last executing test programs:
16m24.603251677s ago: executing program 1 (id=964):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
16m21.624768521s ago: executing program 1 (id=966):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0)
read(r2, &(0x7f0000000040)=""/252, 0xfc)
16m19.16570972s ago: executing program 1 (id=967):
socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_pwait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x8001, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000011})
sendmsg$nl_route_sched(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
16m15.134936454s ago: executing program 1 (id=968):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00')
16m10.540388544s ago: executing program 1 (id=969):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @opaque="6f841fcaf955c253e28c7ab3"}}}}}}, 0x3a)
16m6.962018455s ago: executing program 1 (id=972):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001500add427323b472545b45602117fffffff81000e224e237f000001925ac96ccb20d0607da7c75e38a80020007b00090080007f000001e809000000ff0000f03ac710a6960000ffffffffffffffffffe7ee0000", 0x58}], 0x1)
16m3.401280995s ago: executing program 32 (id=972):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001500add427323b472545b45602117fffffff81000e224e237f000001925ac96ccb20d0607da7c75e38a80020007b00090080007f000001e809000000ff0000f03ac710a6960000ffffffffffffffffffe7ee0000", 0x58}], 0x1)
2m2.043374918s ago: executing program 0 (id=1106):
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x3, 0x0, 0xfffffffa, 0x0, 0x1, {0x2}})
r3 = eventfd2(0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r3, 0x1)
io_uring_enter(r0, 0x54, 0x0, 0x0, 0x0, 0x0)
1m53.781254107s ago: executing program 2 (id=1107):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000)
read$dsp(r0, &(0x7f00000000c0)=""/108, 0x6c)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0)
write$dsp(r1, &(0x7f00000001c0)="d2", 0x1)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
1m36.78101576s ago: executing program 0 (id=1108):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100))
1m18.260553466s ago: executing program 2 (id=1109):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x19, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @mptcp=@syn={0x1e, 0xc, 0x6, 0x1, 0x7, 0xffffffff, 0x7ff}, @exp_fastopen={0xfe, 0x13, 0xf989, "519f7eff2e9879026a27bd9807642a"}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}, @mptcp=@capable={0x1e, 0x14, 0x9, 0x8, 0x1, 0x8, [0x10]}]}}}}}}}}, 0x0)
1m8.455314209s ago: executing program 0 (id=1110):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0})
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, 0x0, 0x0)
sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
getsockopt(r1, 0x200000000114, 0x271b, &(0x7f0000019580)=""/102400, &(0x7f0000000000)=0x19000)
1m1.743557122s ago: executing program 2 (id=1111):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r2}, 0x8)
41.470904887s ago: executing program 2 (id=1112):
unshare(0x2000400)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0)
read(r2, &(0x7f0000000100)=""/43, 0x2b)
39.829132824s ago: executing program 0 (id=1113):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[], 0x110}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x84, &(0x7f0000000100), &(0x7f00000001c0)=0xffffffffffffff66)
21.37397558s ago: executing program 2 (id=1114):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x1000, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x2, 0x5, "1450814798"}, 0xd)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0200"], 0x3d)
20.940396822s ago: executing program 0 (id=1115):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0)
3.672320243s ago: executing program 0 (id=1116):
pipe2(&(0x7f0000001100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
fcntl$setstatus(r2, 0x4, 0xa400)
writev(r1, &(0x7f00000026c0)=[{&(0x7f00000000c0)="bf", 0x1}], 0x1)
fcntl$setstatus(r1, 0x4, 0x2000)
vmsplice(r0, &(0x7f00000023c0)=[{&(0x7f0000000100)="92", 0x1}], 0x1, 0x0)
0s ago: executing program 2 (id=1117):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4)
close(0x3)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '[localhost]:65474' (ED25519) to the list of known hosts.
