syzkaller login: [ 240.882843][ T2896] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 250.303160][ T2896] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 250.374489][ T2896] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 250.446190][ T2896] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:59715' (ECDSA) to the list of known hosts. 1970/01/01 00:04:42 fuzzer started 1970/01/01 00:04:54 dialing manager at localhost:33585 1970/01/01 00:04:58 syscalls: 2768 1970/01/01 00:04:58 code coverage: enabled 1970/01/01 00:04:58 comparison tracing: enabled 1970/01/01 00:04:58 extra coverage: enabled 1970/01/01 00:04:58 setuid sandbox: enabled 1970/01/01 00:04:58 namespace sandbox: enabled 1970/01/01 00:04:58 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:04:58 fault injection: enabled 1970/01/01 00:04:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:04:58 net packet injection: enabled 1970/01/01 00:04:58 net device setup: enabled 1970/01/01 00:04:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:04:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:04:58 USB emulation: enabled 1970/01/01 00:04:58 hci packet injection: /dev/vhci does not exist 1970/01/01 00:04:58 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:04:58 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:02 fetching corpus: 50, signal 21949/23509 (executing program) 1970/01/01 00:05:05 fetching corpus: 100, signal 28954/31812 (executing program) 1970/01/01 00:05:07 fetching corpus: 150, signal 33291/37337 (executing program) 1970/01/01 00:05:10 fetching corpus: 200, signal 39876/44744 (executing program) 1970/01/01 00:05:11 fetching corpus: 250, signal 43081/48833 (executing program) 1970/01/01 00:05:13 fetching corpus: 300, signal 46540/53025 (executing program) 1970/01/01 00:05:16 fetching corpus: 350, signal 48634/55926 (executing program) 1970/01/01 00:05:18 fetching corpus: 400, signal 51324/59240 (executing program) 1970/01/01 00:05:19 fetching corpus: 450, signal 52681/61364 (executing program) 1970/01/01 00:05:22 fetching corpus: 500, signal 54474/63768 (executing program) 1970/01/01 00:05:24 fetching corpus: 550, signal 56316/66158 (executing program) 1970/01/01 00:05:27 fetching corpus: 600, signal 57387/67900 (executing program) 1970/01/01 00:05:29 fetching corpus: 650, signal 59001/69967 (executing program) 1970/01/01 00:05:32 fetching corpus: 700, signal 60620/71987 (executing program) 1970/01/01 00:05:34 fetching corpus: 750, signal 62153/73843 (executing program) 1970/01/01 00:05:36 fetching corpus: 800, signal 63421/75536 (executing program) 1970/01/01 00:05:38 fetching corpus: 850, signal 65747/77860 (executing program) 1970/01/01 00:05:40 fetching corpus: 900, signal 67001/79411 (executing program) 1970/01/01 00:05:42 fetching corpus: 950, signal 67845/80588 (executing program) 1970/01/01 00:05:44 fetching corpus: 1000, signal 69188/82087 (executing program) 1970/01/01 00:05:47 fetching corpus: 1050, signal 70384/83434 (executing program) 1970/01/01 00:05:49 fetching corpus: 1100, signal 72422/85241 (executing program) 1970/01/01 00:05:51 fetching corpus: 1150, signal 73427/86372 (executing program) 1970/01/01 00:05:53 fetching corpus: 1200, signal 74695/87607 (executing program) 1970/01/01 00:05:57 fetching corpus: 1250, signal 75654/88621 (executing program) 1970/01/01 00:05:59 fetching corpus: 1300, signal 76526/89584 (executing program) 1970/01/01 00:06:01 fetching corpus: 1350, signal 77274/90430 (executing program) 1970/01/01 00:06:03 fetching corpus: 1400, signal 78261/91389 (executing program) 1970/01/01 00:06:06 fetching corpus: 1450, signal 78987/92152 (executing program) 1970/01/01 00:06:08 fetching corpus: 1500, signal 79723/92942 (executing program) 1970/01/01 00:06:10 fetching corpus: 1550, signal 80408/93638 (executing program) 1970/01/01 00:06:11 fetching corpus: 1600, signal 81560/94484 (executing program) 1970/01/01 00:06:14 fetching corpus: 1650, signal 82078/95100 (executing program) 1970/01/01 00:06:16 fetching corpus: 1700, signal 83164/95889 (executing program) 1970/01/01 00:06:18 fetching corpus: 1750, signal 83706/96415 (executing program) 1970/01/01 00:06:20 fetching corpus: 1800, signal 85254/97262 (executing program) 1970/01/01 00:06:22 fetching corpus: 1850, signal 86875/98088 (executing program) 1970/01/01 00:06:24 fetching corpus: 1900, signal 87422/98512 (executing program) 1970/01/01 00:06:26 fetching corpus: 1950, signal 88124/99024 (executing program) 1970/01/01 00:06:28 fetching corpus: 1989, signal 88408/99390 (executing program) 1970/01/01 00:06:28 fetching corpus: 1989, signal 88408/99658 (executing program) 1970/01/01 00:06:28 fetching corpus: 1989, signal 88408/99974 (executing program) 1970/01/01 00:06:28 fetching corpus: 1989, signal 88408/100255 (executing program) 1970/01/01 00:06:28 fetching corpus: 1989, signal 88408/100513 (executing program) 1970/01/01 00:06:28 fetching corpus: 1989, signal 88408/100773 (executing program) 1970/01/01 00:06:28 fetching corpus: 1989, signal 88408/101026 (executing program) 1970/01/01 00:06:29 fetching corpus: 1989, signal 88408/101317 (executing program) 1970/01/01 00:06:29 fetching corpus: 1989, signal 88408/101578 (executing program) 1970/01/01 00:06:29 fetching corpus: 1989, signal 88408/101849 (executing program) 1970/01/01 00:06:29 fetching corpus: 1989, signal 88408/102124 (executing program) 1970/01/01 00:06:29 fetching