last executing test programs: 16.989860841s ago: executing program 0 (id=5991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r2, r1, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000040)={@empty, @remote}, &(0x7f0000000080)=0x8) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@rights, @rights, @rights], 0x18}}], 0x1, 0x0, 0x0) listen(r0, 0x5) r4 = accept4$inet(r0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) 14.321516784s ago: executing program 0 (id=5997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x8906, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x5450, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 11.592329354s ago: executing program 0 (id=6000): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000100)={0x6, {0x20, 0x9, 0x9, 0x7fff, 0x3}}) close(r1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) read$FUSE(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x14, &(0x7f0000000000)=@ccm_128={{}, "99c4ab481c697acb", "ab30d0322312a8a9489091e60835329b", '2/7D', "2e26c4f3c53f9609"}, 0x28) write$FUSE_OPEN(r1, 0x0, 0x0) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x5450, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'veth0_to_bond\x00', {0x2}, 0x773}) 11.329369524s ago: executing program 0 (id=6001): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r2 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) close(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close(r4) close(r2) 9.962961289s ago: executing program 0 (id=6002): memfd_create(&(0x7f0000000040)='}\xa4-}{\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = eventfd2(0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x8902, &(0x7f0000000040)) 9.694928129s ago: executing program 1 (id=6003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) write$cgroup_pressure(r2, &(0x7f0000000000)={'full', 0x20, 0x4, 0x20, 0x5}, 0x2f) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="ad5f329ecdd7c3decc619fd71fd56a3fe94761aee553287d406b397b706212226ea64eeaf3d069d9ac1fc774e8f36f97dd93109e592bdf0e99f0208d6c524cdfb320394cf659b70457a29bf5868ac65db92b3485f6322ee2cd742ea6230fb5c5c45ac486d0c350f37894907ae1a5b5c5a3800b48362d387354f8257a9675a55a4a4b8fd32154d7efa936cd20e89ae5d6a244f1404d341c6fe41aac981d21dd93b9e5b946cac1d6ef6871a3de1c957585f4b4", @ANYRESHEX=0x0, @ANYRESOCT=r2, @ANYBLOB="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", @ANYBLOB="b4f47f47ce7fd5e231c6c7ba2e25027d3379d6fb48d03e283952745fa5b39cd444e76a2b39f5b90baed23df622", @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) 9.192296676s ago: executing program 1 (id=6004): ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x3, 'hsr0\x00', {0x7}}) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = mq_open(&(0x7f0000000240)=']{\'\x00', 0x40, 0xe0, &(0x7f0000000280)={0x6, 0x9, 0x10000, 0x9a8e}) r2 = dup3(r0, r1, 0x80000) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000002c0), &(0x7f0000000300)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000880)={0xffffffffffffffff, 0xee01}, 0xc) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) accept$unix(r3, 0x0, 0x0) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000019c0), 0x2, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000001a00)) openat$fuse(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000001c80), &(0x7f0000001cc0)=0xc) 9.033289844s ago: executing program 1 (id=6005): r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) sendto$inet_nvme_icreq_pdu(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x1) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept$packet(0xffffffffffffffff, 0x0, 0x0) fcntl$setflags(r3, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002840)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x5450, 0x0) r5 = mq_open(&(0x7f0000000080)='%%}R@\\\'\x00', 0x8c1, 0x30, &(0x7f00000000c0)={0x6, 0x1, 0x8}) flock(r5, 0x2) 6.059532012s ago: executing program 1 (id=6006): r0 = memfd_create(&(0x7f0000000540)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddX\x8f\a\x0022L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\x00\x00\xefo\xe6\xba~#\x0f\x9e I/\xb2\x1am;\xf7B*\x9a\xbf\x84}\xfa\x1a\xe9\xd4#{\xaaS\xe4\xcb3gm\xbcS\xf4\x9fo\x8a\xa1\x95g$\xa3\xban\xb8\xf5\xa5\x83<\xa1Q\xe2\x90\x94\xf0\xfd\x89\x82\x13e\xbc\x9e\xbbv\'k\xd3;`\xfc\x10\xd01T\xbb\xf4-\xd5t\xe3|J\xa4/5\xd0\x94\x8d', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, r0, 0xc166c000) fallocate(r0, 0x0, 0x0, 0x800000b) r1 = timerfd_create(0x0, 0x0) ioctl$TIOCSETD(r1, 