last executing test programs: 1.786643552s ago: executing program 1 (id=2): msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(0x0, &(0x7f00000002c0), 0x8, 0x0, 0x800) 1.394276282s ago: executing program 1 (id=3): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) 1.152210933s ago: executing program 1 (id=4): unshare(0xc000400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) syz_clone(0x90c0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 853.786601ms ago: executing program 1 (id=5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0xc, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xd}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 495.874177ms ago: executing program 0 (id=1): syz_open_dev$loop(&(0x7f0000000440), 0x7, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x68642, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0xb}, 0x94) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 144.142981ms ago: executing program 0 (id=6): pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000240)="24cc1732b3e6cb75454cb7525f", 0xd}], 0x1, 0x33a08a22, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback, 0xffffffffffffffff, 0x2f, 0x2038, 0x4}, 0x20) 0s ago: executing program 0 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:48662' (ED25519) to the list of known hosts. syzkaller login: [ 80.033582][ T3313] cgroup: Unknown subsys name 'net' [ 80.307652][ T3313] cgroup: Unknown subsys name 'cpuset' [ 80.336876][ T3313] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.853370][ T3313] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.095770][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.121059][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.333514][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.357168][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.077027][ T3319] hsr_slave_0: entered promiscuous mode [ 91.082814][ T3319] hsr_slave_1: entered promiscuous mode [ 91.480298][ T3318] hsr_slave_0: entered promiscuous mode [ 91.482475][ T3318] hsr_slave_1: entered promiscuous mode [ 91.483907][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 91.484269][ T3318] Cannot create hsr debugfs directory [ 92.103165][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.128059][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.149544][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.166940][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.381711][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.410983][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.435382][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.458410][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.251118][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.599601][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.239472][ T3319] veth0_vlan: entered promiscuous mode [ 96.267200][ T3319] veth1_vlan: entered promiscuous mode [ 96.392380][ T3319] veth0_macvtap: entered promiscuous mode [ 96.423722][ T3319] veth1_macvtap: entered promiscuous mode [ 96.521443][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.522056][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.522137][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.522242][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.841531][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.123067][ T3318] veth0_vlan: entered promiscuous mode [ 97.210545][ T3318] veth1_vlan: entered promiscuous mode [ 97.466285][ T3318] veth0_macvtap: entered promiscuous mode [ 97.514004][ T3318] veth1_macvtap: entered promiscuous mode [ 97.757179][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.758728][ T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.760764][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.761106][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.589803][ T3479] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 99.266209][ T3484] ================================================================== [ 99.270211][ T3484] BUG: KASAN: slab-use-after-free in defer_free+0x3c/0xbc [ 99.272409][ T3484] Write at addr f3f0000004da0c20 by task syz.0.7/3484 [ 99.272954][ T3484] Pointer tag: [f3], memory tag: [fe] [ 99.273032][ T3484] [ 99.273941][ T3484] CPU: 1 UID: 0 PID: 3484 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT [ 99.274323][ T3484] Hardware name: linux,dummy-virt (DT) [ 99.274653][ T3484] Call trace: [ 99.275106][ T3484] show_stack+0x18/0x24 (C) [ 99.275432][ T3484] dump_stack_lvl+0x78/0x90 [ 99.275551][ T3484] print_report+0x108/0x61c [ 99.275607][ T3484] kasan_report+0x88/0xac [ 99.275658][ T3484] __do_kernel_fault+0x170/0x1c8 [ 99.275710][ T3484] do_bad_area+0x68/0x78 [ 99.275756][ T3484] do_tag_check_fault+0x34/0x44 [ 99.275845][ T3484] do_mem_abort+0x44/0x94 [ 99.275907][ T3484] el1_abort+0x44/0x68 [ 99.275957][ T3484] el1h_64_sync_handler+0x50/0xac [ 99.276005][ T3484] el1h_64_sync+0x6c/0x70 [ 99.276155][ T3484] defer_free+0x3c/0xbc (P) [ 99.276212][ T3484] kfree_nolock+0x1a0/0x1d4 [ 99.276259][ T3484] range_tree_clear+0x24c/0x6a8 [ 99.276310][ T3484] arena_vm_fault+0xf0/0x1a8 [ 99.276356][ T3484] __do_fault+0x3c/0x234 [ 99.276407][ T3484] do_fault+0x314/0x680 [ 99.276450][ T3484] __handle_mm_fault+0x440/0xc2c [ 99.276494][ T3484] handle_mm_fault+0x15c/0x30c [ 99.276535][ T3484] do_page_fault+0x194/0x680 [ 99.276578][ T3484] do_translation_fault+0x60/0x6c [ 99.276622][ T3484] do_mem_abort+0x44/0x94 [ 99.276668][ T3484] el1_abort+0x44/0x68 [ 99.276710][ T3484] el1h_64_sync_handler+0x50/0xac [ 99.276754][ T3484] el1h_64_sync+0x6c/0x70 [ 99.276798][ T3484] __arch_copy_from_user+0x18/0x23c (P) [ 99.276845][ T3484] netlink_sendmsg+0x15c/0x3fc [ 99.276911][ T3484] __sock_sendmsg+0x54/0x60 [ 99.276960][ T3484] __sys_sendto+0x118/0x180 [ 99.277003][ T3484] __arm64_sys_sendto+0x28/0x38 [ 99.277046][ T3484] invoke_syscall+0x48/0x110 [ 99.277091][ T3484] el0_svc_common.constprop.0+0x40/0xe0 [ 99.277134][ T3484] do_el0_svc+0x1c/0x28 [ 99.277176][ T3484] el0_svc+0x34/0x128 [ 99.277218][ T3484] el0t_64_sync_handler+0xa0/0xe4 [ 99.277262][ T3484] el0t_64_sync+0x1a4/0x1a8 [ 99.277545][ T3484] [ 99.277611][ T3484] Allocated by task 3482: [ 99.277796][ T3484] kasan_save_stack+0x3c/0x64 [ 99.278064][ T3484] save_stack_info+0x40/0x158 [ 99.278104][ T3484] kasan_save_alloc_info+0x14/0x20 [ 99.278140][ T3484] __kasan_kmalloc+0xb4/0xb8 [ 99.278173][ T3484] kmalloc_nolock_noprof+0x1dc/0x4fc [ 99.278211][ T3484] range_tree_set+0x644/0x778 [ 99.278247][ T3484] arena_map_alloc+0x11c/0x17c [ 99.278282][ T3484] map_create+0x19c/0xa98 [ 99.278324][ T3484] __sys_bpf+0x348/0x1a88 [ 99.278359][ T3484] __arm64_sys_bpf+0x24/0x34 [ 99.278391][ T3484] invoke_syscall+0x48/0x110 [ 99.278429][ T3484] el0_svc_common.constprop.0+0x40/0xe0 [ 99.278469][ T3484] do_el0_svc+0x1c/0x28 [ 99.278508][ T3484] el0_svc+0x34/0x128 [ 99.278545][ T3484] el0t_64_sync_handler+0xa0/0xe4 [ 99.278582][ T3484] el0t_64_sync+0x1a4/0x1a8 [ 99.278660][ T3484] [ 99.278704][ T3484] Freed by task 3484: [ 99.278749][ T3484] kasan_save_stack+0x3c/0x64 [ 99.278787][ T3484] save_stack_info+0x40/0x158 [ 99.278819][ T3484] kasan_save_free_info+0x18/0x24 [ 99.278853][ T3484] __kasan_slab_free+0x7c/0x8c [ 99.278896][ T3484] kfree_nolock+0xcc/0x1d4 [ 99.278933][ T3484] range_tree_clear+0x24c/0x6a8 [ 99.278967][ T3484] arena_vm_fault+0xf0/0x1a8 [ 99.278998][ T3484] __do_fault+0x3c/0x234 [ 99.279031][ T3484] do_fault+0x314/0x680 [ 99.279064][ T3484] __handle_mm_fault+0x440/0xc2c [ 99.279095][ T3484] handle_mm_fault+0x15c/0x30c [ 99.279125][ T3484] do_page_fault+0x194/0x680 [ 99.279159][ T3484] do_translation_fault+0x60/0x6c [ 99.279193][ T3484] do_mem_abort+0x44/0x94 [ 99.279227][ T3484] el1_abort+0x44/0x68 [ 99.279259][ T3484] el1h_64_sync_handler+0x50/0xac [ 99.279295][ T3484] el1h_64_sync+0x6c/0x70 [ 99.279327][ T3484] __arch_copy_from_user+0x18/0x23c [ 99.279366][ T3484] netlink_sendmsg+0x15c/0x3fc [ 99.279402][ T3484] __sock_sendmsg+0x54/0x60 [ 99.279436][ T3484] __sys_sendto+0x118/0x180 [ 99.279468][ T3484] __arm64_sys_sendto+0x28/0x38 [ 99.279502][ T3484] invoke_syscall+0x48/0x110 [ 99.279537][ T3484] el0_svc_common.constprop.0+0x40/0xe0 [ 99.279573][ T3484] do_el0_svc+0x1c/0x28 [ 99.279605][ T3484] el0_svc+0x34/0x128 [ 99.279639][ T3484] el0t_64_sync_handler+0xa0/0xe4 [ 99.279672][ T3484] el0t_64_sync+0x1a4/0x1a8 [ 99.279717][ T3484] [ 99.279754][ T3484] The buggy address belongs to the object at fff0000004da0c00 [ 99.279754][ T3484] which belongs to the cache kmalloc-64 of size 64 [ 99.279853][ T3484] The buggy address is located 32 bytes inside of [ 99.279853][ T3484] 64-byte region [fff0000004da0c00, fff0000004da0c40) [ 99.279910][ T3484] [ 99.280122][ T3484] The buggy address belongs to the physical page: [ 99.280596][ T3484] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xf7f0000004da0bc0 pfn:0x44da0 [ 99.281008][ T3484] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x0) [ 