syzkaller login: [ 399.241619][ T3159] cgroup: Unknown subsys name 'net'
[ 399.955758][ T3159] cgroup: Unknown subsys name 'cpuset'
[ 400.080860][ T3159] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 463.257134][ T3159] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 539.081361][ T3166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 539.617896][ T3166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 539.674122][ T3167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 540.479320][ T3167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 550.934850][ T3167] hsr_slave_0: entered promiscuous mode
[ 550.988068][ T3167] hsr_slave_1: entered promiscuous mode
[ 553.529736][ T3166] hsr_slave_0: entered promiscuous mode
[ 553.587822][ T3166] hsr_slave_1: entered promiscuous mode
[ 553.614979][ T3166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 553.618026][ T3166] Cannot create hsr debugfs directory
[ 559.239901][ T3167] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 559.479421][ T3167] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 559.744463][ T3167] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 559.876474][ T3167] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 561.239199][ T3166] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 561.396889][ T3166] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 561.535673][ T3166] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 561.658491][ T3166] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 576.340503][ T3167] 8021q: adding VLAN 0 to HW filter on device bond0
[ 576.957918][ T3166] 8021q: adding VLAN 0 to HW filter on device bond0
[ 621.676281][ T3167] veth0_vlan: entered promiscuous mode
[ 622.779597][ T3167] veth1_vlan: entered promiscuous mode
[ 623.631513][ T3166] veth0_vlan: entered promiscuous mode
[ 624.244799][ T3166] veth1_vlan: entered promiscuous mode
[ 625.271786][ T3167] veth0_macvtap: entered promiscuous mode
[ 626.016652][ T3167] veth1_macvtap: entered promiscuous mode
[ 626.769709][ T3166] veth0_macvtap: entered promiscuous mode
[ 627.054509][ T3166] veth1_macvtap: entered promiscuous mode
[ 628.385086][ T3167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 628.388852][ T3167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 628.399493][ T3167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 628.401608][ T3167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 629.957459][ T3166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 629.960089][ T3166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 629.962239][ T3166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 629.974715][ T3166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 633.340612][ T3167] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 660.110231][ T3876] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 677.477168][ T3892] syzkaller1: entered promiscuous mode
[ 677.555283][ T3892] syzkaller1: entered allmulticast mode
[ 682.490947][ T3900] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET)
[ 688.066457][ T3910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'.
[ 693.110128][ T3914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'.
[ 701.197426][ T3920] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526
[ 732.020800][ T3945] process 'syz.0.35' launched './file2' with NULL argv: empty string added
[ 733.317847][ T3948] input: syz0 as /devices/virtual/input/input0
[ 759.747949][ T3980] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss!
[ 766.159363][ T3989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.47'.
[ 801.108085][ T34] audit: type=1326 audit(799.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.1.64" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x0
[ 833.138513][ T3852] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 833.791371][ T3852] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 833.809518][ T3852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 833.812543][ T3852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 833.848160][ T3852] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 833.957034][ T3852] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 833.959427][ T3852] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 833.961204][ T3852] usb 1-1: Manufacturer: syz
[ 834.109960][ T3852] usb 1-1: config 0 descriptor??
[ 836.222341][ T3852] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[ 836.250869][ T3852] appleir 0003:05AC:8243.0001: No inputs registered, leaving
[ 836.461286][ T3852] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[ 837.868124][ T3853] usb 1-1: reset high-speed USB device number 2 using dummy_hcd
[ 840.365539][ T3854] usb 1-1: USB disconnect, device number 2
[ 854.147637][ T3162] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 854.806800][ T3162] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 854.809279][ T3162] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 854.811632][ T3162] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x71, changing to 0x1
[ 854.818747][ T3162] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 854.820781][ T3162] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 854.906930][ T3162] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 854.908437][ T3162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 854.909835][ T3162] usb 2-1: Product: syz
[ 854.910917][ T3162] usb 2-1: Manufacturer: syz
[ 854.915344][ T3162] usb 2-1: SerialNumber: syz
[ 859.441677][ T3162] cdc_ncm 2-1:1.0: bind() failure
[ 859.548274][ T3162] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[ 859.577155][ T3162] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[ 859.622339][ T3162] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[ 859.672599][ T3162] usb 2-1: USB disconnect, device number 2
[ 870.758846][ T4121] GUP no longer grows the stack in syz.1.82 (4121): 20004000-2000a000 (20002000)
[ 870.778406][ T4121] CPU: 0 UID: 0 PID: 4121 Comm: syz.1.82 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0
[ 870.781253][ T4121] Hardware name: riscv-virtio,qemu (DT)
[ 870.783103][ T4121] Call Trace:
[ 870.784527][ T4121] [<ffffffff80071bae>] dump_backtrace+0x2e/0x3c
[ 870.788234][ T4121] [<ffffffff8000325c>] show_stack+0x30/0x3c
[ 870.789894][ T4121] [<ffffffff8005e1f4>] dump_stack_lvl+0x12e/0x1a6
[ 870.791892][ T4121] [<ffffffff8005e288>] dump_stack+0x1c/0x24
[ 870.794503][ T4121] [<ffffffff80898d18>] gup_vma_lookup+0x1e0/0x1ee
[ 870.796618][ T4121] [<ffffffff808a15fc>] __get_user_pages+0x208/0x35ec
[ 870.798251][ T4121] [<ffffffff808a4c80>] get_user_pages_remote+0x2a0/0xa74
[ 870.799937][ T4121] [<ffffffff808b25be>] __access_remote_vm+0x28a/0xb08
[ 870.801758][ T4121] [<ffffffff808da462>] access_remote_vm+0x32/0x44
[ 870.804287][ T4121] [<ffffffff80cfff2a>] proc_pid_cmdline_read+0x460/0x7c4
[ 870.806174][ T4121] [<ffffffff80ac99b6>] vfs_readv+0x520/0x70c
[ 870.807704][ T4121] [<ffffffff80aca05c>] do_preadv+0x1b4/0x250
[ 870.809191][ T4121] [<ffffffff80ad0718>] __riscv_sys_preadv+0x88/0xc4
[ 870.810787][ T4121] [<ffffffff80070302>] syscall_handler+0x94/0x118
[ 870.812450][ T4121] [<ffffffff861c1fae>] do_trap_ecall_u+0x1aa/0x216
[ 870.814271][ T4121] [<ffffffff861e652a>] _new_vmalloc_restore_context_a0+0xc2/0xce
[ 938.294855][ T4184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'.
