last executing test programs: 727.417124ms ago: executing program 1 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYRES8=r1], 0xc8}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) flock(0xffffffffffffffff, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x8) r7 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x289, 0x0, 0x0, 0x0}], 0x1}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)) r8 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x40401, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000ff070000186200000e00000000000000030000009500000000000000de6e87f52947984b7fd639e1c6eb2b0bde455475c78222a5ba30b43fb2f0702cb91d9d064bc2537e918a9cfdde0a556690c40db1476af29c15ecf3a5e2e3c76291b5332f4f81f03821589ab8a5ea98891e5eb3f969236369f2ebb45db3c89ddd43ff6c66e91b517e27f0dd61d40af670f8ec9cde4063f98435806cd88df1b525520c2f86c364c5e53f2291cfd763c880e424"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r8}, 0x94) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac0043f020234000c0004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003", 0x4c}, {&(0x7f0000000100)="e8903b5f7f2ff044d2a8a35ab937c0e6", 0x10}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) 642.435534ms ago: executing program 3 (id=4): userfaultfd(0x801) gettid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x800000, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x132f}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x74c920689c38ea7e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x4000000, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000015c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x90, 0x11, 0x148, 0x90, 0x0, 0x1174, 0x2a8, 0x2a8, 0x1174, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x94, 0xb4, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x234) 627.054074ms ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) fanotify_init(0x200, 0x0) pselect6(0x40, &(0x7f0000000680)={0x8, 0x7, 0x0, 0xfffffffffffffff9, 0x916, 0xae3, 0x7, 0x8}, 0x0, 0x0, &(0x7f0000000740), 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000e40)=[{r9, 0x101}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x1, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) fsopen(&(0x7f00000000c0)='ocfs2\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 430.048337ms ago: executing program 1 (id=6): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 416.424175ms ago: executing program 2 (id=3): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv2(r2, 0x0, 0x0, 0x5, 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x18, 0x2, 0xfffffffc) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'vlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002c00128009000100766c616e000000001c0002800600010004000000100003800c000100070000000100000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 363.764803ms ago: executing program 1 (id=7): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c0d0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0xff07, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x4040) 312.09759ms ago: executing program 1 (id=8): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x200000, @mcast2={0xff, 0x3}}, 0x1c) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = syz_clone(0x806000, &(0x7f000001dc80)="cb07b8b0bb83a3037dc21523e5eb03719860f08f119617b88ddf59914dccfa07727a426cb2b8ca1c9ad2e35b0fd625da971ce679cab481bc0d1e85be12d1bc08f47df726a23688184ba2eeccb035207cbdc86431b743347d25887a35240e3195a9b7bb9cb5874272404ead23a2103bf977717eed3ce289782886", 0x7a, &(0x7f000001dd40), &(0x7f000001dd80), &(0x7f000001ddc0)) read$FUSE(0xffffffffffffffff, &(0x7f000001df00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000001ff40)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000020040)=0xe4) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r6, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000020780)=[{{&(0x7f000001b840)=@file={0x225b70cd785f58ef, './file0\x00'}, 0x6e, &(0x7f000001dc40)=[{&(0x7f000001ba80)="771527b9787bf5f719610f2308c2b6441d97ce99f32224c215ac8ef5f19f0bd30cfca0ee3dd2e9ecbc65ba7411445c399a911113782dad37388b1bf79cf93889e373e48f4ad932f8eccdcc364a1ee44c0d01aa5a10c1af189f616627e10e3452a37f5a8e3b022bc838c3dfc5f9e9cd5b2c7cac29c75d7c54d02ff0c84eaadcff6b13146a6d826a9c774715d71eb668f6b14119518141ec6503fcc246a89103444c18b45cce2d29f7e141b46b2e4a9e97e9d52e129fe10e43d3cba288e42ee8779e18d7699dea8c2dfb1d96b29e50ea458b4a786ea4ff60d7339edd7d79cea3b7da45293cf034f21545a530d8cf56846f6a5b7e63a8c3c3d5fdacfb17740695b3b624ecccf35e11b4955997fbb6263b788f7c4e3e66a75bee9bcb415b2727664d150a3a6ce5a86320c9fe73405c24c228a85baad93a2ee4849f339406246586faadc463d117c7518ea642fbfb8b858fa5d93eaed81ba9f699d0163ebfcb8beaa392067ca2237209030543d9b831a6f085e72e90ada4a1aa9f0c478de81a15d5788169338b7ab80cb90571dcab64b51f8bfc893400c58e2f8dc149a98e22cd1bf7151ad58a16dfd5ef9ebe3775e519beead7d49277d44f3348493340fa", 