Warning: Permanently added '[localhost]:65062' (ED25519) to the list of known hosts.
2024/06/13 04:46:01 fuzzer started
2024/06/13 04:46:01 dialing manager at localhost:30001
[   51.115160][ T5216] cgroup: Unknown subsys name 'net'
[   51.340768][ T5216] cgroup: Unknown subsys name 'rlimit'
[   52.261213][ T5218] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
2024/06/13 04:46:03 starting 4 executor processes
[   52.833057][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.833062][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.837339][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.839431][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.842097][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.844493][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.849315][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.850126][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.852378][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   52.853042][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.853873][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.854155][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.854903][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.857048][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   52.857242][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.861081][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   52.862800][   T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.868219][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.135997][ T5236] chnl_net:caif_netlink_parms(): no params data found
[   53.186493][ T5229] chnl_net:caif_netlink_parms(): no params data found
[   53.194787][ T5230] chnl_net:caif_netlink_parms(): no params data found
[   53.302917][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.305990][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.308506][ T5236] bridge_slave_0: entered allmulticast mode
[   53.311234][ T5236] bridge_slave_0: entered promiscuous mode
[   53.316504][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.319345][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.323593][ T5236] bridge_slave_1: entered allmulticast mode
[   53.328149][ T5236] bridge_slave_1: entered promiscuous mode
[   53.427946][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.475344][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.477816][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.480278][ T5229] bridge_slave_0: entered allmulticast mode
[   53.483626][ T5229] bridge_slave_0: entered promiscuous mode
[   53.490223][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.493473][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.495957][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.498411][ T5230] bridge_slave_0: entered allmulticast mode
[   53.502347][ T5230] bridge_slave_0: entered promiscuous mode
[   53.506196][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.508644][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.511107][ T5230] bridge_slave_1: entered allmulticast mode
[   53.514878][ T5230] bridge_slave_1: entered promiscuous mode
[   53.517774][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.520196][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.522784][ T5229] bridge_slave_1: entered allmulticast mode
[   53.525659][ T5229] bridge_slave_1: entered promiscuous mode
[   53.622941][ T5236] team0: Port device team_slave_0 added
[   53.627192][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.648925][ T5236] team0: Port device team_slave_1 added
[   53.653899][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.658927][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.705326][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.743763][ T5230] team0: Port device team_slave_0 added
[   53.762032][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.764314][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.774594][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.780393][ T5230] team0: Port device team_slave_1 added
[   53.799196][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.802045][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.810731][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.835641][ T5229] team0: Port device team_slave_0 added
[   53.845418][ T5229] team0: Port device team_slave_1 added
[   53.867135][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.869445][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.877885][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.917699][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.919931][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.928353][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.962073][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.964349][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.974110][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.006163][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.008697][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.017394][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.028096][ T5236] hsr_slave_0: entered promiscuous mode
[   54.030668][ T5236] hsr_slave_1: entered promiscuous mode
[   54.146000][ T5230] hsr_slave_0: entered promiscuous mode
[   54.148538][ T5230] hsr_slave_1: entered promiscuous mode
[   54.151602][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.154619][ T5230] Cannot create hsr debugfs directory
[   54.199245][ T5229] hsr_slave_0: entered promiscuous mode
[   54.203262][ T5229] hsr_slave_1: entered promiscuous mode
[   54.206238][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.209334][ T5229] Cannot create hsr debugfs directory
[   54.486775][ T5236] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.493936][ T5236] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.498598][ T5236] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.504168][ T5236] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.540091][ T5230] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.545739][ T5230] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.550938][ T5230] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.556257][ T5230] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.608240][ T5229] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.619458][ T5229] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.624617][ T5229] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.632941][ T5229] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.696825][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.719978][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.739413][ T5230] 8021q: adding VLAN 0 to HW filter on device team0
[   54.750747][ T5236] 8021q: adding VLAN 0 to HW filter on device team0