[ 939.750625][ T4186] input: syz0 as /devices/virtual/input/input1
[ 951.382381][ T4203] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1102.707986][ T4358] vlan1: entered promiscuous mode
[ 1103.476257][ T4358] vlan1 (unregistering): left promiscuous mode
[ 1107.696170][ T3161] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1108.024384][ T3161] usb 2-1: config 0 has an invalid interface number: 18 but max is 0
[ 1108.027251][ T3161] usb 2-1: config 0 has no interface number 0
[ 1108.029642][ T3161] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1108.044471][ T3161] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1108.127737][ T3161] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[ 1108.130528][ T3161] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1108.169174][ T3161] usb 2-1: Manufacturer: syz
[ 1108.277691][ T3161] usb 2-1: config 0 descriptor??
[ 1110.620346][ T3161] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0002/input/input3
[ 1111.177651][ T3161] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18
[ 1111.574710][ T3161] usb 2-1: USB disconnect, device number 3
[ 1141.588484][ T4419] input: syz1 as /devices/virtual/input/input4
[ 1143.767114][ T4372] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1143.998190][ T4372] usb 2-1: Using ep0 maxpacket: 32
[ 1144.210468][ T4372] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[ 1144.212330][ T4372] usb 2-1: config 0 has no interface number 0
[ 1144.337750][ T4372] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1144.340984][ T4372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1144.342628][ T4372] usb 2-1: Product: syz
[ 1144.344558][ T4372] usb 2-1: Manufacturer: syz
[ 1144.345568][ T4372] usb 2-1: SerialNumber: syz
[ 1144.447607][ T4372] usb 2-1: config 0 descriptor??
[ 1144.578100][ T4372] smsc95xx v2.0.0
[ 1146.235858][ T4372] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[ 1146.452326][ T4372] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1146.460881][ T4372] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[ 1146.622241][ T4372] usb 2-1: USB disconnect, device number 4
[ 1159.935273][ T3162] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1160.186883][ T3162] usb 1-1: Using ep0 maxpacket: 16
[ 1160.336065][ T3162] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[ 1160.338471][ T3162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.340841][ T3162] usb 1-1: Product: syz
[ 1160.342408][ T3162] usb 1-1: Manufacturer: syz
[ 1160.359345][ T3162] usb 1-1: SerialNumber: syz
[ 1160.479901][ T3162] usb 1-1: config 0 descriptor??
[ 1160.579331][ T3162] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[ 1160.669465][ T3162] usb 1-1: Detected FT232H
[ 1162.006394][ T3162] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1163.015549][ T3162] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1163.538210][ T4468] usb 1-1: USB disconnect, device number 3
[ 1164.019781][ T4468] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1164.208550][ T4468] ftdi_sio 1-1:0.0: device disconnected
[ 1178.319945][ T907] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1178.612357][ T907] usb 1-1: Using ep0 maxpacket: 16
[ 1179.089271][ T907] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1179.091983][ T907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1179.098879][ T907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1179.519158][ T907] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1179.521661][ T907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.526918][ T907] usb 1-1: Product: syz
[ 1179.528653][ T907] usb 1-1: Manufacturer: syz
[ 1179.530436][ T907] usb 1-1: SerialNumber: syz
[ 1182.026886][ T907] usb 1-1: 0:2 : does not exist
[ 1188.898908][ T907] usb 1-1: 1:0: failed to get current value for ch 0 (-22)
[ 1190.704938][ T907] usb 1-1: USB disconnect, device number 4
[ 1199.136488][ T4536] sctp: [Deprecated]: syz.0.203 (pid 4536) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1199.136488][ T4536] Use struct sctp_sack_info instead
[ 1212.861118][ T4558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'.
[ 1225.352359][ T4572] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1227.706215][ T4574] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[ 1230.097472][ T4577] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1232.696378][ T4580] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1284.196966][ T4649] syzkaller1: entered promiscuous mode
[ 1284.199205][ T4649] syzkaller1: entered allmulticast mode
[ 1289.299678][ T3851] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1289.846000][ T3851] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30
[ 1289.848817][ T3851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1289.851137][ T3851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1289.862017][ T3851] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[ 1289.868812][ T3851] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1289.871094][ T3851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1289.990431][ T3851] usb 1-1: config 0 descriptor??
