last executing test programs: 511.508801ms ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2082, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x801, {0x0, 0x1}}, 0x18) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000103c0)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mount(0x0, &(0x7f0000000000)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x11, r2, 0xf000) socket$kcm(0x2, 0xa, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4089, 0xff9}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/168, 0xa8}, {0x0}, {&(0x7f0000000500)=""/29, 0x1d}], 0x5}, 0x1}], 0x1, 0x102, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb88a9000081002002"], 0x42) 479.867593ms ago: executing program 0 (id=1): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r1 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./sys\x00', 0x80000, 0x0) r2 = inotify_init() ppoll(&(0x7f0000000040)=[{r2, 0x1}], 0x1, &(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) mkdirat(r1, &(0x7f0000000140)='./sys\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off}, {@workdir={'workdir', 0x3d, './bus'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1000000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0x1f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xd3, 0x2, 0x5, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0xfffffff6, 0x1, 0x401, 0x10001, 0x1001, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0x9, 0x46, 0x9, 0x1, 0x6a77, 0x5, 0x5b, 0x8]}) 458.175292ms ago: executing program 3 (id=4): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x8014}}], 0x1, 0x2000c810) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf253e0000004956cedfc14c46ae5b0e97c7121d0a28b60181f7ab39ef8874688b1e9540fb34417aa74d084904bbc992bf421ed2a8d193dbb0a29c8e10b67960d7c66abeaff65b889b0c02a999902069"], 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x24004840) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r6 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x02\x8d\xcax\n\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86c\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q', 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r6], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x54, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008850) 339.908454ms ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 259.998833ms ago: executing program 1 (id=5): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4c9, 0xffff, 0x9dfe, 0x5, "8003e3ffff072000"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x4000000, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000001c0)=""/10, 0xa}], 0x1, &(0x7f0000000c40)=""/176, 0xb0}, 0x3}], 0x1, 0x2122, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) chdir(&(0x7f0000000080)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) ioctl$CDROM_CHANGER_NSLOTS(r3, 0x5328) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x801, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}}, 0x20}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x1, 0x12) write$FUSE_INTERRUPT(r3, &(0x7f0000004c80)={0x10}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x2, 0x2}, 0x3}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000340)="e45564ecce58c84b73b594ec91f67b25d5eb877bcdd498e5e91abc518bd5f18cd3d4d644390af55911eb105643cec3162164e009646c4ea8c7d636f821bc3e6a9503f08c080d8f116a349836fdaa3732fc901ca87f6edc8222cef02a0b3652791610108aaf0f62a7a3867b3438b3e6960d7864116ae2c225c1074aefe4424d66babc9a3fbebff2d3063f41cb8c826c77e55bb1ee668a8e946947c809a9f5865c0747ff1967fd2111744f4ce2e54029ba8377c4cba4b653add57c893b8c750f8cad01004a38e1e4cceaf6934bcc0adc7407bbeee79a994633a547611b6b7dec0bb0e00036d62e", 0xe6}, {&(0x7f0000000500)="b7d762d46eb3a0b92797049d2d91f9a21cae9c8015b096a1f228237e61597b042ab952e670fd2c5e7638461877a50832c31565307d211d18ced6a1fac409791dfe6a585fe0c75eb369528feb0e2d41967db7fa676a20522e1dc7af2a7c8b6a645c2c2dd57039c28b3582232a467ce9c56bf7bb0fb1c4eef08fc619355f760137d32785b9914213e32c8ec219a9d49aa324a4e1ef7455bf0ac2c7", 0x9a}, {&(0x7f0000000680)="738d0e1592a9b83ce82497669982a4ae76cb3175f10c3c27012d3fe1f3136b4d139db4134f2ceed6665178e9b5944f353ac821fbc4b3b4be88056bf12e0349345b9af647635f864c849322c2179691fce223a0b832acaae85b6146cca26d0046dba63c293cf702e7c156978b39fa09ff5f0ab9b14b4336a6e153acd6a0b20e4e75f1b2863c0d9f22817c26de1702e65c20d8a85ef2693992a9036a08fbc0a0df9f4b83", 0xa3}, {&(0x7f0000000240)="bc53cb97d5f295f7cc021a6bacb1e277b1ad", 0x12}, {&(0x7f0000000640)="897b6d404aee0097d33ef9c8d954eae3f15144", 