last executing test programs: 7.882892099s ago: executing program 0 (id=86): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) 6.872110767s ago: executing program 0 (id=87): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4607020000ff7f00000000000002003e00edfffbff94020000000000004000000000000000cf000000000000000f00000000003800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e6000000000000000400000000000000030000000000000000001700"/147], 0x178) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1d, 0x803, 0x0) 3.841424527s ago: executing program 0 (id=92): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xa, 0xffff}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='1%') readv(r1, &(0x7f00000001c0)=[{&(0x7f00000019c0)=""/196, 0xc4}], 0x1) 1.942639486s ago: executing program 0 (id=93): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x40, 0x21, 0x5, {0x5, 0x6, "3d903f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.332011893s ago: executing program 1 (id=94): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.19063658s ago: executing program 1 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044044) 951.40683ms ago: executing program 1 (id=96): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000"], 0xb8}}, 0x0) syz_usb_disconnect(r0) 529.023114ms ago: executing program 1 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x20000010) 528.773064ms ago: executing program 0 (id=98): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea", 0x1) 342.129987ms ago: executing program 0 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000003ec0), 0xffffffffffffffff) 129.220314ms ago: executing program 1 (id=100): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000580)={0x20, 0x7e0e36d0927102ef, 0x2, "f67e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)={0x0, 0xe, 0x1, '\t'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 0s ago: executing program 1 (id=101): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/172, 0xac) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000"], 0xb8}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:2700' (ED25519) to the list of known hosts. syzkaller login: [ 83.080532][ T3311] cgroup: Unknown subsys name 'net' [ 83.263274][ T3311] cgroup: Unknown subsys name 'cpuset' [ 83.292075][ T3311] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.735196][ T3311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.591647][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.610220][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.809424][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.834159][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.670925][ T3317] hsr_slave_0: entered promiscuous mode [ 94.684143][ T3317] hsr_slave_1: entered promiscuous mode [ 94.924583][ T3316] hsr_slave_0: entered promiscuous mode [ 94.930184][ T3316] hsr_slave_1: entered promiscuous mode [ 94.937212][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 94.938051][ T3316] Cannot create hsr debugfs directory [ 95.841175][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.870143][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.890439][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.952176][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.191329][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.215102][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.240023][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.262346][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.130209][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.211943][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.482536][ T3317] veth0_vlan: entered promiscuous mode [ 100.556298][ T3317] veth1_vlan: entered promiscuous mode [ 100.683289][ T3316] veth0_vlan: entered promiscuous mode [ 100.756777][ T3316] veth1_vlan: entered promiscuous mode [ 100.764694][ T3317] veth0_macvtap: entered promiscuous mode [ 100.804129][ T3317] veth1_macvtap: entered promiscuous mode [ 100.939290][ T1158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.940170][ T1158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.940314][ T1158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.940459][ T1158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.071173][ T3316] veth0_macvtap: entered promiscuous mode [ 101.139567][ T3316] veth1_macvtap: entered promiscuous mode [ 101.339488][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.416560][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.417048][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.419478][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.419898][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.054272][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.225050][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 103.237454][ T10] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 103.238812][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 103.247710][ T10] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 103.248369][ T10] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 103.248595][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 