last executing test programs: 3.538486033s ago: executing program 1 (id=492): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(r0, 0x0, 0x0, 0x2, &(0x7f0000000380)=@sco, 0x80) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 2.869642615s ago: executing program 2 (id=495): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="0000008095000000a0822a5c00888b792307259ac6ef0e6baef7bf80cd16a710952c774e5c6876e059c7a7411aee43d0c9812f872f1477eede24ade744c56ba38ebb463ec79db0a6ae943861bc68e01270d3d3ba2f2ab054dde91a2e63d93bff11dfe7b0047a53b7889b334b5ce44753902e73e8298ed4ac28b5f020112ca2be25c17e26b212e87e71d7bc3107ddc4e49c1daa776b87b9fc87fa978195fa2d1582fef907ab67e6dfcf7e1eca4fad718b5244654573e88f0c"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) fsopen(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005200), 0x400000000000059, 0x2, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006dd1000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r3, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004700003000000000000690780a010102ac1414aa07080441b613a31e00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c009f073fc66798270400658ea99109000000789400d6e234444c7c7f93ad0ce63b048a3044053c9ab11a691405c906420f7c6795f696c1e92bcbcb8c263c9b14502687b2c56076cb1d3b03a86ea9ca0ea3d364b701c963f2d3463c7ed452f170402d6041b0aef5b021bf8e932c96c17cc0cbecfd0553223dddfbcb8cba0d5db425788603cc15ed96a726c1bfc1"], 0x0) 2.794892003s ago: executing program 2 (id=496): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x80, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7, 0x5, "682341f2fd71a6a76177920ea7e60c1acfa4a5"}) 2.173798708s ago: executing program 3 (id=508): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18a127000000000000089502000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) add_key(&(0x7f0000000540)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r3, &(0x7f0000000040)="6fa2", 0x2, 0x51, &(0x7f0000000000)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c) 1.868079982s ago: executing program 2 (id=509): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) sendfile(r1, r0, 0x0, 0x101) 1.867812418s ago: executing program 2 (id=510): shmctl$IPC_STAT(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x80, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8a, 0xda7a, 0x4, 0xf30, 0x4}, 0x7f, 0x1, 0x5, 0x8, 0x7, 0x11, 0x9a, 0x19, 0x5, 0x0, {0x9, 0x3ff, 0x101, 0x8, 0x3, 0x1c000}}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x82, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b2dbbbdea8813380080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) syz_io_uring_setup(0x470, &(0x7f0000000440)={0x0, 0xdd3c, 0x20, 0x1, 0x18f}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x800, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.549214772s ago: executing program 3 (id=511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 1.498169055s ago: executing program 3 (id=512): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x5) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000540)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @local}}}, 0x90) shutdown(r1, 0x1) 1.497937165s ago: executing program 2 (id=513): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x337706, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x800000000000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) fanotify_mark(0xffffffffffffffff, 0x22, 0x800101b, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb10485f3f4bafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x52, 0x0, 0xfffffffffffffdbd) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x2400, 0x2}, 0x90) sendmmsg$inet6(r4, &(0x7f00000036c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x5, @loopback, 0x2}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000100)="05", 0x1}], 0x1}}], 0x1, 0x4000845) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, 0x0) readv(r7, &(0x7f0000000880)=[{&(0x7f0000003000)=""/4106, 0x100a}], 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x24c1, 0x0) 1.497249897s ago: executing program 3 (id=514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) ioctl$sock_ifreq(r0, 0xadc6cfde43449db2, &(0x7f0000000040)={'ip6gre0\x00', @ifru_map={0x8, 0x10, 0x200, 0x80, 0xfa, 0xfb}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x3631564e, 0x0, 0x0, [{}, {}, {}, {}, {0x9}, {}, {0x0, 0x10000}]}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix={0x0, 0x2, 0x34324241, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0x6}}) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1100020, &(0x7f0000005380)=ANY=[@ANYBLOB='gi', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="0506"]) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x48) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.119916096s ago: executing program 0 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0x40014000, &(0x7f0000000ec0)={0x0, 0x989680}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) 537.35698ms ago: executing program 1 (id=516): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) 395.382457ms ago: executing program 3 (id=517): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x2}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) 374.658449ms ago: executing program 2 (id=518): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8020) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000080)={{0x1, 0x1}, {0x4}, 0x8, 0x4}) preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x7, 0x4) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)={0x0, 0xd, 0x3, "6e145c0ef608314ceb833d278fe1d4dd16331c3e1ef459aa6db8a9f4d600", 0x30313953}) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000200)=ANY=[], 0x7) socket(0x1, 0x2, 0x0) r3 = getpid() prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r5, 0x89a0, &(0x7f0000000200)={@multicast2, @rand_addr=0x64010125}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58040}, 0x0) 286.033364ms ago: executing program 3 (id=519): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 285.877678ms ago: executing program 1 (id=520): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x70bd25, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) 285.759887ms ago: executing program 1 (id=521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) 189.575244ms ago: executing program 0 (id=522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="700000000001010400090000141a000002000010240001801400018008000100e0000200e00000010c000280050001"], 