:22 fetching corpus: 79, signal 47705/50970 (executing program) 1970/01/01 00:07:22 fetching corpus: 80, signal 47710/51132 (executing program) 1970/01/01 00:07:22 fetching corpus: 80, signal 47710/51310 (executing program) 1970/01/01 00:07:23 fetching corpus: 80, signal 47710/51467 (executing program) 1970/01/01 00:07:23 fetching corpus: 80, signal 47710/51618 (executing program) 1970/01/01 00:07:23 fetching corpus: 80, signal 47710/51784 (executing program) 1970/01/01 00:07:23 fetching corpus: 80, signal 48174/51948 (executing program) 1970/01/01 00:07:23 fetching corpus: 80, signal 48174/51948 (executing program) 1970/01/01 00:08:28 starting 2 fuzzer processes 00:08:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) 00:08:28 executing program 1: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) [ 527.922300][ T2037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.220145][ T2037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.807694][ T2036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.123550][ T2036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.923095][ T2037] device hsr_slave_0 entered promiscuous mode [ 534.963746][ T2037] device hsr_slave_1 entered promiscuous mode [ 535.777973][ T2036] device hsr_slave_0 entered promiscuous mode [ 535.807572][ T2036] device hsr_slave_1 entered promiscuous mode [ 535.816771][ T2036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.842651][ T2036] Cannot create hsr debugfs directory [ 540.106669][ T2037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 540.202959][ T2037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 540.271301][ T2037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 540.464072][ T2037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 541.070864][ T2036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 541.197054][ T2036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 541.311990][ T2036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 541.372249][ T2036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 546.482769][ T2037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.882536][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 546.922301][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.172369][ T2036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.415979][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.454297][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.614242][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 550.653265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.801398][ T2032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 550.823817][ T2032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.928019][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.096931][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.276536][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.300042][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.704366][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.737975][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.751757][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.773474][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.785569][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.951044][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 552.062550][ T2032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 552.097997][ T2032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 552.325453][ T2037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 552.599383][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 552.637559][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 552.861067][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 552.872545][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 552.947206][ T2036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.204343][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 553.207873][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 553.635297][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 553.637976][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 563.751373][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 563.783608][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 564.172610][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 564.204578][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 567.403438][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 567.435282][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 567.536340][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 567.565372][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 567.586899][ T2036] device veth0_vlan entered promiscuous mode [ 567.854969][ T2036] device veth1_vlan entered promiscuous mode [ 568.357426][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 568.390123][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 568.413233][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 568.425958][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 568.612340][ T2037] device veth0_vlan entered promiscuous mode [ 568.661475][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 568.701894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 568.925230][ T2036] device veth0_macvtap entered promiscuous mode [ 569.068719][ T2036] device veth1_macvtap entered promiscuous mode [ 569.105222][ T2037] device veth1_vlan entered promiscuous mode [ 569.486513][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 569.523905][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 569.653346][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 569.695112][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 