[   54.759805][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.762359][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.772521][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.775351][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.779527][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.782461][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.808770][  T823] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.811793][  T823] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.846821][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.895990][ T5229] 8021q: adding VLAN 0 to HW filter on device team0
[   54.903223][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.905538][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.912077][ T4643] Bluetooth: hci2: command tx timeout
[   54.912101][ T5233] Bluetooth: hci1: command tx timeout
[   54.915882][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.919113][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.922239][ T5233] Bluetooth: hci0: command tx timeout
[   54.952537][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.997304][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.028268][ T5230] veth0_vlan: entered promiscuous mode
[   55.040298][ T5230] veth1_vlan: entered promiscuous mode
[   55.060876][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.083354][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.089890][ T5230] veth0_macvtap: entered promiscuous mode
[   55.095836][ T5230] veth1_macvtap: entered promiscuous mode
[   55.118471][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.132976][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.143182][ T5230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.146181][ T5230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.149657][ T5230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.153753][ T5230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.163453][ T5236] veth0_vlan: entered promiscuous mode
[   55.189067][ T5229] veth0_vlan: entered promiscuous mode
[   55.191759][ T5236] veth1_vlan: entered promiscuous mode
[   55.204827][ T5229] veth1_vlan: entered promiscuous mode
[   55.237890][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.240650][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.253829][ T5236] veth0_macvtap: entered promiscuous mode
[   55.274044][ T5236] veth1_macvtap: entered promiscuous mode
[   55.280297][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.285434][ T5229] veth0_macvtap: entered promiscuous mode
[   55.285473][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.293763][ T5229] veth1_macvtap: entered promiscuous mode
[   55.306504][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.310228][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.316233][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.322798][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.326360][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.331011][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.334589][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.338858][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.344515][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.348754][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.354821][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.363232][ T5236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.366427][ T5236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.369172][ T5236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.372345][ T5236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.381613][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.384996][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.388126][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   55.392827][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.397332][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.402107][ T5229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.404990][ T5229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.408234][ T5229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.411120][ T5229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
executing program 0:
syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000000180)='./bus\x00', 0x42, &(0x7f0000000000)=ANY=[], 0x1, 0x5e18, &(0x7f000000dc40)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x7a00, 0x0, 0x0)

[   55.476743][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.480075][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.495534][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.499093][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.531548][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.534818][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.550260][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.554538][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program 1:
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40046629, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
fanotify_init(0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@dev}}, {{@in6=@loopback}}}, &(0x7f0000000280)=0xe8)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x0, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0], 0xfd, 0x21d, &(0x7f0000000b40)="$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")
listxattr(&(0x7f0000000100)='./file2\x00', 0x0, 0xf0)

executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000001380)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@my=0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f08000840000000010800030000"], 0xa0}}, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper}, @hyper, 0x0, 0x0, 0x3})
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000001c0)={@hyper, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper}, @host, 0x0, 0x7ff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)

[   55.608638][ T5277] loop0: detected capacity change from 0 to 32768
[   55.613866][ T5277] =======================================================
[   55.613866][ T5277] WARNING: The mand mount option has been deprecated and
[   55.613866][ T5277]          and is ignored by this kernel. Remove the mand
[   55.613866][ T5277]          option from the mount to silence this warning.
[   55.613866][ T5277] =======================================================
[   55.640945][ T5277] bcachefs (/dev/loop0): error reading default superblock: checksum error, type crc32c_nonzero: got 46c1343f should be 29d2fb78
[   55.719968][ T5277] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[   55.731080][ T5277] bcachefs (loop0): recovering from clean shutdown, journal seq 7
[   55.754219][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[   55.764644][ T5292] loop1: detected capacity change from 0 to 16
[   55.791794][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[   55.793259][ T5292] erofs: (device loop1): mounted with root inode @ nid 36.
