last executing test programs: 17.77908233s ago: executing program 0 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) pipe2$9p(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xb, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0xff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x2, 0x3, 0x3, 0x7}, 0x10, 0x0, r5, 0x0, &(0x7f0000000ac0), 0x0, 0x10, 0x101}, 0x94) syz_emit_ethernet(0x46, 0x0, 0x0) mbind(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x100000005, 0x5, 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f000000b000/0x3000)=nil, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ptrace(0x4208, r0) 14.937641627s ago: executing program 0 (id=28): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x6e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fsync(r2) fdatasync(r2) 3.892310262s ago: executing program 1 (id=40): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109022400010059"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.821537051s ago: executing program 1 (id=41): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setxattr$incfs_metadata(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 3.709127195s ago: executing program 1 (id=42): syz_emit_ethernet(0x0, 0x0, 0x0) set_mempolicy(0x4005, 0x0, 0x4) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.599444079s ago: executing program 1 (id=43): socket$inet6(0x10, 0x2, 0x0) userfaultfd(0x80001) r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8000}}, 0x0, 0x0, 0x2, 0x0, "910675b33e0c3358fe4da0834a84e3d3c0bd68c392bea5bf33ee39937f7c42b74662afa7917bcf13067e96facb42decd8f4e00f290c0f33314dac146632b4f6d99bbbf9343ca3f406a8b2fb36d8c68d2"}, 0xd8) listen(r0, 0x7f) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a12600", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x13}}}}}}}, 0x0) 3.529884488s ago: executing program 1 (id=44): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) 1.76083251s ago: executing program 0 (id=45): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109022400010059"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 760.501225ms ago: executing program 0 (id=46): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setxattr$incfs_metadata(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 499.950448ms ago: executing program 0 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040001803c0002802c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000000010c00028005000100860000003c00038005000100"], 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 349.553577ms ago: executing program 0 (id=48): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) sendmsg$netlink(r3, 0x0, 0x8016) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 1 (id=49): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299f000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x71}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:36085' (ED25519) to the list of known hosts. syzkaller login: [ 80.049341][ T3308] cgroup: Unknown subsys name 'net' [ 80.269687][ T3308] cgroup: Unknown subsys name 'cpuset' [ 80.296958][ T3308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.806269][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.811215][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.875004][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.887200][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.940567][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.862486][ T3317] hsr_slave_0: entered promiscuous mode [ 91.869049][ T3317] hsr_slave_1: entered promiscuous mode [ 92.055188][ T3316] hsr_slave_0: entered promiscuous mode [ 92.058553][ T3316] hsr_slave_1: entered promiscuous mode [ 92.061678][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 92.062294][ T3316] Cannot create hsr debugfs directory [ 92.967579][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.018199][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.064474][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.107858][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.186026][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.205101][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.222093][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.237955][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.977140][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.200522][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.404290][ T3316] veth0_vlan: entered promiscuous mode [ 97.445547][ T3316] veth1_vlan: entered promiscuous mode [ 97.686921][ T3316] veth0_macvtap: entered promiscuous mode [ 97.717064][ T3317] veth0_vlan: entered promiscuous mode [ 97.724791][ T3316] veth1_macvtap: entered promiscuous mode [ 97.787591][ T3317] veth1_vlan: entered promiscuous mode [ 97.922125][ T1168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.924549][ T1168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.926826][ T1168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.927234][ T1168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.204454][ T3317] veth0_macvtap: entered promiscuous mode [ 98.249420][ T3317] veth1_macvtap: entered promiscuous mode [ 98.354647][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.465652][ T1143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.467494][ T1143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.482712][ T1143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.498883][ T1143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.441438][ T3464] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.604586][ T3464] usb 1-1: Using ep0 maxpacket: 32 [ 99.629684][ T3464] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.630848][ T3464] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.702489][ T3464] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.702735][ T3464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.703565][ T3464] usb 1-1: Product: syz [ 99.703643][ T3464] usb 1-1: Manufacturer: syz [ 99.703690][ T3464] usb 1-1: SerialNumber: syz [ 99.713518][ T3464] usb 1-1: config 0 descriptor?? [ 100.268108][ T3464] usb 1-1: USB disconnect, device number 2 [ 100.423493][ T3478] tmpfs: Bad value for 'mpol' [ 101.455507][ T3493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.466869][ T3493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.571758][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.755019][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 101.775531][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.775914][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.814959][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.815349][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.816956][ T9] usb 1-1: Product: syz [ 101.817065][ T9] usb 1-1: Manufacturer: syz [ 101.817147][ T9] usb 1-1: SerialNumber: syz [ 101.844198][ T9] usb 1-1: config 0 descriptor?? [ 102.291187][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 102.293236][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 102.318460][ T9] usb 1-1: USB disconnect, device number 3 [ 104.270698][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.431066][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 104.453346][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.453590][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.500118][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.500414][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.500720][ T9] usb 1-1: Product: syz [ 104.500898][ T9] usb 1-1: Manufacturer: syz [ 104.501009][ T9] usb 1-1: SerialNumber: syz [ 104.509433][ T9] usb 1-1: config 0 descriptor?? [ 104.758121][ T9] usb 1-1: USB disconnect, device number 4 [ 110.925942][ T3544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.931910][ T3544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.603165][ T3559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.606369][ T3559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.741277][ T3574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.743338][ T3574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.211122][ T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.398017][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 121.441143][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.450891][ T36] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.470675][ T36] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 121.477741][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.481359][ T36] usb 1-1: Product: syz [ 121.482438][ T36] usb 1-1: Manufacturer: syz [ 121.483311][ T36] usb 1-1: SerialNumber: syz [ 121.532660][ T36] usb 1-1: config 0 descriptor?? [ 121.800620][ T36] usb 1-1: USB disconnect, device number 5 [ 122.889473][ T1168] ================================================================== [ 122.893864][ T1168] BUG: KASAN: slab-use-after-free in defer_free+0x3c/0xbc [ 122.895652][ T1168] Write at addr f7f0000006479b60 by task kworker/u8:7/1168 [ 122.896016][ T1168] Pointer tag: [f7], memory tag: [fe] [ 122.896075][ T1168] [ 122.896608][ T1168] CPU: 1 UID: 0 PID: 1168 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT [ 122.896837][ T1168] Hardware name: linux,dummy-virt (DT) [ 122.897120][ T1168] Workqueue: events_unbound bpf_map_free_deferred [ 122.897974][ T1168] Call trace: [ 122.898180][ T1168] show_stack+0x18/0x24 (C) [ 122.898399][ T1168] dump_stack_lvl+0x78/0x90 [ 122.898472][ T1168] print_report+0x108/0x61c [ 122.898501][ T1168] kasan_report+0x88/0xac [ 122.898525][ T1168] __do_kernel_fault+0x170/0x1c8 [ 122.898552][ T1168] do_bad_area+0x68/0x78 [ 122.898612][ T1168] do_tag_check_fault+0x34/0x44 [ 122.898637][ T1168] do_mem_abort+0x44/0x94 [ 122.898663][ T1168] el1_abort+0x44/0x68 [ 122.898690][ T1168] el1h_64_sync_handler+0x50/0xac [ 122.898716][ T1168] el1h_64_sync+0x6c/0x70 [ 122.898811][ T1168] defer_free+0x3c/0xbc (P) [ 122.898843][ T1168] kfree_nolock+0x1a0/0x1d4 [ 122.898869][ T1168] range_tree_destroy+0x74/0x90 [ 122.898895][ T1168] arena_map_free+0x64/0x90 [ 122.898920][ T1168] bpf_map_free_deferred+0x70/0x180 [ 122.898947][ T1168] process_one_work+0x178/0x2cc [ 122.898976][ T1168] worker_thread+0x24c/0x354 [ 122.899000][ T1168] kthread+0x130/0x1fc [ 122.899032][ T1168] ret_from_fork+0x10/0x20 [ 122.899179][ T1168] [ 122.899220][ T1168] Allocated by task 3598: [ 122.899336][ T1168] kasan_save_stack+0x3c/0x64 [ 122.899482][ T1168] save_stack_info+0x40/0x158 [ 122.899502][ T1168] kasan_save_alloc_info+0x14/0x20 [ 122.899520][ T1168] __kasan_kmalloc+0xb4/0xb8 [ 122.899537][ T1168] kmalloc_nolock_noprof+0x1dc/0x4fc [ 122.899557][ T1168] range_tree_set+0x644/0x778 [ 122.899576][ T1168] arena_map_alloc+0x11c/0x17c [ 122.899595][ T1168] map_create+0x19c/0xa98 [ 122.899614][ T1168] __sys_bpf+0x348/0x1a88 [ 122.899631][ T1168] __arm64_sys_bpf+0x24/0x34 [ 122.899674][ T1168] invoke_syscall+0x48/0x110 [ 122.899697][ T1168] el0_svc_common.constprop.0+0x40/0xe0 [ 122.899718][ T1168] do_el0_svc+0x1c/0x28 [ 122.899738][ T1168] el0_svc+0x34/0x128 [ 122.899757][ T1168] el0t_64_sync_handler+0xa0/0xe4 [ 122.899777][ T1168] el0t_64_sync+0x1a4/0x1a8 [ 122.899878][ T1168] [ 122.899925][ T1168] Freed by task 1168: [ 122.899958][ T1168] kasan_save_stack+0x3c/0x64 [ 122.899979][ T1168] save_stack_info+0x40/0x158 [ 122.899996][ T1168] kasan_save_free_info+0x18/0x24 [ 122.900013][ T1168] __kasan_slab_free+0x7c/0x8c [ 122.900038][ T1168] kfree_nolock+0xcc/0x1d4 [ 122.900058][ T1168] range_tree_destroy+0x74/0x90 [ 122.900077][ T1168] arena_map_free+0x64/0x90 [ 122.900095][ T1168] bpf_map_free_deferred+0x70/0x180 [ 122.900115][ T1168] process_one_work+0x178/0x2cc [ 122.900135][ T1168] worker_thread+0x24c/0x354 [ 122.900153][ T1168] kthread+0x130/0x1fc [ 122.900171][ T1168] ret_from_fork+0x10/0x20 [ 122.900194][ T1168] [ 122.900220][ T1168] The buggy address belongs to the object at fff0000006479b40 [ 122.900220][ T1168] which belongs to the cache kmalloc-64 of size 64 [ 122.900370][ T1168] The buggy address is located 32 bytes inside of [ 122.900370][ T1168] 64-byte region [fff0000006479b40, fff0000006479b80) [ 122.900395][ T1168] [ 122.900526][ T1168] The buggy address belongs to the physical page: [ 122.900818][ T1168] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xf4f0000006479d00 pfn:0x46479 [ 122.901069][ T1168] anon flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x0) [ 122.901337][ T1168] page_type: f5(slab) [ 122.901742][ T1168] raw: 01ffc00000000000 faf0000003001600 0000000000000000 0000000000000001 [ 122.901784][ T1168] raw: f4f0000006479d00 0000000080400038 00000000f5000000 0000000000000000 [ 122.901858][ T1168] page dumped because: kasan: bad access detected [ 122.901882][ T1168] [ 122.901900][ T1168] Memory state around the buggy address: [ 122.902082][ T1168] fff0000006479900: f2 f2 f2 fe f4 f4 f4 f4 f5 f5 f5 f5 fc fc fc fc [ 122.902203][ T1168] fff0000006479a00: fb fb fb fe f1 f1 f1 fe f3 f3 f3 fe fa fa fa fe [ 122.902277][ T1168] >fff0000006479b00: fa fa fa fe fe fe fe fe f5 f5 f5 f5 fe fe fe fe [ 122.902343][ T1168] ^ [ 122.902447][ T1168] fff0000006479c00: fc fc fc fe f3 f3 f3 fe fe fe fe fe f7 f7 f7 fe [ 122.902479][ T1168] fff0000006479d00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 122.902558][ T1168] ================================================================== [ 