0x1bc}, {&(0x7f000001ca80)="1b43fd41bf0ce185d206f255fc2d7d16afe88ea8974bf23cf4ea33aef2701deb22b5049754d19cc6778db8669697a4586d005bdab1057605d0589e69c2bd60b3767f739a3fa4c4ba11f69b5b57fa40dca8c1641b04b2893cca40be6cd3d1e8c11d71f75bcce4fd8af1ba7c89bd0956782d7fd88ba851e3235a369f22fe9642d254b385026c3325f0e416f9d8330ad606fe22b362271be717d670b68eb981efcb1119fd1c20b58a0f49ffcb4a1b438497cf2f7eb5315a329beb3cddb623f1e3", 0xbf}, {0x0}], 0x3, &(0x7f0000020140)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @rights={{0xc}}, @cred={{0x18, 0x1, 0x2, {r4, r5}}}], 0x64, 0x40}}, {{&(0x7f0000020200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000206c0)=[{&(0x7f0000020280)="195afd5787bb60db0337e5d8d25e3e5e0546f47265731f6d8c5cc94a73a73c505d767e91de4c3ffd31249208786f6f15a6", 0x31}, {&(0x7f0000020300)="f2dd18", 0x3}, {&(0x7f0000020380)="f4de2227d3ec66068d674d2e30ac365f254a4a9a66d184f80f445146a6f8e73e0eb00f27942b9d426289020bc7f5af4f869fbf63446125677e7e9f813684d59817eff1e435ab1bcb56496d6a26473141d3fbe46ca789e0e0942be45626501707afa6436756ab5072cbb05256c51d680a06589d16d27c", 0x76}, {&(0x7f0000020440)="eec5ca77d3d85ad41ce4", 0xa}, {0x0}, {&(0x7f0000020500)="037db682e26f0d0e671306da3d9bc849bd0a6af4e07da4f80f820ec904c645dbfd632e54c5e837170236348d80f85cc8bc33254323387311d7f6fd9bc0c0f7c37bf8c2db1ea4e319e8462d54bfb86503bd0c8300ad6abab159c173a77182fb52b9919c769217e1b6bfb23b34dc2232a2fa217c9a6ee3bb380756847d5e3394d9ce2a2a34cc8a35b24385188ab52b07b1052c99b1c52801768a10817264aa0f3685c8a85542826afeb90052cf2a9e28cbdc442866bd058b1d6384843b585e94459aef0fe2c325bc82383473162d7f40f02c6a7c3b0b27f8a3aeacdb115c02", 0xde}, {0x0}, {&(0x7f0000020640)="d17df4ae79f6ce2205114b9c5d1a58e5bbe02f79e13e", 0x16}], 0x8, &(0x7f0000020740)=[@cred={{0x18, 0x1, 0x2, {r4, r5}}}, @cred={{0x18, 0x1, 0x2, {0x0, r5, r7}}}], 0x30, 0xc0}}], 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16=r4, @ANYRESHEX=r3], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000140)="8369b66f", 0x20, 0x0, 0x0, 0x0) 898.319µs ago: executing program 1 (id=9): r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x200042, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000000c0)=0x5) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) syz_emit_ethernet(0x88, &(0x7f0000000100)={@local, @multicast, @val={@void, {0x8100, 0x1, 0x0, 0xfff}}, {@x25={0x805, {0x1, 0xf, 0x1f, "e60726c5eae3cfe0ee62dffa9f8abae5669401245238813c8910ece65658288539234b6017bb4a5c380f0b4bc86f70de06aeb1d14b6dbb8ff926f55b04c68081354be7f34fdd4a553f7d22e173c0c6d25858183aba97f008b0f9a54edda08ce7cda555beeb528b34e02e45f13285f10a2f58b7"}}}}, &(0x7f00000001c0)={0x1, 0x1, [0x4e9, 0xa10e, 0x41a, 0x950]}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000280)) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/189, 0xbd}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000480)=""/38, 0x26}], 0x3, 0x8000, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x2000) r2 = syz_open_dev$hidraw(&(0x7f0000000640), 0x1, 0x181400) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000000680)) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000006c0), &(0x7f0000000700)={'U-', 0x6}, 0x16, 0x0) connect$vsock_stream(r0, &(0x7f0000000740)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000780)={{0x3b, @broadcast, 0x4e24, 0x3, 'ovf\x00', 0x20, 0x6c7, 0x62}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x4e20, 0x4, 0xa, 0x0, 0x5}}, 0x44) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000800)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x9c, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x45}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x68}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004000}, 0x100) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000a40)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xc8, 0x453, 0x0, 0x70bd26, 0x25dfdbfd, "1235404ed0c35c6dc6e6944cde32ce38868e68bf100ee60d4cb0a21f14ee4bdb94688846e549a5903be2e0607fce53ded138fa21bcb40e19d4b424801bc3a64512402745c7cdf3cf61b790eec7cb48250fefc9c660b82761f55191c76e5652dfbc24092d72843b413578cee384837edcc8cc8a61d5f74ff058f83b346dc6da1b9c7e39679ccb751d4319c8ec0a8b6c33850fcac0cfa1bffbceff1111fe26f0f31e4b467568d4333080d11fa6849fb4b1234f2447385f", ["", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000dc0)={'ip6gretap0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000e00)={'tunl0\x00', 0x0, 0x40, 0x80, 0xd, 0x2, {{0x15, 0x4, 0x2, 0x2c, 0x54, 0x66, 0x0, 0xc, 0x2f, 0x0, @private=0xa010100, @private=0xa010100, {[@rr={0x7, 0xb, 0xa0, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0x14, 0x1d, 0x0, 0x5, [0x1000, 0xaf3, 0xb0f0, 0xb]}, @cipso={0x86, 0x1c, 0x0, [{0x6, 0x5, "f67359"}, {0x2, 0x11, "33936f23e123bebf2cfbb4cc207976"}]}, @end, @noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000017c0)={&(0x7f0000000d80), 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xe0, 0x0, 0x528, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2367cc8c9107f7a4}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x50) 0s ago: executing program 1 (id=10): unshare(0x8020000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000004c0), 