last executing test programs: 3.389764673s ago: executing program 0 (id=1): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="be9689ce9f88", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=0xac14140a, @multicast1}, '\x00\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) write$tun(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="00006007ab00ff09998488cac870e074fea9ed569a64718eaa2dc9d48220a94469e85b5b437e4a5e027dfee6cacce1cdcba77d048b25beafc946703239127be4ed46ae7c6f47f22ab889027a203486949798398701cfaa62ca1c9306556af433cafb1ee1fc657412944d2076abcc40f486e12a23a11363b882cb17959080c41fedb6052e65a27a8d8404e227a8ba86aa00b1000d5db15c9e04dc33"], 0x15f) socket(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r3, &(0x7f0000000880)=""/4096, 0x1000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000380)=0x85000) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000000000000000000006469676573745f6e756c6c2d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f600000000000000000000000000000000000000000000000000000000aed702ec743f9a5500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffffffffffff00"/224], 0xe0}}, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 3.275876365s ago: executing program 2 (id=3): sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "000080f100df000000a7d9de16c708db7200"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x25dfdc00, {}, [{0xfffffffffffffe62}]}, 0x18}}, 0xc0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/217, 0xd9}, {&(0x7f0000000040)=""/112, 0x70}], 0x2, &(0x7f0000000880)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_io_uring_setup(0x56c1, &(0x7f0000000580)={0x0, 0x4f89, 0x400, 0xfffffffd, 0xfffffffe}, &(0x7f0000000280), &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) 3.225176121s ago: executing program 1 (id=2): openat$vimc0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x69a7, &(0x7f0000000200)={0x0, 0xae22, 0x50e83aaeac7bb425, 0x2, 0x177}, &(0x7f0000000000), &(0x7f0000000180)) r4 = syz_io_uring_setup(0x67fd, &(0x7f0000000100)={0x0, 0x3400, 0x822a28cc43044cf8, 0x2, 0x0, 0x0, r3}, 0x0, 0x0) r5 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x2d6, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r6, &(0x7f0000008400), 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000004", @ANYRES16=0x0, @ANYBLOB="10032cbd7000fedbdf2501000000060003000500000006001b004e22000008001700", @ANYRES32=r8, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000051}, 0x805) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000008000a00040e00000800090000a800000800070000000000080008"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="dc34b67962c6717b436ada0fe24c11f83e4236e280385bdcded0c7f5f55759adb0e4df82d05a6fded19b57ae8ec27009f24b249e7caf28d97cc769d14750ddf63d5467", @ANYRESHEX=r4, @ANYRES8=r7, @ANYRESOCT=r1, @ANYRESOCT=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) 3.202086047s ago: executing program 3 (id=4): sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "000080f100df000000a7d9de16c708db7200"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x25dfdc00, {}, [{0xfffffffffffffe62}]}, 0x18}}, 0xc0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/217, 0xd9}, {&(0x7f0000000040)=""/112, 0x70}], 0x2, &(0x7f0000000880)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_io_uring_setup(0x56c1, &(0x7f0000000580)={0x0, 0x4f89, 0x400, 0xfffffffd, 0xfffffffe}, &(0x7f0000000280), &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.672690692s ago: executing program 2 (id=5): openat$vimc0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x69a7, &(0x7f0000000200)={0x0, 0xae22, 0x50e83aaeac7bb425, 0x2, 0x177}, &(0x7f0000000000), &(0x7f0000000180)) r4 = syz_io_uring_setup(0x67fd, &(0x7f0000000100)={0x0, 0x3400, 0x822a28cc43044cf8, 0x2, 0x0, 0x0, r3}, 0x0, 0x0) r5 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x2d6, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r6, &(0x7f0000008400), 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000004", @ANYRES16=0x0, @ANYBLOB="10032cbd7000fedbdf2501000000060003000500000006001b004e22000008001700", @ANYRES32=r8, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000051}, 0x805) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000008000a00040e00000800090000a800000800070000000000080008"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="dc34b67962c6717b436ada0fe24c11f83e4236e280385bdcded0c7f5f55759adb0e4df82d05a6fded19b57ae8ec27009f24b249e7caf28d97cc769d14750ddf63d5467", @ANYRESHEX=r4, @ANYRES8=r7, @ANYRESOCT=r1, @ANYRESOCT=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) 1.610482026s ago: executing program 3 (id=6): socket$netlink(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x218) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='rxrpc_rx_abort\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4040083) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = syz_io_uring_setup(0x71d3, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x3666b165f8ff1357}) ioctl$TUNGETVNETLE(r5, 