[ 1291.231698][ T3851] wacom 0003:056A:0331.0003: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0
[ 1291.447127][ T3851] usb 1-1: USB disconnect, device number 5
[ 1297.773877][ T4683] veth0_vlan: left promiscuous mode
[ 1319.827598][ T4705] batadv_slave_1: entered promiscuous mode
[ 1319.897895][ T4705] batadv_slave_1: left promiscuous mode
[ 1331.242041][ T4724] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[ 1391.218731][ T4793] netlink: 'syz.0.295': attribute type 10 has an invalid length.
[ 1391.226917][ T4793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'.
[ 1391.456692][ T4793] A link change request failed with some changes committed already. Interface netdevsim3 may have been left with an inconsistent configuration, please check.
[ 1417.464896][ T3162] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1418.095763][ T3162] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1418.099133][ T3162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1418.102052][ T3162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1418.112618][ T3162] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1418.142357][ T3162] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1418.157424][ T3162] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1418.160640][ T3162] usb 1-1: Manufacturer: syz
[ 1418.340878][ T3162] usb 1-1: config 0 descriptor??
[ 1421.222365][ T3162] appleir 0003:05AC:8243.0004: unknown main item tag 0x0
[ 1421.300128][ T3162] appleir 0003:05AC:8243.0004: No inputs registered, leaving
[ 1421.487121][ T3162] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[ 1421.981617][ T9] usb 1-1: USB disconnect, device number 6
[ 1461.910708][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1461.917002][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1461.919504][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1461.921462][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1461.980567][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1461.999601][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.001888][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.045957][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.057930][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.060272][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.062224][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.084995][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.087880][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.089784][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.091758][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.115681][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.121214][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.135598][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.138096][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.139958][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.141962][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.188623][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.190990][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.226773][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.229110][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.230990][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.255166][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.257474][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.259388][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.261352][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.285060][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.288792][ T3851] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[ 1462.566679][ T3851] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1506.819635][ T4939] netlink: 104 bytes leftover after parsing attributes in process `syz.1.336'.
[ 1555.355365][ T4987] capability: warning: `syz.1.354' uses 32-bit capabilities (legacy support in use)
[ 1566.217212][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1566.712204][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1566.761528][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1566.765886][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1566.767501][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1566.854964][ T9] usb 1-1: config 0 descriptor??
[ 1570.018739][ T9] hid (null): bogus close delimiter
[ 1570.315244][ T9] usb 1-1: language id specifier not provided by device, defaulting to English
[ 1570.590771][ T5000] syzkaller1: entered promiscuous mode
[ 1570.622467][ T5000] syzkaller1: entered allmulticast mode
[ 1571.268938][ T9] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71
[ 1571.274016][ T9] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71
[ 1571.278151][ T9] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71
[ 1571.281437][ T9] uclogic 0003:256C:006D.0006: failed probing parameters: -71
[ 1571.318261][ T9] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71
[ 1571.597906][ T9] usb 1-1: USB disconnect, device number 7
[ 1583.621372][ T5021] syzkaller1: entered promiscuous mode
[ 1583.634577][ T5021] syzkaller1: entered allmulticast mode
[ 1640.631649][ C0] vxcan1: j1939_tp_rxtimer: 0xff600000300f3000: rx timeout, send abort
[ 1640.655503][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xff600000300f3000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1647.048670][ T5074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.382'.
[ 1682.054613][ T5101] input: syz0 as /devices/virtual/input/input8
[ 1688.365441][ T4372] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1688.597335][ T4372] usb 1-1: Using ep0 maxpacket: 32
[ 1688.880871][ T4372] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[ 1688.894863][ T4372] usb 1-1: config 0 has no interface number 0
[ 1688.898210][ T4372] usb 1-1: config 0 interface 12 has no altsetting 0
[ 1689.031055][ T4372] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1689.044876][ T4372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1689.047287][ T4372] usb 1-1: Product: syz
[ 1689.048956][ T4372] usb 1-1: Manufacturer: syz
[ 1689.050680][ T4372] usb 1-1: SerialNumber: syz
[ 1689.216936][ T4372] usb 1-1: config 0 descriptor??
[ 1692.247362][ T4372] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1692.250323][ T4372] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[ 1692.252264][ T4372] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1692.260108][ T4372] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[ 1692.366015][ T4372] usb 1-1: USB disconnect, device number 8
[ 1717.195395][ T5152] input: syz1 as /devices/virtual/input/input9
[ 1720.944123][ T5159] input: syz0 as /devices/virtual/input/input10
[ 1759.537754][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1759.860940][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1759.869756][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1759.872321][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1759.885747][ T9] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[ 1759.888074][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1759.988078][ T9] usb 1-1: config 0 descriptor??