0x5452, &(0x7f0000000000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x1ff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x5451, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000bc0)={'#! ', './file0', [{0x20, 'syztnl2\x00'}, {0x20, '}!:#)}'}, {0x20, 'syz0\x00'}]}, 0x21) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) close(0xffffffffffffffff) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) 3.901242757s ago: executing program 0 (id=6007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) 294.817527ms ago: executing program 1 (id=6008): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 0s ago: executing program 1 (id=6009): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) r4 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x2, 0x100) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r3, 0x0) r7 = mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r7, 0xffffffffffffffff) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x1010020, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r6, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:64033' (ED25519) to the list of known hosts. syzkaller login: [ 146.237777][ T3315] cgroup: Unknown subsys name 'net' [ 146.566104][ T3315] cgroup: Unknown subsys name 'cpuset' [ 146.611848][ T3315] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 147.368892][ T3315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 160.881272][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.921386][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.406162][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.446026][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.062210][ T3320] hsr_slave_0: entered promiscuous mode [ 163.078854][ T3320] hsr_slave_1: entered promiscuous mode [ 163.725567][ T3321] hsr_slave_0: entered promiscuous mode [ 163.730871][ T3321] hsr_slave_1: entered promiscuous mode [ 163.738739][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 163.741361][ T3321] Cannot create hsr debugfs directory [ 164.806585][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.861672][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.937262][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.997640][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.377961][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.408926][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.438409][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.469384][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.051905][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.338000][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.097667][ T3320] veth0_vlan: entered promiscuous mode [ 174.201138][ T3320] veth1_vlan: entered promiscuous mode [ 174.530384][ T3321] veth0_vlan: entered promiscuous mode [ 174.628623][ T3320] veth0_macvtap: entered promiscuous mode [ 174.707838][ T3320] veth1_macvtap: entered promiscuous mode [ 174.784719][ T3321] veth1_vlan: entered promiscuous mode [ 175.204634][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.206080][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.206590][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.206984][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.362695][ T3321] veth0_macvtap: entered promiscuous mode [ 175.506739][ T3321] veth1_macvtap: entered promiscuous mode [ 176.006855][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.007787][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.008197][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.008646][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.113043][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.439379][ T3539] input: syz0 as /devices/virtual/input/input1 [ 213.836109][ T3639] serio: Serial port pts0 [ 223.190931][ T3700] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 226.161053][ T3716] input: syz0 as /devices/virtual/input/input2 [ 242.784551][ T3755] serio: Serial port pts0 [ 248.681370][ T3777] fuse: root generation should be zero [ 255.211290][ T3807] input: syz0 as /devices/virtual/input/input3 [ 295.814915][ T3901] syz.1.166 uses obsolete (PF_INET,SOCK_PACKET) [ 296.490643][ T3906] serio: Serial port pts0 [ 299.707918][ T3927] input: syz0 as /devices/virtual/input/input4 [ 304.508320][ T3938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.131459][ T3980] Zero length message leads to an empty skb [ 312.312133][ T3982] input: syz1 as /devices/virtual/input/input5 [ 313.889701][ T3996] input: syz0 as /devices/virtual/input/input6 [ 316.726670][ T4019] binder: 