122.903658][ T1168] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 123.884720][ T1232] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.946086][ T1232] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.030576][ T1232] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.117483][ T1232] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.714443][ T1232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.775459][ T1232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.807956][ T1232] bond0 (unregistering): Released all slaves [ 124.963584][ T1232] hsr_slave_0: left promiscuous mode [ 124.966953][ T1232] hsr_slave_1: left promiscuous mode [ 124.983467][ T1232] veth1_macvtap: left promiscuous mode [ 124.984028][ T1232] veth0_macvtap: left promiscuous mode [ 124.984453][ T1232] veth1_vlan: left promiscuous mode [ 124.984817][ T1232] veth0_vlan: left promiscuous mode [ 126.073262][ T1232] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.146190][ T1232] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.208342][ T1232] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.302797][ T1232] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.015267][ T1232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.045238][ T1232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.074343][ T1232] bond0 (unregistering): Released all slaves [ 127.147759][ T1232] hsr_slave_0: left promiscuous mode [ 127.152729][ T1232] hsr_slave_1: left promiscuous mode [ 127.161968][ T1232] veth1_macvtap: left promiscuous mode [ 127.162332][ T1232] veth0_macvtap: left promiscuous mode [ 127.162575][ T1232] veth1_vlan: left promiscuous mode [ 127.162837][ T1232] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 21:18:52 Registers: info registers vcpu 0 CPU#0 PC=ffff8000801730e4 X00=0000000006ff9192 X01=ffff800082deaf70 X02=0000000000000027 X03=00000000e9b907e2 X04=0000000000000003 X05=fcf0000003189080 X06=000000000000000a X07=f5f000000679401c X08=0000000000000138 X09=000000000000000b X10=0000000000000000 X11=0000000000155cc0 X12=0000000000000000 X13=0000000000000001 X14=0000000000000100 X15=0000fffffb12dfc0 X16=ffff800082de8000 X17=fff07ffffcef4000 X18=0000000000000000 X19=f4f0000004c7d000 X20=0000000000000000 X21=fdf0000005d50000 X22=f7f000000310be00 X23=fdf0000005d50000 X24=ffff800082deb3e4 X25=0000000000000000 X26=0000000000000040 X27=faf00000073600ec X28=f6f00000090f6e00 X29=ffff800082deb2d0 X30=ffff800080d34e34 SP=ffff800082deb2d0 PSTATE=60402009 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6572207265767265:730073250a0d0a0d Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:616d5f616e657261:20205d3836313154 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00ff00ff00000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000000f0f0000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:65645f656572665f:70616d5f66706220 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6d6d6f4320383631:31203a4449502030 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:4e20373a38752f72:656b726f776b203a Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffffb12de60:0000fffffb12de60 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000fffffb12de30 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff80008092d108 X00=0000000000000002 X01=0000000000000018 X02=ffff800082e15018 X03=ffff800082baded0 X04=fcf00000030e5880 X05=0000000000000039 X06=0000000000000030 X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff800082badf00 X10=0000000000000001 X11=ffff8000831ebe20 X12=ffff800082adf208 X13=ffff8000831ebb8d X14=ffff8000831ebb98 X15=ffff8000831eba00 X16=ffff800082df0000 X17=fff07ffffcf0d000 X18=00000000ffffffff X19=f1f000000304300d X20=ffff80008092d2ac X21=fcf00000030e5880 X22=f1f000000304300d X23=ffff80008092d2ac X24=0000000000000031 X25=f4f000000323b180 X26=0000000000000001 X27=0000000000000000 X28=0000000000000000 X29=ffff8000831ebca0 X30=ffff80008092d2d4 SP=ffff8000831ebca0 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0100000000000000:0100000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000100000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00d000a800000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000002 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffffc51f320:0000fffffc51f320 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000fffffc51f2f0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000