[ 1762.016502][ T9] waltop 0003:172F:0038.0007: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.0-1/input0
[ 1762.746634][ T5184] usb 1-1: USB disconnect, device number 9
[ 1796.887943][ T5262] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1826.009912][ T5292] syzkaller1: entered promiscuous mode
[ 1826.011527][ T5292] syzkaller1: entered allmulticast mode
[ 1837.699707][ T5310] netlink: 32 bytes leftover after parsing attributes in process `syz.0.455'.
[ 1837.760633][ T5310] netlink: 32 bytes leftover after parsing attributes in process `syz.0.455'.
[ 1851.089840][ T34] audit: type=1326 audit(2105.733:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.1.461" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x0
[ 1855.969511][ T5328] mmap: syz.0.463 (5328) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1938.989701][ T5399] No such timeout policy "syz1"
[ 1960.626358][ T5426] =======================================================
[ 1960.626358][ T5426] WARNING: The mand mount option has been deprecated and
[ 1960.626358][ T5426] and is ignored by this kernel. Remove the mand
[ 1960.626358][ T5426] option from the mount to silence this warning.
[ 1960.626358][ T5426] =======================================================
[ 1960.631087][ T5426] tmpfs: Invalid gid '0x00000000ffffffff'
[ 1967.092358][ T5435] vcan0: tx address claim with dest, not broadcast
[ 2061.614677][ T5539] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[ 2063.898202][ T5542] input: syz1 as /devices/virtual/input/input11
[ 2065.411195][ T5548] capability: warning: `syz.1.547' uses deprecated v2 capabilities in a way that may be insecure
[ 2077.217070][ T5567] netdevsim netdevsim1: Direct firmware load for failed with error -2
[ 2077.228254][ T5567] netdevsim netdevsim1: Falling back to sysfs fallback for:
[ 2128.147492][ T3162] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 2128.905809][ T3162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2128.908509][ T3162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2128.910963][ T3162] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[ 2128.934782][ T3162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2129.070586][ T3162] usb 2-1: config 0 descriptor??
[ 2130.669634][ T3162] chicony 0003:04F2:1236.0008: hidraw0: USB HID vff.fc Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0
[ 2132.616005][ T9] usb 2-1: USB disconnect, device number 5
[ 2141.180538][ T3161] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 2142.785948][ T3161] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[ 2142.788409][ T3161] usb 2-1: config 0 has no interface number 0
[ 2142.790490][ T3161] usb 2-1: config 0 interface 69 has no altsetting 0
[ 2143.476368][ T3161] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=4d.b6
[ 2143.479244][ T3161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2143.481284][ T3161] usb 2-1: Product: syz
[ 2143.492160][ T3161] usb 2-1: Manufacturer: syz
[ 2143.495996][ T3161] usb 2-1: SerialNumber: syz
[ 2143.639332][ T3161] usb 2-1: config 0 descriptor??
[ 2145.797359][ T3161] usb 2-1: USB disconnect, device number 6
[ 2151.127207][ T5184] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 2151.528723][ T5184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2151.531471][ T5184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2151.545374][ T5184] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[ 2151.554600][ T5184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2151.717810][ T5184] usb 1-1: config 0 descriptor??
[ 2155.469478][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2155.641045][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2156.050678][ T5184] sony 0003:054C:024B.0009: unexpected long global item
[ 2156.091041][ T5184] sony 0003:054C:024B.0009: parse failed
[ 2156.106962][ T5184] sony 0003:054C:024B.0009: probe with driver sony failed with error -22
[ 2156.527625][ T5184] usb 1-1: USB disconnect, device number 10
[ 2186.940772][ T5750] input: syz0 as /devices/virtual/input/input12
[ 2199.966418][ T5771] syzkaller1: entered promiscuous mode
[ 2199.968628][ T5771] syzkaller1: entered allmulticast mode
[ 2254.421640][ T5831] netlink: 116 bytes leftover after parsing attributes in process `syz.1.622'.