103.281238][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 103.281649][ T10] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 103.284231][ T10] usb 1-1: Product: syz [ 103.284562][ T10] usb 1-1: Manufacturer: syz [ 103.284729][ T10] usb 1-1: SerialNumber: syz [ 103.327334][ T10] usb 1-1: config 0 descriptor?? [ 103.399351][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 103.425850][ T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 103.694491][ T1501] usb 1-1: USB disconnect, device number 2 [ 103.739661][ T1501] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 103.934930][ T3482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 106.504599][ T3498] process 'syz.0.10' launched './file1' with NULL argv: empty string added [ 107.536544][ T3495] can: request_module (can-proto-0) failed. [ 108.367177][ T3502] cgroup: fork rejected by pids controller in /syz0 [ 109.090424][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.240947][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.395594][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.530975][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.411388][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.467595][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.501048][ T55] bond0 (unregistering): Released all slaves [ 110.682142][ T55] hsr_slave_0: left promiscuous mode [ 110.688045][ T55] hsr_slave_1: left promiscuous mode [ 110.709405][ T55] veth1_macvtap: left promiscuous mode [ 110.710107][ T55] veth0_macvtap: left promiscuous mode [ 110.710663][ T55] veth1_vlan: left promiscuous mode [ 110.711085][ T55] veth0_vlan: left promiscuous mode [ 113.468691][ T3506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.496346][ T3506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.331389][ T3506] hsr_slave_0: entered promiscuous mode [ 115.347505][ T3506] hsr_slave_1: entered promiscuous mode [ 115.386200][ T3506] debugfs: 'hsr0' already exists in 'hsr' [ 115.386573][ T3506] Cannot create hsr debugfs directory [ 117.144744][ T3506] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.190965][ T3506] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.226371][ T3506] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.256763][ T3506] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.309124][ T3506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.614341][ T3613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 120.049500][ T3624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.050598][ T3624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.587192][ T3506] veth0_vlan: entered promiscuous mode [ 122.621485][ T3506] veth1_vlan: entered promiscuous mode [ 122.759241][ T3506] veth0_macvtap: entered promiscuous mode [ 122.791711][ T3506] veth1_macvtap: entered promiscuous mode [ 122.942438][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.946030][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.946225][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.946362][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.557851][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.655710][ T3656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.659004][ T3656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.760082][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.760798][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 123.760890][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.792266][ T9] usb 1-1: config 0 descriptor?? [ 133.010536][ T3681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.012072][ T3681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.067446][ T24] usb 1-1: USB disconnect, device number 3 [ 136.406052][ T3698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 140.078607][ T3710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.079938][ T3710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.326002][ T3712] syzkaller0: entered promiscuous mode [ 140.326511][ T3712] syzkaller0: entered allmulticast mode [ 144.310042][ T3730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.311703][ T3730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.132601][ T3736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 146.859281][ T3741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.860283][ T3741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.249895][ T3758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.251196][ T3758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.754841][ T3770] can: request_module (can-proto-0) failed. [ 153.844679][ T3773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.846479][ T3773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.956871][ T3783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.964492][ T3783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.186976][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.353858][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 156.383331][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 156.454035][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 156.455492][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 156.456827][ T9] usb 1-1: Product: syz [ 156.457644][ T9] usb 1-1: Manufacturer: syz [ 156.459625][ T9] usb 1-1: SerialNumber: syz [ 156.477139][ T9] usb 1-1: config 0 descriptor?? [ 156.500538][ T3784] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.523610][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 156.525102][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 157.192652][ T3788] can: request_module (can-proto-0) failed. [ 158.058478][ T3393] usb 1-1: USB disconnect, device number 4 [ 158.573873][ T3393] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 158.733420][ T3393] usb 1-1: Using ep0 maxpacket: 32 [ 158.759004][ T3393] usb 1-1: descriptor type invalid, skip [ 158.759258][ T3393] usb 1-1: descriptor type invalid, skip [ 158.760495][ T3393] usb 1-1: descriptor type invalid, skip [ 158.760561][ T3393] usb 1-1: descriptor type invalid, skip [ 158.784838][ T3393] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.785285][ T3393] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 158.792160][ T3393] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 158.851002][ T3393] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.851412][ T3393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.853067][ T3393] usb 1-1: Product: syz [ 158.853150][ T3393] usb 1-1: Manufacturer: syz [ 158.853240][ T3393] usb 1-1: SerialNumber: syz [ 159.175429][ T3393] cdc_ncm 1-1:1.0: bind() failure [ 159.200414][ T3393] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 159.200872][ T3393] cdc_ncm 1-1:1.1: bind() failure [ 159.244932][ T3393] usb 1-1: USB disconnect, device number 5 [ 159.585939][ T3393] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.644122][ T3393] usb 1-1: Using ep0 maxpacket: 32 [ 160.713696][ T3393] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 161.356829][ T3393] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.357232][ T3393] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.357547][ T3393] usb 1-1: Product: syz [ 161.357623][ T3393] usb 1-1: Manufacturer: syz [ 161.357676][ T3393] usb 1-1: SerialNumber: syz [ 161.368948][ T3393] usb 1-1: config 0 descriptor?? [ 161.372310][ T3800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 161.381005][ T3393] hub 1-1:0.0: bad descriptor, ignoring hub [ 161.381324][ T3393] hub 1-1:0.0: probe with driver hub failed with error -5 [ 162.129042][ T9] usb 1-1: USB disconnect, device number 6 [ 162.839691][ T3808] can: request_module (can-proto-0) failed. [ 167.759656][ T3824] can: request_module (can-proto-0) failed. [ 169.344060][ T3494] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.503773][ T3494] usb 1-1: Using ep0 maxpacket: 32 [ 169.526032][ T3494] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 169.555004][ T3494] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 169.555340][ T3494] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 169.557824][ T3494] usb 1-1: Product: syz [ 169.558002][ T3494] usb 1-1: Manufacturer: syz [ 169.558126][ T3494] usb 1-1: SerialNumber: syz [ 169.566568][ T3494] usb 1-1: config 0 descriptor?? [ 169.576998][ T3827] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.585550][ T3494] hub 1-1:0.0: bad descriptor, ignoring hub [ 169.585812][ T3494] hub 1-1:0.0: probe with driver hub failed with error -5 [ 169.916944][ T32] usb 1-1: USB disconnect, device number 7 [ 170.468480][ T32] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.653409][ T32] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 170.655363][ T32] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.655692][ T32] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.655897][ T32] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.656042][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.720571][ T32] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.727686][ T32] usb 1-1: invalid MIDI out EP 0 [ 170.855598][ T32] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 171.029667][ T32] usb 1-1: USB disconnect, device number 8 [ 171.070597][ T3569] udevd[3569]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.932086][ T3841] can: request_module (can-proto-0) failed. [ 173.743844][ T3848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.746942][ T3848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.523785][ T3461] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.695106][ T3461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.695619][ T3461] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.699267][ T3461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.710340][ T3461] usb 1-1: config 0 descriptor?? [ 174.932313][ T3461] usbhid 1-1:0.0: can't add hid device: -71 [ 174.940599][ T3461] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 174.949327][ T3461] usb 1-1: USB disconnect, device number 9 [ 175.373655][ T3461] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 175.523148][ T3461] usb 1-1: Using ep0 maxpacket: 32 [ 175.537514][ T3461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.537888][ T3461] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 175.538246][ T3461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.549188][ T3461] usb 1-1: config 0 descriptor?? [ 175.561643][ T3461] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 175.578630][ T3461] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 175.985485][ T3461] usb 1-1: USB disconnect, device number 10 [ 175.995783][ T3461] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 176.443403][ T3461] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.603947][ T3461] usb 1-1: Using ep0 maxpacket: 16 [ 176.647921][ T3461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.648389][ T3461] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 176.651603][ T3461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.677495][ T3461] usb 1-1: config 0 descriptor?? [ 176.727824][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.734828][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.140216][ T3863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.163972][ T3863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.207017][ T3461] hid-generic 0003:041E:3100.0001: item fetching failed at offset 4/5 [ 177.209270][ T3461] hid-generic 0003:041E:3100.0001: probe with driver hid-generic failed with error -22 [ 177.414003][ T3461] usb 1-1: USB disconnect, device number 11 [ 177.917337][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.920277][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.011993][ T40] ================================================================== [ 178.014755][ T40] BUG: KASAN: slab-use-after-free in defer_free+0x3c/0xbc [ 178.016365][ T40] Write at addr fdf0000005e18ca0 by task kworker/u8:2/40 [ 178.016643][ T40] Pointer tag: [fd], memory tag: [fe] [ 178.016689][ T40] [ 178.017225][ T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT [ 178.017451][ T40] Hardware name: linux,dummy-virt (DT) [ 178.017719][ T40] Workqueue: events_unbound bpf_map_free_deferred [ 178.018496][ T40] Call trace: [ 178.018676][ T40] show_stack+0x18/0x24 (C) [ 178.018866][ T40] dump_stack_lvl+0x78/0x90 [ 178.018932][ T40] print_report+0x108/0x61c [ 178.018960][ T40] kasan_report+0x88/0xac [ 178.018984][ T40] __do_kernel_fault+0x170/0x1c8 [ 178.019013][ T40] do_bad_area+0x68/0x78 [ 178.019038][ T40] do_tag_check_fault+0x34/0x44 [ 178.019064][ T40] do_mem_abort+0x44/0x94 [ 178.019091][ T40] el1_abort+0x44/0x68 [ 178.019116][ T40] el1h_64_sync_handler+0x50/0xac [ 178.019142][ T40] el1h_64_sync+0x6c/0x70 [ 178.019228][ T40] defer_free+0x3c/0xbc (P) [ 178.019256][ T40] kfree_nolock+0x1a0/0x1d4 [ 178.019282][ T40] range_tree_destroy+0x74/0x90 [ 178.019318][ T40] arena_map_free+0x64/0x90 [ 178.019344][ T40] bpf_map_free_deferred+0x70/0x180 [ 178.019371][ T40] process_one_work+0x178/0x2cc [ 178.019399][ T40] worker_thread+0x24c/0x354 [ 178.019424][ T40] kthread+0x130/0x1fc [ 178.019449][ T40] ret_from_fork+0x10/0x20 [ 178.019618][ T40] [ 178.019656][ T40] Allocated by task 3871: [ 178.019810][ T40] kasan_save_stack+0x3c/0x64 [ 178.019953][ T40] save_stack_info+0x40/0x158 [ 178.019974][ T40] kasan_save_alloc_info+0x14/0x20 [ 178.019992][ T40] __kasan_kmalloc+0xb4/0xb8 [ 178.020010][ T40] kmalloc_nolock_noprof+0x1dc/0x4fc [ 178.020030][ T40] range_tree_set+0x644/0x778 [ 178.020051][ T40] arena_map_alloc+0x11c/0x17c [ 178.020070][ T40] map_create+0x19c/0xa98 [ 178.020091][ T40] __sys_bpf+0x348/0x1a88 [ 178.020109][ T40] __arm64_sys_bpf+0x24/0x34 [ 178.020127][ T40] invoke_syscall+0x48/0x110 [ 178.020148][ T40] el0_svc_common.constprop.0+0x40/0xe0 [ 178.020169][ T40] do_el0_svc+0x1c/0x28 [ 178.020190][ T40] el0_svc+0x34/0x128 [ 178.020209][ T40] el0t_64_sync_handler+0xa0/0xe4 [ 178.020229][ T40] el0t_64_sync+0x1a4/0x1a8 [ 178.020266][ T40] [ 178.020290][ T40] Freed by task 40: [ 178.020323][ T40] kasan_save_stack+0x3c/0x64 [ 178.020342][ T40] save_stack_info+0x40/0x158 [ 178.020360][ T40] kasan_save_free_info+0x18/0x24 [ 178.020379][ T40] __kasan_slab_free+0x7c/0x8c [ 178.020396][ T40] kfree_nolock+0xcc/0x1d4 [ 178.020416][ T40] range_tree_destroy+0x74/0x90 [ 178.020436][ T40] arena_map_free+0x64/0x90 [ 178.020455][ T40] bpf_map_free_deferred+0x70/0x180 [ 178.020476][ T40] process_one_work+0x178/0x2cc [ 178.020496][ T40] worker_thread+0x24c/0x354 [ 178.020516][ T40] kthread+0x130/0x1fc [ 178.020534][ T40] ret_from_fork+0x10/0x20 [ 178.020557][ T40] [ 178.020578][ T40] The buggy address belongs to the object at fff0000005e18c80 [ 178.020578][ T40] which belongs to the cache kmalloc-64 of size 64 [ 178.020623][ T40] The buggy address is located 32 bytes inside of [ 178.020623][ T40] 64-byte region [fff0000005e18c80, fff0000005e18cc0) [ 178.020649][ T40] [ 178.020775][ T40] The buggy address belongs to the physical page: [ 178.021033][ T40] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xf9f0000005e18dc0 pfn:0x45e18 [ 178.021313][ T40] anon flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x0) [ 178.021580][ T40] page_type: f5(slab) [ 178.021920][ T40] raw: 01ffc00000000000 f7f0000003001600 0000000000000000 0000000000000001 [ 178.021952][ T40] raw: f9f0000005e18dc0 0000000080400028 00000000f5000000 0000000000000000 [ 178.022023][ T40] page dumped because: kasan: bad access detected [ 178.022044][ T40] [ 178.022062][ T40] Memory state around the buggy address: [ 178.022226][ T40] fff0000005e18a00: fa fa fa fa fd fd fd fd