corpus: 1989, signal 88408/102425 (executing program) 1970/01/01 00:06:29 fetching corpus: 1989, signal 88408/102452 (executing program) 1970/01/01 00:06:29 fetching corpus: 1989, signal 88408/102452 (executing program) 1970/01/01 00:07:58 starting 2 fuzzer processes 00:08:16 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400801, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), 0x4) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/174, 0xae}], 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={0x0, 0x40, 0x1, [0x1, 0x2000000000000, 0x9, 0x1, 0x1], [0x7, 0x3, 0x4, 0xe9, 0x1, 0x8, 0x7, 0x80, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffff7, 0x3, 0xff, 0x6, 0x9, 0x4, 0xfff, 0x101, 0x2, 0x49, 0x7, 0x3, 0x8, 0xfff, 0x4, 0x144, 0x67, 0x3, 0xad8, 0x7, 0x6, 0x7, 0x7, 0x0, 0x1ff, 0x7, 0x3, 0x4, 0xcf1, 0xc97, 0xfff, 0x9, 0x0, 0x3, 0x8000, 0x4, 0x82, 0x100, 0x101, 0xfffffffeffffffff, 0x6, 0x4458a997, 0xf0, 0x8a3e, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x2, 0xd3c1, 0x1ff, 0x7fffffff, 0x3f, 0xfffffffffffeffff, 0x9, 0xffffffff, 0x7, 0xcd2, 0x80000000, 0xa5c, 0x2, 0x8, 0x75, 0x0, 0x1f, 0x4, 0x9cef, 0x800, 0x400, 0x7, 0xfff, 0x400, 0x4, 0x5, 0x7, 0x0, 0x3, 0x7, 0x1, 0x40, 0x7ff, 0xfffffffffffffffe, 0x2, 0x0, 0x8a, 0x4, 0x6, 0xfffffffffffffe01, 0x4, 0x3, 0x8000, 0xfffffffffffffff9, 0x1, 0x3, 0x7b98, 0x0, 0x800, 0x7, 0x1, 0x9, 0x3f, 0x8, 0x1, 0x2, 0x2, 0x10001, 0xe06c, 0x1, 0xfff, 0x93, 0x1ff, 0x3]}) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000005c0)) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x1b, 0x2}, 0x7) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000780)=0xe8) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000007c0)) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000800)={0x8, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000940)={0x0}, &(0x7f0000000980)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)={r5, 0xa4, 0x8, [0xe033, 0xe97, 0x6, 0x5, 0x3f, 0x2, 0x5, 0x6]}, &(0x7f0000000a00)=0x18) ioctl(r4, 0x5, &(0x7f0000000a40)="2135de1728108cc2cfef1b98c9c4f8ac60a71a1fb25419423b8ebd0736f5b63e5f1918d3cfd6ebfeded2a602fc29f9e10023515ac151b00d046326526201f7c1bb50bb3f1ada70c621737acfb14b595b79d4beadfe8415304f27c81d8507f88adc3601ee7481b602c04abb278986b5dd20e35cd05580a109337caaf5ce8c05705cb031cfce600aa1d9a8540918a74701285246c529608140e7bc2c2cee17413bac06c12175a12c5d207bd8d4e540cf4dcc1460acaf10a1c4b82c7513026c0d5aa5ced1b10fb7c5743c2fe86832540861477faa5f2f94967ac5") fsync(r0) recvfrom$inet(r0, &(0x7f0000000b40)=""/233, 0xe9, 0x40000061, &(0x7f0000000c40)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000c80)={@multicast1, @loopback, @empty}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000cc0)={'gretap0\x00', r2, 0x8000, 0x40, 0x7f, 0x1, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x67, 0x0, 0xf9, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@noop, @noop, @end, @cipso={0x86, 0x20, 0x2, [{0x0, 0x8, "0d6fc8d93994"}, {0x2, 0x12, "57300859dc43f0510d9a155d88574192"}]}, @cipso={0x86, 0x30, 0x0, [{0x5, 0x5, '_zS'}, {0x2, 0xd, "203c29cc5e63a3a43025aa"}, {0x2, 0xa, "59571fca7475c826"}, {0x5, 0xe, "b4e37a9b5ea3324ae25ad70a"}]}]}}}}}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000dc0)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e22, 0x80, 0x4e21, 0x0, 0x2, 0x0, 0x10, 0x89, r6, r3}, {0x3, 0x59, 0x100, 0x1000, 0x20, 0x0, 0x4, 0x5}, {0x7f, 0x7fff, 0x9, 0x10001}, 0x10001, 0x6e6bb2}, {{@in6=@empty, 0x4d6, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x1, 0x2, 0x7, 0xf37, 0xf53d, 0x5}}, 0xe8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x41) 00:08:39 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x270, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x3}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x14c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf294}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61672c5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7083b175}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1192cca9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cd0303}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4789e87}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe95f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ccf3075}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x74c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a89e245}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2779a873}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77794f44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5585}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d4c20aa}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x303ca8a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3484}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7540bf9d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52bd6fa9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d182713}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12dd}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e9ec3b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1836}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf46b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c564f5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20620dea}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1768}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57a6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72871117}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d13}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}]}]}]}, 