last executing test programs: 3.298573992s ago: executing program 0 (id=1): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e2442046a6d5429a7a66ed82d75475981032f61c1771fdfdafc95b6573e3530000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x8004552d, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7, 0x2}, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r9}}, 0x48) close(r8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.331026159s ago: executing program 0 (id=13): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000003f00000004"], 0x114}], 0x1}, 0x0) 2.330729821s ago: executing program 0 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) r4 = fcntl$dupfd(r1, 0x0, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x4, 0x7fffffff}]}) creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000040)=@sha1={0x1, "ec322332d5e70f3a2311c5e605a0965a93ee8ad7"}, 0x15, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_io_uring_setup(0x6866, &(0x7f00000003c0)={0x0, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 2.159869447s ago: executing program 0 (id=15): socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) rmdir(0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00'/22], 0x48) 1.969393906s ago: executing program 1 (id=18): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd60010100009c1100fe8000000000000000000000000000bbfe80000000009c0000000000000000aa4e200e22"], 0x0) 1.880098854s ago: executing program 1 (id=19): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 1.878858856s ago: executing program 1 (id=21): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e2442046a6d5429a7a66ed82d75475981032f61c1771fdfdafc95b6573e3530000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x8004552d, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7, 0x2}, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r9}}, 0x48) close(r8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.781034s ago: executing program 2 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x64, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000ac0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast2, 0x4e22, 0x9, 0x4e20, 0xf30, 0xa, 0xa0, 0x20, 0x2c, 0x0, r1}, {0x7, 0x2, 0xb, 0x7, 0x101, 0xc692, 0x0, 0x1}, {0x5, 0x9, 0x6, 0x7}, 0x2, 0x6e6bb6, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d2, 0x33}, 0xa, @in6=@mcast2, 0x0, 0x1, 0x2, 0x9, 0xcad, 0x9, 0x7c77}}, 0xe4) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0x13c, 0x10, 0x1d4, 0x2a8, 0x2a8, 0x1d4, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2c4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$CDROMREADCOOKED(r5, 0x5315, &(0x7f0000000040)) 1.78071464s ago: executing program 2 (id=24): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0xff7f0000}, 0x0) 1.701201416s ago: executing program 2 (id=25): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18c1f6dbd6b6d402950000000000000000000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e0000000700000000000000ffffffff00250000", @ANYRES32, @ANYBLOB="000800efffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000010000000900"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000800), 0x48, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{0x3}, {}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1400}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x320, 0x0, 0x81, 0x0, 0x0, 0x0, {}, {}, {}, {0x2, 0x0, 0xc}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) (fail_nth: 22) r5 = getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000900)={'mangle\x00', 0x0, [0x5, 0x0, 0x6]}, &(0x7f00000003c0)=0x54) process_vm_readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000400)=""/98, 0x1a}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f00000006c0)=""/221, 0xdd}], 0x7, &(0x7f0000000980)=[{&(0x7f0000000880)=""/98, 0x62}], 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') 1.294009808s ago: executing program 0 (id=28): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) ioprio_set$pid(0x1, 0x0, 0x2000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008a8ce00003c000000000029907800000000000000000000000000289078040000000000000000000000000000002002000054d3741900000000b5860000"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c98012887634086b3ff7011"], 0xffdd) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x12, {[@global=@item_012={0x2, 0x1, 0x0, "b042"}, @main=@item_4={0x3, 0x0, 0x0, "700d7dec"}, @main=@item_4={0x3, 0x0, 0x8, "4f11e312"}, @main=@item_4={0x3, 0x0, 0xc, "6e877d0a"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r5, 0x541b, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="020000ffffffba000040000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 890.568719ms ago: executing program 1 (id=29): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) rt_sigaction(0x16, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630003140002800500060001000000050007000100000008000500", @ANYRES32=r1], 0x54}}, 0x0) 770.972206ms ago: executing program 1 (id=30): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r1, 0x31f, &(0x7f0000000080)={0xb0, 0x16, 0xa, 0x1}) r2 = openat$sr(0xffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f00000018c0)) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xff, 0x2}, {0x4d}}}}, 0xf) setresuid(0x0, 0x0, 0xee01) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000280)=""/206, &(0x7f00000000c0)=0xce) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000071401"], 0x30}}, 0x0) 649.237222ms ago: executing program 1 (id=31): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0xfc5, &(0x7f0000000100)={0x0, 0x5e3e, 0x400, 0x3, 0x2bd}) io_uring_setup(0x7d5, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x100000, 0x0, 0x0, r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) (fail_nth: 5) sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x20000000) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='00.:/', 0x0) 480.885675ms ago: executing program 3 (id=32): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x3, 0x300) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000108000000005865000000000000", @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800c00018008001d000600000008001b00000000008aaa7954d185f4e8374dcbd9b4fd136cff64c899ee9a8c5c267c67009ff9d6cf72f363b3ab4a5048827c1f06f03976415c6e9b0e50ee2192bb0dde22e8ebb553ce5dff75a0"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) 301.052929ms ago: executing program 3 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)) 157.895383ms ago: executing program 3 (id=34): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) 157.541981ms ago: executing program 2 (id=35): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) (async, rerun: 64) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000b, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) (async, rerun: 32) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 32) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000002940)={0x18, 0x3}, 0x18) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) (rerun: 32) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000081, 0x0, 0x0) (async) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x12001, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/91, 0x5b}, {&(0x7f0000000600)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/100, 0x64}, {&(0x7f00000007c0)=""/78, 0x4e}, {&(0x7f0000000840)=""/77, 0x4d}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f00000001c0)=""/13, 0xd}], 0x8, &(0x7f00000006c0)=""/195, 0xc3}}], 0x1, 0x2000, &(0x7f0000003700)) (async) unshare(0x40000000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) gettid() 156.924687ms ago: executing program 3 (id=36): r0 = socket$caif_stream(0x25, 0x1, 0x4) pwritev2(r0, &(0x7f0000001180)=[{&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000)="9a318c6400d8eeec8b7b10d1364d87e46e40c2dabdc9562d5a8a6e310907082822cb71e4d7ef5837660cd0f8431f1c0ec9b9b283a4b52d06ebf3a9491fab3a63b4aa35d7d4975b9a475a78a75e1d6fd6b7d3d0c5235006a0bfca6f2d5e4e2ce5df01669d15facaa39b9c552ad56be82e319d678961b1ec99", 0x78}, {&(0x7f0000001080)="441cb2cc20c6066a0db8f44a8e5691d92229e1813793c9243845057db15f432c94b29121707f8d3412be7d87a2a12f5436b4d23dded01c22ddf78541f607782be6eb1727614cfb6fd8bcfa3f236a7a02d17635a42630e28448dc605e9881312924758b4e01ce1b57616ad85595c431967cd5dc081bc3bd1186325cdb5ee2d5d97a5394e243a155b535ea88986f319e912167f9098167dda3bfa6ac277c06a44c6a377e29f60a585c674ce3136171cac5b6c82c1263b339a8a0ebc4e875fad87e3771", 0xc2}], 0x3, 0x6d, 0x6, 0x0) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000011c0)={0x7, 0x5, 0x7fffffff, 0x3ff, 0x10, 0x8001, 0x2, 0xffffffffffffffff}, &(0x7f0000001200)={0x3, 0x4, 0x2, 0x59bcb441, 0x0, 0x0, 0x3, 0x5}, &(0x7f0000001240)={0x2, 0x6480f0e6, 0x5, 0x9, 0xfffffffffffff94d, 0x4, 0x0, 0x1}, &(0x7f00000012c0)={r1, r2+10000000}, &(0x7f0000001340)={&(0x7f0000001300)={[0x10000, 0x80000001]}, 0x8}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000001380), 0x8) ioctl$I2C_TENBIT(r4, 0x704, 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) pipe2$watch_queue(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000001400)={0x9, 0x15, 0x11, 0x11, 0xb, 0x2, 0x5, 0x108}) recvmsg$kcm(r4, &(0x7f0000001a80)={&(0x7f0000001440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000014c0)=""/186, 0xba}, {&(0x7f0000001580)=""/249, 0xf9}, {&(0x7f0000001680)=""/60, 0x3c}, {&(0x7f00000016c0)=""/5, 0x5}, {&(0x7f0000001700)=""/100, 0x64}, {&(0x7f0000001780)=""/206, 0xce}, {&(0x7f0000001880)=""/158, 0x9e}], 0x7, &(0x7f0000001980)=""/245, 0xf5}, 0x10001) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001ac0)) r7 = syz_open_dev$ndb(&(0x7f0000001b00), 0x0, 0x210600) ioctl$NBD_SET_SIZE(r7, 0xab02, 0x8) io_uring_enter(r4, 0x67f1, 0xe56, 0x8, 0xfffffffffffffffe, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000001b40)) r8 = openat$sysctl(0xffffff9c, &(0x7f0000001b80)='/proc/self/clear_refs\x00', 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001bc0)={'vlan0\x00', @multicast}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001c00)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000001c80)='net/nfsfs\x00') r11 = syz_open_dev$loop(&(0x7f0000001cc0), 0x2, 0x2) fdatasync(r11) connect$inet6(r4, &(0x7f0000001d00)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0xcdbf}, 0x1c) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000001d80)=0x3) bind$inet(r4, &(0x7f0000001dc0)={0x2, 0x4e20, @local}, 0x10) syz_emit_ethernet(0x1c1, &(0x7f0000001e00)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "559531", 0x18b, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x87, 0x10, 0x0, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3d}, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x5, 0x0, ':RN', 0x7, "bad41b"}, "bb3c27039048e29cac88c7ca2cdedb10fa75cb073acecf5eedbbe8c7fa3df5c805fbbb8533b3998e9900b5f90f7ae577da110d3d8bf150269fcc68d5d510dc78dfd51f6d52b432a1665184b813b88c3d679ba58d57b0e37be9fbed94075f624d6f2c2ecba25026ffff08cd63785a4da4e86f700d3eb7858cceb6461449ccde92d6748bab6064a0f96f1563592354ff5881ab6b98ee8700525628db8f082bfde058b92851713357cb755b6fb3b8bd07ae3e522563fe5a7de42f6fad76f1f2b99608d69377621d484702ba3f7f72e35124d815824e017ded036606cce566b0097e34acff2852bdb9014ffb162137b522b4208837"}}}}}}, &(0x7f0000002000)={0x0, 0x1, [0x711, 0xa04, 0x50c, 0x852]}) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f0000002040)={0x1, [0x0]}) ioctl$sock_inet_SIOCDELRT(r10, 0x890c, &(0x7f0000002080)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x401, 0x6, 0x5}) 151.881659ms ago: executing program 2 (id=37): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000001800000000000000aa000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c00000000000014000000000000000000000000000000000000000000000000000000000000000000000000fffffffff7ffffff0000000000000000000000000000000000000000000000100000000000000000000000000000000004000000000000000000000000000000000000003800000000000000000000000000000000000000000000000200010600000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 