[ 2254.446817][ T5831] Zero length message leads to an empty skb
[ 2267.121592][ T34] audit: type=1326 audit(2521.763:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.1.627" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x7ffc0000
[ 2267.160415][ T34] audit: type=1326 audit(2521.803:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.1.627" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x7ffc0000
[ 2267.195816][ T34] audit: type=1326 audit(2521.833:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.1.627" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb5ba code=0x7ffc0000
[ 2267.217600][ T34] audit: type=1326 audit(2521.853:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.1.627" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x7ffc0000
[ 2267.242597][ T34] audit: type=1326 audit(2521.883:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.1.627" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x7ffc0000
[ 2267.280075][ T34] audit: type=1326 audit(2521.923:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.1.627" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb5ba code=0x7ffc0000
[ 2267.296599][ T34] audit: type=1326 audit(2521.923:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.1.627" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x7ffc0000
[ 2267.340037][ T34] audit: type=1326 audit(2521.973:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.1.627" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x7ffc0000
[ 2267.398302][ T34] audit: type=1326 audit(2522.043:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.1.627" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb5ba code=0x7ffc0000
[ 2267.420214][ T34] audit: type=1326 audit(2522.043:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.1.627" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x7ffc0000
[ 2275.451051][ T5851] syz_tun: entered promiscuous mode
[ 2275.837430][ T5851] syz_tun: left promiscuous mode
[ 2308.289605][ T5883] TCP: TCP_TX_DELAY enabled
[ 2321.875297][ T3161] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 2322.077470][ T3161] usb 2-1: Using ep0 maxpacket: 8
[ 2322.245135][ T3161] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 2322.247782][ T3161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2322.312757][ T3161] usb 2-1: config 0 descriptor??
[ 2324.917126][ T3161] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 2324.932370][ T3161] asix 2-1:0.0: probe with driver asix failed with error -71
[ 2325.217687][ T3161] usb 2-1: USB disconnect, device number 7
[ 2344.951771][ T5926] input: syz0 as /devices/virtual/input/input13
[ 2368.738440][ T5953] tun0: tun_chr_ioctl cmd 1074025675
[ 2368.740682][ T5953] tun0: persist enabled
[ 2368.871579][ T5953] tun0: tun_chr_ioctl cmd 1074025675
[ 2368.885965][ T5953] tun0: persist enabled
[ 2447.917973][ T5487] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 2448.505723][ T5487] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 2448.508274][ T5487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2448.618969][ T5487] usb 2-1: config 0 descriptor??
[ 2451.137225][ T5487] [drm] vendor descriptor length:e0 data:e0 0c f7 e1 d6 80 e8 fa 6d 9f ea
[ 2451.140129][ T5487] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 2451.199167][ T5487] [drm:udl_init] *ERROR* Selecting channel failed
[ 2451.496617][ T5487] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[ 2451.500149][ T5487] [drm] Initialized udl on minor 2
[ 2451.526385][ T5487] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2451.547014][ T5487] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 2451.630158][ T4372] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2451.658752][ T4372] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2451.669655][ T4372] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 2451.936142][ T5487] usb 2-1: USB disconnect, device number 8
[ 2478.666378][ T34] kauditd_printk_skb: 1 callbacks suppressed
[ 2478.667066][ T34] audit: type=1326 audit(2733.273:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.1.700" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x0
[ 2486.785192][ T6115] syz_tun: entered promiscuous mode
[ 2486.904728][ T6115] syz_tun: left promiscuous mode
[ 2488.149096][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'.
[ 2496.454618][ T6163] input: syz0 as /devices/virtual/input/input14
[ 2518.140471][ T5252] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96
[ 2621.165047][ T6315] 8021q: VLANs not supported on lo
[ 2643.660724][ T34] audit: type=1326 audit(2898.303:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz.1.772" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x0
[ 2665.819409][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.779'.
[ 2747.339323][ T6197] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 2747.395244][ T6197] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2747.757857][ T6197] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[ 2748.736220][ T6197] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2748.746309][ T6197] usb 2-1: no configurations
[ 2748.747622][ T6197] usb 2-1: can't read configurations, error -22
[ 2768.785063][ T6493] input: syz1 as /devices/virtual/input/input15
[ 2825.392224][ T6557] syz_tun: entered promiscuous mode
[ 2825.438982][ T6557] syz_tun: left promiscuous mode
[ 2864.075834][ T34] audit: type=1326 audit(3118.663:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz.0.859" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x0
[ 2889.735809][ T6635] netlink: 'syz.0.873': attribute type 1 has an invalid length.
[ 2947.851292][ T6698] batadv_slave_1: entered promiscuous mode
[ 2948.668204][ T6700] netlink: 'syz.1.900': attribute type 58 has an invalid length.
[ 2973.046701][ T6609] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 2973.447097][ T6609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2973.450134][ T6609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2973.496445][ T6609] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 2973.499176][ T6609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2973.672155][ T6609] usb 2-1: config 0 descriptor??
[ 2975.790819][ T6609] hid-led 0003:27B8:01ED.000B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0
[ 2975.925320][ T6609] hid-led 0003:27B8:01ED.000B: ThingM blink(1) initialized
[ 2976.710015][ T6061] usb 2-1: USB disconnect, device number 11
[ 2992.252080][ T6778] netlink: 32 bytes leftover after parsing attributes in process `syz.0.921'.