0x70}}, 0x0) 189.403177ms ago: executing program 1 (id=523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)=0x2) 116.886934ms ago: executing program 0 (id=524): r0 = io_uring_setup(0x3e43, &(0x7f0000000600)={0x0, 0x1691, 0x100, 0xfffffffe, 0x33}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r1, &(0x7f00000001c0)={{0x3, @default, 0x1}, [@default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 116.540037ms ago: executing program 1 (id=525): unshare(0x20040600) readahead(0xffffffffffffffff, 0x401, 0x6c9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r2, &(0x7f0000001740)={0x2020}, 0x2020) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0xd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8949, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005", @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd39, 0x0, 0x0, 0x10, 0x10}, 0x94) 116.303566ms ago: executing program 0 (id=526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 233.769µs ago: executing program 0 (id=527): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x10) 0s ago: executing program 0 (id=528): sendmsg(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r4, 0x5) sendfile(r3, r4, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:56010' (ED25519) to the list of known hosts. [ 41.020107][ T5882] cgroup: Unknown subsys name 'net' [ 41.166540][ T5882] cgroup: Unknown subsys name 'cpuset' [ 41.170268][ T5882] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.113496][ T5882] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.676276][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.679077][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.682062][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.685085][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.687518][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.697287][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.700552][ T5965] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.701721][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.702155][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.703015][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.703301][ T5965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.705360][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.708944][ T5965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.710219][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.711786][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.713650][ T5961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.716117][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.716697][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.720436][ T5965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.730089][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.865307][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 46.019628][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.022934][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.027421][ T5954] bridge_slave_0: entered allmulticast mode [ 46.030950][ T5954] bridge_slave_0: entered promiscuous mode [ 46.084305][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.086539][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.088755][ T5954] bridge_slave_1: entered allmulticast mode [ 46.091376][ T5954] bridge_slave_1: entered promiscuous mode [ 46.135421][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.146498][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.170142][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 46.194829][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 46.200820][ T5954] team0: Port device team_slave_0 added [ 46.210809][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 46.220522][ T5954] team0: Port device team_slave_1 added [ 46.343218][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.346139][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.356078][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.412344][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.415874][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.424461][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.428330][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.430972][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.433471][ T5962] bridge_slave_0: entered allmulticast mode [ 46.437162][ T5962] bridge_slave_0: entered promiscuous mode [ 46.533366][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.535477][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.537514][ T5958] bridge_slave_0: entered allmulticast mode [ 46.539910][ T5958] bridge_slave_0: entered promiscuous mode [ 46.542742][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.545978][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.548927][ T5962] bridge_slave_1: entered allmulticast mode [ 46.552711][ T5962] bridge_slave_1: entered promiscuous mode [ 46.570199][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.572423][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.575816][ T5966] bridge_slave_0: entered allmulticast mode [ 46.578349][ T5966] bridge_slave_0: entered promiscuous mode [ 46.582136][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.584830][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.587336][ T5958] bridge_slave_1: entered allmulticast mode [ 46.589955][ T5958] bridge_slave_1: entered promiscuous mode [ 46.620347][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.622572][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.625012][ T5966] bridge_slave_1: entered allmulticast mode [ 46.627625][ T5966] bridge_slave_1: entered promiscuous mode [ 46.663809][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.710511][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.718117][ T5954] hsr_slave_0: entered promiscuous mode [ 46.720536][ T5954] hsr_slave_1: entered promiscuous mode [ 46.725405][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.730163][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.762648][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.782863][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.789244][ T5962] team0: Port device team_slave_0 added [ 46.855116][ T5962] team0: Port device team_slave_1 added [ 46.859900][ T5966] team0: Port device team_slave_0 added [ 46.921931][ T5966] team0: Port device team_slave_1 added [ 46.977304][ T5958] team0: Port device team_slave_0 