last executing test programs: 13.217151017s ago: executing program 0 (id=238): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="170000000000000000", @ANYRES32], 0x20) 13.02342508s ago: executing program 0 (id=239): socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x726c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x20) 12.87681221s ago: executing program 0 (id=241): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b0", 0x3}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 11.366439061s ago: executing program 0 (id=248): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0xe, 0x18}, 0x20) 11.227705999s ago: executing program 0 (id=250): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00030200000002031b77cea823d86d25f15f75b17d62323a7e397329265d2942d6f37693fd1abcefbd"]}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) 9.828975433s ago: executing program 0 (id=253): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 775.368579ms ago: executing program 1 (id=260): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4082172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) 653.255507ms ago: executing program 1 (id=261): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000006540), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000006580)={0x28, 0x4, 0x0, {0x1, 0x80000001}}, 0x28) 555.302713ms ago: executing program 1 (id=262): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x3fff}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, 0x0, 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 276.286283ms ago: executing program 1 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) 104.205544ms ago: executing program 1 (id=264): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x68010) 0s ago: executing program 1 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:34864' (ED25519) to the list of known hosts. syzkaller login: [ 84.655594][ T3311] cgroup: Unknown subsys name 'net' [ 84.848010][ T3311] cgroup: Unknown subsys name 'cpuset' [ 84.880854][ T3311] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.324819][ T3311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.177126][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.193638][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.573346][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.591521][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.353624][ T3317] hsr_slave_0: entered promiscuous mode [ 96.361933][ T3317] hsr_slave_1: entered promiscuous mode [ 96.850118][ T3316] hsr_slave_0: entered promiscuous mode [ 96.852812][ T3316] hsr_slave_1: entered promiscuous mode [ 96.857001][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 96.857688][ T3316] Cannot create hsr debugfs directory [ 97.411874][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.440698][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.462520][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.477011][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.655041][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.670318][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.701052][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.731518][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.513599][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.832695][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.698290][ T3317] veth0_vlan: entered promiscuous mode [ 101.770338][ T3317] veth1_vlan: entered promiscuous mode [ 101.963587][ T3317] veth0_macvtap: entered promiscuous mode [ 101.989972][ T3316] veth0_vlan: entered promiscuous mode [ 102.012534][ T3316] veth1_vlan: entered promiscuous mode [ 102.028703][ T3317] veth1_macvtap: entered promiscuous mode [ 102.161947][ T2637] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.162599][ T2637] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.162767][ T2637] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.162899][ T2637] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.321447][ T3316] veth0_macvtap: entered promiscuous mode [ 102.379974][ T3316] veth1_macvtap: entered promiscuous mode [ 102.523605][ T999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.525955][ T999] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.528298][ T999] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.528477][ T999] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.651823][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.546713][ T3492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.291293][ T3503] tmpfs: Invalid gid '0x00000000ffffffff' [ 108.266991][ T3511] veth1_to_bridge: entered promiscuous mode [ 108.270433][ T3511] veth1_to_bridge: entered allmulticast mode [ 108.570042][ T3514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21'. [ 108.636636][ T3515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'. [ 