139.514303ms ago: executing program 3 (id=38): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) io_uring_enter(r3, 0x602, 0x48cf, 0x1f, &(0x7f0000000040)={[0xffffffff, 0x34]}, 0x8) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r4) 70.769964ms ago: executing program 2 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1ff, 0x1, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004021}, 0x0) pipe2$watch_queue(0x0, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'vxcan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r6, @ANYRESOCT], 0x20}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000001850000000000000000000000000000018400000f8ffffff000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB='\v'], 0x20}}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000106010800"], 0x24}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 0s ago: executing program 3 (id=40): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100200008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:52089' (ED25519) to the list of known hosts. [ 32.980319][ T5859] cgroup: Unknown subsys name 'net' [ 33.189392][ T5859] cgroup: Unknown subsys name 'cpuset' [ 33.193019][ T5859] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.988061][ T5859] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.615059][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.623830][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.628587][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.628791][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.630547][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.632636][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.634634][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.636202][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.638002][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.640449][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.641340][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.643017][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.644952][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.647179][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.649056][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.650943][ T5945] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.652076][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.655177][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.657645][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.660485][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.662941][ T5957] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.666122][ T5297] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.668387][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.669697][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.787396][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 36.802161][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 36.899036][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.901322][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.903266][ T5941] bridge_slave_0: entered allmulticast mode [ 36.905462][ T5941] bridge_slave_0: entered promiscuous mode [ 36.922376][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.924323][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.926203][ T5941] bridge_slave_1: entered allmulticast mode [ 36.928114][ T5941] bridge_slave_1: entered promiscuous mode [ 36.949218][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 36.980949][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.982923][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.984899][ T5940] bridge_slave_0: entered allmulticast mode [ 36.986875][ T5940] bridge_slave_0: entered promiscuous mode [ 36.990138][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.991933][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.993810][ T5940] bridge_slave_1: entered allmulticast mode [ 36.995769][ T5940] bridge_slave_1: entered promiscuous mode [ 36.999315][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.003627][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 37.020491][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.077680][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.081578][ T5941] team0: Port device team_slave_0 added [ 37.084386][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.109358][ T5941] team0: Port device team_slave_1 added [ 37.136324][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.138169][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.139996][ T5947] bridge_slave_0: entered allmulticast mode [ 37.142015][ T5947] bridge_slave_0: entered promiscuous mode [ 37.160996][ T5940] team0: Port device team_slave_0 added [ 37.169702][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.171976][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.173836][ T5949] bridge_slave_0: entered allmulticast mode [ 37.175978][ T5949] bridge_slave_0: entered promiscuous mode [ 37.178062][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.179934][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.181841][ T5947] bridge_slave_1: entered allmulticast mode [ 37.183755][ T5947] bridge_slave_1: entered promiscuous mode [ 37.187385][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.189230][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.196191][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.201232][ T5940] team0: Port device team_slave_1 added [ 37.210791][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.212995][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.215901][ T5949] bridge_slave_1: entered allmulticast mode [ 37.217920][ T5949] bridge_slave_1: entered promiscuous mode [ 