added [ 46.979564][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.981714][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.990235][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.013703][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.015879][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.023474][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.028461][ T5958] team0: Port device team_slave_1 added [ 47.030823][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.032987][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.040781][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.051144][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.054054][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.064585][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.107274][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.109738][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.118668][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.122891][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.125046][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.133438][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.183862][ T5966] hsr_slave_0: entered promiscuous mode [ 47.186330][ T5966] hsr_slave_1: entered promiscuous mode [ 47.188793][ T5966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.191374][ T5966] Cannot create hsr debugfs directory [ 47.226789][ T5962] hsr_slave_0: entered promiscuous mode [ 47.228933][ T5962] hsr_slave_1: entered promiscuous mode [ 47.230947][ T5962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.233256][ T5962] Cannot create hsr debugfs directory [ 47.283799][ T5958] hsr_slave_0: entered promiscuous mode [ 47.286164][ T5958] hsr_slave_1: entered promiscuous mode [ 47.288134][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.290429][ T5958] Cannot create hsr debugfs directory [ 47.560198][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.570206][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.577600][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.581762][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.602115][ T5966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.607774][ T5966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.612258][ T5966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.616847][ T5966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.667110][ T5962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.671291][ T5962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.676468][ T5962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.680427][ T5962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.733498][ T5958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.744615][ T5957] Bluetooth: hci0: command tx timeout [ 47.744618][ T5319] Bluetooth: hci1: command tx timeout [ 47.744849][ T5319] Bluetooth: hci2: command tx timeout [ 47.745827][ T63] Bluetooth: hci3: command tx timeout [ 47.745962][ T5958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.761341][ T5958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.765997][ T5958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.783846][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.809430][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.823867][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.836937][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.839878][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.845893][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.848654][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.871493][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.876542][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.896259][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.898481][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.911250][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.913633][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.925630][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.937873][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.940200][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.960231][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.962579][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.975618][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.017047][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.024805][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.027265][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.037280][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.039534][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.080881][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.112552][ T5954] veth0_vlan: entered promiscuous mode [ 48.121827][ T5954] veth1_vlan: entered promiscuous mode [ 48.139702][ T5954] veth0_macvtap: entered promiscuous mode [ 48.146930][ T5954] veth1_macvtap: entered promiscuous mode [ 48.168406][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.178067][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.187500][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.190341][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.193090][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.196360][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.199045][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.207748][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.255547][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.265564][ T5962] veth0_vlan: entered promiscuous mode [ 48.277752][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.278456][ T5966] veth0_vlan: entered promiscuous mode [ 48.280366][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.286645][ T5962] veth1_vlan: entered promiscuous mode [ 48.292185][ T5966] veth1_vlan: entered promiscuous mode [ 48.307796][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.310864][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.330051][ T5962] veth0_macvtap: entered promiscuous mode [ 48.335627][ T5966] veth0_macvtap: entered promiscuous mode [ 48.343515][ T5958] veth0_vlan: entered promiscuous mode [ 48.347891][ T5966] veth1_macvtap: entered promiscuous mode [ 48.353566][ T5962] veth1_macvtap: entered promiscuous mode [ 48.356496][ T5954] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.360316][ T5958] veth1_vlan: entered promiscuous mode [ 