109.128935][ T3523] Illegal XDP return value 3212587104 on prog (id 1) dev syz_tun, expect packet loss! [ 109.916218][ T3539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.941688][ T3539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.189521][ T3544] process 'syz.0.32' launched '/dev/fd/4' with NULL argv: empty string added [ 110.575145][ T3497] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.750156][ T3497] usb 1-1: Using ep0 maxpacket: 32 [ 110.804605][ T3497] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.806024][ T3497] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.812079][ T3497] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.813814][ T3497] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 110.814067][ T3497] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.826493][ T3497] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 110.827005][ T3497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.889182][ T3497] usb 1-1: config 0 descriptor?? [ 111.476122][ T3497] hid-generic 0003:044F:B65D.0001: unknown main item tag 0x0 [ 111.476576][ T3497] hid-generic 0003:044F:B65D.0001: unknown main item tag 0x0 [ 111.481042][ T3497] hid-generic 0003:044F:B65D.0001: unknown main item tag 0x0 [ 111.481385][ T3497] hid-generic 0003:044F:B65D.0001: unknown main item tag 0x0 [ 111.481524][ T3497] hid-generic 0003:044F:B65D.0001: unknown main item tag 0x0 [ 111.497888][ T3497] hid-generic 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 111.669827][ T3497] usb 1-1: USB disconnect, device number 2 [ 111.736677][ T3554] fido_id[3554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 114.236352][ T3561] syzkaller0: entered promiscuous mode [ 114.236551][ T3561] syzkaller0: entered allmulticast mode [ 115.154563][ T3579] Zero length message leads to an empty skb [ 115.424531][ T3431] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.585431][ T3431] usb 1-1: Using ep0 maxpacket: 32 [ 115.633131][ T3431] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 115.640540][ T3431] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 115.647478][ T3431] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 115.653089][ T3431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.657642][ T3431] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.660054][ T3431] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.663557][ T3431] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.670782][ T3431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.700450][ T3431] usb 1-1: config 0 descriptor?? [ 115.995552][ T3431] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.029062][ T3431] usb 1-1: USB disconnect, device number 3 [ 116.046917][ T3431] usblp0: removed [ 116.646526][ T3431] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.484653][ T3431] usb 1-1: Using ep0 maxpacket: 32 [ 117.548393][ T3431] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.550269][ T3431] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.552019][ T3431] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.554948][ T3431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.557313][ T3431] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.560962][ T3431] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.576663][ T3431] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.578516][ T3431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.837425][ T3431] usb 1-1: config 0 descriptor?? [ 118.624333][ T3431] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.404339][ C0] usblp0: nonzero read bulk status received: -71 [ 119.408083][ T3582] usblp0: error -71 reading from printer [ 119.409446][ T3422] usb 1-1: USB disconnect, device number 4 [ 119.459930][ T3422] usblp0: removed [ 127.543606][ T3635] binder: 3633:3635 got reply transaction with no transaction stack [ 127.552720][ T3635] binder: 3633:3635 transaction reply to 0:0 failed 1/29201/-71, code 0 size 0-0 line 3135 [ 127.647645][ T3638] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 127.648114][ T3638] netlink: 224 bytes leftover after parsing attributes in process `syz.0.67'. [ 127.719607][ T3431] binder: undelivered TRANSACTION_ERROR: 29201 [ 127.897584][ T3644] netlink: 'syz.0.70': attribute type 1 has an invalid length. [ 128.160916][ T3644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.309806][ T3644] veth3: entered promiscuous mode [ 128.338713][ T3644] bond1: (slave veth3): Enslaving as an active interface with a down link [ 128.440044][ T3644] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 133.999653][ T3688] ALSA: seq fatal error: cannot create timer (-19) [ 135.404974][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 135.534651][ T10] usb 1-1: device descriptor read/64, error -71 [ 135.917904][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 136.571291][ T3698] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.86'. [ 136.908787][ T10] usb 1-1: device descriptor read/64, error -71 [ 137.235878][ T10] usb usb1-port1: attempt power cycle [ 137.865261][ T3698] could not allocate digest TFM handle sha512-ssse3 [ 137.964710][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.998409][ T10] usb 1-1: device descriptor read/8, error -71 [ 138.494809][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.612118][ T10] usb 1-1: device descriptor read/8, error -71 [ 138.727104][ T10] usb usb1-port1: unable to enumerate USB device [ 144.559506][ T3717] veth1_to_hsr: entered promiscuous mode [ 144.562611][ T3717] macvlan2: entered promiscuous mode [ 144.580221][ T3717] veth1_to_hsr: left promiscuous mode [ 144.757467][ T3719] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.125130][ T3735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.126016][ T3735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.357686][ T3743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.358503][ T3743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.824706][ T3422] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 146.954768][ T3422] usb 1-1: device descriptor read/64, error -71 [ 147.198652][ T3422] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 147.215427][ T3753] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.335024][ T3422] usb 1-1: device descriptor read/64, error -71 [ 147.454725][ T3422] usb usb1-port1: attempt power cycle [ 147.521049][ T3758] netlink: 'syz.1.107': attribute type 10 has an invalid length. [ 147.522842][ T3758] macvtap0: entered allmulticast mode [ 147.525213][ T3758] veth0_macvtap: entered allmulticast mode [ 147.601879][ T3760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.602802][ T3760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.794590][ T3422] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.818889][ T3422] usb 1-1: device descriptor read/8, error -71 [ 148.054766][ T3422] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.077713][ T3422] usb 1-1: device descriptor read/8, error -71 [ 148.186742][ T3422] usb usb1-port1: unable to enumerate USB device [ 154.405684][ T3786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 159.006425][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 159.145877][ T24] usb 1-1: device descriptor read/64, error -71 [ 159.374938][ T3823] binder: 3822:3823 ioctl c0306201 20000080 returned -14 [ 159.385231][ T3823] binder: 3822:3823 tried to acquire reference to desc 0, got 1 instead [ 159.390414][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 159.393057][ T3497] binder: undelivered TRANSACTION_COMPLETE [ 159.406413][ T3497] binder: undelivered transaction 6, process died. [ 159.526017][ T24] usb 1-1: device descriptor read/64, error -71 [ 159.636504][ T24] usb usb1-port1: attempt power cycle [ 159.930998][ T3834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.932589][ T3834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.971404][ T3834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.973298][ T3834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.987191][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 160.012694][ T24] usb 1-1: device descriptor read/8, error -71 [ 160.249225][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 160.272400][ T24] usb 1-1: device descriptor read/8, error -71 [ 160.379276][ T24] usb usb1-port1: unable to enumerate USB device [ 163.879324][ T3849] netlink: 'syz.1.140': attribute type 4 has an invalid length. [ 167.537219][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 167.545914][ T3856] veth0_macvtap: left allmulticast mode [ 167.546147][ T3856] veth0_macvtap: left promiscuous mode [ 171.707959][ T3869] netlink: 64 bytes leftover after parsing attributes in process `syz.1.146'. [ 172.066841][ T3873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.069235][ T3873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.064736][ T3431] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 176.261710][ T3431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.262193][ T3431] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 176.268484][ T3431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.280047][ T3431] usb 1-1: config 0 descriptor?? [ 176.756708][ T3431] hid-generic 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 176.938123][ T3403] usb 1-1: USB disconnect, device number 17 [ 176.956881][ T3911] fido_id[3911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:6047.0002/report_descriptor': No such file or directory [ 177.411983][ T3917] capability: warning: `syz.0.166' uses deprecated v2 capabilities in a way that may be insecure [ 177.570308][ T3919] syzkaller0: entered promiscuous mode [ 177.570816][ T3919] syzkaller0: entered allmulticast mode [ 181.998126][ T3943] syz.1.176 uses obsolete (PF_INET,SOCK_PACKET) [ 184.077862][ T3972] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 186.881297][ T3975] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 186.882160][ T3975] block device autoloading is deprecated and will be removed. [ 187.382533][ T3985] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 187.382533][ T3985] The task syz.0.189 (3985) triggered the difference, watch for misbehavior. [ 190.764730][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 190.924268][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 190.978035][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.980527][ T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.984213][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 190.985413][ T10] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 190.986947][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.009567][ T10] usb 1-1: config 0 descriptor?? [ 191.507698][ T10] hid-generic 0003:060B:500A.0003: unexpected long global item [ 191.510216][ T10] hid-generic 0003:060B:500A.0003: probe with driver hid-generic failed with error -22 [ 191.997117][ T10] usb 1-1: USB disconnect, device number 18 [ 192.233790][ T4026] devpts: Unknown parameter 'ui0x000000000000ee00' [ 196.959404][ T4042] syzkaller1: entered promiscuous mode [ 196.964645][ T4042] syzkaller1: entered allmulticast mode [ 200.979661][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 200.981789][ T4077] netlink: 'syz.0.221': attribute type 30 has an invalid length. [ 200.987339][ T4077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 205.175072][ T35] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 205.381554][ T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.381922][ T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.383678][ T35] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 205.383875][ T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.406334][ T35] usb 1-1: config 0 descriptor?? [ 205.889822][ T35] semitek 0003:1EA7:0907.0004: unknown main item tag 0x0 [ 205.890276][ T35] semitek 0003:1EA7:0907.0004: unknown main item tag 0x0 [ 205.892735][ T35] semitek 0003:1EA7:0907.0004: unknown main item tag 0x0 [ 205.897627][ T35] semitek 0003:1EA7:0907.0004: unknown main item tag 0x0 [ 205.898330][ T35] semitek 0003:1EA7:0907.0004: unknown main item tag 0x0 [ 205.908564][ T35] semitek 0003:1EA7:0907.0004: hidraw0: USB HID v66.1d Device [HID 1ea7:0907] on usb-dummy_hcd.0-1/input0 [ 206.077169][ T35] usb 1-1: USB disconnect, device number 19 [ 206.368462][ T4106] fido_id[4106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 206.480480][ T4110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.489027][ T4110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.522861][ T4128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.243'. [ 208.555957][ T4137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.557502][ T4137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.787356][ T4141] cgroup: fork rejected by pids controller in /syz1 [ 209.136132][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 209.315203][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 209.338531][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 209.338865][ T10] usb 1-1: config 0 has no interface number 0 [ 209.339164][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 209.339268][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 209.359939][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 209.360201][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.362339][ T10] usb 1-1: Product: syz [ 209.362467][ T10] usb 1-1: Manufacturer: syz [ 209.362541][ T10] usb 1-1: SerialNumber: syz [ 209.382533][ T10] usb 1-1: config 0 descriptor?? [ 209.405538][ T4144] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 209.835262][ T10] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 209.838043][ T10] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 210.042118][ T10] usb 1-1: USB disconnect, device number 20 [ 210.525178][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 210.699706][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 210.702012][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 210.705810][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.557914][ T4147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.569540][ T4147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.581271][ T4147] hsr_slave_0: entered promiscuous mode [ 212.585672][ T4147] hsr_slave_1: entered promiscuous mode [ 212.588315][ T4147] debugfs: 'hsr0' already exists in 'hsr' [ 212.588553][ T4147] Cannot create hsr debugfs directory [ 213.082323][ T4147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.186492][ T4147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.301194][ T4147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.366848][ T4147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.635605][ T4147] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.653435][ T4147] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.666117][ T4147] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.677191][ T4147] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.349272][ T4147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.941294][ T4147] veth0_vlan: entered promiscuous mode [ 216.966228][ T4147] veth1_vlan: entered promiscuous mode [ 217.082385][ T4147] veth0_macvtap: entered promiscuous mode [ 217.114394][ T4147] veth1_macvtap: entered promiscuous mode [ 217.256946][ T1177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.266818][ T1177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.268889][ T1177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.277375][ T1177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.725992][ T4225] netlink: 'syz.1.254': attribute type 1 has an invalid length. [ 220.037389][ T4250] ================================================================== [ 220.041184][ T4250] BUG: KASAN: invalid-access in __memcpy+0xc/0x54 [ 220.043445][ T4250] Write at addr f6ff800087109180 by task syz.1.265/4250 [ 220.044004][ T4250] Pointer tag: [f6], memory tag: [fe] [ 220.044091][ T4250] [ 220.044966][ T4250] CPU: 0 UID: 0 PID: 4250 Comm: syz.1.265 Not tainted syzkaller #0 PREEMPT [ 220.045639][ T4250] Hardware name: linux,dummy-virt (DT) [ 220.045945][ T4250] Call trace: [ 220.046276][ T4250] show_stack+0x18/0x24 (C) [ 220.046619][ T4250] dump_stack_lvl+0x78/0x90 [ 220.046767][ T4250] print_report+0x108/0x61c [ 220.046826][ T4250] kasan_report+0x88/0xac [ 220.046874][ T4250] __do_kernel_fault+0x170/0x1c8 [ 220.046924][ T4250] do_bad_area+0x68/0x78 [ 220.046974][ T4250] do_tag_check_fault+0x34/0x44 [ 220.047069][ T4250] do_mem_abort+0x44/0x94 [ 220.047122][ T4250] el1_abort+0x44/0x68 [ 220.047174][ T4250] el1h_64_sync_handler+0x50/0xac [ 220.047225][ T4250] el1h_64_sync+0x6c/0x70 [ 220.047397][ T4250] __memcpy+0xc/0x54 (P) [ 220.047456][ T4250] do_misc_fixups+0x1554/0x1afc [ 220.047511][ T4250] bpf_check+0x1384/0x293c [ 220.047563][ T4250] bpf_prog_load+0x63c/0xd40 [ 220.047610][ T4250] __sys_bpf+0x2e0/0x1a88 [ 220.047733][ T4250] __arm64_sys_bpf+0x24/0x34 [ 220.047810][ T4250] invoke_syscall+0x48/0x110 [ 220.047862][ T4250] el0_svc_common.constprop.0+0x40/0xe0 [ 220.047915][ T4250] do_el0_svc+0x1c/0x28 [ 220.048074][ T4250] el0_svc+0x34/0x128 [ 220.048133][ T4250] el0t_64_sync_handler+0xa0/0xe4 [ 220.048183][ T4250] el0t_64_sync+0x1a4/0x1a8 [ 220.048495][ T4250] [ 220.048772][ T4250] The buggy address belongs to a 1-page vmalloc region starting at 0xf6ff800087109000 allocated at bpf_check+0x8c/0x293c [ 220.050345][ T4250] The buggy address belongs to the physical page: [ 220.050761][ T4250] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x45c2e [ 220.051131][ T4250] flags: 0x1ffe40000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x9) [ 220.052113][ T4250] raw: 01ffe40000000000 0000000000000000 dead000000000122 0000000000000000 [ 220.052180][ T4250] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 220.052333][ T4250] page dumped because: kasan: bad access detected [ 220.052383][ T4250] [ 220.052420][ T4250] Memory state around the buggy address: [ 220.052891][ T4250] Unable to handle kernel paging request at virtual address ffff800087108f00 [ 220.053004][ T4250] Mem abort info: [ 220.053049][ T4250] ESR = 0x0000000096000007 [ 220.053134][ T4250] EC = 0x25: DABT (current EL), IL = 32 bits [ 220.053199][ T4250] SET = 0, FnV = 0 [ 220.053253][ T4250] EA = 0, S1PTW = 0 [ 220.053328][ T4250] FSC = 0x07: level 3 translation fault [ 220.053400][ T4250] Data abort info: [ 220.053449][ T4250] ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000 [ 220.053507][ T4250] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 220.053571][ T4250] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 220.053799][ T4250] swapper pgtable: 4k pages, 52-bit VAs, pgdp=0000000042a58000 [ 220.053886][ T4250] [ffff800087108f00] pgd=1000000042fcc003, p4d=1000000042fcd003, pud=1000000042fce003, pmd=1000000046238403, pte=0000000000000000 [ 220.054820][ T4250] Internal error: Oops: 0000000096000007 [#1] SMP [ 220.080672][ T4250] Modules linked in: [ 220.082198][ T4250] CPU: 0 UID: 0 PID: 4250 Comm: syz.1.265 Not tainted syzkaller #0 PREEMPT [ 220.083408][ T4250] Hardware name: linux,dummy-virt (DT) [ 220.084489][ T4250] pstate: 624020c9 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 220.084998][ T4250] pc : kasan_metadata_fetch_row+0xc/0x28 [ 220.085665][ T4250] lr : print_report+0x29c/0x61c [ 220.086014][ T4250] sp : ffff8000858335a0 [ 220.086336][ T4250] x29: ffff8000858335a0 x28: fbf000000ba00000 x27: f8ff80008710b060 [ 220.088038][ T4250] x26: 0000000000000060 x25: ffff800082517f10 x24: ffff800082517f18 [ 220.089061][ T4250] x23: ffff800087109180 x22: ffff8000824e87f0 x21: ffff800087109000 [ 220.089666][ T4250] x20: 00000000fffffffe x19: ffff800087108f00 x18: 0000000000000010 [ 220.090267][ T4250] x17: 0000000000000000 x16: 0000000000006400 x15: ffff800085833420 [ 220.090911][ T4250] x14: ffff80008583361c x13: ffff800085833609 x12: ffff800082adf268 [ 220.091611][ T4250] x11: 0000000000000001 x10: 0000000000000001 x9 : 000000000002ffe8 [ 220.092386][ T4250] x8 : fbf000000ba00000 x7 : 0000000000000010 x6 : ffff800081ce18c0 [ 220.093062][ T4250] x5 : 0000000000000030 x4 : 0000000000000002 x3 : ffff800087109000 [ 220.093655][ T4250] x2 : ffff800087108f00 x1 : ffff800087108f10 x0 : ffff8000858335f8 [ 220.094665][ T4250] Call trace: [ 220.095351][ T4250] kasan_metadata_fetch_row+0xc/0x28 (P) [ 220.096028][ T4250] kasan_report+0x88/0xac [ 220.096390][ T4250] __do_kernel_fault+0x170/0x1c8 [ 220.096739][ T4250] do_bad_area+0x68/0x78 [ 220.097069][ T4250] do_tag_check_fault+0x34/0x44 [ 220.097445][ T4250] do_mem_abort+0x44/0x94 [ 220.097780][ T4250] el1_abort+0x44/0x68 [ 220.098106][ T4250] el1h_64_sync_handler+0x50/0xac [ 220.098490][ T4250] el1h_64_sync+0x6c/0x70 [ 220.099295][ T4250] __memcpy+0xc/0x54 (P) [ 220.099786][ T4250] do_misc_fixups+0x1554/0x1afc [ 220.100419][ T4250] bpf_check+0x1384/0x293c [ 220.100771][ T4250] bpf_prog_load+0x63c/0xd40 [ 220.101253][ T4250] __sys_bpf+0x2e0/0x1a88 [ 220.101679][ T4250] __arm64_sys_bpf+0x24/0x34 [ 220.101989][ T4250] invoke_syscall+0x48/0x110 [ 220.102372][ T4250] el0_svc_common.constprop.0+0x40/0xe0 [ 220.102797][ T4250] do_el0_svc+0x1c/0x28 [ 220.103171][ T4250] el0_svc+0x34/0x128 [ 220.103524][ T4250] el0t_64_sync_handler+0xa0/0xe4 [ 220.104156][ T4250] el0t_64_sync+0x1a4/0x1a8 [ 220.105215][ T4250] Code: d65f03c0 91040023 aa0103e2 91004021 (d9600042) [ 220.106445][ T4250] ---[ end trace 0000000000000000 ]--- [ 220.107546][ T4250] Kernel panic - not syncing: Oops: Fatal exception [ 220.108334][ T4250] SMP: stopping secondary CPUs [ 220.109611][ T4250] Kernel Offset: disabled [ 220.110061][ T4250] CPU features: 0x000000,00068cc1,7ef8cf80,957fff3f [ 220.111643][ T4250] Memory Limit: none [ 220.113390][ T4250] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:29:31 Registers: info registers vcpu 0 CPU#0 PC=ffff8000809303c8 X00=0000000000000002 X01=0000000000000018 X02=ffff800082e15018 X03=ffff800082badf28 X04=fcf00000030e5880 X05=0000000000000068 X06=0000000000000029 X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff800082badf58 X10=0000000000000001 X11=ffff8000858330c0 X12=ffff800082adf268 X13=ffff800085832e9d X14=ffff800085832ea8 X15=ffff800085832d10 X16=0000000000006400 X17=0000000000000000 X18=00000000ffffffff X19=fbf000000304301a X20=ffff80008093056c X21=fcf00000030e5880 X22=fbf0000003043031 X23=0000000000000000 X24=0000000000000000 X25=00000000000000c0 X26=ffffffffffffffff X27=ffff800082751000 X28=ffffffffffffffff X29=ffff800085832fc0 X30=ffff800080930594 SP=ffff800085832fc0 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0100000000000000:0100000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000100000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00d000a800000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000002 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffdd152760:0000ffffdd152760 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffdd152730 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081b8787c X00=ffff800081b87878 X01=fcf000000b178000 X02=0000000000000000 X03=fcf000000b178000 X04=0000000000000000 X05=000000333246ef60 X06=ffff800087d03dc8 X07=0000000000000000 X08=ffff800087d03db0 X09=0000000000000000 X10=0000000000000000 X11=0000000000000000 X12=0000000000000000 X13=0000000000000000 X14=0000000000000000 X15=0000ffffdd152528 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=0000000000000000 X20=ffff800082b11908 X21=ffff800082b11900 X22=fcf000000b178000 X23=0000000000000004 X24=ffff800082b11908 X25=0000000000000028 X26=0000000000000000 X27=fcf000000b1786f0 X28=fcf000000b178000 X29=ffff800087d03bc0 X30=ffff800080187f58 SP=ffff800087d03bc0 PSTATE=414020c9 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa6376438:0000ffffa6376450 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa6376448:0000ffffa6376490 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa6edca20:0000ffffa6376430 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa6376468:0000ffffa6376440 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa6376478:0000ffffa6376470 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa6376478:0000ffffa6376470 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa6376488:0000ffffa6376480 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffdd152760:0000ffffdd152760 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffdd152730 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000