37.234403][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.236228][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.242569][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.269631][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.275756][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.277576][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.284228][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.288586][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.291936][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.317807][ T5947] team0: Port device team_slave_0 added [ 37.320188][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.321925][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.328982][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.332674][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.336328][ T5947] team0: Port device team_slave_1 added [ 37.384679][ T5941] hsr_slave_0: entered promiscuous mode [ 37.386603][ T5941] hsr_slave_1: entered promiscuous mode [ 37.398958][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.400796][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.407709][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.412472][ T5949] team0: Port device team_slave_0 added [ 37.415019][ T5949] team0: Port device team_slave_1 added [ 37.417102][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.418811][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.425469][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.466332][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.468090][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.474569][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.479263][ T5940] hsr_slave_0: entered promiscuous mode [ 37.481799][ T5940] hsr_slave_1: entered promiscuous mode [ 37.484764][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.486824][ T5940] Cannot create hsr debugfs directory [ 37.502679][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.504983][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.511611][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.558540][ T5947] hsr_slave_0: entered promiscuous mode [ 37.561126][ T5947] hsr_slave_1: entered promiscuous mode [ 37.563520][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.566603][ T5947] Cannot create hsr debugfs directory [ 37.625929][ T5949] hsr_slave_0: entered promiscuous mode [ 37.627846][ T5949] hsr_slave_1: entered promiscuous mode [ 37.629634][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.631625][ T5949] Cannot create hsr debugfs directory [ 37.774687][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.780316][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.783729][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.791159][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.829319][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.834981][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.839380][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.843840][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.855740][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.858953][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.862328][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.868311][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.890660][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.897616][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.900896][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.908994][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.950940][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.968699][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.980214][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.982151][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.993020][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.001556][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.003464][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.012034][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.030565][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.032940][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.043432][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.048719][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.051029][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.060930][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.072439][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.085756][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.087628][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.092248][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.098678][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.100476][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.106963][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.108766][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.123034][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.125650][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.171989][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.183442][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.205493][ T5940] veth0_vlan: entered promiscuous mode [ 38.213838][ T5940] veth1_vlan: entered promiscuous mode [ 38.226917][ T5941] veth0_vlan: entered promiscuous mode [ 38.237607][ T5941] veth1_vlan: entered promiscuous mode [ 38.241948][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.249555][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.258469][ T5940] veth0_macvtap: entered promiscuous mode [ 38.261869][ T5940] veth1_macvtap: entered promiscuous mode [ 38.276271][ T5941] veth0_macvtap: entered promiscuous mode [ 38.279993][ T5941] veth1_macvtap: entered promiscuous mode [ 