4018:4019 ioctl 40046205 0 returned -22 [ 316.749945][ T4019] binder: 4019 RLIMIT_NICE not set [ 341.609129][ T4115] serio: Serial port pts0 [ 342.190367][ T14] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.191174][ T14] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.191502][ T14] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.191808][ T14] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.291834][ T4125] serio: Serial port pts1 [ 389.349595][ T4321] input: syz0 as /devices/virtual/input/input7 [ 398.994922][ T4389] input: syz0 as /devices/virtual/input/input8 [ 412.403539][ C0] hrtimer: interrupt took 857880 ns [ 413.654773][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.865029][ T4453] input: syz0 as /devices/virtual/input/input9 [ 427.302129][ T4461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.684538][ T4478] input: syz0 as /devices/virtual/input/input10 [ 435.715104][ T4495] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 439.894205][ T4532] serio: Serial port pts0 [ 440.508354][ T4536] serio: Serial port pts1 [ 454.378591][ T4587] input: syz0 as /devices/virtual/input/input11 [ 455.534722][ T4594] input: syz0 as /devices/virtual/input/input12 [ 478.888496][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 490.359838][ T4692] serio: Serial port pts0 [ 507.422721][ T4732] serio: Serial port pts0 [ 509.679900][ T4747] input: syz0 as /devices/virtual/input/input13 [ 528.425758][ T3964] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 528.624429][ T3964] usb 1-1: Using ep0 maxpacket: 32 [ 528.741384][ T3964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.742336][ T3964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.749940][ T3964] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 528.751841][ T3964] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 528.752179][ T3964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.820016][ T3964] usb 1-1: config 0 descriptor?? [ 529.401147][ T3964] hid-generic 0003:1B96:000A.0001: unknown main item tag 0x0 [ 529.401933][ T3964] hid-generic 0003:1B96:000A.0001: unknown main item tag 0x0 [ 529.402188][ T3964] hid-generic 0003:1B96:000A.0001: unknown main item tag 0x0 [ 529.402414][ T3964] hid-generic 0003:1B96:000A.0001: unknown main item tag 0x0 [ 529.402665][ T3964] hid-generic 0003:1B96:000A.0001: unknown main item tag 0x0 [ 529.446941][ T3964] hid-generic 0003:1B96:000A.0001: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 531.461415][ T3098] usb 1-1: USB disconnect, device number 2 [ 531.996675][ T4789] input: syz0 as /devices/virtual/input/input14 [ 542.880745][ T4818] serio: Serial port pts0 [ 565.679952][ T4905] serio: Serial port pts0 [ 600.524114][ T4981] input: syz0 as /devices/virtual/input/input15 [ 637.700906][ T5123] input: syz0 as /devices/virtual/input/input16 [ 676.680978][ T5300] input: syz0 as /devices/virtual/input/input17 [ 706.729783][ T5409] input: syz0 as /devices/virtual/input/input18 [ 722.474385][ T5504] serio: Serial port pts0 [ 742.613906][ T5594] serio: Serial port pts0 [ 744.871516][ T5610] input: syz0 as /devices/virtual/input/input19 [ 752.735074][ T5651] input: syz0 as /devices/virtual/input/input20 [ 756.575142][ T5640] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 771.220834][ T5707] serio: Serial port pts0 [ 776.447912][ T5720] serio: Serial port pts1 [ 802.844478][ T5835] input: syz0 as /devices/virtual/input/input21 [ 803.647152][ T5838] serio: Serial port pts0 [ 819.721250][ T5851] input: syz0 as /devices/virtual/input/input22 [ 822.381999][ T5879] input: syz0 as /devices/virtual/input/input23 [ 841.742092][ T5938] input: syz0 as /devices/virtual/input/input24 [ 867.557421][ T6029] input: syz0 as /devices/virtual/input/input25 [ 870.449962][ T6042] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 889.472567][ T6110] input: syz0 as /devices/virtual/input/input26 [ 892.846645][ T6125] input: syz0 as /devices/virtual/input/input27 [ 895.277410][ T6146] input: syz0 as /devices/virtual/input/input28 [ 912.845382][ T6187] serio: Serial port pts0 [ 928.384682][ T6219] serio: Serial port pts0 [ 930.418189][ T6231] serio: Serial port pts1 [ 944.527965][ T6240] serio: Serial port pts0 [ 947.559535][ T6255] input: syz0 as /devices/virtual/input/input29 [ 956.465592][ T6287] serio: Serial port pts0 [ 972.691510][ T6323] input: syz0 as /devices/virtual/input/input30 [ 994.332481][ T6391] input: syz1 as /devices/virtual/input/input31 [ 998.656925][ T6415] input: syz0 as /devices/virtual/input/input32 [ 