0x13}, {&(0x7f0000000740)="7bbd561d17ef21517bf391f09e595888b18ad69ada770a93edcd45601cf424b35baa1d15e8b970c8cc0e02e585b47ae8afb28a7623ebcb2b1457b23a64cf0db366f6a77627c5301ac9e3dd01098accf5773a4c683ccd8bf620890227e27aa678769d6816a8e3c8a9d73cfc8d696c867d5dc6324bd8797972b3507eed53b2689bc73a1dc526d65538d332082aa9129c31172bc2e6ee4cc551c790d5d0907b597782865f8b11fb22841a8c6865b0af6b4e846a2d619f28ca472f7ceef8307723dc75d9f439", 0xc4}], 0x6}, 0x8000) 0s ago: executing program 2 (id=6): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:61337' (ED25519) to the list of known hosts. [ 41.272644][ T5713] cgroup: Unknown subsys name 'net' [ 41.416011][ T5713] cgroup: Unknown subsys name 'cpuset' [ 41.419805][ T5713] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.424932][ T5713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.327359][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.327366][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.333847][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.333968][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.337213][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.337384][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.338206][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.338398][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.340314][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.340319][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.342477][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.342808][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.343985][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.344245][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.344622][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.347849][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.348579][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.349614][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.350840][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.351756][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.887976][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.891779][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.895241][ T5730] bridge_slave_0: entered allmulticast mode [ 46.899179][ T5730] bridge_slave_0: entered promiscuous mode [ 46.932363][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.935200][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.937645][ T5730] bridge_slave_1: entered allmulticast mode [ 46.940438][ T5730] bridge_slave_1: entered promiscuous mode [ 46.999402][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.002731][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.006065][ T5729] bridge_slave_0: entered allmulticast mode [ 47.010177][ T5729] bridge_slave_0: entered promiscuous mode [ 47.044672][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.047007][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.049274][ T5729] bridge_slave_1: entered allmulticast mode [ 47.051926][ T5729] bridge_slave_1: entered promiscuous mode [ 47.061947][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.066035][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.068910][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.071779][ T5731] bridge_slave_0: entered allmulticast mode [ 47.075047][ T5731] bridge_slave_0: entered promiscuous mode [ 47.102654][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.111068][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.114183][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.116542][ T5731] bridge_slave_1: entered allmulticast mode [ 47.119170][ T5731] bridge_slave_1: entered promiscuous mode [ 47.124000][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.127260][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.130031][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.132401][ T5741] bridge_slave_0: entered allmulticast mode [ 47.135429][ T5741] bridge_slave_0: entered promiscuous mode [ 47.146488][ T5730] team0: Port device team_slave_0 added [ 47.155876][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.158805][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.161236][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.163721][ T5741] bridge_slave_1: entered allmulticast mode [ 47.166751][ T5741] bridge_slave_1: entered promiscuous mode [ 47.170190][ T5730] team0: Port device team_slave_1 added [ 47.212686][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.226423][ T5729] team0: Port device team_slave_0 added [ 47.229658][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.232688][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.243224][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.251833][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.265936][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.269877][ T5729] team0: Port device team_slave_1 added [ 47.272277][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.275257][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.285964][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.304036][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.313032][ T5731] team0: Port device team_slave_0 added [ 47.316317][ T5731] team0: Port device team_slave_1 added [ 47.339770][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.341995][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.350033][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.379087][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.381280][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.389314][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.393407][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.395695][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.404188][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.413111][ T5741] team0: Port device team_slave_0 added [ 47.418261][ T5741] team0: Port device team_slave_1 added [ 47.435081][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.437482][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.446779][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.463633][ T5730] hsr_slave_0: entered promiscuous mode [ 47.466409][ T5730] hsr_slave_1: entered promiscuous mode [ 47.496110][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.499141][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.509829][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.535698][ T5729] hsr_slave_0: entered promiscuous mode [ 47.538933][ T5729] hsr_slave_1: entered promiscuous mode [ 47.541925][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 47.545065][ T5729] Cannot create hsr debugfs directory [ 47.548603][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.552407][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.563314][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.617262][ T5731] hsr_slave_0: entered promiscuous mode [ 47.620472][ T5731] hsr_slave_1: entered promiscuous mode [ 47.623911][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 47.626397][ T5731] Cannot create hsr debugfs directory [ 47.710302][ T5741] hsr_slave_0: entered promiscuous mode [ 47.712567][ T5741] hsr_slave_1: entered promiscuous mode [ 47.715241][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 47.717091][ T5741] Cannot create hsr debugfs directory [ 47.953505][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.962816][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.978750][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.984042][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.986869][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.991099][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.001688][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.007596][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.051465][ T5729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.057414][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.063775][ T5729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.069232][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.072443][ T5729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.076993][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.087447][ T5729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.091498][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.143104][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.149665][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.154426][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.158521][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.161447][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.165333][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.168149][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.173050][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.206388][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.242539][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.249070][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.252527][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.258743][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.262573][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.269951][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.280277][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.286495][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.305091][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.317709][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.319991][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.342269][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.345399][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.359158][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.391942][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.413825][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.417037][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.419357][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.427158][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.430213][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.435113][ T5732] Bluetooth: hci1: command tx timeout [ 48.443143][ T5732] Bluetooth: hci3: command tx timeout [ 48.443177][ T5737] Bluetooth: hci2: command tx timeout [ 48.443191][ T64] Bluetooth: hci0: command tx timeout [ 48.447351][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.478394][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.506434][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.508983][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.515002][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.519853][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.522568][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.531323][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.550544][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.566007][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.568299][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.571450][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.573734][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.822241][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.835862][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.871475][ T5730] veth0_vlan: entered promiscuous mode [ 48.875861][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.885824][ T5730] veth1_vlan: entered promiscuous mode [ 48.908732][ T5729] veth0_vlan: entered promiscuous mode [ 48.919449][ T5729] veth1_vlan: entered promiscuous mode [ 48.926918][ T5730] veth0_macvtap: entered promiscuous mode [ 48.936577][ T5731] veth0_vlan: entered promiscuous mode [ 48.939138][ T5730] veth1_macvtap: entered promiscuous mode [ 48.947312][ T5731] veth1_vlan: entered promiscuous mode [ 48.952738][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.970669][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.979409][ T5729] veth0_macvtap: entered promiscuous mode [ 48.987052][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.991732][ T5729] veth1_macvtap: entered promiscuous mode [ 49.011187][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.029320][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.031959][ T5731] veth0_macvtap: entered promiscuous mode [ 49.047124][ T5741] veth0_vlan: entered promiscuous mode [ 49.051124][ T5731] veth1_macvtap: entered promiscuous mode [ 49.069531][ T5741] veth1_vlan: entered promiscuous mode [ 49.085428][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.112289][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.120140][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.123603][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.140051][ T5741] veth0_macvtap: entered promiscuous mode [ 49.161406][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.163951][ T5741] veth1_macvtap: entered promiscuous mode [ 49.165583][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.165604][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.165895][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.197817][ T123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.200874][ T123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.211413][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.222057][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.244172][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.248355][ T5730] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.253841][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.260759][ T5729] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.270244][ T5729] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.277493][ T5730] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.281611][ T123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.288811][ T123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.293059][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.295999][ T5729] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.323946][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.331964][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.368935][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.379737][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.408373][ T5887] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 49.416854][ T123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.420630][ T123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.423502][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.444392][ T5808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.450710][ T5808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.456559][ T5888] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 49.456559][ T5888] Please contact the netfilter-devel mailing list or update your nftables rules. [ 49.466200][ T5808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.493498][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.506150][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.513615][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.522515][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.527352][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.530886][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.534314][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.537383][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.540459][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.743078][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.823200][ C0] ================================================================== [ 49.826624][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 49.829993][ C0] Read of size 1 at addr ffff888060292c18 by task kworker/0:1/10 [ 49.834916][ C0] [ 49.835944][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 49.835967][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.835994][ C0] Workqueue: mld mld_ifc_work [ 49.836035][ C0] Call Trace: [ 49.836051][ C0] [ 49.836059][ C0] dump_stack_lvl+0x100/0x190 [ 49.836081][ C0] print_report+0x13d/0x4b0 [ 49.836106][ C0] ? __virt_addr_valid+0x239/0x430 [ 49.836126][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 49.836144][ C0] kasan_report+0xdf/0x1c0 [ 49.836169][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 49.836210][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 49.836226][ C0] __kasan_check_byte+0x36/0x50 [ 49.836247][ C0] lock_acquire+0x132/0x370 [ 49.836265][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 49.836281][ C0] ? p9_req_put+0xaf/0x250 [ 49.836303][ C0] p9_req_put+0xaf/0x250 [ 49.836325][ C0] req_done+0x1dc/0x2e0 [ 49.836344][ C0] ? __pfx_req_done+0x10/0x10 [ 49.836360][ C0] ? sched_clock_cpu+0x6c/0x570 [ 49.836384][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 49.836409][ C0] ? __pfx_req_done+0x10/0x10 [ 49.836426][ C0] vring_interrupt+0x2ef/0x660 [ 49.836447][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 49.836467][ C0] __handle_irq_event_percpu+0x232/0x880 [ 49.836492][ C0] handle_irq_event+0xab/0x1e0 [ 49.836512][ C0] handle_edge_irq+0x34c/0x950 [ 49.836533][ C0] __common_interrupt+0xd8/0x2f0 [ 49.836553][ C0] common_interrupt+0xb9/0xe0 [ 49.836578][ C0] [ 49.836584][ C0] [ 49.836591][ C0] asm_common_interrupt+0x26/0x40 [ 49.836608][ C0] RIP: 0010:__kmalloc_node_track_caller_noprof+0x1ee/0x830 [ 49.836632][ C0] Code: 45 02 00 00 4d 8b 34 24 e8 ef 0d 4c 09 89 c1 83 f8 07 0f 87 e5 05 00 00 48 8b 34 cd 20 a9 46 8e 4c 01 f6 48 8b 56 38 8b 42 18 <85> c0 0f 84 75 04 00 00 8d 48 ff 80 7c 24 08 00 4c 8b 74 ca 20 48 [ 49.836647][ C0] RSP: 0018:ffffc900001c7838 EFLAGS: 00000283 [ 49.836673][ C0] RAX: 0000000000000001 RBX: 0000000000000800 RCX: 0000000000000000 [ 49.836683][ C0] RDX: ffff88801bc64000 RSI: ffff88802b23fec8 RDI: ffffffff8c3fe540 [ 49.836694][ C0] RBP: 0000000000082cc0 R08: 000000006d741438 R09: 000000000000002c [ 49.836705][ C0] R10: 0000000000000200 R11: ffffffff826ddd5c R12: ffff88801bc42f00 [ 49.836716][ C0] R13: 00000000ffffffff R14: ffffffff94658ec8 R15: 00000000ffffffff [ 49.836728][ C0] ? __kmalloc_node_track_caller_noprof+0x17c/0x830 [ 49.836753][ C0] ? __kmalloc_node_track_caller_noprof+0x1d1/0x830 [ 49.836774][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 49.836795][ C0] ? __alloc_skb+0x185/0x710 [ 49.836820][ C0] kmalloc_reserve+0xe8/0x350 [ 49.836838][ C0] __alloc_skb+0x185/0x710 [ 49.836858][ C0] ? __alloc_skb+0x5b7/0x710 [ 49.836885][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 49.836906][ C0] ? kthread+0x370/0x450 [ 49.836928][ C0] ? ret_from_fork+0x72b/0xd50 [ 49.836947][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 49.836971][ C0] mld_newpack.isra.0+0x18e/0xa20 [ 49.836993][ C0] ? lock_acquire+0x1b9/0x370 [ 49.837009][ C0] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 49.837028][ C0] ? rcu_is_watching+0x12/0xc0 [ 49.837046][ C0] ? trace_contention_end+0x126/0x160 [ 49.837062][ C0] ? add_grhead+0x299/0x340 [ 49.837081][ C0] add_grhead+0x299/0x340 [ 49.837102][ C0] add_grec+0x1389/0x1930 [ 49.837125][ C0] ? __pfx_add_grec+0x10/0x10 [ 49.837145][ C0] mld_ifc_work+0x3c5/0xc10 [ 49.837165][ C0] ? rcu_is_watching+0x12/0xc0 [ 49.837185][ C0] process_one_work+0xa23/0x1940 [ 49.837212][ C0] ? __pfx_process_one_work+0x10/0x10 [ 49.837238][ C0] ? __pfx_mld_ifc_work+0x10/0x10 [ 49.837259][ C0] worker_thread+0x5ef/0xe50 [ 49.837283][ C0] ? __pfx_worker_thread+0x10/0x10 [ 49.837305][ C0] ? kthread+0x13a/0x450 [ 49.837325][ C0] ? __pfx_worker_thread+0x10/0x10 [ 49.837347][ C0] kthread+0x370/0x450 [ 49.837367][ C0] ? __pfx_kthread+0x10/0x10 [ 49.837387][ C0] ret_from_fork+0x72b/0xd50 [ 49.837407][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 49.837426][ C0] ? __switch_to+0x800/0x10f0 [ 49.837442][ C0] ? __pfx_kthread+0x10/0x10 [ 49.837463][ C0] ret_from_fork_asm+0x1a/0x30 [ 49.837490][ C0] [ 49.837496][ C0] [ 49.955237][ T5881] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 49.956555][ C0] Allocated by task 5896: [ 49.956564][ C0] kasan_save_stack+0x30/0x50 [ 49.956582][ C0] kasan_save_track+0x14/0x30 [ 49.956593][ C0] __kasan_kmalloc+0xaa/0xb0 [ 49.959840][ T5881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.960800][ C0] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 49.960813][ C0] p9_client_create+0xaf/0xd40 [ 49.960827][ C0] v9fs_session_init+0x3c/0xdd0 [ 49.962468][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 49.963769][ C0] v9fs_get_tree+0xb8/0xb50 [ 49.963781][ C0] vfs_get_tree+0x92/0x320 [ 49.963794][ C0] path_mount+0x7d0/0x23d0 [ 49.963805][ C0] __ia32_sys_mount+0x292/0x310 [ 49.963815][ C0] __do_fast_syscall_32+0xe7/0x970 [ 49.963828][ C0] do_fast_syscall_32+0x32/0x70 [ 49.963840][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 49.963852][ C0] [ 49.965862][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 49.967227][ C0] Freed by task 5896: [ 49.967234][ C0] kasan_save_stack+0x30/0x50 [ 49.967246][ C0] kasan_save_track+0x14/0x30 [ 49.967257][ C0] kasan_save_free_info+0x3b/0x70 [ 49.967266][ C0] __kasan_slab_free+0x5f/0x80 [ 49.967278][ C0] kfree+0x22b/0x6c0 [ 49.969102][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 49.970366][ C0] p9_client_create+0x72d/0xd40 [ 49.970382][ C0] v9fs_session_init+0x3c/0xdd0 [ 49.970396][ C0] v9fs_get_tree+0xb8/0xb50 [ 49.971459][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 49.972168][ C0] vfs_get_tree+0x92/0x320 [ 49.975265][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 49.976469][ C0] path_mount+0x7d0/0x23d0 [ 49.976483][ C0] __ia32_sys_mount+0x292/0x310 [ 49.976493][ C0] __do_fast_syscall_32+0xe7/0x970 [ 49.978073][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 49.979492][ C0] do_fast_syscall_32+0x32/0x70 [ 49.979507][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 49.979518][ C0] [ 49.979521][ C0] The buggy address belongs to the object at ffff888060292c00 [ 49.979521][ C0] which belongs to the cache kmalloc-512 of size 512 [ 49.979530][ C0] The buggy address is located 24 bytes inside of [ 49.979530][ C0] freed 512-byte region [ffff888060292c00, ffff888060292e00) [ 49.979539][ C0] [ 49.979542][ C0] The buggy address belongs to the physical page: [ 49.979548][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060291400 pfn:0x60290 [ 49.981204][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 49.984128][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 49.984142][ C0] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 49.984152][ C0] page_type: f5(slab) [ 49.984161][ C0] raw: 04fff00000000240 ffff88801bc42c80 ffffea0001305f10 ffffea0001823610 [ 49.984183][ C0] raw: ffff888060291400 000000080010000f 00000000f5000000 0000000000000000 [ 49.986073][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 49.987469][ C0] head: 04fff00000000240 ffff88801bc42c80 ffffea0001305f10 ffffea0001823610 [ 49.987480][ C0] head: ffff888060291400 000000080010000f 00000000f5000000 0000000000000000 [ 49.987488][ C0] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 49.987496][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 49.987501][ C0] page dumped because: kasan: bad access detected [ 49.989125][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 49.992174][ C0] page_owner tracks the page as allocated [ 49.992181][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5741, tgid 5741 (syz-executor), ts 48637879094, free_ts 47219215869 [ 49.992220][ C0] post_alloc_hook+0xfd/0x120 [ 49.992232][ C0] get_page_from_freelist+0xf48/0x3530 [ 49.992243][ C0] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 49.993942][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 49.995145][ C0] new_slab+0xa2/0x640 [ 49.995156][ C0] refill_objects+0xe3/0x410 [ 49.995166][ C0] __pcs_replace_empty_main+0x376/0x680 [ 49.995174][ C0] __kmalloc_noprof+0x66d/0x820 [ 49.996732][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 49.998148][ C0] fib6_info_alloc+0x40/0x160 [ 49.998162][ C0] ip6_route_info_create+0x14c/0xad0 [ 49.998171][ C0] ip6_route_add+0x4b/0x1d0 [ 49.999878][ T5881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 50.001344][ C0] addrconf_add_mroute+0x1de/0x350 [ 50.001362][ C0] addrconf_add_dev+0x14e/0x1a0 [ 50.001371][ C0] inet6_addr_add+0xfc/0x9a0 [ 50.003508][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 50.004215][ C0] inet6_rtm_newaddr+0x1475/0x1bb0 [ 50.004228][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 50.004243][ C0] netlink_rcv_skb+0x159/0x420 [ 50.004254][ C0] page last free pid 5741 tgid 5741 stack trace: [ 50.004260][ C0] __free_frozen_pages+0x79f/0x1090 [ 50.007601][ T5881] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 50.008600][ C0] qlist_free_all+0x47/0xf0 [ 50.008614][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 50.008625][ C0] __kasan_slab_alloc+0x69/0x90 [ 50.013864][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.014716][ C0] __kmalloc_cache_noprof+0x265/0x6c0 [ 50.016142][ T5881] usb 5-1: Product: syz [ 50.019028][ C0] ref_tracker_alloc+0x190/0x590 [ 50.019041][ C0] net_rx_queue_update_kobjects+0x32e/0x760 [ 50.019052][ C0] netdev_register_kobject+0x2c6/0x410 [ 50.019063][ C0] register_netdevice+0x15b6/0x25a0 [ 50.019078][ C0] veth_newlink+0x316/0xa00 [ 50.020823][ T5881] usb 5-1: Manufacturer: syz [ 50.022154][ C0] rtnl_newlink+0x1499/0x2380 [ 50.022171][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 50.022185][ C0] netlink_rcv_skb+0x159/0x420 [ 50.023688][ T5881] usb 5-1: SerialNumber: syz [ 50.026582][ C0] netlink_unicast+0x585/0x850 [ 50.026598][ C0] netlink_sendmsg+0x8b0/0xda0 [ 50.026608][ C0] __sys_sendto+0x48b/0x4e0 [ 50.026622][ C0] [ 50.026624][ C0] Memory state around the buggy address: [ 50.033278][ T5890] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.033916][ C0] ffff888060292b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.033926][ C0] ffff888060292b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 50.036132][ T5890] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.038866][ C0] >ffff888060292c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.038873][ C0] ^ [ 50.040603][ T5890] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.042422][ C0] ffff888060292c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.043614][ T5890] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.047380][ C0] ffff888060292d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.051783][ T5890] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.052442][ C0] ================================================================== [ 50.052452][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 50.052462][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 50.052474][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.052482][ C0] Workqueue: mld mld_ifc_work [ 50.052499][ C0] Call Trace: [ 50.052504][ C0] [ 50.052509][ C0] dump_stack_lvl+0x100/0x190 [ 50.052522][ C0] vpanic+0x552/0x970 [ 50.052533][ C0] ? __pfx_vpanic+0x10/0x10 [ 50.052542][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 50.052557][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 50.052569][ C0] panic+0xd1/0xe0 [ 50.052578][ C0] ? __pfx_panic+0x10/0x10 [ 50.052588][ C0] ? end_report.part.0+0x23/0x90 [ 50.052603][ C0] ? rcu_is_watching+0x12/0xc0 [ 50.052615][ C0] ? end_report.part.0+0x23/0x90 [ 50.052629][ C0] ? check_panic_on_warn+0x1f/0x90 [ 50.052645][ C0] check_panic_on_warn.cold+0x19/0x34 [ 50.052656][ C0] end_report.part.0+0x3a/0x90 [ 50.052670][ C0] kasan_report.cold+0xe/0x18 [ 50.052684][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 50.052696][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 50.052706][ C0] __kasan_check_byte+0x36/0x50 [ 50.052722][ C0] lock_acquire+0x132/0x370 [ 50.052733][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 50.052743][ C0] ? p9_req_put+0xaf/0x250 [ 50.052757][ C0] p9_req_put+0xaf/0x250 [ 50.052772][ C0] req_done+0x1dc/0x2e0 [ 50.052784][ C0] ? __pfx_req_done+0x10/0x10 [ 50.052795][ C0] ? sched_clock_cpu+0x6c/0x570 [ 50.052811][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 50.052827][ C0] ? __pfx_req_done+0x10/0x10 [ 50.052839][ C0] vring_interrupt+0x2ef/0x660 [ 50.052852][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 50.052865][ C0] __handle_irq_event_percpu+0x232/0x880 [ 50.052880][ C0] handle_irq_event+0xab/0x1e0 [ 50.052893][ C0] handle_edge_irq+0x34c/0x950 [ 50.052910][ C0] __common_interrupt+0xd8/0x2f0 [ 50.052924][ C0] common_interrupt+0xb9/0xe0 [ 50.052940][ C0] [ 50.052943][ C0] [ 50.052947][ C0] asm_common_interrupt+0x26/0x40 [ 50.052958][ C0] RIP: 0010:__kmalloc_node_track_caller_noprof+0x1ee/0x830 [ 50.052974][ C0] Code: 45 02 00 00 4d 8b 34 24 e8 ef 0d 4c 09 89 c1 83 f8 07 0f 87 e5 05 00 00 48 8b 34 cd 20 a9 46 8e 4c 01 f6 48 8b 56 38 8b 42 18 <85> c0 0f 84 75 04 00 00 8d 48 ff 80 7c 24 08 00 4c 8b 74 ca 20 48 [ 50.052984][ C0] RSP: 0018:ffffc900001c7838 EFLAGS: 00000283 [ 50.052992][ C0] RAX: 0000000000000001 RBX: 0000000000000800 RCX: 0000000000000000 [ 50.052998][ C0] RDX: ffff88801bc64000 RSI: ffff88802b23fec8 RDI: ffffffff8c3fe540 [ 50.053004][ C0] RBP: 0000000000082cc0 R08: 000000006d741438 R09: 000000000000002c [ 50.053010][ C0] R10: 0000000000000200 R11: ffffffff826ddd5c R12: ffff88801bc42f00 [ 50.053016][ C0] R13: 00000000ffffffff R14: ffffffff94658ec8 R15: 00000000ffffffff [ 50.053023][ C0] ? __kmalloc_node_track_caller_noprof+0x17c/0x830 [ 50.053037][ C0] ? __kmalloc_node_track_caller_noprof+0x1d1/0x830 [ 50.053050][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 50.053063][ C0] ? __alloc_skb+0x185/0x710 [ 50.053077][ C0] kmalloc_reserve+0xe8/0x350 [ 50.053088][ C0] __alloc_skb+0x185/0x710 [ 50.053101][ C0] ? __alloc_skb+0x5b7/0x710 [ 50.053114][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 50.053126][ C0] ? kthread+0x370/0x450 [ 50.053139][ C0] ? ret_from_fork+0x72b/0xd50 [ 50.053151][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 50.053166][ C0] mld_newpack.isra.0+0x18e/0xa20 [ 50.053179][ C0] ? lock_acquire+0x1b9/0x370 [ 50.053187][ C0] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 50.053200][ C0] ? rcu_is_watching+0x12/0xc0 [ 50.053212][ C0] ? trace_contention_end+0x126/0x160 [ 50.053222][ C0] ? add_grhead+0x299/0x340 [ 50.053234][ C0] add_grhead+0x299/0x340 [ 50.053247][ C0] add_grec+0x1389/0x1930 [ 50.053261][ C0] ? __pfx_add_grec+0x10/0x10 [ 50.053274][ C0] mld_ifc_work+0x3c5/0xc10 [ 50.053287][ C0] ? rcu_is_watching+0x12/0xc0 [ 50.053300][ C0] process_one_work+0xa23/0x1940 [ 50.053317][ C0] ? __pfx_process_one_work+0x10/0x10 [ 50.053332][ C0] ? __pfx_mld_ifc_work+0x10/0x10 [ 50.053346][ C0] worker_thread+0x5ef/0xe50 [ 50.053361][ C0] ? __pfx_worker_thread+0x10/0x10 [ 50.053375][ C0] ? kthread+0x13a/0x450 [ 50.053387][ C0] ? __pfx_worker_thread+0x10/0x10 [ 50.053400][ C0] kthread+0x370/0x450 [ 50.053413][ C0] ? __pfx_kthread+0x10/0x10 [ 50.053426][ C0] ret_from_fork+0x72b/0xd50 [ 50.053438][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 50.053450][ C0] ? __switch_to+0x800/0x10f0 [ 50.053459][ C0] ? __pfx_kthread+0x10/0x10 [ 50.053472][ C0] ret_from_fork_asm+0x1a/0x30 [ 50.053487][ C0] [ 50.344870][ C0] Kernel Offset: disabled [ 50.346231][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:06:24 Registers: info registers vcpu 0 CPU#0 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0f835 RDI=ffffffff9b9ef520 RBP=ffffffff9b9ef4e0 RSP=ffffc90000007720 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000007a R14=ffffffff9b6ef201 R15=ffffffff85a0f7d0 RIP=ffffffff85a0f85f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096be7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000006d0cf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000099c00000000 0000002000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000003666b RBX=ffff88801c74a540 RCX=ffffffff8bb9e335 RDX=0000000000000000 RSI=ffffffff8e1a6b0d RDI=ffffffff8c3fe580 RBP=ffffed10038e94a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb9c8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ce7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000033113ff8 CR3=000000006d0cf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8e180cf6 RDI=ffffffff8c3fe580 RBP=ffffffff8ebe7ee0 RSP=ffffc9000050fbc0 R8 =00000000ffffffff R9 =00000000000000f7 R10=0000000000000200 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e57f25 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096de7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005597022d2ec8 CR3=000000006d0f9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004a6d9 RBX=ffff88801c7fa540 RCX=ffffffff8bb9e335 RDX=0000000000000000 RSI=ffffffff8e1a6b0d RDI=ffffffff8c3fe580 RBP=ffffed10038ff4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb9c8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ee7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f3a190 CR3=0000000050152000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000