38.291040][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.304419][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.310993][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.314984][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.318062][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.321085][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.328257][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.331875][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.337318][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.339856][ T5949] veth0_vlan: entered promiscuous mode [ 38.343304][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.347992][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.352194][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.355810][ T5947] veth0_vlan: entered promiscuous mode [ 38.361031][ T5949] veth1_vlan: entered promiscuous mode [ 38.363940][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.367206][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.370127][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.373126][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.385482][ T5947] veth1_vlan: entered promiscuous mode [ 38.413952][ T5949] veth0_macvtap: entered promiscuous mode [ 38.426382][ T5949] veth1_macvtap: entered promiscuous mode [ 38.426861][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.431542][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.441225][ T5947] veth0_macvtap: entered promiscuous mode [ 38.449204][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.450198][ T5947] veth1_macvtap: entered promiscuous mode [ 38.451348][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.454362][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.457942][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.460712][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.463528][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.466963][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.489337][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.490772][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.492202][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.492369][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.492381][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.495518][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.505416][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.508278][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.512008][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.516252][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.518654][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.520972][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.523367][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.533126][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.538968][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.542461][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.546543][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.550001][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.553707][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.559334][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.570390][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.572012][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.573948][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.581348][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.585131][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.588535][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.592120][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.596664][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.608056][ T5947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.611127][ T5947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.614423][ T5947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.617410][ T5947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.665278][ T5957] Bluetooth: hci1: command tx timeout [ 38.691559][ T6006] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.692877][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.696639][ T6006] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.699303][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.702746][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.703385][ T6006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.706490][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.744542][ T5957] Bluetooth: hci2: command tx timeout [ 38.746897][ T5957] Bluetooth: hci0: command tx timeout [ 38.746928][ T5946] Bluetooth: hci3: command tx timeout [ 38.761907][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.766093][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.768753][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.771800][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.816955][ T6010] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5'. [ 38.820139][ T6013] Cannot find map_set index 0 as target [ 38.875628][ T6018] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 38.897726][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 38.923373][ T6027] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 38.928243][ T6027] smc: net device wg0 applied user defined pnetid SYZ2 [ 38.941236][ T6027] Zero length message leads to an empty skb [ 39.464582][ T6003] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 39.569050][ T6041] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 39.571186][ T6041] netlink: 244 bytes leftover after parsing attributes in process `syz.0.13'. [ 39.617478][ T6003] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 39.620096][ T6003] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 39.622434][ T6003] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 39.624898][ T6003] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.861480][ T6003] usb 8-1: USB disconnect, device number 2 [ 39.922837][ T6052] FAULT_INJECTION: forcing a failure. [ 39.922837][ T6052] name failslab, interval 1, probability 0, space 0, times 1 [ 39.926855][ T6052] CPU: 1 UID: 0 PID: 6052 Comm: syz.2.16 