f8 f8 f8 f8 fe fe fe fe [ 178.022280][ T40] fff0000005e18b00: f7 f7 f7 fe fe fe fe fe fe fe fe fe fe fe fe fe [ 178.022331][ T40] >fff0000005e18c00: f3 f3 f3 f3 fe fe fe fe fe fe fe fe fe fe fe fe [ 178.022367][ T40] ^ [ 178.022433][ T40] fff0000005e18d00: f4 f4 f4 fe fc fc fc fe f1 f1 f1 f1 fe fe fe fe [ 178.022480][ T40] fff0000005e18e00: fe fe fe fe fe fe fe fe f3 f3 f3 f3 fd fd fd fd [ 178.022529][ T40] ================================================================== [ 178.024055][ T40] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 178.823242][ T1158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.899664][ T1158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.976720][ T1158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.049764][ T1158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.790755][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.827142][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.849243][ T1158] bond0 (unregistering): Released all slaves [ 179.939765][ T1158] hsr_slave_0: left promiscuous mode [ 179.942328][ T1158] hsr_slave_1: left promiscuous mode [ 179.959349][ T1158] veth1_macvtap: left promiscuous mode [ 179.959809][ T1158] veth0_macvtap: left promiscuous mode [ 179.964163][ T1158] veth1_vlan: left promiscuous mode [ 179.964528][ T1158] veth0_vlan: left promiscuous mode [ 181.172613][ T1158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.257018][ T1158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.315841][ T1158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.374700][ T1158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.928426][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.968391][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.019578][ T1158] bond0 (unregistering): Released all slaves [ 182.089081][ T1158] hsr_slave_0: left promiscuous mode [ 182.091412][ T1158] hsr_slave_1: left promiscuous mode [ 182.105211][ T1158] veth1_macvtap: left promiscuous mode [ 182.105496][ T1158] veth0_macvtap: left promiscuous mode [ 182.107497][ T1158] veth1_vlan: left promiscuous mode [ 182.107844][ T1158] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 22:13:00 Registers: info registers vcpu 0 CPU#0 PC=ffff8000818e1c98 X00=000000000000004c X01=0000000000000006 X02=f8f00000088d1bce X03=000000004c000045 X04=f9f00000059dd850 X05=0000000000000030 X06=00000000fffffffe X07=00000000fffffffa X08=f8f00000088d1c18 X09=0000000000000017 X10=ffff800082ddbd78 X11=000000000000005a X12=ffff800082acf208 X13=ffff8000831dbb8d X14=ffff8000831dbb98 X15=ffff8000831dba00 X16=ffff800082dd8000 X17=fff07ffffcf04000 X18=00000000ffffffff X19=fcf0000009ac9628 X20=fcf0000009ac9600 X21=0000000000000028 X22=0000000000000014 X23=0000000000000040 X24=ffff800082ddbd88 X25=faf00000059dd000 X26=faf00000044dba80 X27=f1f00000032eb740 X28=fdf0000005c9c700 X29=ffff800082ddbcd0 X30=ffff800080d370ac SP=ffff800082ddbcd0 PSTATE=80402809 N--- EL2h SVCR=00000000 -- BTYPE=2 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6572207265767265:730073250a0d0a0d Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:65725f746e697270:20205d3034542020 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00ff00ff00000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000000f0f0000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:65645f656572665f:70616d5f66706220 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6d6d6f4320303420:3a4449502030203a Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:4e20323a38752f72:656b726f776b203a Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe799d530:0000ffffe799d530 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffe799d500 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800080010a80 X00=ffffc1ffbf7c3d80 X01=1000000044f01403 X02=0000000000000003 X03=00000000000001fe X04=0000000040000000 X05=ffff8000829f45b0 X06=0000000000000000 X07=ffffffffffffffff X08=0000000000000000 X09=fcf0000003009200 X10=10e8484473504e8b X11=00000000000000c0 X12=0000000000000000 X13=0000000000000001 X14=000000000000028b X15=0000000000000001 X16=0000000000000000 X17=0000000000000000 X18=ffff80008659bc30 X19=ffff800082750000 X20=fff000007f9000c0 X21=ffff800082759378 X22=fcf00000060ffcc8 X23=fcf00000060ffc28 X24=fbf0000006c90000 X25=0000000000000001 X26=f3f000000340b400 X27=fbf0000006c906e8 X28=fbf0000006c90000 X29=ffff800085c2b960 X30=9eef8000802a5c6c SP=ffff800085c2b960 PSTATE=024023c9 ---- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff93976438:0000ffff93976450 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff93976448:0000ffff93976490 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff944dca20:0000ffff93976430 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff93976468:0000ffff93976440 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff93976478:0000ffff93976470 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff93976478:0000ffff93976470 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffff93976488:0000ffff93976480 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffd663a9d0:0000ffffd663a9d0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffd663a9a0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000