569.896512][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 569.920988][ T2669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.036480][ T2036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.039623][ T2036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.040724][ T2036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.041694][ T2036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.302107][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 570.337520][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 570.481477][ T2037] device veth0_macvtap entered promiscuous mode [ 570.764491][ T2037] device veth1_macvtap entered promiscuous mode [ 570.803644][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 570.825815][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 571.633414][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 571.663042][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 571.982866][ T2037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.984229][ T2037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.985287][ T2037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.986467][ T2037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.360309][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 572.394540][ T2654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 573.776806][ T26] audit: type=1800 audit(573.260:2): pid=2719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=639 res=0 errno=0 [ 575.025752][ T2722] fs-verity: sha256 using implementation "sha256-generic" 00:09:35 executing program 1: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:09:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) [ 577.747047][ T26] audit: type=1800 audit(577.260:3): pid=2726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:09:38 executing program 1: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:09:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) 00:09:40 executing program 1: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) [ 581.974076][ T26] audit: type=1800 audit(581.490:4): pid=2731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=638 res=0 errno=0 00:09:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) 00:09:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) [ 585.945166][ T26] audit: type=1800 audit(585.460:5): pid=2736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=636 res=0 errno=0 [ 587.305800][ T26] audit: type=1800 audit(586.810:6): pid=2739 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 [ 588.739013][ C1] hrtimer: interrupt took 1225900 ns 00:09:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) 00:09:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) [ 590.075236][ T26] audit: type=1800 audit(589.590:7): pid=2742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=638 res=0 errno=0 [ 591.447469][ T26] audit: type=1800 audit(590.960:8): pid=2745 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:09:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) [ 594.640067][ T26] audit: type=1800 audit(594.150:9): pid=2748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=640 res=0 errno=0 00:09:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) [ 595.536911][ T26] audit: type=1800 audit(595.050:10): pid=2751 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:09:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) 00:09:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) [ 598.986329][ T26] audit: type=1800 audit(598.500:11): pid=2755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=643 res=0 errno=0 [ 599.350686][ T26] audit: type=1800 audit(598.850:12): pid=2756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:10:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) 00:10:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) [ 604.202531][ T26] audit: type=1800 audit(603.720:13): pid=2762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=642 res=0 errno=0 [ 604.377737][ T26] audit: type=1800 audit(603.890:14): pid=2763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:10:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) 00:10:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) [ 607.745922][ T26] audit: type=1800 audit(607.260:15): pid=2768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=644 res=0 errno=0 [ 607.841483][ T26] audit: type=1800 audit(607.340:16): pid=2769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:10:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) 00:10:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) [ 611.132856][ T26] audit: type=1800 audit(610.650:17): pid=2774 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=642 res=0 errno=0 [ 611.372502][ T26] audit: type=1800 audit(610.890:18): pid=2775 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:10:13 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) [ 615.554573][ T26] audit: type=1800 audit(615.070:19): pid=2781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:10:16 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4042, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a000b05"], 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0) close(0xffffffffffffffff) 00:10:18 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) [ 619.845833][ T26] audit: type=1800 audit(619.360:20): pid=2786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=640 res=0 errno=0 00:10:22 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:23 executing program 1: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:24 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:25 executing program 1: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:26 