0x0, 0x413f) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:47935' (ED25519) to the list of known hosts. [ 47.927024][ T5913] cgroup: Unknown subsys name 'net' [ 48.032838][ T5913] cgroup: Unknown subsys name 'cpuset' [ 48.036704][ T5913] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.893199][ T5913] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.388720][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.392129][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.393906][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.395565][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.397170][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.398266][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.401191][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.401612][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.401854][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.402950][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.403724][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.404185][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.404563][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.410824][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.412441][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.419294][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.422091][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.424885][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.427691][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.440250][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.694833][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 53.801386][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 53.814382][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.816783][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.819136][ T5932] bridge_slave_0: entered allmulticast mode [ 53.830554][ T5932] bridge_slave_0: entered promiscuous mode [ 53.839386][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.842120][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.844568][ T5932] bridge_slave_1: entered allmulticast mode [ 53.848356][ T5932] bridge_slave_1: entered promiscuous mode [ 53.939965][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.954711][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.979259][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 54.016995][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.019740][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.022309][ T5934] bridge_slave_0: entered allmulticast mode [ 54.025282][ T5934] bridge_slave_0: entered promiscuous mode [ 54.046363][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 54.067982][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.071481][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.074770][ T5934] bridge_slave_1: entered allmulticast mode [ 54.078919][ T5934] bridge_slave_1: entered promiscuous mode [ 54.085370][ T5932] team0: Port device team_slave_0 added [ 54.112763][ T5932] team0: Port device team_slave_1 added [ 54.151154][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.195451][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.199512][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.202066][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.212013][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.223654][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.226117][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.229395][ T5933] bridge_slave_0: entered allmulticast mode [ 54.233866][ T5933] bridge_slave_0: entered promiscuous mode [ 54.239107][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.242864][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.246058][ T5933] bridge_slave_1: entered allmulticast mode [ 54.250125][ T5933] bridge_slave_1: entered promiscuous mode [ 54.263586][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.266736][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.277183][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.289101][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.292543][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.295803][ T5931] bridge_slave_0: entered allmulticast mode [ 54.299842][ T5931] bridge_slave_0: entered promiscuous mode [ 54.314000][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.317372][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.321077][ T5931] bridge_slave_1: entered allmulticast mode [ 54.324661][ T5931] bridge_slave_1: entered promiscuous mode [ 54.344810][ T5934] team0: Port device team_slave_0 added [ 54.368878][ T5934] team0: Port device team_slave_1 added [ 54.373115][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.380055][ T5932] hsr_slave_0: entered promiscuous mode [ 54.382549][ T5932] hsr_slave_1: entered promiscuous mode [ 54.386110][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.395309][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.401844][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.441258][ T5933] team0: Port device team_slave_0 added [ 54.443612][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.446008][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.454679][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.468787][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.471243][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.479787][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.504161][ T5933] team0: Port device team_slave_1 added [ 54.521829][ T5931] team0: Port device team_slave_0 added [ 54.549209][ T5931] team0: Port device team_slave_1 added [ 54.579364][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.582422][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.593030][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.598154][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.601325][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.612546][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.636894][ T5934] hsr_slave_0: entered promiscuous mode [ 54.639284][ T5934] hsr_slave_1: entered promiscuous mode [ 54.641660][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 54.643645][ T5934] Cannot create hsr debugfs directory [ 54.646108][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.648576][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.659332][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.664989][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.667641][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.678341][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.759793][ T5931] hsr_slave_0: entered promiscuous mode [ 54.762297][ T5931] hsr_slave_1: entered promiscuous mode [ 54.764408][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 54.766307][ T5931] Cannot create hsr debugfs directory [ 54.831620][ T5933] hsr_slave_0: entered promiscuous mode [ 54.834791][ T5933] hsr_slave_1: entered promiscuous mode [ 54.837535][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 54.839755][ T5933] Cannot create hsr debugfs directory [ 54.921248][ T5932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.941808][ T5932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.948686][ T5932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.966534][ T5932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.029853][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.040766][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.044965][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.049340][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.071699][ T5931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.076871][ T5931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.083828][ T5931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.088838][ T5931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.153815][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.160788][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.164542][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.169490][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.175068][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.197311][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.206081][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.208589][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.216554][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.218960][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.236564][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.284859][ T5932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.289251][ T5932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.301671][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.306165][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.316759][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.319296][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.336082][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.338498][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.344837][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.358465][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.360954][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.374415][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.376831][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.383623][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.411021][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.419410][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.422353][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.437088][ T192] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.439801][ T192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.461347][ T63] Bluetooth: hci2: command tx timeout [ 55.461376][ T5947] Bluetooth: hci3: command tx timeout [ 55.464108][ T5294] Bluetooth: hci1: command tx timeout [ 55.468718][ T5938] Bluetooth: hci0: command tx timeout [ 55.503388][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.527444][ T5932] veth0_vlan: entered promiscuous mode [ 55.534709][ T5932] veth1_vlan: entered promiscuous mode [ 55.573334][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.579356][ T5932] veth0_macvtap: entered promiscuous mode [ 55.592589][ T5932] veth1_macvtap: entered promiscuous mode [ 55.604290][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.608414][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.620558][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.637968][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.642093][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.650742][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.653924][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.656970][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.667774][ T5931] veth0_vlan: entered promiscuous mode [ 55.674588][ T5931] veth1_vlan: entered promiscuous mode [ 55.683798][ T5934] veth0_vlan: entered promiscuous mode [ 55.701882][ T5934] veth1_vlan: entered promiscuous mode [ 55.732071][ T5931] veth0_macvtap: entered promiscuous mode [ 55.741967][ T5933] veth0_vlan: entered promiscuous mode [ 55.754781][ T5931] veth1_macvtap: entered promiscuous mode [ 55.755140][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.760770][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.762366][ T5934] veth0_macvtap: entered promiscuous mode [ 55.768720][ T5934] veth1_macvtap: entered promiscuous mode [ 55.779926][ T5933] veth1_vlan: entered promiscuous mode [ 55.805332][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.809773][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.809812][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.814083][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.828715][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.839726][ T1145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.853110][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.857471][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.866039][ T5932] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.873979][ T5933] veth0_macvtap: entered promiscuous mode [ 55.885470][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.891353][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.898162][ T5933] veth1_macvtap: entered promiscuous mode [ 55.905622][ T106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.909421][ T106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.924083][ T106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.933383][ T106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.948632][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.971298][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.990332][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.993052][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.002811][ T88] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.005852][ T88] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.015840][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.016316][ T88] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.018494][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.030908][ T88] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.048063][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.051227][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.083421][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.086987][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.105737][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.109248][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.148993][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.152895][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.162205][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.165157][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.178525][ T6026] syzkaller0: entered promiscuous mode [ 56.180938][ T6026] syzkaller0: entered allmulticast mode [ 56.341927][ T6031] Bluetooth: MGMT ver 1.23 [ 56.510941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 56.816404][ T6042] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 56.826222][ T6042] vlan2: entered allmulticast mode [ 56.828019][ T6042] vlan0: entered allmulticast mode [ 56.829764][ T6042] veth0_vlan: entered allmulticast mode [ 57.127869][ T6028] ================================================================== [ 57.130889][ T6028] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0 [ 57.133763][ T6028] Read of size 4 at addr ffff88800010263c by task syz.3.4/6028 [ 57.137612][ T6028] [ 57.138755][ T6028] CPU: 3 UID: 0 PID: 6028 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 57.138769][ T6028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.138776][ T6028] Call Trace: [ 57.138780][ T6028] [ 57.138784][ T6028] dump_stack_lvl+0x100/0x190 [ 57.138803][ T6028] print_report+0x156/0x4c9 [ 57.138818][ T6028] ? __virt_addr_valid+0x81/0x620 [ 57.138832][ T6028] ? __phys_addr+0xe8/0x180 [ 57.138844][ T6028] ? dvb_frontend_release+0x4f3/0x5d0 [ 57.138857][ T6028] kasan_report+0xdf/0x1e0 [ 57.138868][ T6028] ? dvb_frontend_release+0x4f3/0x5d0 [ 57.138881][ T6028] dvb_frontend_release+0x4f3/0x5d0 [ 57.138894][ T6028] ? __pfx_dvb_frontend_release+0x10/0x10 [ 57.138907][ T6028] __fput+0x3ff/0xb40 [ 57.138920][ T6028] task_work_run+0x150/0x240 [ 57.138935][ T6028] ? __pfx_task_work_run+0x10/0x10 [ 57.138951][ T6028] exit_to_user_mode_loop+0x100/0x4a0 [ 57.138965][ T6028] __do_fast_syscall_32+0x578/0x8c0 [ 57.138979][ T6028] do_fast_syscall_32+0x32/0x70 [ 57.138991][ T6028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.139005][ T6028] RIP: 0023:0xf7f07f6c [ 57.139014][ T6028] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 57.139024][ T6028] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000134 [ 57.139034][ T6028] RAX: 0000000000000007 RBX: 0000000000000040 RCX: 00000000800001c0 [ 57.139040][ T6028] RDX: 0000000000000000 RSI: 00000000800002c0 RDI: 0000000000000000 [ 57.139046][ T6028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.139052][ T6028] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.139058][ T6028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.139067][ T6028] [ 57.139070][ T6028] [ 57.201751][ T6028] Allocated by task 1: [ 57.203141][ T6028] kasan_save_stack+0x30/0x50 [ 57.204795][ T6028] kasan_save_track+0x14/0x30 [ 57.206411][ T6028] __kasan_kmalloc+0xaa/0xb0 [ 57.208005][ T6028] dvb_register_device+0x1d6/0x1e20 [ 57.209779][ T6028] dvb_register_frontend+0x5a8/0x8a0 [ 57.211603][ T6028] vidtv_bridge_probe+0x44b/0xa30 [ 57.213578][ T6028] platform_probe+0x106/0x1d0 [ 57.215202][ T6028] really_probe+0x241/0xa60 [ 57.216771][ T6028] __driver_probe_device+0x1de/0x400 [ 57.218572][ T6028] driver_probe_device+0x4c/0x1b0 [ 57.220296][ T6028] __driver_attach+0x2f4/0x6a0 [ 57.222020][ T6028] bus_for_each_dev+0x13e/0x1d0 [ 57.223771][ T6028] bus_add_driver+0x305/0x5b0 [ 57.225967][ T6028] driver_register+0x1e2/0x360 [ 57.228200][ T6028] vidtv_bridge_init+0x38/0x70 [ 57.230442][ T6028] do_one_initcall+0x11d/0x760 [ 57.232676][ T6028] kernel_init_freeable+0x6e5/0x7a0 [ 57.235085][ T6028] kernel_init+0x1f/0x1e0 [ 57.237120][ T6028] ret_from_fork+0x754/0xd80 [ 57.239279][ T6028] ret_from_fork_asm+0x1a/0x30 [ 57.241514][ T6028] [ 57.242650][ T6028] Freed by task 6028: [ 57.244521][ T6028] kasan_save_stack+0x30/0x50 [ 57.246719][ T6028] kasan_save_track+0x14/0x30 [ 57.248923][ T6028] kasan_save_free_info+0x3b/0x70 [ 57.251279][ T6028] __kasan_slab_free+0x5f/0x80 [ 57.253464][ T6028] kfree+0x1f6/0x6b0 [ 57.255311][ T6028] dvb_device_put.part.0+0x57/0x90 [ 57.257697][ T6028] dvb_generic_release+0xe2/0x160 [ 57.260038][ T6028] dvb_frontend_release+0x13d/0x5d0 [ 57.262397][ T6028] __fput+0x3ff/0xb40 [ 57.264070][ T6028] task_work_run+0x150/0x240 [ 57.265707][ T6028] exit_to_user_mode_loop+0x100/0x4a0 [ 57.267684][ T6028] __do_fast_syscall_32+0x578/0x8c0 [ 57.269546][ T6028] do_fast_syscall_32+0x32/0x70 [ 57.271212][ T6028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.273396][ T6028] [ 57.274230][ T6028] The buggy address belongs to the object at ffff888000102600 [ 57.274230][ T6028] which belongs to the cache kmalloc-256 of size 256 [ 57.278907][ T6028] The buggy address is located 60 bytes inside of [ 57.278907][ T6028] freed 256-byte region [ffff888000102600, ffff888000102700) [ 57.284025][ T6028] [ 57.284863][ T6028] The buggy address belongs to the physical page: [ 57.287021][ T6028] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102 [ 57.289916][ T6028] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 57.293144][ T6028] flags: 0x7ff00000000040(head|node=0|zone=0|lastcpupid=0x7ff) [ 57.296312][ T6028] page_type: f5(slab) [ 57.297692][ T6028] raw: 007ff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 57.300717][ T6028] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 57.304589][ T6028] head: 007ff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 57.308680][ T6028] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 57.312612][ T6028] head: 007ff00000000001 ffffea0000004081 00000000ffffffff 00000000ffffffff [ 57.316581][ T6028] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 57.320548][ T6028] page dumped because: kasan: bad access detected [ 57.323400][ T6028] page_owner tracks the page as allocated [ 57.326036][ T6028] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18613480119, free_ts 0 [ 57.334277][ T6028] post_alloc_hook+0x153/0x170 [ 57.336280][ T6028] get_page_from_freelist+0x111d/0x3140 [ 57.338544][ T6028] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 57.340992][ T6028] new_slab+0xa6/0x6d0 [ 57.342474][ T6028] refill_objects+0x26b/0x400 [ 57.344095][ T6028] __pcs_replace_empty_main+0x19f/0x600 [ 57.346049][ T6028] __kmalloc_cache_noprof+0x493/0x6f0 [ 57.347931][ T6028] bus_add_driver+0x92/0x5b0 [ 57.349558][ T6028] driver_register+0x1e2/0x360 [ 57.351204][ T6028] usb_register_driver+0x21c/0x3e0 [ 57.353093][ T6028] do_one_initcall+0x11d/0x760 [ 57.354719][ T6028] kernel_init_freeable+0x6e5/0x7a0 [ 57.356496][ T6028] kernel_init+0x1f/0x1e0 [ 57.357968][ T6028] ret_from_fork+0x754/0xd80 [ 57.359545][ T6028] ret_from_fork_asm+0x1a/0x30 [ 57.361175][ T6028] page_owner free stack trace missing [ 57.363013][ T6028] [ 57.363844][ T6028] Memory state around the buggy address: [ 57.365862][ T6028] ffff888000102500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.368519][ T6028] ffff888000102580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.371194][ T6028] >ffff888000102600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.374379][ T6028] ^ [ 57.376712][ T6028] ffff888000102680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.379854][ T6028] ffff888000102700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.382632][ T6028] ================================================================== [ 57.388518][ T6028] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 57.391012][ T6028] CPU: 3 UID: 0 PID: 6028 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 57.394136][ T6028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.397524][ T6028] Call Trace: [ 57.398671][ T6028] [ 57.399820][ T6028] dump_stack_lvl+0x100/0x190 [ 57.401486][ T6028] vpanic+0x552/0x970 [ 57.402848][ T6028] ? __pfx_vpanic+0x10/0x10 [ 57.404394][ T6028] ? dvb_frontend_release+0x4f3/0x5d0 [ 57.406211][ T6028] panic+0xd1/0xe0 [ 57.407493][ T6028] ? __pfx_panic+0x10/0x10 [ 57.409000][ T6028] ? dvb_frontend_release+0x4f3/0x5d0 [ 57.410817][ T6028] ? preempt_schedule_common+0x42/0xc0 [ 57.412700][ T6028] check_panic_on_warn.cold+0x19/0x34 [ 57.414507][ T6028] end_report.part.0+0x3a/0x90 [ 57.416159][ T6028] kasan_report.cold+0xe/0x18 [ 57.417726][ T6028] ? dvb_frontend_release+0x4f3/0x5d0 [ 57.419531][ T6028] dvb_frontend_release+0x4f3/0x5d0 [ 57.421340][ T6028] ? __pfx_dvb_frontend_release+0x10/0x10 [ 57.423280][ T6028] __fput+0x3ff/0xb40 [ 57.424665][ T6028] task_work_run+0x150/0x240 [ 57.426243][ T6028] ? __pfx_task_work_run+0x10/0x10 [ 57.428117][ T6028] exit_to_user_mode_loop+0x100/0x4a0 [ 57.429981][ T6028] __do_fast_syscall_32+0x578/0x8c0 [ 57.432090][ T6028] do_fast_syscall_32+0x32/0x70 [ 57.433889][ T6028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.436065][ T6028] RIP: 0023:0xf7f07f6c [ 57.437311][ T6028] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 57.443667][ T6028] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000134 [ 57.446486][ T6028] RAX: 0000000000000007 RBX: 0000000000000040 RCX: 00000000800001c0 [ 57.449153][ T6028] RDX: 0000000000000000 RSI: 00000000800002c0 RDI: 0000000000000000 [ 57.451855][ T6028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.454543][ T6028] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 57.457230][ T6028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.459912][ T6028] [ 57.461564][ T6028] Kernel Offset: disabled [ 57.463036][ T6028] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:57:12 Registers: info registers vcpu 0 CPU#0 RAX=00000000000b3075 RBX=ffffffff8e4975c0 RCX=ffffffff8b8cdc75 RDX=0000000000000000 RSI=ffffffff8de7be29 RDI=ffffffff8c1af7a0 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed1005646795 R10=ffff88802b233cab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d9b710 R15=0000000000000000 RIP=ffffffff8b8cc5df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809714d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002fae9ff8 CR3=000000004e663000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000023dbc3e50c RBX=ffff88802b323f80 RCX=00000000000006e0 RDX=0000000000000023 RSI=ffff88802b323f80 RDI=0000000000058452 RBP=0000000000058452 RSP=ffffc90000590ed0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88802b3284c0 RIP=ffffffff81b4ef45 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809724d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f822ff8 CR3=000000006a5bb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b43b2e0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88802b43b2e0 RDI=ffff8880257cd4d8 RBP=ffff8880257cc980 RSP=ffffc9000df5f8b8 R8 =ffff88802b43be18 R9 =ffffffff81d5a0ea R10=0000000000000000 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000046 R14=ffff8880257cd4d8 R15=0000000000000000 RIP=ffffffff8b8ffbe0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809734d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5384da4 CR3=000000004e9fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85772195 RDI=ffffffff9b48b080 RBP=ffffffff9b48b040 RSP=ffffc900061ff788 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032303654 R12=0000000000000000 R13=000000000000005b R14=0000000000000010 R15=ffffffff85772130 RIP=ffffffff857721bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c01300 GS =0063 ffff88809744d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002fc02ff8 CR3=000000004e9fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000