[ 3029.790585][ T6816] input: syz0 as /devices/virtual/input/input16
[ 3048.826507][ T6847] netlink: 'syz.1.948': attribute type 19 has an invalid length.
[ 3051.567446][ T6851] syzkaller1: entered promiscuous mode
[ 3051.569515][ T6851] syzkaller1: entered allmulticast mode
[ 3053.248454][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'.
[ 3097.108133][ T6928] vxcan1: entered allmulticast mode
[ 3097.151627][ T6928] vxcan1: left allmulticast mode
[ 3108.737789][ T6939] vlan0: entered promiscuous mode
[ 3108.742062][ T6939] veth0_to_bridge: entered promiscuous mode
[ 3108.782162][ T6939] vlan0: entered allmulticast mode
[ 3108.788799][ T6939] veth0_to_bridge: entered allmulticast mode
[ 3136.108035][ T6934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3136.290538][ T6934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3146.739911][ T6934] hsr_slave_0: entered promiscuous mode
[ 3146.809264][ T6934] hsr_slave_1: entered promiscuous mode
[ 3146.848509][ T6934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3146.850847][ T6934] Cannot create hsr debugfs directory
[ 3153.055551][ T6934] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 3153.150037][ T6934] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 3153.301619][ T6934] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 3153.367895][ T6934] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 3164.722513][ T6934] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3198.002401][ T6934] veth0_vlan: entered promiscuous mode
[ 3198.589395][ T6934] veth1_vlan: entered promiscuous mode
[ 3199.421202][ T6934] veth0_macvtap: entered promiscuous mode
[ 3199.690589][ T6934] veth1_macvtap: entered promiscuous mode
[ 3201.164483][ T6934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3201.167263][ T6934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3201.169492][ T6934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3201.171844][ T6934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3252.087843][ T7364] binder: 7362:7364 ioctl c0306201 20004a40 returned -22
[ 3270.361053][ T7379] [U]
[ 3270.652571][ T7379] [U]
[ 3270.654756][ T7379] [U]
[ 3270.656257][ T7379] [U]
[ 3270.661998][ T7379] [U]
[ 3270.664003][ T7379] [U]
[ 3270.665398][ T7379] [U]
[ 3270.666815][ T7379] [U]
[ 3270.802760][ T7379] [U]
[ 3270.803887][ T7379] [U]
[ 3270.804695][ T7379] [U]
[ 3271.094352][ T7378] [U]
[ 3284.802201][ T7389] pim6reg1: entered promiscuous mode
[ 3284.806533][ T7389] pim6reg1: entered allmulticast mode
[ 3312.757741][ T7419] netlink: 'syz.2.1021': attribute type 29 has an invalid length.
[ 3312.808267][ T7419] netlink: 'syz.2.1021': attribute type 29 has an invalid length.
[ 3312.854177][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'.
[ 3318.876956][ T7424] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 3376.101679][ T7468] syz.2.1041 (7468): drop_caches: 2
[ 3395.496911][ T7485] syzkaller1: entered allmulticast mode
[ 3438.079463][ T34] audit: type=1326 audit(3692.723:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.0.1056" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5ba code=0x0
[ 3489.976860][ T7528] sctp: [Deprecated]: syz.2.1063 (pid 7528) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 3489.976860][ T7528] Use struct sctp_sack_info instead
[ 3508.650313][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'.
[ 3758.337685][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'.
[ 3758.400305][ T7307] hid-generic 0000:0D17:0000.000C: unknown main item tag 0x0
[ 3758.401647][ T7307] hid-generic 0000:0D17:0000.000C: unknown main item tag 0x0
[ 3758.540986][ T7307] hid-generic 0000:0D17:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 3834.690640][ T7626] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[ 3911.912478][ T7637] block nbd2: shutting down sockets
[ 3989.961244][ T7663] ALSA: seq fatal error: cannot create timer (-22)
[ 4600.787584][ T37] INFO: task syz.2.1117:7682 blocked for more than 434 seconds.