99.281448][ T3484] page_type: f5(slab) [ 99.282187][ T3484] raw: 01ffc00000000000 faf0000003001600 dead000000000122 0000000000000000 [ 99.282251][ T3484] raw: f7f0000004da0bc0 0000000080400038 00000000f5000000 0000000000000000 [ 99.282373][ T3484] page dumped because: kasan: bad access detected [ 99.282415][ T3484] [ 99.282445][ T3484] Memory state around the buggy address: [ 99.282694][ T3484] fff0000004da0a00: f1 f1 f1 f1 f0 f0 f0 f0 f0 f0 f0 f0 fe fe fe fe [ 99.282787][ T3484] fff0000004da0b00: fe fe fe fe fe fe fe fe f7 f7 f7 f7 fe fe fe fe [ 99.282843][ T3484] >fff0000004da0c00: fe fe fe fe fa fa fa fe f0 f0 f0 f0 f1 f1 f1 f1 [ 99.282961][ T3484] ^ [ 99.283103][ T3484] fff0000004da0d00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 99.283134][ T3484] fff0000004da0e00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 99.283295][ T3484] ================================================================== [ 99.284408][ T3484] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 100.149014][ T1121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.206447][ T1121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.260420][ T1121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.372382][ T1121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.000956][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.053625][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.072462][ T1121] bond0 (unregistering): Released all slaves [ 101.166301][ T1121] hsr_slave_0: left promiscuous mode [ 101.170005][ T1121] hsr_slave_1: left promiscuous mode [ 101.188544][ T1121] veth1_macvtap: left promiscuous mode [ 101.189922][ T1121] veth0_macvtap: left promiscuous mode [ 101.193152][ T1121] veth1_vlan: left promiscuous mode [ 101.194160][ T1121] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 07:43:49 Registers: info registers vcpu 0 CPU#0 PC=ffff800081b85e7c X00=ffff800081b85e78 X01=f6f0000006a1c200 X02=0000000000000001 X03=fff07ffffcf1d000 X04=0000000000000001 X05=0000000000000000 X06=0000000000000000 X07=0000000000000000 X08=ffff800082ddb818 X09=ffff8000829f4000 X10=0000000000000001 X11=ffff800082d9d840 X12=000000000000ba82 X13=0000000000000000 X14=00000000000000bb X15=0000000000000000 X16=ffff800082dd8000 X17=fff07ffffcf04000 X18=ffff800085c7bc60 X19=0000000000000000 X20=ffff800082b018c8 X21=ffff800082b018c0 X22=0000000000000098 X23=0000000000000004 X24=ffff800082b018c8 X25=0000000000000028 X26=0000000000000001 X27=fff07ffffcf1d000 X28=f9f0000005dcee00 X29=ffff800082ddb590 X30=ffff800080188760 SP=ffff800082ddb590 PSTATE=404020c9 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa0776438:0000ffffa0776450 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa0776448:0000ffffa0776490 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa12dca20:0000ffffa0776430 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa0776468:0000ffffa0776440 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa0776478:0000ffffa0776470 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa0776478:0000ffffa0776470 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa0776488:0000ffffa0776480 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffd930df30:0000ffffd930df30 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffd930df00 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff80008092eb38 X00=0000000000000002 X01=0000000000000018 X02=ffff800082e05018 X03=ffff800082b9dee8 X04=faf00000030e5880 X05=0000000000000074 X06=0000000000000020 X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff800082b9df18 X10=0000000000000001 X11=ffff8000831dbe20 X12=ffff800082acf248 X13=ffff8000831dbb8d X14=ffff8000831dbb98 X15=ffff8000831dba00 X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=fcf0000003043042 X20=ffff80008092ecdc X21=faf00000030e5880 X22=fcf0000003043042 X23=ffff80008092ecdc X24=000000000000005f X25=f8f000000323b180 X26=0000000000000001 X27=0000000000000000 X28=0000000000000000 X29=ffff8000831dbca0 X30=ffff80008092ed04 SP=ffff8000831dbca0 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0100000000000000:0100000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000100000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00d000a800000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000002 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffd930df30:0000ffffd930df30 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffd930df00 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000