[   55.816998][ T5277] bcachefs (loop0): alloc_read... done
[   55.821649][ T5277] bcachefs (loop0): stripes_read... done
[   55.823606][ T5277] bcachefs (loop0): snapshots_read... done
[   55.836881][ T5277] bcachefs (loop0): journal_replay... done
[   55.838919][ T5277] bcachefs (loop0): resume_logged_ops... done
[   55.841171][ T5277] bcachefs (loop0): going read-write
[   55.890704][ T5277] bcachefs (loop0): done starting filesystem
[   55.982007][ T4643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   55.986511][ T4643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00'})
r1 = epoll_create1(0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x60000005})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000))
r3 = epoll_create1(0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r4}, 0x10)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, 0x0, 0x0)
close(r5)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180))
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"})

[   55.989529][ T4643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   55.995068][ T4643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   55.998762][ T4643] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   56.001811][ T4643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   56.042776][ T5277] bcachefs (loop0): dirent to missing inode:
[   56.042776][ T5277]   u64s 7 type dirent 4096:8276054212886994144:U32_MAX len 0 ver 0: file1 -> 1073741824 type reg
[   56.072269][   T56] bcachefs (loop0): going read-only
[   56.073141][ T4643] bcachefs (loop0): unable to write journal to sufficient devices
[   56.074903][   T56] bcachefs (loop0): finished waiting for writes to stop
[   56.080232][ T5277] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 8
[   56.101604][   T56] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8
[   56.104658][   T56] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8
[   56.119709][   T56] bcachefs (loop0): unshutdown complete, journal seq 8
[   56.124021][ T5299] veth0_vlan: entered allmulticast mode
[   56.128860][   T56] bcachefs (loop0): done going read-only, filesystem not clean
[   56.197108][ T5299] veth0_vlan: left promiscuous mode
[   56.204038][ T5230] bcachefs (loop0): shutting down
[   56.205122][ T5299] veth0_vlan: left allmulticast mode
[   56.212862][ T5299] veth0_vlan: entered promiscuous mode
executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00'})
r1 = epoll_create1(0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x60000005})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000))
epoll_create1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"})

[   56.278461][ T5230] bcachefs (loop0): shutdown complete
[   56.533509][ T5296] chnl_net:caif_netlink_parms(): no params data found
executing program 2:
syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000000180)='./bus\x00', 0x42, &(0x7f0000000000)=ANY=[], 0x1, 0x5e18, &(0x7f000000dc40)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, 0x0, 0x0, 0x7a00, 0x0, 0x0)

executing program 1:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000001740)={[{@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {}, {@auto_da_alloc_val}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@norecovery}, {@acl}, {@debug}]}, 0x5, 0x57a, &(0x7f0000000a00)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1a"], 0x7c}}, 0x0)
syz_io_uring_setup(0x82e, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000080)={[{}, {@part={'part', 0x3d, 0xfffffffffffff4f4}}, {@nls={'nls', 0x3d, 'cp855'}}, {@uid}, {@nobarrier}, {@nobarrier}]}, 0x0, 0x6ce, &(0x7f0000000840)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f00000003c0)={0x0, [], [{0x0, 0x0, 0x0, 0x0, 0x1}]})
r1 = fanotify_init(0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000030a01020000000000000000010000000900030073797a32000000002c000480080002406412972e0800014000000003080002401c791e7108000240fffffed408000140000000030900010073797a300000000078000000060a010400000000000000000100000008000b4000000000040004800900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c080001400000001e0800014000000030080001400000001508000140000000120800024000000000080003"], 0x118}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x34}], 0x8)
fanotify_mark(r1, 0x101, 0x48001051, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3004000, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid}, {@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@discard}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000000f80)="$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")