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:28 executing program 1: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:30 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:34 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:36 executing program 1: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:38 executing program 0: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:39 executing program 1: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:42 executing program 1: getpeername(0xffffffffffffffff, &(0x7f00000015c0)=@un=@abs, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa81000200000c02000080252985ff80bd536be86126010000499656c0e9869b7300"], &(0x7f0000000180)={0x1, 0x1, [0xc9b, 0xbc1, 0xa1, 0x11e]}) 00:10:44 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) 00:10:46 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}}], 0x4000000000000ce, 0x4048000) 00:10:46 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) 00:10:48 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) 00:10:48 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}}], 0x4000000000000ce, 0x4048000) 00:10:50 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) 00:10:51 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}}], 0x4000000000000ce, 0x4048000) 00:10:53 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) 00:10:55 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}}], 0x4000000000000ce, 0x4048000) 00:10:55 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) 00:10:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) 00:10:58 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x20000000) [ 660.875009][ T2838] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 660.910958][ T2838] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 660.931870][ T2836] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 660.967540][ T2836] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 661.022405][ T2836] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 661.027102][ T2836] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 661.210668][ T2836] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 661.260962][ T2836] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 661.303427][ T2836] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 661.350598][ T2836] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 00:11:01 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x180, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, '\x00', 'ipvlan1\x00'}, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x58}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @remote, 0x0, 0x0, 'gre0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) [ 662.716381][ T2840] x_tables: ip_tables: l2tp.0 match: invalid size 16 (kernel) != (user) 56 00:11:02 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x180, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, '\x00', 'ipvlan1\x00'}, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x58}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @remote, 0x0, 0x0, 'gre0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 00:11:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) [ 664.493977][ T2843] x_tables: ip_tables: l2tp.0 match: invalid size 16 (kernel) != (user) 56 00:11:04 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x180, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, '\x00', 'ipvlan1\x00'}, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x58}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @remote, 0x0, 0x0, 'gre0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) [ 665.990407][ T2845] __nla_validate_parse: 13 callbacks suppressed [ 665.990672][ T2845] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.025195][ T2845] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.057443][ T2844] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.062838][ T2844] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.066081][ T2844] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.137545][ T2844] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.167758][ T2844] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.196161][ T2844] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.222037][ T2844] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.226678][ T2844] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 666.875902][ T2847] x_tables: ip_tables: l2tp.0 match: invalid size 16 (kernel) != (user) 56 00:11:07 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x180, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, '\x00', 'ipvlan1\x00'}, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x58}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @remote, 0x0, 0x0, 'gre0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 00:11:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) [ 668.753003][ T2849] x_tables: ip_tables: l2tp.0 match: invalid size 16 (kernel) != (user) 56 00:11:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) [ 671.001584][ T2851] __nla_validate_parse: 16 callbacks suppressed [ 671.001874][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.005914][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.064966][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.116330][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.172684][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.242963][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.336476][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.402132][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.500896][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 671.506353][ T2851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 