Warning: Permanently added '[localhost]:40869' (ED25519) to the list of known hosts. syzkaller login: [ 79.783014][ T5325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.794018][ T5327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.797550][ T5327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.804371][ T5331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.808006][ T5331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.811701][ T5331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.814932][ T5331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.818921][ T5331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.822704][ T5333] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.825935][ T5331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.830207][ T5333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.833765][ T5331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.837330][ T5333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.840786][ T5331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.844705][ T5333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.848494][ T5331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.852479][ T5333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.859854][ T5331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.863450][ T5333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.867836][ T5331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.871223][ T5333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.875628][ T5331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.879849][ T5333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.884156][ T5331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.887584][ T5333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.890914][ T5331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.895324][ T5331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.898886][ T5333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.906474][ T5333] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.931316][ T5333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 80.596508][ T5357] Bluetooth: MGMT ver 1.23 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 81.938133][ T5325] Bluetooth: hci3: command tx timeout [ 81.944904][ T5333] Bluetooth: hci4: command tx timeout [ 81.947796][ T5330] Bluetooth: hci1: command tx timeout executing program executing program executing program executing program executing program executing program [ 82.017658][ T5325] Bluetooth: hci5: command tx timeout [ 82.020504][ T5325] Bluetooth: hci2: command tx timeout executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 82.218012][ T5333] ================================================================== [ 82.221471][ T5333] BUG: KASAN: slab-use-after-free in mgmt_remove_adv_monitor_complete+0xe5/0x540 [ 82.225434][ T5333] Read of size 8 at addr ffff888048891a18 by task kworker/u5:8/5333 [ 82.229773][ T5333] [ 82.230769][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: kworker/u5:8 Not tainted 6.15.0-rc5-syzkaller-00197-gea34704d6ad7 #0 PREEMPT(full) [ 82.230783][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.230790][ T5333] Workqueue: hci0 hci_cmd_sync_work [ 82.230809][ T5333] Call Trace: [ 82.230817][ T5333] [ 82.230822][ T5333] dump_stack_lvl+0x189/0x250 [ 82.230838][ T5333] ? __virt_addr_valid+0x18c/0x540 [ 82.230851][ T5333] ? rcu_is_watching+0x15/0xb0 [ 82.230865][ T5333] ? __kasan_check_byte+0x12/0x40 [ 82.230928][ T5333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.230941][ T5333] ? rcu_is_watching+0x15/0xb0 [ 82.230955][ T5333] ? lock_release+0x4b/0x3e0 [ 82.230969][ T5333] ? __virt_addr_valid+0x18c/0x540 [ 82.230982][ T5333] ? __virt_addr_valid+0x469/0x540 [ 82.230994][ T5333] print_report+0xb4/0x290 [ 82.231006][ T5333] ? mgmt_remove_adv_monitor_complete+0xe5/0x540 [ 82.231020][ T5333] kasan_report+0x118/0x150 [ 82.231033][ T5333] ? mgmt_remove_adv_monitor_complete+0xe5/0x540 [ 82.231052][ T5333] mgmt_remove_adv_monitor_complete+0xe5/0x540 [ 82.231067][ T5333] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 82.231081][ T5333] ? hci_sock_get_channel+0xd/0x50 [ 82.231091][ T5333] ? mgmt_pending_find+0x116/0x130 [ 82.231105][ T5333] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 82.231123][ T5333] hci_cmd_sync_work+0x25e/0x3a0 [ 82.231135][ T5333] ? process_scheduled_works+0x9ec/0x17a0 [ 82.231150][ T5333] process_scheduled_works+0xadb/0x17a0 [ 82.231173][ T5333] ? __pfx_process_scheduled_works+0x10/0x10 [ 82.231191][ T5333] worker_thread+0x8a0/0xda0 [ 82.231204][ T5333] ? __kthread_parkme+0x7b/0x200 [ 82.231215][ T5333] kthread+0x70e/0x8a0 [ 82.231227][ T5333] ? __pfx_worker_thread+0x10/0x10 [ 82.231236][ T5333] ? __pfx_kthread+0x10/0x10 [ 82.231247][ T5333] ? __pfx_kthread+0x10/0x10 [ 82.231257][ T5333] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.231268][ T5333] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.231280][ T5333] ? __pfx_kthread+0x10/0x10 [ 82.231290][ T5333] ret_from_fork+0x4b/0x80 [ 82.231301][ T5333] ? __pfx_kthread+0x10/0x10 [ 82.231311][ T5333] ret_from_fork_asm+0x1a/0x30 [ 82.231324][ T5333] [ 82.231327][ T5333] [ 82.323575][ T5333] Allocated by task 5702: [ 82.325361][ T5333] kasan_save_track+0x3e/0x80 [ 82.327359][ T5333] __kasan_kmalloc+0x93/0xb0 [ 82.329237][ T5333] __kmalloc_cache_noprof+0x230/0x3d0 [ 82.331453][ T5333] mgmt_pending_new+0x65/0x240 [ 82.333376][ T5333] mgmt_pending_add+0x34/0x120 [ 82.335430][ T5333] remove_adv_monitor+0x103/0x1b0 [ 82.337603][ T5333] hci_mgmt_cmd+0x9c6/0xef0 [ 82.339524][ T5333] hci_sock_sendmsg+0x6ca/0xee0 [ 82.341657][ T5333] __sock_sendmsg+0x219/0x270 [ 82.343657][ T5333] sock_write_iter+0x258/0x330 [ 82.345687][ T5333] vfs_write+0x548/0xa90 [ 82.347470][ T5333] ksys_write+0x145/0x250 [ 82.349299][ T5333] do_syscall_64+0xf6/0x210 [ 82.351160][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.353662][ T5333] [ 82.354711][ T5333] Freed by task 5700: [ 82.356419][ T5333] kasan_save_track+0x3e/0x80 [ 82.358404][ T5333] kasan_save_free_info+0x46/0x50 [ 82.360418][ T5333] __kasan_slab_free+0x62/0x70 [ 82.362355][ T5333] kfree+0x193/0x440 [ 82.364080][ T5333] mgmt_pending_foreach+0xc9/0x120 [ 82.366319][ T5333] mgmt_index_removed+0x10d/0x2f0 [ 82.368409][ T5333] hci_sock_bind+0xbe9/0x1000 [ 82.370478][ T5333] __sys_bind+0x2c3/0x3e0 [ 82.372325][ T5333] __x64_sys_bind+0x7a/0x90 [ 82.374259][ T5333] do_syscall_64+0xf6/0x210 [ 82.376173][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.378673][ T5333] [ 82.379731][ T5333] The buggy address belongs to the object at ffff888048891a00 [ 82.379731][ T5333] which belongs to the cache kmalloc-96 of size 96 [ 82.385396][ T5333] The buggy address is located 24 bytes inside of [ 82.385396][ T5333] freed 96-byte region [ffff888048891a00, ffff888048891a60) [ 82.391107][ T5333] [ 82.392245][ T5333] The buggy address belongs to the physical page: [ 82.394902][ T5333] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48891 [ 82.398667][ T5333] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 82.401709][ T5333] page_type: f5(slab) [ 82.403485][ T5333] raw: 04fff00000000000 ffff88801a041280 ffffea0000d6e3c0 dead000000000008 [ 82.407047][ T5333] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 82.410766][ T5333] page dumped because: kasan: bad access detected [ 82.413425][ T5333] page_owner tracks the page as allocated [ 82.415870][ T5333] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5317, tgid 5317 (syz-executor420), ts 80512529929, free_ts 0 [ 82.424013][ T5333] post_alloc_hook+0x1d8/0x230 [ 82.426130][ T5333] get_page_from_freelist+0x21ce/0x22b0 [ 82.428557][ T5333] __alloc_frozen_pages_noprof+0x181/0x370 [ 82.431068][ T5333] allocate_slab+0x65/0x3b0 [ 82.433046][ T5333] ___slab_alloc+0xbfc/0x1480 [ 82.435156][ T5333] __kmalloc_cache_node_noprof+0x29a/0x3d0 [ 82.437733][ T5333] __alloc_workqueue+0x6a4/0x1b70 [ 82.439972][ T5333] alloc_workqueue+0xd4/0x210 [ 82.442004][ T5333] tipc_topsrv_init_net+0x37f/0x830 [ 82.444248][ T5333] ops_init+0x359/0x5c0 [ 82.446093][ T5333] setup_net+0x238/0x830 [ 82.447998][ T5333] copy_net_ns+0x32e/0x590 [ 82.450397][ T5333] create_new_namespaces+0x3d3/0x700 [ 82.453197][ T5333] unshare_nsproxy_namespaces+0x11c/0x170 [ 82.455635][ T5333] ksys_unshare+0x4c8/0x8c0 [ 82.457656][ T5333] __x64_sys_unshare+0x38/0x50 [ 82.459673][ T5333] page_owner free stack trace missing [ 82.462047][ T5333] [ 82.463074][ T5333] Memory state around the buggy address: [ 82.465412][ T5333] ffff888048891900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 82.468946][ T5333] ffff888048891980: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 82.472348][ T5333] >ffff888048891a00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 82.475730][ T5333] ^ [ 82.477801][ T5333] ffff888048891a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 82.481217][ T5333] ffff888048891b00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 82.484494][ T5333] ================================================================== [ 82.495658][ T5333] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.498778][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: kworker/u5:8 Not tainted 6.15.0-rc5-syzkaller-00197-gea34704d6ad7 #0 PREEMPT(full) [ 82.503519][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.508335][ T5333] Workqueue: hci0 hci_cmd_sync_work [ 82.510600][ T5333] Call Trace: [ 82.512073][ T5333] [ 82.513402][ T5333] dump_stack_lvl+0x99/0x250 [ 82.515449][ T5333] ? __asan_memcpy+0x40/0x70 [ 82.517490][ T5333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.519745][ T5333] ? __pfx__printk+0x10/0x10 [ 82.521756][ T5333] panic+0x2db/0x790 [ 82.523461][ T5333] ? __pfx_panic+0x10/0x10 [ 82.525480][ T5333] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 82.527943][ T5333] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.530624][ T5333] ? print_memory_metadata+0x314/0x400 [ 82.532966][ T5333] ? mgmt_remove_adv_monitor_complete+0xe5/0x540 [ 82.535636][ T5333] check_panic_on_warn+0x89/0xb0 [ 82.537728][ T5333] ? mgmt_remove_adv_monitor_complete+0xe5/0x540 [ 82.540451][ T5333] end_report+0x78/0x160 [ 82.542336][ T5333] kasan_report+0x129/0x150 [ 82.544305][ T5333] ? mgmt_remove_adv_monitor_complete+0xe5/0x540 [ 82.546985][ T5333] mgmt_remove_adv_monitor_complete+0xe5/0x540 [ 82.549604][ T5333] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 82.552446][ T5333] ? hci_sock_get_channel+0xd/0x50 [ 82.554621][ T5333] ? mgmt_pending_find+0x116/0x130 [ 82.556920][ T5333] ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10 [ 82.559639][ T5333] hci_cmd_sync_work+0x25e/0x3a0 [ 82.561612][ T5333] ? process_scheduled_works+0x9ec/0x17a0 [ 82.563868][ T5333] process_scheduled_works+0xadb/0x17a0 [ 82.566060][ T5333] ? __pfx_process_scheduled_works+0x10/0x10 [ 82.568406][ T5333] worker_thread+0x8a0/0xda0 [ 82.570253][ T5333] ? __kthread_parkme+0x7b/0x200 [ 82.572202][ T5333] kthread+0x70e/0x8a0 [ 82.573919][ T5333] ? __pfx_worker_thread+0x10/0x10 [ 82.576164][ T5333] ? __pfx_kthread+0x10/0x10 [ 82.578194][ T5333] ? __pfx_kthread+0x10/0x10 [ 82.580166][ T5333] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.582368][ T5333] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.584579][ T5333] ? __pfx_kthread+0x10/0x10 [ 82.586563][ T5333] ret_from_fork+0x4b/0x80 [ 82.588487][ T5333] ? __pfx_kthread+0x10/0x10 [ 82.590441][ T5333] ret_from_fork_asm+0x1a/0x30 [ 82.592500][ T5333] [ 82.594134][ T5333] Kernel Offset: disabled [ 82.595973][ T5333] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:19:54 Registers: info registers vcpu 0 CPU#0 RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000d6c72b0 R8 =ffff888000aa8237 R9 =1ffff11000155046 R10=dffffc0000000000 R11=ffffffff853db370 R12=dffffc0000000000 R13=ffffffff99846c62 R14=ffffffff99b4bbc0 R15=0000000000000000 RIP=ffffffff853db3ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d6cc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000000040 CR3=000000003ecd5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c001d0 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000800000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004f 00007f515a34b358 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc5963724 000000002168df03 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f515a4169e8 00007f515a4169e0 00007f515a4169e0 00007f515a41cca0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000