0x400454de, &(0x7f0000001940)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000098ec"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000002e590000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000fcff010000000000000000000000000001000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.585554146s ago: executing program 1 (id=7): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mlock(&(0x7f00001e9000/0x1000)=nil, 0x1000) fsopen(0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x40046208, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r4 = dup(r0) write$uinput_user_dev(r4, &(0x7f0000001040)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0xef], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc058560f, &(0x7f0000000140)={0x0, 0x1, 0x0, "8eb1de260a0800"}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x100004}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast1, @in6=@private1}}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0x117) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0xee00, 0xee01}}, './file0\x00'}) munmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x3) 1.369191702s ago: executing program 0 (id=8): socket(0xa, 0x3, 0x3a) creat(&(0x7f0000000080)='./file0\x00', 0x1de) keyctl$reject(0x14, 0x0, 0x1ffffffd, 0x8000000000000001, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x100}, 0x24}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f00000038c0)=""/102372, 0x18fe4}], 0x1, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000104000000000000001500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128020000100697036746e6c0000180002801400030000000000000000000000ffffe0000001"], 0x48}}, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r7 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r7, 0x4200}], 0x1, 0xfffc) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x1}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000440)=0x200022, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001500f1ffffff", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x10001, 0x401, {{0x35, 0x4, 0x1, 0x23, 0xd4, 0x67, 0x0, 0x10, 0x2b, 0x0, @multicast2, @local, {[@noop, @cipso={0x86, 0x69, 0x0, [{0x6, 0x4, "0dc9"}, {0x0, 0xe, "8f099669ea8f45d7cca6e059"}, {0x1, 0xe, "9279c87a06c607ee54d20bc9"}, {0x1, 0x3, "df"}, {0x0, 0x2}, {0x2, 0x11, "599d852eb956f063b3c6ef0ff80d44"}, {0x0, 0x7, "399d8f9b68"}, {0x1, 0xe, "4a887092279138d3bbedc645"}, {0x7, 0x6, "6b50a768"}, {0x6, 0x12, "7316b348d174f182b4e17482f85cd8bf"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xa, "0e8ff79bdb5c76a3"}, @timestamp_prespec={0x44, 0x44, 0xd9, 0x3, 0x5, [{@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}}, {@broadcast, 0x8}, {@broadcast, 0x9}, {@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64014102, 0x502}, {@rand_addr=0x64010101, 0x8001}, {@local, 0x10}]}, @timestamp_prespec={0x44, 0x4, 0x3f, 0x3, 0x3}]}}}}}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20000080) 456.288778ms ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0xc17c) sendmsg$nl_route_sched(r3, &(0x7f0000008f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14850}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001439) unshare(0x44000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x101000) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000140)) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r7, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$FUSE_LK(r3, 0x0, 0x0) 0s ago: executing program 2 (id=10): sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "000080f100df000000a7d9de16c708db7200"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x25dfdc00, {}, [{0xfffffffffffffe62}]}, 0x18}}, 0xc0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/217, 0xd9}], 0x1, &(0x7f0000000880)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:19902' (ED25519) to the list of known hosts. [ 33.401029][ T5276] cgroup: Unknown subsys name 'net' [ 33.549153][ T5276] cgroup: Unknown subsys name 'cpuset' [ 33.552255][ T5276] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.405527][ T5276] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.312259][ T5354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.314605][ T5354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.316938][ T5354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.320028][ T5357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.325226][ T5357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.328532][ T5355] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.328599][ T5357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.331792][ T5355] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.336879][ T5355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.337452][ T5354] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.338855][ T5355] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.341617][ T5354] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.343073][ T5355] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.345866][ T5357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.345927][ T5356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.346132][ T5354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.346942][ T5356] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.347177][ T5354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.347684][ T5355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.350323][ T5357] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.357114][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.362168][ T5357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.364212][ T65] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.367142][ T4777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.549251][ T5340] chnl_net:caif_netlink_parms(): no params data found [ 36.565331][ T5342] chnl_net:caif_netlink_parms(): no params data found [ 36.577360][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 36.632829][ T5341] chnl_net:caif_netlink_parms(): no params data found [ 36.791363][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.793604][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.795654][ T5340] bridge_slave_0: entered allmulticast mode [ 36.798266][ T5340] bridge_slave_0: entered promiscuous mode [ 36.860572][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.862738][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.864944][ T5342] bridge_slave_0: entered allmulticast mode [ 36.868030][ T5342] bridge_slave_0: entered promiscuous mode [ 36.870463][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.872236][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.874135][ T5340] bridge_slave_1: entered allmulticast mode [ 36.876095][ T5340] bridge_slave_1: entered promiscuous mode [ 36.890988][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.892883][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.894756][ T5349] bridge_slave_0: entered allmulticast mode [ 36.896939][ T5349] bridge_slave_0: entered promiscuous mode [ 36.899192][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.900996][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.902803][ T5342] bridge_slave_1: entered allmulticast mode [ 36.904991][ T5342] bridge_slave_1: entered promiscuous mode [ 36.927931][ T5341] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.929740][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.931501][ T5341] bridge_slave_0: entered allmulticast mode [ 36.933391][ T5341] bridge_slave_0: entered promiscuous mode [ 36.935886][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.938337][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.940134][ T5349] bridge_slave_1: entered allmulticast mode [ 36.942033][ T5349] bridge_slave_1: entered promiscuous mode [ 36.998953][ T5340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.001961][ T5341] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.004022][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.005811][ T5341] bridge_slave_1: entered allmulticast mode [ 37.010330][ T5341] bridge_slave_1: entered promiscuous mode [ 37.033483][ T5342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.040833][ T5340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.052378][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.055505][ T5342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.075782][ T5341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.079367][ T5341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.082493][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.094465][ T5340] team0: Port device team_slave_0 added [ 37.124296][ T5340] team0: Port device team_slave_1 added [ 37.143154][ T5342] team0: Port device team_slave_0 added [ 37.155965][ T5341] team0: Port device team_slave_0 added [ 37.158965][ T5349] team0: Port device team_slave_0 added [ 37.161428][ T5342] team0: Port device team_slave_1 added [ 37.171975][ T5341] team0: Port device team_slave_1 added [ 37.181606][ T5349] team0: Port device team_slave_1 added [ 37.183541][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.185260][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.192493][ T5340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.226155][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.228032][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.234530][ T5340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.240402][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.242194][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.248635][ T5341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.251766][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.253488][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.259879][ T5342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.271256][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.273087][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.280351][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.284544][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.286301][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.293475][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.297604][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.299562][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.305862][ T5341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.309226][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.311184][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.326470][ T5342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.355927][ T5340] hsr_slave_0: entered promiscuous mode [ 37.357932][ T5340] hsr_slave_1: entered promiscuous mode [ 37.388261][ T5342] hsr_slave_0: entered promiscuous mode [ 37.390074][ T5342] hsr_slave_1: entered promiscuous mode [ 37.391790][ T5342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.393784][ T5342] Cannot create hsr debugfs directory [ 37.419134][ T5349] hsr_slave_0: entered promiscuous mode [ 37.421143][ T5349] hsr_slave_1: entered promiscuous mode [ 37.422900][ T5349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.424947][ T5349] Cannot create hsr debugfs directory [ 37.437787][ T5341] hsr_slave_0: entered promiscuous mode [ 37.439590][ T5341] hsr_slave_1: entered promiscuous mode [ 37.441309][ T5341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.443191][ T5341] Cannot create hsr debugfs directory [ 37.664341][ T5340] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.672835][ T5340] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.675808][ T5340] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.686129][ T5340] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.704335][ T5349] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.709315][ T5349] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.713826][ T5349] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.721366][ T5349] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.747638][ T5342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.752484][ T5342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.757091][ T5342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.764301][ T5342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.804463][ T5341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.811840][ T5341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.816827][ T5341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.832861][ T5341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.876741][ T5340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.885184][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.904419][ T5340] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.916786][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.919253][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.924287][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.933703][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.935753][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.939804][ T5342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.945133][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.947506][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.959434][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.961842][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.967475][ T5341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.987995][ T5341] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.000059][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.001853][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.009613][ T5342] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.014739][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.016576][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.039559][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.041960][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.059806][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.062122][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.103421][ T5340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.129513][ T5340] veth0_vlan: entered promiscuous mode [ 38.132232][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.141263][ T5340] veth1_vlan: entered promiscuous mode [ 38.155378][ T5349] veth0_vlan: entered promiscuous mode [ 38.161154][ T5340] veth0_macvtap: entered promiscuous mode [ 38.164905][ T5340] veth1_macvtap: entered promiscuous mode [ 38.168312][ T5349] veth1_vlan: entered promiscuous mode [ 38.179963][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.189756][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.194877][ T5341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.198242][ T5340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.200483][ T5340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.202591][ T5340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.204696][ T5340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.208965][ T5342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.216398][ T5349] veth0_macvtap: entered promiscuous mode [ 38.227687][ T5349] veth1_macvtap: entered promiscuous mode [ 38.244403][ T5341] veth0_vlan: entered promiscuous mode [ 38.250957][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.253616][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.256780][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.270489][ T5341] veth1_vlan: entered promiscuous mode [ 38.274909][ T5349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.278749][ T5349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.281944][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.293703][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.295760][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.299536][ T5342] veth0_vlan: entered promiscuous mode [ 38.303303][ T5349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.305786][ T5349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.308780][ T5349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.311876][ T5349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.318312][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.320299][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.328804][ T5342] veth1_vlan: entered promiscuous mode [ 38.343089][ T5341] veth0_macvtap: entered promiscuous mode [ 38.351222][ T5340] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.353779][ T5341] veth1_macvtap: entered promiscuous mode [ 38.365129][ T5342] veth0_macvtap: entered promiscuous mode [ 38.365271][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.368647][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.369051][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.372162][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.372176][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.380181][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.383594][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.387376][ T4777] Bluetooth: hci3: command tx timeout [ 38.387592][ T5347] Bluetooth: hci0: command tx timeout [ 38.387670][ T5357] Bluetooth: hci1: command tx timeout [ 38.388828][ T5342] veth1_macvtap: entered promiscuous mode [ 38.393032][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.393493][ T65] Bluetooth: hci2: command tx timeout [ 38.395833][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.395845][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.403586][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.405948][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.412521][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.419443][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.426531][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.430175][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.432684][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.435308][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.439255][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.441637][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.444405][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.447380][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.449959][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.452831][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.455475][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.458839][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.470530][ T5342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.472672][ T5342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.474832][ T5342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.477482][ T5342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.480735][ T5341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.482966][ T5341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.485169][ T5341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.487462][ T5341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.490611][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.492562][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.523248][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.525264][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.551855][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.554058][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.555955][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.556407][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.574544][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.578144][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.676685][ T5384] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.846591][ T5384] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 38.849417][ T5384] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 38.852079][ T5384] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.855202][ T5384] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 38.906085][ T5384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.968500][ T5384] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 39.133549][ T5384] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 39.164119][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.223167][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.320745][ T5418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.727238][ T1422] usb 5-1: USB disconnect, device number 2 [ 40.238299][ T5423] input: syz0 as /devices/virtual/input/input5 [ 40.246647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.276508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 40.468795][ T65] Bluetooth: hci3: command tx timeout [ 40.478857][ T65] Bluetooth: hci1: command tx timeout [ 40.480425][ T65] Bluetooth: hci2: command tx timeout [ 40.481923][ T65] Bluetooth: hci0: command tx timeout [ 40.522094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 40.546538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 40.548994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 40.632366][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 41.840105][ T5436] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x20400 pfn:0x54124 [ 41.843217][ T5436] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 41.845511][ T5436] raw: 04fff00000000000 ffffea0001504948 ffffea00015055c8 0000000000000000 [ 41.848320][ T5436] raw: 0000000000020400 0000000000000000 00000000ffffffff 0000000000000000 [ 41.850480][ T5436] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 41.853997][ T5436] page_owner tracks the page as freed [ 41.858715][ T5436] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5411, tgid 5405 (syz.2.3), ts 38736974966, free_ts 39231676764 [ 41.863534][ T5436] post_alloc_hook+0x2d1/0x350 [ 41.864916][ T5436] get_page_from_freelist+0x101e/0x3070 [ 41.866758][ T5436] __alloc_pages_noprof+0x223/0x25c0 [ 41.868135][ T5436] alloc_pages_mpol_noprof+0x2c9/0x610 [ 41.869503][ T5436] folio_alloc_mpol_noprof+0x36/0xd0 [ 41.870812][ T5436] vma_alloc_folio_noprof+0xee/0x1b0 [ 41.872143][ T5436] do_pte_missing+0x2010/0x3e50 [ 41.873390][ T5436] __handle_mm_fault+0x100a/0x2a10 [ 41.874991][ T5436] handle_mm_fault+0x3fa/0xaa0 [ 41.876895][ T5436] __get_user_pages+0x90f/0x3b90 [ 41.878607][ T5436] populate_vma_page_range+0x27f/0x3a0 [ 41.880317][ T5436] __mm_populate+0x1d6/0x380 [ 41.881727][ T5436] do_mlock+0x412/0x7d0 [ 41.882803][ T5436] __ia32_sys_mlock+0x57/0x80 [ 41.884007][ T5436] __do_fast_syscall_32+0x73/0x120 [ 41.885294][ T5436] do_fast_syscall_32+0x32/0x80 [ 41.887632][ T5436] page last free pid 5411 tgid 5405 stack trace: [ 41.889338][ T5436] free_unref_folios+0x956/0x1310 [ 41.890872][ T5436] folios_put_refs+0x551/0x750 [ 41.892096][ T5436] munlock_folio+0x287/0x6b0 [ 41.893285][ T5436] folio_remove_rmap_ptes+0x30c/0x3c0 [ 41.895058][ T5436] collapse_huge_page+0x1a0f/0x30b0 [ 41.897517][ T5436] hpage_collapse_scan_pmd+0x594/0x1210 [ 41.898992][ T5436] madvise_collapse+0x805/0xac0 [ 41.900291][ T5436] madvise_vma_behavior+0x390/0x19e0 [ 41.901616][ T5436] madvise_walk_vmas+0x1cf/0x2c0 [ 41.902882][ T5436] do_madvise+0x2e1/0x760 [ 41.903999][ T5436] __ia32_sys_madvise+0xa7/0x110 [ 41.905280][ T5436] __do_fast_syscall_32+0x73/0x120 [ 41.907175][ T5436] do_fast_syscall_32+0x32/0x80 [ 41.908517][ T5436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 41.911395][ T5436] ------------[ cut here ]------------ [ 41.913431][ T5436] kernel BUG at include/linux/mm.h:1444! [ 41.915393][ T5436] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 41.918030][ T5436] CPU: 2 UID: 0 PID: 5436 Comm: syz.0.9 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 41.921835][ T5436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 41.924541][ T5436] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 41.926265][ T5436] Code: b0 8b 48 89 df e8 f0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 40 75 05 fd 48 c7 c6 a0 c6 b0 8b 4c 89 e7 e8 d1 23 4b fd 90 <0f> 0b e8 29 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 41.931352][ T5436] RSP: 0018:ffffc90003a36c70 EFLAGS: 00010293 [ 41.932936][ T5436] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 41.935060][ T5436] RDX: ffff888027a18000 RSI: ffffffff84873a3f RDI: ffff888027a18444 [ 41.937187][ T5436] RBP: ffffea0001504934 R08: 0000000000000001 R09: fffffbfff2d315b0 [ 41.939302][ T5436] R10: ffffffff9698ad87 R11: ffff88802b628a40 R12: ffffea0001504900 [ 41.941575][ T5436] R13: ffff888012f53000 R14: 0000000000001000 R15: 0000000000001000 [ 41.943604][ T5436] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 41.945904][ T5436] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 41.947602][ T5436] CR2: 00000000f7445e5c CR3: 00000000241f2000 CR4: 0000000000352ef0 [ 41.949622][ T5436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.952172][ T5436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.954273][ T5436] Call Trace: [ 41.955166][ T5436] [ 41.955950][ T5436] ? die+0x31/0x80 [ 41.956943][ T5436] ? do_trap+0x232/0x430 [ 41.958062][ T5436] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 41.959670][ T5436] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 41.961634][ T5436] ? do_error_trap+0xf4/0x230 [ 41.962893][ T5436] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 41.964495][ T5436] ? handle_invalid_op+0x34/0x40 [ 41.965947][ T5436] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 41.967574][ T5436] ? exc_invalid_op+0x2e/0x50 [ 41.968822][ T5436] ? asm_exc_invalid_op+0x1a/0x20 [ 41.970194][ T5436] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 41.971789][ T5436] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 41.973404][ T5436] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 41.975089][ T5436] ? delete_node+0x207/0x8e0 [ 41.976310][ T5436] iov_iter_get_pages_alloc2+0x53/0xf0 [ 41.977731][ T5436] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 41.979500][ T5436] ? p9pdu_vwritef+0x368/0x21d0 [ 41.981107][ T5436] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 41.983116][ T5436] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 41.984456][ T5436] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 41.985792][ T5436] ? p9_tag_alloc+0x4cc/0x870 [ 41.987092][ T5436] ? reacquire_held_locks+0x466/0x4c0 [ 41.988538][ T5436] p9_virtio_zc_request+0x1ac/0x1460 [ 41.989946][ T5436] ? p9pdu_writef+0xc4/0x100 [ 41.991318][ T5436] ? __pfx_p9pdu_writef+0x10/0x10 [ 41.992726][ T5436] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 41.994008][ T5436] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 41.995495][ T5436] ? rcu_is_watching+0x12/0xc0 [ 41.996727][ T5436] ? trace_9p_protocol_dump+0x192/0x220 [ 41.998167][ T5436] ? rcu_is_watching+0x12/0xc0 [ 41.999413][ T5436] ? p9_client_prepare_req+0x111/0x4d0 [ 42.001168][ T5436] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 42.003218][ T5436] ? hlock_class+0x4e/0x130 [ 42.004373][ T5436] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 42.005899][ T5436] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 42.007648][ T5436] ? hlock_class+0x4e/0x130 [ 42.008849][ T5436] ? mark_lock+0xb5/0xc60 [ 42.010125][ T5436] ? __pfx_mark_lock+0x10/0x10 [ 42.011399][ T5436] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 42.012893][ T5436] p9_client_write+0x447/0x680 [ 42.014249][ T5436] ? __pfx_p9_client_write+0x10/0x10 [ 42.015651][ T5436] ? mark_held_locks+0x9f/0xe0 [ 42.017004][ T5436] v9fs_issue_write+0xe2/0x180 [ 42.018267][ T5436] ? __pfx_v9fs_issue_write+0x10/0x10 [ 42.019760][ T5436] ? rcu_is_watching+0x12/0xc0 [ 42.021270][ T5436] ? trace_netfs_sreq+0x193/0x220 [ 42.022598][ T5436] netfs_do_issue_write+0x92/0x110 [ 42.024020][ T5436] netfs_advance_write+0x164/0xc80 [ 42.025362][ T5436] ? netfs_buffer_append_folio+0x276/0x360 [ 42.026984][ T5436] netfs_write_folio+0xc19/0x1930 [ 42.028347][ T5436] netfs_writepages+0x2ba/0xb90 [ 42.029721][ T5436] ? __pfx_netfs_writepages+0x10/0x10 [ 42.031150][ T5436] ? __pfx___lock_acquire+0x10/0x10 [ 42.032496][ T5436] ? __pfx_netfs_writepages+0x10/0x10 [ 42.033989][ T5436] do_writepages+0x1a3/0x7f0 [ 42.035201][ T5436] ? __pfx_do_writepages+0x10/0x10 [ 42.036620][ T5436] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 42.038537][ T5436] ? do_raw_spin_lock+0x12d/0x2c0 [ 42.039860][ T5436] ? do_raw_spin_unlock+0x172/0x230 [ 42.041591][ T5436] ? _raw_spin_unlock+0x28/0x50 [ 42.042835][ T5436] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 42.044357][ T5436] filemap_fdatawrite_wbc+0x148/0x1c0 [ 42.045703][ T5436] ? hlock_class+0x4e/0x130 [ 42.046908][ T5436] v9fs_mmap_vm_close+0x1ff/0x250 [ 42.048211][ T5436] ? __pfx_v9fs_mmap_vm_close+0x10/0x10 [ 42.049634][ T5436] ? __pfx___might_resched+0x10/0x10 [ 42.051040][ T5436] ? __pfx_v9fs_mmap_vm_close+0x10/0x10 [ 42.052636][ T5436] remove_vma+0xa8/0x1a0 [ 42.053743][ T5436] exit_mmap+0x4e0/0xb30 [ 42.054850][ T5436] ? __pfx_exit_mmap+0x10/0x10 [ 42.056068][ T5436] ? __mutex_lock+0x1a6/0x9c0 [ 42.057266][ T5436] __mmput+0x12a/0x480 [ 42.058329][ T5436] mmput+0x62/0x70 [ 42.059317][ T5436] do_exit+0x9bf/0x2d70 [ 42.060473][ T5436] ? get_signal+0x8fb/0x26d0 [ 42.061688][ T5436] ? __pfx_do_exit+0x10/0x10 [ 42.062922][ T5436] ? do_raw_spin_lock+0x12d/0x2c0 [ 42.064263][ T5436] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 42.065628][ T5436] do_group_exit+0xd3/0x2a0 [ 42.066815][ T5436] get_signal+0x2658/0x26d0 [ 42.067987][ T5436] ? __call_rcu_common.constprop.0+0x36e/0x7a0 [ 42.069574][ T5436] ? lockdep_hardirqs_on+0x7c/0x110 [ 42.071044][ T5436] ? __pfx_get_signal+0x10/0x10 [ 42.072310][ T5436] arch_do_signal_or_restart+0x90/0x7e0 [ 42.073758][ T5436] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 42.075481][ T5436] ? __pfx___close_range+0x10/0x10 [ 42.076870][ T5436] syscall_exit_to_user_mode+0x150/0x2a0 [ 42.078330][ T5436] __do_fast_syscall_32+0x80/0x120 [ 42.079677][ T5436] do_fast_syscall_32+0x32/0x80 [ 42.080996][ T5436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.082638][ T5436] RIP: 0023:0xf7f55579 [ 42.083721][ T5436] Code: Unable to access opcode bytes at 0xf7f5554f. [ 42.085446][ T5436] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 00000000000001b4 [ 42.087640][ T5436] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000ffffffff [ 42.089691][ T5436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.091836][ T5436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 42.093885][ T5436] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 42.095960][ T5436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 42.098033][ T5436] [ 42.098844][ T5436] Modules linked in: [ 42.100457][ T5436] ---[ end trace 0000000000000000 ]--- [ 42.120475][ T5436] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 42.123145][ T5436] Code: b0 8b 48 89 df e8 f0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 40 75 05 fd 48 c7 c6 a0 c6 b0 8b 4c 89 e7 e8 d1 23 4b fd 90 <0f> 0b e8 29 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 42.128893][ T5436] RSP: 0018:ffffc90003a36c70 EFLAGS: 00010293 [ 42.130988][ T5436] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 42.133045][ T5436] RDX: ffff888027a18000 RSI: ffffffff84873a3f RDI: ffff888027a18444 [ 42.135122][ T5436] RBP: ffffea0001504934 R08: 0000000000000001 R09: fffffbfff2d315b0 [ 42.137513][ T5436] R10: ffffffff9698ad87 R11: ffff88802b628a40 R12: ffffea0001504900 [ 42.139642][ T5436] R13: ffff888012f53000 R14: 0000000000001000 R15: 0000000000001000 [ 42.141764][ T5436] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 42.144109][ T5436] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 42.147115][ T5436] CR2: 00000000f7445e5c CR3: 00000000241f2000 CR4: 0000000000352ef0 [ 42.149861][ T5436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.151982][ T5436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.154008][ T5436] Kernel panic - not syncing: Fatal exception [ 42.156508][ T5436] Kernel Offset: disabled [ 42.157608][ T5436] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:35:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=ffffc900040c7b20 RCX=ffffffff8180af3b RDX=ffffffff8da957c0 RSI=ffffffff84877cb0 RDI=ffffc900040c7b20 RBP=0000000000000000 RSP=ffffc90000007f68 R8 =0000000000000001 R9 =ffffed1005688018 R10=ffff88802b4400c7 R11=ffffc90000007ff8 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff818caf70 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7fe7434 CR3=000000002b15e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900040d7a78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffffc900040d7ca8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff813ba068 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020033000 CR3=000000005eca8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85035a15 RDI=ffffffff9a63a260 RBP=ffffffff9a63a220 RSP=ffffc90003a36590 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000036 R14=ffffffff850359b0 R15=0000000000000000 RIP=ffffffff85035a3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7445e5c CR3=00000000241f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000100000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000fffdffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec46b4850 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6976656420425355 2077654e203a312d 3520627375205d34 38333554205b5d00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6376656420425355 2077654420303127 3520627375205734 3233355420515700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3533202c2e313420 2020363334380020 3637202c29312e32 2e33207328203530 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343320262e313320 2020313334200020 3620202623312432 2433204722202230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 474549555a4c4d55 55764f46484b5c45 4755584f595f424d 4342555a4c4d226b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 786c2a263c3c333e 3d333c393d32392a 797e2a2623392438 24707379222a3f3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=1ffff11007fff79e RSI=0000000000000004 RDI=ffff88803fffbcf0 RBP=ffff88801acb4048 RSP=ffffc90000e0f200 R8 =0000000000000001 R9 =0000000000045e80 R10=0000000000000000 R11=0000000000000001 R12=0000000000000002 R13=0000000000000001 R14=ffff88803fffbc80 R15=0000000000000001 RIP=ffffffff81cd64d1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f74b5008 CR3=000000002363a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000