0x270}}, 0x80) r1 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000400)=0x80, 0x80000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x138, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xed5}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xbb593420f2db9b4e}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x2c}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff80}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7eb}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff54}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) getsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000680), &(0x7f00000006c0)=0x4) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x429}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x44}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000020}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400080c0}, 0x40001) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x198, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x128, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffff42}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x44091) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x60c00}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x80, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3d}}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1c}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40)='nl80211\x00', r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x62}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040080) r9 = syz_open_dev$vcsu(&(0x7f0000001080)='/dev/vcsu#\x00', 0x0, 0x82000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100)='nl80211\x00', r2) sendmsg$NL80211_CMD_LEAVE_OCB(r9, &(0x7f00000011c0)={&(0x7f00000010c0), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x20, r10, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x63}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) [ 525.245646][ T3072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.386353][ T3072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.696674][ T3072] device hsr_slave_0 entered promiscuous mode [ 533.746819][ T3072] device hsr_slave_1 entered promiscuous mode [ 538.350603][ T3072] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 538.479765][ T3072] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 538.596741][ T3072] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 538.802984][ T3072] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 549.113290][ T3072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.555787][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 549.651661][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.040793][ T3214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.200096][ T3214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.815552][ T1940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 555.864593][ T1940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.040685][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 556.102512][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.304322][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.474077][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 557.186445][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.196723][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.493727][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.525913][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 558.161881][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 559.072288][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 559.094025][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 562.596708][ T3214] device hsr_slave_0 entered promiscuous mode [ 562.739637][ T3214] device hsr_slave_1 entered promiscuous mode [ 562.812735][ T3214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.816913][ T3214] Cannot create hsr debugfs directory [ 567.569807][ T3214] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 567.723042][ T3214] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 567.890407][ T3214] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 568.329607][ T3214] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 572.061796][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 572.131274][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 577.439981][ T3214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.776530][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.794884][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 578.294275][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 578.349070][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 578.446014][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 578.481663][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 578.611380][ T3072] device veth0_vlan entered promiscuous mode [ 579.175062][ T3072] device veth1_vlan entered promiscuous mode [ 580.703670][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 580.779763][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 581.045298][ T3072] device veth0_macvtap entered promiscuous mode [ 581.262234][ T3072] device veth1_macvtap entered promiscuous mode [ 582.175295][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 