r3 = inotify_init1(0x0)
inotify_add_watch(r3, 0x0, 0x40000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

[   56.755207][ T5296] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.757737][ T5296] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.760816][ T5296] bridge_slave_0: entered allmulticast mode
[   56.762955][ T5311] loop1: detected capacity change from 0 to 1024
[   56.765620][ T5296] bridge_slave_0: entered promiscuous mode
[   56.772482][ T5309] veth0_vlan: entered allmulticast mode
[   56.772546][ T5311] EXT4-fs: quotafile must be on filesystem root
[   56.793037][ T5311] loop1: detected capacity change from 0 to 1024
[   56.802776][ T5312] veth0_vlan: left promiscuous mode
[   56.805087][ T5312] veth0_vlan: left allmulticast mode
[   56.809231][ T5312] veth0_vlan: entered promiscuous mode
[   56.818145][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.825305][ T5296] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.828191][ T5296] bridge_slave_1: entered allmulticast mode
[   56.835008][ T5296] bridge_slave_1: entered promiscuous mode
[   56.837680][ T5304] loop2: detected capacity change from 0 to 32768
executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00'})
r1 = epoll_create1(0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x60000005})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000))
r3 = epoll_create1(0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r4}, 0x10)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0)
close(r5)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180))
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"})

[   56.846879][ T5304] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 46c1343f should be 29d2fb78
[   56.901178][ T5304] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[   56.906378][ T5304] bcachefs (loop2): recovering from clean shutdown, journal seq 7
[   56.928217][ T5304] bcachefs (loop2): alloc_read... done
[   56.930406][ T5304] bcachefs (loop2): stripes_read... done
[   56.932810][ T5304] bcachefs (loop2): snapshots_read... done
[   56.936624][ T5304] bcachefs (loop2): journal_replay... done
[   56.938632][ T5304] bcachefs (loop2): resume_logged_ops... done
[   56.940696][ T5304] bcachefs (loop2): going read-write
[   56.945633][ T5320] veth0_vlan: entered allmulticast mode
[   56.946346][ T5304] bcachefs (loop2): done starting filesystem
[   56.963177][ T5296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.966844][ T5327] veth0_vlan: left promiscuous mode
[   56.968723][ T5327] veth0_vlan: left allmulticast mode
[   56.974024][ T5327] veth0_vlan: entered promiscuous mode
[   56.992079][ T5233] Bluetooth: hci2: command tx timeout
[   56.992137][ T5304] bcachefs (loop2): dirent to missing inode:
[   56.992137][ T5304]   u64s 7 type dirent 4096:8276054212886994144:U32_MAX len 0 ver 0: file1 -> 1073741824 type reg
[   56.993052][ T5296] Oops: general protection fault, probably for non-canonical address 0xe01ffbf11002a963: 0000 [#1] PREEMPT SMP KASAN NOPTI
[   56.993071][ T5296] KASAN: maybe wild-memory-access in range [0x00ffff8880154b18-0x00ffff8880154b1f]
[   56.993082][ T5296] CPU: 2 PID: 5296 Comm: syz-executor.3 Not tainted 6.10.0-rc3-syzkaller-00022-gcea2a26553ac #0
[   56.993098][ T5296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   56.993106][ T5296] RIP: 0010:__lock_acquire+0xe3e/0x3b30
[   56.993125][ T5296] Code: 11 00 00 39 05 33 a6 1f 12 0f 82 be 05 00 00 ba 01 00 00 00 e9 e4 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 82 1f 00 00 49 81 3c 24 e0 1d e3 92 0f 84 98 f2
[   56.993140][ T5296] RSP: 0000:ffffc9000303ecd8 EFLAGS: 00010006
[   56.993153][ T5296] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000
[   56.993163][ T5296] RDX: 001ffff11002a963 RSI: ffff88801bc04880 RDI: 00ffff8880154b18
[   56.993173][ T5296] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
[   56.993182][ T5296] R10: ffffffff8fe2c8d7 R11: 0000000000000001 R12: 00ffff8880154b18
[   56.993192][ T5296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
[   56.993200][ T5296] FS:  0000000000000000(0000) GS:ffff88802c200000(0063) knlGS:0000000057afd400
[   56.993232][ T5296] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   56.993245][ T5296] CR2: 000000003272e000 CR3: 0000000054bd8000 CR4: 0000000000350ef0
[   56.993254][ T5296] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   56.993263][ T5296] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   56.993272][ T5296] Call Trace:
[   56.993278][ T5296]  <TASK>
[   56.993283][ T5296]  ? show_regs+0x8c/0xa0
[   56.993305][ T5296]  ? die_addr+0x4f/0xd0
[   56.993326][ T5296]  ? exc_general_protection+0x155/0x230
[   56.993396][ T5296]  ? asm_exc_general_protection+0x26/0x30
[   56.993419][ T5296]  ? __lock_acquire+0xe3e/0x3b30
[   56.993435][ T5296]  ? hlock_class+0x4e/0x130
[   56.993459][ T5296]  ? __pfx___lock_acquire+0x10/0x10
[   56.993474][ T5296]  ? __pfx___lock_acquire+0x10/0x10
[   56.993489][ T5296]  ? veth_get_stats64+0x3eb/0x6b0
[   56.993510][ T5296]  ? __pfx_veth_get_stats64+0x10/0x10
[   56.993532][ T5296]  lock_acquire+0x1b1/0x560
[   56.993547][ T5296]  ? __queue_work+0x39e/0x1020
[   56.993567][ T5296]  ? __pfx_lock_acquire+0x10/0x10
[   56.993582][ T5296]  ? __pfx_lock_acquire+0x10/0x10
[   56.993601][ T5296]  _raw_spin_lock+0x2e/0x40
[   56.993621][ T5296]  ? __queue_work+0x39e/0x1020
[   56.993638][ T5296]  __queue_work+0x39e/0x1020
[   56.993658][ T5296]  __queue_delayed_work+0x21b/0x2e0
[   56.993678][ T5296]  queue_delayed_work_on+0x12a/0x150
[   56.993699][ T5296]  bond_enslave+0xef9/0x5e50
[   56.993722][ T5296]  ? __pfx_bond_enslave+0x10/0x10
[   56.993738][ T5296]  ? __lock_acquire+0xc5d/0x3b30
[   56.993753][ T5296]  ? __pfx_mark_lock+0x10/0x10
[   56.993767][ T5296]  ? __pfx_mark_lock+0x10/0x10
[   56.993782][ T5296]  ? hlock_class+0x4e/0x130
[   56.993802][ T5296]  ? __lock_acquire+0xc5d/0x3b30
[   56.993821][ T5296]  ? __pfx___lock_acquire+0x10/0x10
[   56.993836][ T5296]  ? __lock_acquire+0x14f4/0x3b30
[   56.993857][ T5296]  ? __pfx_bond_enslave+0x10/0x10
[   56.993874][ T5296]  do_set_master+0x1bc/0x230
[   56.993891][ T5296]  do_setlink+0xa74/0x3ea0
[   56.993912][ T5296]  ? __pfx_lock_release+0x10/0x10
[   56.993928][ T5296]  ? __pfx_do_setlink+0x10/0x10
[   56.993946][ T5296]  ? __orc_find+0x104/0x130
[   56.993967][ T5296]  ? stack_access_ok+0xf9/0x270
[   56.993987][ T5296]  ? __module_address+0x55/0x3c0
[   56.994005][ T5296]  ? bpf_ksym_find+0x124/0x1c0
[   56.994024][ T5296]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   56.994047][ T5296]  ? is_bpf_text_address+0x94/0x1a0
[   56.994069][ T5296]  ? kernel_text_address+0x8d/0x100
[   56.994087][ T5296]  ? __kernel_text_address+0xd/0x40
[   56.994103][ T5296]  ? unwind_get_return_address+0x45/0xe0
[   56.994127][ T5296]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   56.994146][ T5296]  ? __nla_validate_parse+0x605/0x2b10
[   56.994172][ T5296]  ? __pfx___nla_validate_parse+0x10/0x10
[   56.994192][ T5296]  ? stack_trace_save+0x95/0xd0
[   56.994214][ T5296]  ? __pfx_stack_trace_save+0x10/0x10
[   56.994236][ T5296]  ? stack_depot_save_flags+0x28/0x900
[   56.994256][ T5296]  ? __nla_parse+0x40/0x60
[   56.994278][ T5296]  __rtnl_newlink+0xc3a/0x1960
[   56.994303][ T5296]  ? __pfx___rtnl_newlink+0x10/0x10
[   56.994333][ T5296]  rtnl_newlink+0x67/0xa0
[   56.994353][ T5296]  ? __pfx_rtnl_newlink+0x10/0x10
[   56.994373][ T5296]  rtnetlink_rcv_msg+0x3c7/0xea0
[   56.994394][ T5296]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   56.994416][ T5296]  ? __pfx___lock_acquire+0x10/0x10
[   56.994430][ T5296]  ? find_held_lock+0x2d/0x110
[   56.994452][ T5296]  netlink_rcv_skb+0x165/0x410
[   56.994470][ T5233] Bluetooth: hci1: command tx timeout
[   56.996142][ T4643] Bluetooth: hci0: command tx timeout
[   57.007042][ T5259] bcachefs (loop2): going read-only
[   57.007103][ T4643] bcachefs (loop2): unable to write journal to sufficient devices
[   57.008077][ T5304] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 8
[   57.011264][ T5296]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   57.011297][ T5296]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   57.011328][ T5296]  ? netlink_deliver_tap+0x1ae/0xcf0
[   57.011351][ T5296]  netlink_unicast+0x542/0x820
[   57.015427][ T5259] bcachefs (loop2): finished waiting for writes to stop
[   57.019707][ T5296]  ? __pfx_netlink_unicast+0x10/0x10
[   57.019738][ T5296]  ? __phys_addr_symbol+0x30/0x80
[   57.208639][ T5296]  ? __check_object_size+0x48e/0x720
[   57.210738][ T5296]  netlink_sendmsg+0x8b8/0xd70
[   57.212642][ T5296]  ? __pfx_netlink_sendmsg+0x10/0x10
[   57.214712][ T5296]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[   57.216795][ T5296]  __sys_sendto+0x47f/0x4e0
[   57.218633][ T5296]  ? __pfx___sys_sendto+0x10/0x10
[   57.220632][ T5296]  ? __might_fault+0x13b/0x190
[   57.222517][ T5296]  ? __pfx_lock_release+0x10/0x10