48.371979][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.378049][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.392309][ T5958] veth0_macvtap: entered promiscuous mode [ 48.397123][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.401342][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.406298][ T5966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.409031][ T5966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.411634][ T5966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.415094][ T5966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.424614][ T5962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.427359][ T5962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.430050][ T5962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.432692][ T5962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.442760][ T5958] veth1_macvtap: entered promiscuous mode [ 48.477977][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.493202][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.503507][ T5958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.509256][ T5958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.512453][ T5958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.515821][ T5958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.525267][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.527716][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.576684][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.576955][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.581679][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.583391][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.618844][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.621782][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.640038][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.642527][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.699287][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.701682][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.757617][ T53] IPVS: starting estimator thread 0... [ 48.760246][ T6046] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 48.864209][ T6047] IPVS: using max 45 ests per chain, 108000 per kthread [ 49.824335][ T5319] Bluetooth: hci0: command tx timeout [ 49.824661][ T5957] Bluetooth: hci2: command tx timeout [ 49.826086][ T5965] Bluetooth: hci3: command tx timeout [ 49.827807][ T5957] Bluetooth: hci1: command tx timeout [ 49.913679][ T6073] warning: `syz.2.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.943036][ T6070] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 49.966940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 49.993961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 50.274191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.299532][ T6083] ubi31: attaching mtd0 [ 50.302215][ T6083] ubi31: scanning is finished [ 50.303725][ T6083] ubi31: empty MTD device detected [ 50.364267][ T6083] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 50.366824][ T6083] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 50.369269][ T6083] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 50.371531][ T6083] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 50.374065][ T6083] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 50.376254][ T6083] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 50.378872][ T6083] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3692732054 [ 50.381999][ T6083] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 50.395035][ T6086] ubi31: background thread "ubi_bgt31d" started, PID 6086 [ 51.904830][ T5957] Bluetooth: hci1: command tx timeout [ 51.914133][ T5957] Bluetooth: hci0: command tx timeout [ 51.914189][ T63] Bluetooth: hci3: command tx timeout [ 51.916398][ T63] Bluetooth: hci2: command tx timeout [ 53.541569][ T6116] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 53.969997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 53.992042][ T5957] Bluetooth: hci2: command tx timeout [ 53.992077][ T5319] Bluetooth: hci0: command tx timeout [ 53.994070][ T5957] Bluetooth: hci3: command tx timeout [ 53.994100][ T5957] Bluetooth: hci1: command tx timeout [ 54.164042][ T6027] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 54.319593][ T6027] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 54.322455][ T6027] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 54.326596][ T6027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.334370][ T6027] usb 8-1: config 0 descriptor?? [ 54.825862][ T61] usb 8-1: USB disconnect, device number 2 [ 55.064650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 55.190160][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 55.313606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 55.983147][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 56.184098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.035729][ T6153] block device autoloading is deprecated and will be removed. [ 57.464522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.894292][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.055668][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 58.060694][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.066464][ T24] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 58.070299][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.076184][ T24] usb 6-1: config 0 descriptor?? [ 58.499955][ T24] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 58.503339][ T24] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 58.507364][ T24] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 58.510585][ T24] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 58.513747][ T24] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 58.521311][ T24] hid-multitouch 0003:0EEF:72C4.0002: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 58.739654][ T6177] ======================================================= [ 58.739654][ T6177] WARNING: The mand mount option has been deprecated and [ 58.739654][ T6177] and is ignored by this kernel. Remove the mand [ 58.739654][ T6177] option from the mount to silence this warning. [ 58.739654][ T6177] ======================================================= [ 58.751264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 58.767173][ T9] usb 6-1: USB disconnect, device number 2 [ 58.777600][ T6177] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 59.921561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 