[ 4600.789862][ T37] Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0
[ 4600.791504][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 4604.667973][ T37] task:syz.2.1117 state:D stack:0 pid:7682 tgid:7681 ppid:6934 flags:0x00000008
[ 4604.671218][ T37] Call Trace:
[ 4604.672561][ T37] [<ffffffff861cbf70>] __schedule+0xdaa/0x393a
[ 4616.177438][ T37] [<ffffffff861cebc4>] schedule+0xc4/0x324
[ 4616.179512][ T37] [<ffffffff861cf50c>] schedule_preempt_disabled+0x16/0x28
[ 4616.181398][ T37] [<ffffffff861d8780>] rwsem_down_read_slowpath+0x56a/0x91e
[ 4626.341144][ T37] [<ffffffff861d91d2>] down_read+0xe4/0x45e
[ 4626.342678][ T37] [<ffffffff80143da2>] do_exit+0x810/0x296e
[ 4630.547504][ T37] [<ffffffff80146460>] do_group_exit+0xd4/0x26c
[ 4630.549006][ T37] [<ffffffff8017cf9e>] get_signal+0x1f4c/0x22de
[ 4630.550245][ T37] [<ffffffff8006b8c4>] arch_do_signal_or_restart+0xa3c/0x1d2c
[ 4630.551554][ T37] [<ffffffff861c30c4>] syscall_exit_to_user_mode+0x29e/0x316
VM DIAGNOSIS:
20:31:22 Registers:
info registers vcpu 0
CPU#0
V = 0
pc ffffffff81d02e86
mhartid 0000000000000000
mstatus 0000000a000000a0
hstatus 0000000200000000
vsstatus 0000000a00000000
mip 0000000000000000
mie 000000000000022a
mideleg 0000000000001666
hideleg 0000000000000444
medeleg 0000000000f0b509
hedeleg 000000000000b109
mtvec 00000000800004f0
stvec ffffffff861e63e4
vstvec 0000000000000000
mepc ffffffff8554230a
sepc ffffffff861e4106
vsepc 0000000000000000
mcause 8000000000000003
scause 8000000000000005
vscause 0000000000000000
mtval 0000000000000000
stval 0000000000000000
htval 0000000000000000
mtval2 0000000000000000
mscratch 000000008004a000
sscratch 0000000000000000
satp a01270000009d607
x0/zero 0000000000000000 x1/ra ffffffff81d02e5c x2/sp ff200000002e7690 x3/gp ffffffff899f4f80
x4/tp ff60000014aa9a40 x5/t0 bb87ae095d073902 x6/t1 ffe3ffff0005cebc x7/t2 0000000000000225
x8/s0 ff200000002e76d0 x9/s1 ffffffff90d8bae0 x10/a0 ffffffff90d8bb28 x11/a1 000000000000001f
x12/a2 0000000000000002 x13/a3 ffffffff81d02e5c x14/a4 1ffffffff21b1765 x15/a5 ff2000000006d000
x16/a6 0000000000000003 x17/a7 0000000000000003 x18/s2 000000000000002f x19/s3 0000000000000000
x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 0000000000000000 x23/s7 ffffffff90badd01
x24/s8 dfffffff00000000 x25/s9 fffffffef21b1767 x26/s10 0000000000000010 x27/s11 0000000000000010
x28/t3 ff60000014aaa560 x29/t4 ffe3ffff0005cebc x30/t5 ffe3ffff0005cebd x31/t6 0000000000000005
f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000
f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000
f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000
f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000
f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000
f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000
f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000
info registers vcpu 1
CPU#1
V = 0
pc ffffffff80070210
mhartid 0000000000000001
mstatus 0000000a000001a0
hstatus 0000000200000000
vsstatus 0000000a00000000
mip 0000000000000020
mie 000000000000022a
mideleg 0000000000001666
hideleg 0000000000000444
medeleg 0000000000f0b509
hedeleg 000000000000b109
mtvec 00000000800004f0
stvec ffffffff861e63e4
vstvec 0000000000000000
mepc ffffffff8008378a
sepc ffffffff8187af44
vsepc 0000000000000000
mcause 0000000000000009
scause 8000000000000005
vscause 0000000000000000
mtval 0000000000000000
stval 0000000000000000
htval 0000000000000000
mtval2 0000000000000000
mscratch 0000000080048000
sscratch 0000000000000000
satp a05e7000000b695d
x0/zero 0000000000000000 x1/ra ffffffff802bdc3e x2/sp ff200000000166f0 x3/gp ffffffff899f4f80
x4/tp ff6000001c5d8000 x5/t0 0000000000046600 x6/t1 0000000000000001 x7/t2 0000000000000182
x8/s0 ff20000000016850 x9/s1 0000000000000002 x10/a0 ff6000001c5d8b1c x11/a1 ffffffff90da1fc8
x12/a2 0000000000010100 x13/a3 0000000000000000 x14/a4 ff6000001c5d9000 x15/a5 0000000000000000
x16/a6 ffffffff803044d4 x17/a7 0000000000000001 x18/s2 0000000000000000 x19/s3 0000000000000000
x20/s4 ffffffff881d0c40 x21/s5 1fe4000000002ce8 x22/s6 0000000000000000 x23/s7 ffffffff803044d4
x24/s8 0000000000000000 x25/s9 ffffffff8645a748 x26/s10 ffffffff90da1fc0 x27/s11 0000000200000120
x28/t3 ff6000001c5d8008 x29/t4 0000000000000000 x30/t5 1fec0000038bb001 x31/t6 0000000000000006
f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000
f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000
f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000
f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000
f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000
f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000
f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000
f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000