00:11:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) 00:11:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) [ 676.332105][ T2861] __nla_validate_parse: 56 callbacks suppressed [ 676.332377][ T2861] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.335080][ T2861] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.391726][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.395383][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.420444][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.461435][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.522813][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.576512][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.661608][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.720916][ T2859] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 00:11:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) 00:11:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) [ 681.417830][ T2866] __nla_validate_parse: 47 callbacks suppressed [ 681.426913][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.464478][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.554009][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.584691][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.603926][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.677467][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.733348][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.802311][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.854596][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.899861][ T2866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 00:11:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) 00:11:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) 00:11:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) 00:11:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x807}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f00000005c0)=""/4096, 0x1068}, {&(0x7f0000000140)=""/247, 0xf7}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x400000000000092, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000012000101"], 0x4c}}, 0x0) [ 689.046153][ T2877] __nla_validate_parse: 48 callbacks suppressed [ 689.046399][ T2877] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.096560][ T2877] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.141609][ T2875] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.167679][ T2875] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.183852][ T2875] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.242634][ T2875] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.476839][ T2875] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.618050][ T2875] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.647284][ T2875] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.723898][ T2875] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.733677][ T5] ================================================================== [ 689.735456][ T2874] ------------[ cut here ]------------ [ 689.735882][ T5] BUG: KASAN: global-out-of-bounds in wg_ratelimiter_gc_entries+0x1d6/0x31a [ 689.736208][ T2874] DEBUG_LOCKS_WARN_ON(1) [ 689.737028][ T5] Read of size 8 at addr ffffffff858c4c40 by task kworker/0:0/5 [ 689.737012][ T2874] WARNING: CPU: 1 PID: 2874 at kernel/locking/lockdep.c:203 __lock_acquire+0xcda/0x333e [ 689.737480][ T2874] Modules linked in: [ 689.737751][ T5] [ 689.738154][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 689.740723][ T2874] [ 689.741014][ T2874] CPU: 1 PID: 2874 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 689.742618][ T5] Hardware name: riscv-virtio,qemu (DT) [ 689.743754][ T2874] Hardware name: riscv-virtio,qemu (DT) [ 689.744595][ T2874] epc : __lock_acquire+0xcda/0x333e [ 689.746206][ T2874] ra : __lock_acquire+0xcda/0x333e [ 689.745572][ T5] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 689.747136][ T2874] epc : ffffffff80112f5c ra : ffffffff80112f5c sp : ffffaf800d433780 [ 689.747348][ T2874] gp : ffffffff85863ac0 tp : ffffaf800eecc8c0 t0 : ffffffff84a9bdd0 [ 689.748438][ T2874] t1 : fffff5ef01a8664c t2 : 0000000000000000 s0 : ffffaf800d4338e0 [ 689.749639][ T2874] s1 : 0000000000001fff a0 : 0000000000000016 a1 : 00000000000f0000 [ 689.750767][ T2874] a2 : 0000000000000002 a3 : ffffffff8012252a a4 : a8003fbc07c82200 [ 689.751944][ T2874] a5 : a8003fbc07c82200 a6 : 0000000000f00000 a7 : ffffaf800d433267 [ 689.753049][ T2874] s2 : 0000000000000045 s3 : ffffffff858c4ca8 s4 : 0000000000000000 [ 689.754193][ T2874] s5 : ffffaf800eecd2d8 s6 : ffffffff858c4ca0 s7 : 00000000000c0000 [ 689.755320][ T2874] s8 : ffffaf800eecd2e0 s9 : ffffffff8016e262 s10: 00000000000c0045 [ 689.756481][ T2874] s11: ffffaf800eecc8c0 t3 : 000000002d2d2d2d t4 : fffff5ef01a8664c [ 689.757510][ T2874] t5 : fffff5ef01a8664d t6 : ffffaf800d433278 [ 689.758600][ T2874] status: 0000000000000100 badaddr: 0000000000000000 cause: 0000000000000003 [ 689.759822][ T2874] [] lock_acquire.part.0+0x1d0/0x424 [ 689.761979][ T5] Call Trace: [ 689.762744][ T5] [] dump_backtrace+0x2e/0x3c [ 689.763190][ T2874] [] lock_acquire+0x54/0x6a [ 689.763503][ T5] [] show_stack+0x34/0x40 [ 689.764900][ T2874] [] _raw_spin_lock_irqsave+0x3e/0x62 [ 689.765903][ T5] [] dump_stack_lvl+0xe4/0x150 [ 689.766718][ T2874] [] hrtimer_start_range_ns+0x9e/0x6dc [ 689.767042][ T2874] [] do_nanosleep+0x11a/0x4a0 [ 689.768050][ T2874] [] hrtimer_nanosleep+0x154/0x292 [ 689.769150][ T2874] [] common_nsleep+0x76/0x90 [ 689.770925][ T5] [] print_address_description.constprop.0+0x2a/0x330 [ 689.771662][ T2874] [] sys_clock_nanosleep+0x1ba/0x244 [ 689.772021][ T2874] [] ret_from_syscall+0x0/0x2 [ 689.773262][ T5] [] kasan_report+0x184/0x1e0 [ 689.774878][ T2874] irq event stamp: 2672 [ 689.774997][ T2874] hardirqs last enabled at (2671): [] _raw_spin_unlock_irqrestore+0x68/0x98 [ 689.776558][ T5] [] __asan_load8+0x6e/0x96 [ 689.777719][ T2874] hardirqs last disabled at (2672): [] _raw_spin_lock_irqsave+0x60/0x62 [ 689.778804][ T5] [] wg_ratelimiter_gc_entries+0x1d6/0x31a [ 689.779954][ T2874] softirqs last enabled at (2380): [] __do_softirq+0x618/0x8fc [ 689.780298][ T2874] softirqs last disabled at (2369): [] __irq_exit_rcu+0x142/0x1f8 [ 689.782560][ T5] [] process_one_work+0x654/0xffe [ 689.783675][ T2874] ---[ end trace 0000000000000000 ]--- [ 689.785882][ T2874] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000b8 [ 689.785802][ T5] [] worker_thread+0x360/0x8fa [ 689.788143][ T5] [] kthread+0x19e/0x1fa [ 689.788330][ T2874] Oops [#1] [ 689.788484][ T2874] Modules linked in: [ 689.788740][ T2874] CPU: 1 PID: 2874 Comm: syz-executor.1 Tainted: G W 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 689.790081][ T2874] Hardware name: riscv-virtio,qemu (DT) [ 689.790187][ T2874] epc : __lock_acquire+0x33a/0x333e [ 689.792299][ T2874] ra : __lock_acquire+0x336/0x333e [ 689.793249][ T2874] epc : ffffffff801125bc ra : ffffffff801125b8 sp : ffffaf800d433780 [ 689.794071][ T2874] gp : ffffffff85863ac0 tp : ffffaf800eecc8c0 t0 : ffffffff84a9bdd0 [ 689.794840][ T2874] t1 : fffff5ef01a8664c t2 : 0000000000000000 s0 : ffffaf800d4338e0 [ 689.795995][ T2874] s1 : 0000000000000000 a0 : ffffaf800eecd300 a1 : 0000000000000001 [ 689.797140][ T2874] a2 : 0000000000000000 a3 : ffffffff801125b8 a4 : ffffffff85892ec8 [ 689.798268][ T2874] a5 : 0000000000000001 a6 : 00000000000000b8 a7 : ffffaf800d433267 [ 689.799449][ T5] [] ret_from_exception+0x0/0x10 [ 689.801289][ T2874] s2 : 0000000000000045 s3 : ffffffff858c4ca8 s4 : 0000000000000000 [ 689.801468][ T2874] s5 : ffffaf800eecd2d8 s6 : ffffffff858c4ca0 s7 : 00000000000c0000 [ 689.802399][ T2874] s8 : ffffaf800eecd2e0 s9 : ffffffff8016e262 s10: 00000000000c0045 [ 689.803491][ T2874] s11: ffffaf800eecc8c0 t3 : 000000002d2d2d2d t4 : fffff5ef01a8664c [ 689.804596][ T2874] t5 : fffff5ef01a8664d t6 : ffffaf800d433278 [ 689.806608][ T5] [ 689.807244][ T5] The buggy address belongs to the variable: [ 689.807371][ T5] __key.0+0x20/0x40 [ 689.808369][ T2874] status: 0000000000000100 badaddr: 00000000000000b8 cause: 000000000000000d [ 689.808555][ T2874] [] lock_acquire.part.0+0x1d0/0x424 [ 689.810517][ T5] [ 689.811268][ T5] Memory state around the buggy address: [ 689.812065][ T2874] [] lock_acquire+0x54/0x6a [ 689.813032][ T5] ffffffff858c4b00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 689.813028][ T2874] [] _raw_spin_lock_irqsave+0x3e/0x62 [ 689.813329][ T2874] [] hrtimer_start_range_ns+0x9e/0x6dc [ 689.816245][ T5] ffffffff858c4b80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 689.816253][ T2874] [] do_nanosleep+0x11a/0x4a0 [ 689.816528][ T2874] [] hrtimer_nanosleep+0x154/0x292 [ 689.818577][ T5] >ffffffff858c4c00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 689.819265][ T2874] [] common_nsleep+0x76/0x90 [ 689.820556][ T2874] [] sys_clock_nanosleep+0x1ba/0x244 [ 689.821504][ T5] ^ [ 689.822343][ T2874] [] ret_from_syscall+0x0/0x2 [ 689.823356][ T5] ffffffff858c4c80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.825347][ T5] ffffffff858c4d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.826814][ T5] ================================================================== [ 689.826820][ T2874] ---[ end trace 0000000000000000 ]--- [ 689.827278][ T2874] Kernel panic - not syncing: Fatal exception [ 689.829075][ T2874] SMP: stopping secondary CPUs [ 689.830600][ T2874] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:05:16 Registers: info registers vcpu 0 pc ffffffff80c3214e mhartid 0000000000000000 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80050322 sepc ffffffff80475986 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80c3214e x2/sp ffffaf800734f4e0 x3/gp ffffffff85863ac0 x4/tp ffffaf80073ee100 x5/t0 ffffffff86bdd480 x6/t1 fffff5ef00e69eb0 x7/t2 0000000000000000 x8/s0 ffffaf800734f630 x9/s1 ffffaf800734f8a0 x10/a0 0000000000000000 x11/a1 00000000000f0000 x12/a2 0000000000000002 x13/a3 ffffffff80c3214e x14/a4 ffffaf80073ef100 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffaf800734f587 x18/s2 ffffffff84a3c7d4 x19/s3 000000000000006c x20/s4 ffffaf800734f868 x21/s5 ffffaf800734f5c0 x22/s6 1ffff5f000e69ea0 x23/s7 ffffffff85889780 x24/s8 0000000084a3c7c1 x25/s9 0000000000000012 x26/s10 ffffffff84a3c7c1 x27/s11 ffffaf800734f6a0 x28/t3 1ffff5f000e69f3c x29/t4 fffff5ef00e69eb0 x30/t5 fffff5ef00e69eb1 x31/t6 ffffaf800734f867 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80475986 mhartid 0000000000000001 mstatus 0000000000000180 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80475986 sepc ffffffff80112f5c mcause 8000000000000007 scause 0000000000000003 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80dc3394 x2/sp ffffaf800d432eb0 x3/gp ffffffff85863ac0 x4/tp ffffaf800eecc8c0 x5/t0 ffffffff86bcb657 x6/t1 fffffffef0d796ca x7/t2 0000000000000000 x8/s0 ffffaf800d432ee0 x9/s1 ffffffff86e58900 x10/a0 ffffaf800eecc8e0 x11/a1 ffff8f800066c000 x12/a2 1ffffffff0dcb129 x13/a3 ffffffff80dc337e x14/a4 0000000000000000 x15/a5 ffffffff86e58948 x16/a6 ffffffff86e589f1 x17/a7 ffffffff86bcb656 x18/s2 ffffaf800eecc8c0 x19/s3 000000000000000a x20/s4 ffffffff86e58900 x21/s5 ffffffff80dc333e x22/s6 0000000000000001 x23/s7 ffffffff86bcb6ad x24/s8 0000000000000010 x25/s9 ffffffff86e58958 x26/s10 0000000000000010 x27/s11 0000000000000000 x28/t3 0000000000000057 x29/t4 fffffffef0d796c8 x30/t5 fffffffef0d796cb x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000