582.224088][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 582.266808][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 582.512562][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 582.630838][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 582.820299][ T3072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.823046][ T3072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.824255][ T3072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.825525][ T3072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.890025][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 585.931385][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 586.163887][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 586.185451][ T3072] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 586.251709][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.420961][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 586.665378][ T1940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 587.435205][ T3265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 587.490083][ T3265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 587.749077][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 587.793917][ T3277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 588.066851][ T3214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 589.106347][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 589.122258][ T3103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 590.334079][ T3510] Unable to handle kernel access to user memory without uaccess routines at virtual address 00000000200007c0 [ 590.353470][ T3510] Oops [#1] [ 590.354378][ T3510] Modules linked in: [ 590.355379][ T3510] CPU: 0 PID: 3510 Comm: syz-executor.0 Not tainted 5.12.0-rc2-syzkaller-00474-ga5406a7ff56e #0 [ 590.356891][ T3510] Hardware name: riscv-virtio,qemu (DT) [ 590.358814][ T3510] epc : sock_ioctl+0x4c4/0x66c [ 590.360145][ T3510] ra : sock_ioctl+0x4c4/0x66c [ 590.361349][ T3510] epc : ffffffe0020e2068 ra : ffffffe0020e2068 sp : ffffffe0217afda0 [ 590.362510][ T3510] gp : ffffffe004588910 tp : ffffffe0063b8000 t0 : 0000000000000000 [ 590.363799][ T3510] t1 : 0000000000000001 t2 : 00000000000f4240 s0 : ffffffe0217afe30 [ 590.365055][ T3510] s1 : 0000000000040000 a0 : 0000000000000000 a1 : 0000000000000007 [ 590.366242][ T3510] a2 : 1ffffffc00c77000 a3 : ffffffe002a8f8e6 a4 : 0000000000000000 [ 590.368063][ T3510] a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffffffe000084ac8 [ 590.369222][ T3510] s2 : 0000000000000000 s3 : 0000000000008902 s4 : 00000000200007c0 [ 590.370445][ T3510] s5 : ffffffe00458c0d0 s6 : ffffffe00d0a79c0 s7 : ffffffe01e588000 [ 590.371590][ T3510] s8 : 0000000000008904 s9 : ffffffe00d0a7a80 s10: 0000000000000000 [ 590.372724][ T3510] s11: 0000000000020000 t3 : c37df9c665816c00 t4 : ffffffc403c8cfb2 [ 590.373869][ T3510] t5 : ffffffc403c8cfba t6 : 0000000000040000 [ 590.374849][ T3510] status: 0000000000000120 badaddr: 00000000200007c0 cause: 000000000000000f [ 590.376194][ T3510] Call Trace: [ 590.376900][ T3510] [] sock_ioctl+0x4c4/0x66c [ 590.378436][ T3510] [] sys_ioctl+0x5c2/0xd56 [ 590.379651][ T3510] [] ret_from_syscall+0x0/0x2 [ 590.383659][ T3510] ---[ end trace 6ba83083800dcc4b ]--- [ 590.386694][ T3510] Kernel panic - not syncing: Fatal exception [ 590.388691][ T3510] SMP: stopping secondary CPUs [ 590.390584][ T3510] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:01:04 Registers: info registers vcpu 0 pc ffffffe0000d359e mhartid 0000000000000000 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe0001a1fe6 sepc ffffffe0001a1fe6 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe0000d358a x2/sp ffffffe01e467850 x3/gp ffffffe004588910 x4/tp ffffffe00a7c17c0 x5/t0 0000000000046000 x6/t1 0000000000000001 x7/t2 00000000000f4240 x8/s0 ffffffe01e467910 x9/s1 ffffffe002e27840 x10/a0 ffffffe067d43840 x11/a1 0000000000000003 x12/a2 1ffffffc0cfa8708 x13/a3 ffffffe0000d358a x14/a4 0000000000000000 x15/a5 0000000000000120 x16/a6 0000000000f00000 x17/a7 ffffffe000996cfc x18/s2 ffffffe0050495a8 x19/s3 ffffffe067d43840 x20/s4 0000000000000001 x21/s5 0000000000000000 x22/s6 ffffffe0051440c0 x23/s7 0000000000000000 x24/s8 0000000000000000 x25/s9 ffffffe000996cfc x26/s10 ffffffe00458c0d0 x27/s11 0000000000000000 x28/t3 c37df9c665816c00 x29/t4 ffffffc403c8cfc3 x30/t5 ffffffc403c8cfc5 x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffe0000ca72c mhartid 0000000000000001 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe0001a24f4 sepc ffffffe0000c994e mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe0000ca71e x2/sp ffffffe005893680 x3/gp ffffffe004588910 x4/tp ffffffe0058897c0 x5/t0 0000000000046000 x6/t1 be04f0202fe48000 x7/t2 0000003fbc6606d8 x8/s0 ffffffe0058936e0 x9/s1 ffffffe067d60840 x10/a0 ffffffe067d60840 x11/a1 0000000000000003 x12/a2 1ffffffc0cfac108 x13/a3 ffffffe0000ca71e x14/a4 0000000000000000 x15/a5 0000000000000120 x16/a6 0000000000f00000 x17/a7 f9db0a26d6e00000 x18/s2 0000000000008710 x19/s3 ffffffe00588a158 x20/s4 ffffffe067d71e98 x21/s5 ffffffe00588a7c0 x22/s6 ffffffe002e27840 x23/s7 0000000000008710 x24/s8 0000000000000120 x25/s9 ffffffe0050495a8 x26/s10 0000000000000003 x27/s11 ffffffe00013bc88 x28/t3 c37df9c665816c00 x29/t4 ffffffc400a08107 x30/t5 ffffffc400a0810e x31/t6 0000000000000025 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000