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 39.929666][ T6052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 39.932454][ T6052] Call Trace: [ 39.933329][ T6052] [ 39.934132][ T6052] dump_stack_lvl+0x16c/0x1f0 [ 39.935370][ T6052] should_fail_ex+0x497/0x5b0 [ 39.936624][ T6052] ? fs_reclaim_acquire+0xae/0x150 [ 39.938012][ T6052] should_failslab+0xc2/0x120 [ 39.939251][ T6052] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 39.940769][ T6052] ? __alloc_skb+0x2b3/0x380 [ 39.941981][ T6052] __alloc_skb+0x2b3/0x380 [ 39.943115][ T6052] ? __pfx___alloc_skb+0x10/0x10 [ 39.944427][ T6052] netlink_ack+0x164/0xb20 [ 39.945574][ T6052] netlink_rcv_skb+0x327/0x410 [ 39.946797][ T6052] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 39.948255][ T6052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 39.949636][ T6052] ? __pfx_aa_get_newest_label+0x10/0x10 [ 39.951114][ T6052] ? bpf_lsm_capable+0x9/0x10 [ 39.952336][ T6052] ? security_capable+0x7e/0x260 [ 39.953632][ T6052] ? ns_capable+0xd7/0x110 [ 39.954817][ T6052] nfnetlink_rcv+0x1b4/0x430 [ 39.956028][ T6052] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 39.957379][ T6052] ? netlink_deliver_tap+0x1ae/0xca0 [ 39.958810][ T6052] netlink_unicast+0x53c/0x7f0 [ 39.960083][ T6052] ? __pfx_netlink_unicast+0x10/0x10 [ 39.961467][ T6052] ? __phys_addr_symbol+0x30/0x80 [ 39.962787][ T6052] ? __check_object_size+0x488/0x710 [ 39.964173][ T6052] netlink_sendmsg+0x8b8/0xd70 [ 39.965671][ T6052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.967111][ T6052] ____sys_sendmsg+0x9ae/0xb40 [ 39.968460][ T6052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 39.969819][ T6052] ? get_compat_msghdr+0x11b/0x170 [ 39.971153][ T6052] ___sys_sendmsg+0x135/0x1e0 [ 39.972403][ T6052] ? __pfx____sys_sendmsg+0x10/0x10 [ 39.973770][ T6052] ? __pfx_lock_release+0x10/0x10 [ 39.975093][ T6052] ? trace_lock_acquire+0x14e/0x1f0 [ 39.976468][ T6052] ? __fget_files+0x206/0x3a0 [ 39.977759][ T6052] __sys_sendmsg+0x16e/0x220 [ 39.978977][ T6052] ? __pfx___sys_sendmsg+0x10/0x10 [ 39.980314][ T6052] __do_fast_syscall_32+0x73/0x120 [ 39.981677][ T6052] do_fast_syscall_32+0x32/0x80 [ 39.982959][ T6052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 39.984625][ T6052] RIP: 0023:0xf7f16579 [ 39.985697][ T6052] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 39.990689][ T6052] RSP: 002b:00000000f509657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 39.992863][ T6052] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200002c0 [ 39.994922][ T6052] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.996986][ T6052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 39.999096][ T6052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 40.001153][ T6052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.003317][ T6052] [ 40.078721][ T6067] input: syz0 as /devices/virtual/input/input7 [ 40.131825][ T6070] Cannot find add_set index 0 as target [ 40.224507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.253069][ T6076] FAULT_INJECTION: forcing a failure. [ 40.253069][ T6076] name failslab, interval 1, probability 0, space 0, times 0 [ 40.256283][ T6076] CPU: 3 UID: 0 PID: 6076 Comm: syz.2.25 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 40.258647][ T6076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 40.261447][ T6076] Call Trace: [ 40.262319][ T6076] [ 40.263100][ T6076] dump_stack_lvl+0x16c/0x1f0 [ 40.264385][ T6076] should_fail_ex+0x497/0x5b0 [ 40.265614][ T6076] ? fs_reclaim_acquire+0xae/0x150 [ 40.266948][ T6076] should_failslab+0xc2/0x120 [ 40.268186][ T6076] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 40.269581][ T6076] ? p9_tag_alloc+0x9c/0x870 [ 40.270814][ T6076] p9_tag_alloc+0x9c/0x870 [ 40.271990][ T6076] ? __pfx___lock_acquire+0x10/0x10 [ 40.273413][ T6076] ? __pfx_p9_tag_alloc+0x10/0x10 [ 40.274745][ T6076] ? lock_acquire.part.0+0x11b/0x380 [ 40.276128][ T6076] p9_client_prepare_req+0x19f/0x4d0 [ 40.277499][ T6076] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 40.279011][ T6076] ? p9_virtio_create+0x154/0x210 [ 40.280385][ T6076] ? __pfx_lock_release+0x10/0x10 [ 40.281699][ T6076] ? rcu_is_watching+0x12/0xc0 [ 40.282950][ T6076] p9_client_rpc+0x1c3/0xc10 [ 40.284172][ T6076] ? __pfx_p9_client_rpc+0x10/0x10 [ 40.285590][ T6076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 40.287148][ T6076] ? lock_acquire+0x2f/0xb0 [ 40.288350][ T6076] ? v9fs_get_default_trans+0x1d/0x2b0 [ 40.289756][ T6076] p9_client_create+0xbac/0x11a0 [ 40.291131][ T6076] ? __pfx_p9_client_create+0x10/0x10 [ 40.292535][ T6076] ? rcu_is_watching+0x12/0xc0 [ 40.293786][ T6076] ? __raw_spin_lock_init+0x3a/0x110 [ 40.295166][ T6076] v9fs_session_init+0x1f8/0x1a80 [ 40.296503][ T6076] ? __pfx_v9fs_session_init+0x10/0x10 [ 40.297921][ T6076] ? kasan_save_track+0x14/0x30 [ 40.299194][ T6076] v9fs_mount+0xc6/0xa30 [ 40.300339][ T6076] ? __pfx_v9fs_mount+0x10/0x10 [ 40.301610][ T6076] ? __pfx_v9fs_mount+0x10/0x10 [ 40.302875][ T6076] legacy_get_tree+0x109/0x220 [ 40.304157][ T6076] vfs_get_tree+0x8f/0x380 [ 40.305317][ T6076] path_mount+0x6e1/0x1f10 [ 40.306487][ T6076] ? kmem_cache_free+0x152/0x4c0 [ 40.307776][ T6076] ? __pfx_path_mount+0x10/0x10 [ 40.309039][ T6076] ? putname+0x13c/0x180 [ 40.310197][ T6076] __ia32_sys_mount+0x292/0x310 [ 40.311475][ T6076] ? __pfx___ia32_sys_mount+0x10/0x10 [ 40.312883][ T6076] __do_fast_syscall_32+0x73/0x120 [ 40.314231][ T6076] do_fast_syscall_32+0x32/0x80 [ 40.315503][ T6076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.317162][ T6076] RIP: 0023:0xf7f16579 [ 40.318212][ T6076] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 40.323167][ T6076] RSP: 002b:00000000f507557c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 40.325353][ T6076] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000020000480 [ 40.327398][ T6076] RDX: 00000000200004c0 RSI: 0000000000000000 RDI: 0000000020000840 [ 40.329443][ T6076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.331515][ T6076] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 40.333479][ T6076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.335707][ T6076] [ 40.367538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 40.622822][ T6088] can0: slcan on ptm0. [ 40.642146][ T6088] syzkaller0: entered promiscuous mode [ 40.644204][ T6088] syzkaller0: entered allmulticast mode [ 40.747659][ T5957] Bluetooth: hci1: command tx timeout [ 40.794471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.828541][ T5957] Bluetooth: hci3: command tx timeout [ 40.828559][ T5942] Bluetooth: hci0: command tx timeout [ 40.828891][ T5297] Bluetooth: hci2: command tx timeout [ 40.864743][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 40.910487][ T6046] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.058863][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 41.066068][ T6046] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.069960][ T6046] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.074735][ T6046] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.077866][ T6046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.082204][ T6046] usb 5-1: config 0 descriptor?? [ 41.184508][ T6103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.30'. [ 41.220749][ T6105] FAULT_INJECTION: forcing a failure. [ 41.220749][ T6105] name failslab, interval 1, probability 0, space 0, times 0 [ 41.224273][ T6105] CPU: 0 UID: 0 PID: 6105 Comm: syz.1.31 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 41.226764][ T6105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 41.229576][ T6105] Call Trace: [ 41.230459][ T6105] [ 41.231229][ T6105] dump_stack_lvl+0x16c/0x1f0 [ 41.232459][ T6105] should_fail_ex+0x497/0x5b0 [ 41.233656][ T6105] should_failslab+0xc2/0x120 [ 41.234825][ T6105] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 41.236238][ T6105] ? skb_clone+0x190/0x3f0 [ 41.237404][ T6105] skb_clone+0x190/0x3f0 [ 41.238515][ T6105] netlink_deliver_tap+0xafd/0xca0 [ 41.239890][ T6105] netlink_unicast+0x5e1/0x7f0 [ 41.241126][ T6105] ? __pfx_netlink_unicast+0x10/0x10 [ 41.242504][ T6105] ? __phys_addr_symbol+0x30/0x80 [ 41.243830][ T6105] ? __check_object_size+0x488/0x710 [ 41.245225][ T6105] netlink_sendmsg+0x8b8/0xd70 [ 41.246484][ T6105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.247884][ T6105] ____sys_sendmsg+0x9ae/0xb40 [ 41.249138][ T6105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 41.250506][ T6105] ? get_compat_msghdr+0x11b/0x170 [ 41.251813][ T6105] ___sys_sendmsg+0x135/0x1e0 [ 41.252974][ T6105] ? __pfx____sys_sendmsg+0x10/0x10 [ 41.254294][ T6105] ? __pfx_lock_release+0x10/0x10 [ 41.255580][ T6105] ? trace_lock_acquire+0x14e/0x1f0 [ 41.256898][ T6105] ? __fget_files+0x206/0x3a0 [ 41.258134][ T6105] __sys_sendmsg+0x16e/0x220 [ 41.259350][ T6105] ? __pfx___sys_sendmsg+0x10/0x10 [ 41.260702][ T6105] __do_fast_syscall_32+0x73/0x120 [ 41.262030][ T6105] do_fast_syscall_32+0x32/0x80 [ 41.263246][ T6105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 41.264817][ T6105] RIP: 0023:0xf741e579 [ 41.265833][ T6105] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 41.270556][ T6105] RSP: 002b:00000000f510657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 41.272688][ T6105] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200002c0 [ 41.274737][ T6105] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.276805][ T6105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 41.278861][ T6105] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 41.280948][ T6105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.282995][ T6105] [ 41.429772][ T6109] libceph: resolve '00.' (ret=-3): failed [ 41.490980][ T6046] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 41.493045][ T6046] plantronics 0003:047F:FFFF.0002: item fetching failed at offset 13/15 [ 41.497396][ T6046] plantronics 0003:047F:FFFF.0002: parse failed [ 41.499189][ T6046] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 41.692476][ T6088] batman_adv: batadv0: Adding interface: dummy0 [ 41.694344][ T6088] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.701761][ T6088] batman_adv: batadv0: Interface activated: dummy0 [ 41.707937][ T6046] usb 5-1: USB disconnect, device number 2 [ 41.805526][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 41.948093][ T6136] netlink: 36 bytes leftover after parsing attributes in process `syz.3.40'. [ 41.950442][ T6136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.40'. [ 41.971104][ T5998] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 41.974443][ T5998] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 41.979175][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: kworker/0:4 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 41.981871][ T5998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 41.984673][ T5998] Workqueue: events mptcp_worker [ 41.985988][ T5998] RIP: 0010:put_page+0x21/0x280 [ 41.987295][ T5998] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 c4 57 a2 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 [ 41.992286][ T5998] RSP: 0018:ffffc9000441f568 EFLAGS: 00010202 [ 41.993868][ T5998] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88ed3088 [ 41.995942][ T5998] RDX: 0000000000000001 RSI: ffffffff88eba7cc RDI: 0000000000000008 [ 41.997992][ T5998] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 42.000039][ T5998] R10: 0000000000000000 R11: 0000000000000004 R12: ffff88804f034a00 [ 42.002152][ T5998] R13: ffff8880254fae40 R14: ffff8880254fae70 R15: 0000000000000007 [ 42.004258][ T5998] FS: 0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000 [ 42.006582][ T5998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.008375][ T5998] CR2: 00000000f5095cc0 CR3: 0000000065aba000 CR4: 0000000000352ef0 [ 42.010432][ T5998] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.012507][ T5998] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.014572][ T5998] Call Trace: [ 42.015436][ T5998] [ 42.016231][ T5998] ? die_addr+0x3b/0xa0 [ 42.017328][ T5998] ? exc_general_protection+0x155/0x230 [ 42.018758][ T5998] ? asm_exc_general_protection+0x26/0x30 [ 42.020278][ T5998] ? skb_release_data+0x4b8/0x730 [ 42.021599][ T5998] ? put_page+0xc/0x280 [ 42.022697][ T5998] ? put_page+0x21/0x280 [ 42.023850][ T5998] ? put_page+0xc/0x280 [ 42.024953][ T5998] skb_release_data+0x4d7/0x730 [ 42.026247][ T5998] __kfree_skb+0x4f/0x70 [ 42.027371][ T5998] tcp_ack+0x1eb7/0x5ba0 [ 42.028500][ T5998] ? __pfx_tcp_ack+0x10/0x10 [ 42.029717][ T5998] ? tcp_validate_incoming+0x662/0x1d00 [ 42.031194][ T5998] ? read_tsc+0x9/0x20 [ 42.032311][ T5998] tcp_rcv_state_process+0xdd4/0x4c40 [ 42.033705][ T5998] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 42.035249][ T5998] ? __pfx___lock_acquire+0x10/0x10 [ 42.036622][ T5998] ? find_held_lock+0x2d/0x110 [ 42.037873][ T5998] ? __release_sock+0xd4/0x400 [ 42.039143][ T5998] ? __pfx_lock_release+0x10/0x10 [ 42.040472][ T5998] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 42.041802][ T5998] ? tcp_v4_do_rcv+0x1ad/0xa90 [ 42.043045][ T5998] ? __local_bh_enable_ip+0xa4/0x120 [ 42.044423][ T5998] tcp_v4_do_rcv+0x1ad/0xa90 [ 42.045631][ T5998] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 42.046971][ T5998] __release_sock+0x31b/0x400 [ 42.048317][ T5998] ? __tcp_close+0x4eb/0xff0 [ 42.049560][ T5998] __tcp_close+0x4f3/0xff0 [ 42.051026][ T5998] __mptcp_close_ssk+0x331/0x14e0 [ 42.052663][ T5998] ? __pfx___mptcp_close_ssk+0x10/0x10 [ 42.054110][ T5998] ? lockdep_hardirqs_on+0x7c/0x110 [ 42.055582][ T5998] ? mptcp_pm_subflow_check_next+0x1ce/0x2c0 [ 42.057613][ T5998] ? __local_bh_enable_ip+0xa4/0x120 [ 42.059423][ T5998] mptcp_close_ssk+0x150/0x220 [ 42.061175][ T5998] mptcp_worker+0x824/0x1240 [ 42.062749][ T5998] ? __pfx_mptcp_worker+0x10/0x10 [ 42.064448][ T5998] ? process_one_work+0x841/0x1b30 [ 42.066194][ T5998] ? lock_acquire+0x2f/0xb0 [ 42.067727][ T5998] ? process_one_work+0x8bb/0x1b30 [ 42.069447][ T5998] process_one_work+0x958/0x1b30 [ 42.071105][ T5998] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 42.072977][ T5998] ? __pfx_process_one_work+0x10/0x10 [ 42.074778][ T5998] ? rcu_is_watching+0x12/0xc0 [ 42.076403][ T5998] ? assign_work+0x1a0/0x250 [ 42.077952][ T5998] worker_thread+0x6c8/0xf00 [ 42.079506][ T5998] ? __kthread_parkme+0x148/0x220 [ 42.081201][ T5998] ? __pfx_worker_thread+0x10/0x10 [ 42.082905][ T5998] kthread+0x2c1/0x3a0 [ 42.084286][ T5998] ? _raw_spin_unlock_irq+0x23/0x50 [ 42.086050][ T5998] ? __pfx_kthread+0x10/0x10 [ 42.087605][ T5998] ret_from_fork+0x45/0x80 [ 42.089090][ T5998] ? __pfx_kthread+0x10/0x10 [ 42.090775][ T5998] ret_from_fork_asm+0x1a/0x30 [ 42.092536][ T5998] [ 42.093516][ T5998] Modules linked in: [ 42.094819][ T5998] ---[ end trace 0000000000000000 ]--- [ 42.096774][ T5998] RIP: 0010:put_page+0x21/0x280 [ 42.098067][ T5998] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 c4 57 a2 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 [ 42.103003][ T5998] RSP: 0018:ffffc9000441f568 EFLAGS: 00010202 [ 42.104673][ T5998] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff88ed3088 [ 42.106746][ T5998] RDX: 0000000000000001 RSI: ffffffff88eba7cc RDI: 0000000000000008 [ 42.109021][ T5998] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 42.111067][ T5998] R10: 0000000000000000 R11: 0000000000000004 R12: ffff88804f034a00 [ 42.113160][ T5998] R13: ffff8880254fae40 R14: ffff8880254fae70 R15: 0000000000000007 [ 42.115348][ T5998] FS: 0000000000000000(0000) GS:ffff88802b400000(0000) knlGS:0000000000000000 [ 42.117646][ T5998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.119359][ T5998] CR2: 00000000f5095cc0 CR3: 000000002ad50000 CR4: 0000000000352ef0 [ 42.121439][ T5998] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.123523][ T5998] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.125628][ T5998] Kernel panic - not syncing: Fatal exception [ 42.127629][ T5998] Kernel Offset: disabled [ 42.128740][ T5998] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:41:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8509d1e5 RDI=ffffffff9a66c280 RBP=ffffffff9a66c240 RSP=ffffc9000441ef40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000074 R14=ffffffff8509d180 R15=0000000000000000 RIP=ffffffff8509d20f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5095cc0 CR3=0000000065aba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000000 Opmask01=00000000fffffffa Opmask02=0000000000008000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff0b7696e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a000a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b53ff00 RCX=ffffffff81821f44 RDX=ffff88801cee0000 RSI=ffffffff81821f1f RDI=0000000000000005 RBP=ffffc9000045fd78 RSP=ffffc9000045fca0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1bb8c36 R12=1ffff9200008bf98 R13=0000000000000001 R14=0000000000000003 R15=ffffed10056a7fe1 RIP=ffffffff81821f21 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5054da4 CR3=000000004c05c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000004275c RBX=0000000000000002 RCX=ffffffff8b1a8cc9 RDX=ffffed10056c6fee RSI=ffffffff8bb167a0 RDI=ffffffff8164de09 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901d16d0 R15=0000000000000000 RIP=ffffffff8b1aa0af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562f2cda68e8 CR3=0000000045352000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 005858585858582e 7a7973d0000000e4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff0f0e0d0c0b0a09 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004ad8c RBX=0000000000000003 RCX=ffffffff8b1a8cc9 RDX=ffffed10056e6fee RSI=ffffffff8bb167a0 RDI=ffffffff8164de09 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901d16d0 R15=0000000000000000 RIP=ffffffff8b1aa0af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000068f98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000