1001.891063][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.867588][ T6564] serio: Serial port pts0 [ 1036.225259][ T6569] input: syz0 as /devices/virtual/input/input33 [ 1038.115437][ T6583] input: syz0 as /devices/virtual/input/input34 [ 1051.049684][ T6587] input: syz0 as /devices/virtual/input/input35 [ 1072.938647][ T6653] input: syz0 as /devices/virtual/input/input36 [ 1073.343015][ C0] vkms_vblank_simulate: vblank timer overrun [ 1156.871450][ T7110] dvmrp1: entered allmulticast mode [ 1248.786607][ T7733] capability: warning: `syz.0.1540' uses deprecated v2 capabilities in a way that may be insecure [ 1311.729739][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.736736][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.577727][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 1499.680457][ T9364] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1499.700530][ T9364] veth0: entered promiscuous mode [ 1499.739483][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 1716.204741][T10795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2600'. [ 1791.895643][T11317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2782'. [ 1937.991800][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3063'. [ 1989.596694][T12521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1989.599756][T12521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.270909][T12656] "syz.1.3238" (12656) uses obsolete ecb(arc4) skcipher [ 2205.764802][T14053] serio: Serial port pts0 [ 2278.750079][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3882'. [ 2287.225071][T14587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2287.242859][T14587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2569.089320][T16516] Process accounting resumed [ 2582.556985][T16607] : renamed from ipvlan1 [ 2610.565292][T16775] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 2626.490313][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4714'. [ 2726.768797][T17314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2726.771263][T17314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2770.400695][T17593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4957'. [ 2786.798891][T17708] lo: entered promiscuous mode [ 2786.834485][T17707] lo: left promiscuous mode [ 2824.675811][T17930] syz_tun: entered allmulticast mode [ 2824.682238][T17929] syz_tun: left allmulticast mode [ 2835.415584][T18017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2835.419208][T18017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3034.726490][T19003] serio: Serial port pts0 [ 3037.251873][T19018] process 'syz.0.5448' launched '/dev/fd/5' with NULL argv: empty string added [ 3107.698765][T19256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3107.701431][T19256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3111.979401][T19280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5535'. [ 3112.182682][T19280] vxcan1: entered promiscuous mode [ 3112.716396][T19281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5535'. [ 3172.387332][T19521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3172.390065][T19521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3242.769041][T19755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5694'. [ 3274.925081][T19885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5739'. [ 3309.735010][ T31] audit: type=1326 audit(3309.460:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20003 comm="syz.1.5778" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7d5b9e8 code=0x0 [ 3340.298870][T20121] fuse: Bad value for 'fd' [ 3343.192664][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'. [ 3391.548115][T20295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3391.551057][T20295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3395.469567][T20328] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5888'. [ 3397.415788][T20328] gretap0: entered promiscuous mode [ 3498.355012][T20683] ------------[ cut here ]------------ [ 3498.358008][T20683] WARNING: CPU: 1 PID: 20683 at arch/arm64/kvm/sys_regs.c:2353 kvm_set_vm_id_reg+0x60/0xf4 [ 3498.365700][T20683] Modules linked in: [ 3498.369828][T20683] CPU: 1 UID: 0 PID: 20683 Comm: syz.1.6009 Not tainted syzkaller #0 PREEMPT [ 3498.371308][T20683] Hardware name: linux,dummy-virt (DT) [ 3498.372226][T20683] pstate: a1402009 (NzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 3498.373427][T20683] pc : kvm_set_vm_id_reg+0x60/0xf4 [ 3498.374100][T20683] lr : kvm_finalize_sys_regs+0x88/0x244 [ 3498.374803][T20683] sp : ffff8000883fbab0 [ 3498.375263][T20683] x29: ffff8000883fbab0 x28: f7f0000009655dc0 x27: 0000000000000000 [ 3498.376535][T20683] x26: 0000000000000000 x25: fbf0000009601ca0 x24: 0000000000000000 [ 3498.377549][T20683] x23: fbf0000009601ce8 x22: 0000000000000000 x21: fbff800089c41bd0 [ 3498.378618][T20683] x20: fbff800089c41000 x19: fbf0000009601ca0 x18: 00000000ffffffff [ 3498.379655][T20683] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000883fba90 [ 3498.380733][T20683] x14: ffff8000883fbd98 x13: ffff8000883fbd5a x12: 0000000000000000 [ 3498.381636][T20683] x11: 0000000000000000 x10: 0000000000000000 x9 : 000000000000005e [ 3498.382664][T20683] x8 : ffff8000883fbda8 x7 : f7f0000005280efc x6 : 000000000000005d [ 3498.383920][T20683] x5 : f7f0000009655dc0 x4 : 0000000000000001 x3 : fbff800089c41d18 [ 3498.384948][T20683] x2 : 1101001020110222 x1 : 0000000000000000 x0 : fbff800089c41000 [ 3498.386011][T20683] Call trace: [ 3498.386745][T20683] kvm_set_vm_id_reg+0x60/0xf4 (P) [ 3498.387625][T20683] kvm_finalize_sys_regs+0x88/0x244 [ 3498.388319][T20683] kvm_arch_vcpu_run_pid_change+0x8c/0x36c [ 3498.389044][T20683] kvm_vcpu_ioctl+0x7f8/0x878 [ 3498.389653][T20683] __arm64_sys_ioctl+0xac/0x104 [ 3498.390287][T20683] invoke_syscall+0x48/0x110 [ 3498.390998][T20683] el0_svc_common.constprop.0+0x40/0xe0 [ 3498.391683][T20683] do_el0_svc+0x1c/0x28 [ 3498.392278][T20683] el0_svc+0x34/0x10c [ 3498.392881][T20683] el0t_64_sync_handler+0xa0/0xe4 [ 3498.393710][T20683] el0t_64_sync+0x1a4/0x1a8 [ 3498.394623][T20683] ---[ end trace 0000000000000000 ]--- VM DIAGNOSIS: 10:48:21 Registers: info registers vcpu 0 CPU#0 PC=ffff800081b63eb0 X00=0000032e9f06a05f X01=f2f0000006682580 X02=0000000000000001 X03=0000000000000000 X04=fdf0000005ef7000 X05=0000000000000001 X06=0000000000000002 X07=ffffc1ffc0000000 X08=0010000000000000 X09=000000000000000b X10=0000000000000001 X11=f2f000000545d808 X12=000000000000000d X13=0000000000000001 X14=f4f0000006a98800 X15=ffff800081bb4330 X16=ffff800082d68000 X17=fff07ffffcf73000 X18=0000000000000000 X19=0000000000000000 X20=ffff800082a92088 X21=ffff800082a92080 X22=f2f0000006682580 X23=0000000000000004 X24=ffff800082a92088 X25=0000000000000028 X26=f1f0000004597a80 X27=0000000000000015 X28=f2f0000006682580 X29=ffff800082d6ba40 X30=ffff800080183ce8 SP=ffff800082d6ba40 PSTATE=004020c9 ---- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000010 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000030626669:0000aaaabbf00478 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffffff00000000:ffff000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffff0000ff000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000000000ff:ffffffffffffffff Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000fffffffff Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000000000f92d Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000001 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:65f00a5aa8cb1060:2fcb5e47cd6371e2 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081b63eac X00=ffff800081b63ea8 X01=f7f0000009655dc0 X02=0000000000000000 X03=ffff8000826dda10 X04=ffff8000883fb5b0 X05=f7f0000009655dc0 X06=ffff8000883fb6a0 X07=00000000ffffffc8 X08=ffff8000883fb6e0 X09=ffff8000883fb6e0 X10=0000000000000001 X11=0000000000000001 X12=ffff800082a5fa00 X13=ffff8000883fb5b8 X14=00000000ffffffea X15=ffff8000883fb200 X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=0000000000000000 X20=ffff800082a92088 X21=ffff800082a92080 X22=0000000000000000 X23=0000000000000004 X24=ffff800082a92088 X25=0000000000000028 X26=0000000000000000 X27=00000000000003c0 X28=ffff800082c50510 X29=ffff8000883fb3e0 X30=ffff800080183ce8 SP=ffff8000883fb3e0 PSTATE=824023c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffffff00000007 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000274000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:d503201fd503201f:d503201fd503201f Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:d503201fd503201f:d503201fd503201f Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:d503201fd503201f:d503201fd503201f Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:d503201fd503201f:d503201fd503201f Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffb7f76468:0000ffffb7f76460 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffb7f76478:0000ffffb7f76470 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffc230d7d0:0000ffffc230d7d0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffc230d7a0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000