60.413033][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.574067][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 60.579715][ T9] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 60.582225][ T9] usb 5-1: config 0 has no interface number 0 [ 60.584655][ T9] usb 5-1: config 0 interface 48 has no altsetting 0 [ 60.590805][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 60.593718][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.597164][ T9] usb 5-1: Product: syz [ 60.599159][ T9] usb 5-1: Manufacturer: syz [ 60.601062][ T9] usb 5-1: SerialNumber: syz [ 60.611218][ T9] usb 5-1: config 0 descriptor?? [ 60.737677][ T6208] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.833629][ T24] usb 5-1: USB disconnect, device number 2 [ 60.986968][ T6213] block nbd2: NBD_DISCONNECT [ 61.582785][ T6207] block nbd2: Disconnected due to user request. [ 61.586480][ T6207] block nbd2: shutting down sockets [ 61.719030][ T6243] binder_alloc: 6242: binder_alloc_buf, no vma [ 62.684304][ T6027] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.795664][ T6293] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 63.005009][ T6027] usb 5-1: Using ep0 maxpacket: 8 [ 63.014969][ T6027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.018779][ T6027] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 63.022381][ T6027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.027569][ T6027] usb 5-1: config 0 descriptor?? [ 63.445425][ T6027] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 63.448262][ T6027] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 63.451625][ T6027] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 63.455038][ T6027] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 63.458421][ T6027] hid-multitouch 0003:0EEF:72C4.0003: unknown main item tag 0x0 [ 63.472673][ T6027] hid-multitouch 0003:0EEF:72C4.0003: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 63.711948][ T6042] usb 5-1: USB disconnect, device number 3 [ 64.361827][ T6309] binder_alloc: 6308: binder_alloc_buf, no vma [ 64.624293][ T6313] block nbd3: Device being setup by another task [ 64.627846][ T6310] block nbd3: NBD_DISCONNECT [ 65.153498][ T6305] block nbd3: Disconnected due to user request. [ 65.170600][ T6305] block nbd3: shutting down sockets [ 66.306963][ T6371] Zero length message leads to an empty skb [ 66.351563][ T6375] overlayfs: missing 'lowerdir' [ 66.411129][ T6377] mkiss: ax0: crc mode is auto. [ 67.044988][ T6397] netlink: 'syz.1.83': attribute type 10 has an invalid length. [ 67.053049][ T6397] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 67.092532][ T1022] cfg80211: failed to load regulatory.db [ 67.201169][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 68.539858][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 68.544122][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 68.757161][ T6431] overlayfs: missing 'lowerdir' [ 69.674529][ T6036] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.855889][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.859436][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.862446][ T6036] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.878020][ T6036] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.880962][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.886897][ T6036] usb 7-1: config 0 descriptor?? [ 70.341378][ T6036] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 70.654052][ T6042] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 70.789218][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.791620][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.804139][ T6042] usb 6-1: Using ep0 maxpacket: 8 [ 70.807404][ T6456] input: syz0 as /devices/virtual/input/input7 [ 70.818069][ T6042] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.822140][ T6042] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.826445][ T6042] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.830760][ T6042] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.838619][ T6042] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.842479][ T6042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.052490][ T6042] usb 6-1: GET_CAPABILITIES returned 0 [ 71.055474][ T6042] usbtmc 6-1:16.0: can't read capabilities [ 71.620758][ T61] usb 6-1: USB disconnect, device number 3 [ 71.845975][ T6461] tipc: Started in network mode [ 71.848626][ T6461] tipc: Node identity f6c804b19802, cluster identity 4711 [ 71.851463][ T6461] tipc: Enabled bearer , priority 0 [ 71.857267][ T6461] syzkaller0: entered promiscuous mode [ 71.859421][ T6461] syzkaller0: entered allmulticast mode [ 71.881907][ T6461] tipc: Resetting bearer [ 71.889180][ T6460] tipc: Resetting bearer [ 71.898872][ T6460] tipc: Disabling bearer [ 72.388893][ T9] usb 7-1: USB disconnect, device number 2 [ 73.122969][ T6491] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.136927][ T6493] NILFS (nullb0): couldn't find nilfs on the device [ 73.142482][ T6492] tipc: Started in network mode [ 73.144821][ T6492] tipc: Node identity 32150ebca80e, cluster identity 4711 [ 73.147780][ T6492] tipc: Enabled bearer , priority 0 [ 73.153878][ T6492] syzkaller0: entered promiscuous mode [ 73.157807][ T6493] cgroup: Unknown subsys name 'cpuset' [ 73.160850][ T6492] syzkaller0: entered allmulticast mode [ 73.187950][ T6492] tipc: Resetting bearer [ 73.199350][ T6489] tipc: Resetting bearer [ 73.209221][ T6489] tipc: Disabling bearer [ 73.614148][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 73.764023][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 73.775138][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.785068][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.789924][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.798052][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.804392][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.808476][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.064840][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 74.066755][ T9] usbtmc 8-1:16.0: can't read capabilities [ 74.267091][ T6042] usb 8-1: USB disconnect, device number 3 [ 74.435867][ T6523] block nbd0: shutting down sockets [ 74.476127][ T6530] block nbd0: NBD_DISCONNECT [ 74.954565][ T6545] comedi comedi1: Cannot bond this driver to itself! [ 75.013134][ T40] audit: type=1800 audit(1753734774.401:2): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.134" name="bus" dev="overlay" ino=176 