[   57.224534][ T5296]  __do_compat_sys_socketcall+0x5e2/0x700
[   57.226774][ T5296]  ? __pfx___do_compat_sys_socketcall+0x10/0x10
[   57.229277][ T5296]  ? kmem_cache_free+0x12f/0x3a0
[   57.231234][ T5296]  ? percpu_counter_add_batch+0x132/0x1f0
[   57.233517][ T5296]  ? __fput+0x6c5/0xbb0
[   57.235152][ T5296]  __do_fast_syscall_32+0x73/0x120
[   57.237171][ T5296]  do_fast_syscall_32+0x32/0x80
[   57.239097][ T5296]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   57.241559][ T5296] RIP: 0023:0xf731d579
[   57.243194][ T5296] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[   57.250682][ T5296] RSP: 002b:00000000ffadefa0 EFLAGS: 00000293 ORIG_RAX: 0000000000000066
[   57.253916][ T5296] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ffadefb4
[   57.257023][ T5296] RDX: 0000000000000000 RSI: 00000000f7fc3568 RDI: 00000000f7473ff4
[   57.260113][ T5296] RBP: 00000000f7fc3568 R08: 0000000000000000 R09: 0000000000000000
[   57.263194][ T5296] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   57.266260][ T5296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   57.269339][ T5296]  </TASK>
[   57.270568][ T5296] Modules linked in:
[   57.272115][ T5296] ---[ end trace 0000000000000000 ]---
[   57.274260][ T5296] RIP: 0010:__lock_acquire+0xe3e/0x3b30
[   57.276398][ T5296] Code: 11 00 00 39 05 33 a6 1f 12 0f 82 be 05 00 00 ba 01 00 00 00 e9 e4 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 82 1f 00 00 49 81 3c 24 e0 1d e3 92 0f 84 98 f2
[   57.283736][ T5296] RSP: 0000:ffffc9000303ecd8 EFLAGS: 00010006
[   57.286192][ T5296] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000
[   57.289273][ T5296] RDX: 001ffff11002a963 RSI: ffff88801bc04880 RDI: 00ffff8880154b18
[   57.292337][ T5296] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
[   57.295415][ T5296] R10: ffffffff8fe2c8d7 R11: 0000000000000001 R12: 00ffff8880154b18
[   57.298744][ T5296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
[   57.301783][ T5296] FS:  0000000000000000(0000) GS:ffff88802c200000(0063) knlGS:0000000057afd400
[   57.305345][ T5296] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   57.308058][ T5296] CR2: 000000003272e000 CR3: 0000000054bd8000 CR4: 0000000000350ef0
[   57.311240][ T5296] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   57.314328][ T5296] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   57.317425][ T5296] Kernel panic - not syncing: Fatal exception
[   57.320299][ T5296] Kernel Offset: disabled
[   57.322004][ T5296] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:46:08  Registers:
info registers vcpu 0

CPU#0
EAX=00000674 EBX=813c7000 ECX=00000b7a EDX=0000674a
ESI=0000053e EDI=813c7aea EBP=ffffffff ESP=ff9f3c90
EIP=f72a9f58 EFL=00000207 [-----PC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA]
SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 00000000 ffffffff 00c00000
GS =0063 57955400 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 00000000 ffffffff 00c00000
TR =0040 00003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f72f3710 CR3=0000000027ae0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
EAX=f6d4f3a8 EBX=ffffffff ECX=ffffffff EDX=813c862a
ESI=813c7f50 EDI=ffffffff EBP=f6ceb450 ESP=ffc99df0
EIP=f72b3c40 EFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA]
SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 00000000 ffffffff 00c00000
GS =0063 569f6400 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 00000000 ffffffff 00c00000
TR =0040 0004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000032639000 CR3=0000000000496000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff84f9e4e5 RDI=ffffffff94d610c0 RBP=ffffffff94d61080 RSP=ffffc9000303e630
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6d203a4e4153414b
R12=0000000000000000 R13=0000000000000078 R14=ffffffff84f9e480 R15=0000000000000000
RIP=ffffffff84f9e50f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802c200000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000003272e000 CR3=0000000054bd8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff816f9cfe RDX=ffff88801f32c880
RSI=ffffffff816f9cec RDI=0000000000000001 RBP=0000000000000021 RSP=ffffc90002cffa70
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000200 R13=ffff88801bc04880 R14=ffffffff8b824d40 R15=ffffc90002cffaf0
RIP=ffffffff816f9cf5 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c300000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000032842000 CR3=0000000027ae0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000