res=0 errno=0 [ 75.074595][ T6551] block nbd3: shutting down sockets [ 75.186540][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 75.194862][ T6558] input: syz0 as /devices/virtual/input/input8 [ 75.209971][ T6558] comedi comedi2: comedi_parport: I/O port conflict (0xe,3) [ 75.354068][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 75.514052][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 75.518057][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.521598][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.525724][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.529556][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.534752][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 75.537995][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.746544][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 75.748310][ T9] usbtmc 7-1:16.0: can't read capabilities [ 75.955767][ T9] usb 7-1: USB disconnect, device number 3 [ 76.452102][ T6582] netlink: 10 bytes leftover after parsing attributes in process `syz.0.150'. [ 76.610524][ T6588] syz.3.153 (6588) used greatest stack depth: 19768 bytes left [ 76.648130][ T6595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.651685][ T6595] IPv6: NLM_F_CREATE should be set when creating new route [ 76.868768][ T40] audit: type=1800 audit(1753734777.259:3): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.157" name="bus" dev="overlay" ino=289 res=0 errno=0 [ 77.165254][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 77.174631][ T6604] input: syz0 as /devices/virtual/input/input9 [ 77.196337][ T6604] comedi comedi2: comedi_parport: I/O port conflict (0xe,3) [ 77.301554][ T6609] netlink: 76 bytes leftover after parsing attributes in process `syz.0.161'. [ 77.917278][ T40] audit: type=1800 audit(1753734778.309:4): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.167" name="bus" dev="overlay" ino=209 res=0 errno=0 [ 78.271936][ T6633] overlayfs: failed to resolve './file1': -2 [ 79.310522][ T6664] loop6: detected capacity change from 0 to 524287999 [ 79.805396][ T6677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.188'. [ 80.604049][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 80.764053][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 80.767707][ T34] usb 8-1: config 0 has an invalid interface number: 48 but max is 0 [ 80.770737][ T34] usb 8-1: config 0 has no interface number 0 [ 80.772677][ T34] usb 8-1: config 0 interface 48 has no altsetting 0 [ 80.776570][ T34] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 80.779323][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.781974][ T34] usb 8-1: Product: syz [ 80.783296][ T34] usb 8-1: Manufacturer: syz [ 80.785194][ T34] usb 8-1: SerialNumber: syz [ 80.792145][ T34] usb 8-1: config 0 descriptor?? [ 80.997064][ T34] usb 8-1: USB disconnect, device number 4 [ 81.382457][ T6718] v: renamed from macvlan0 (while UP) [ 81.794030][ T6042] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 81.944018][ T6042] usb 8-1: Using ep0 maxpacket: 8 [ 81.947733][ T6042] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.965240][ T6042] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.970213][ T6042] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.979403][ T6042] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.986682][ T6042] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.994144][ T6042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.205423][ T6042] usb 8-1: usb_control_msg returned -71 [ 82.207273][ T6042] usbtmc 8-1:16.0: can't read capabilities [ 82.218260][ T6042] usb 8-1: USB disconnect, device number 5 [ 83.544054][ T6042] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.694244][ T6042] usb 7-1: Using ep0 maxpacket: 8 [ 83.700047][ T6042] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.704813][ T6042] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.709078][ T6042] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.713283][ T6042] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.719005][ T6042] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.722901][ T6042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.943604][ T6042] usb 7-1: usb_control_msg returned -71 [ 83.945649][ T6042] usbtmc 7-1:16.0: can't read capabilities [ 83.957265][ T6042] usb 7-1: USB disconnect, device number 4 [ 83.991062][ T6805] block nbd3: NBD_DISCONNECT [ 84.563209][ T6819] kvm: kvm [6818]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x10 [ 84.657624][ T6821] netlink: 'syz.0.235': attribute type 3 has an invalid length. [ 84.660879][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'. [ 84.754056][ T6042] psmouse serio2: Failed to reset mouse on : -5 [ 85.454050][ T6036] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 85.604067][ T6036] usb 8-1: Using ep0 maxpacket: 8 [ 85.606963][ T6036] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.609831][ T6036] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 85.612674][ T6036] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.615670][ T6036] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.620382][ T6036] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.623833][ T6036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.742879][ T6843] Illegal XDP return value 4294967274 on prog (id 32) dev N/A, expect packet loss! [ 85.835943][ T6036] usb 8-1: usb_control_msg returned -71 [ 85.837633][ T6036] usbtmc 8-1:16.0: can't read capabilities [ 85.842415][ T6036] usb 8-1: USB disconnect, device number 6 [ 85.994027][ T839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.155516][ T839] usb 5-1: config 0 has an invalid interface number: 73 but max is 0 [ 86.158074][ T839] usb 5-1: config 0 has no interface number 0 [ 86.163245][ T839] usb 5-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 86.166369][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.168966][ T839] usb 5-1: Product: syz [ 86.170320][ T839] usb 5-1: Manufacturer: syz [ 86.171760][ T839] usb 5-1: SerialNumber: syz [ 86.174835][ T839] usb 5-1: config 0 descriptor?? [ 86.379584][ T839] usb 5-1: USB disconnect, device number 4 [ 87.213232][ T40] audit: type=1800 audit(1753734787.599:5): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.255" name="file1" dev="overlay" ino=369 res=0 errno=0 [ 88.584101][ T6042] misc userio: Buffer overflowed, userio client isn't keeping up [ 89.655414][ T6042] input: PS/2 Generic Mouse as /devices/serio2/input/input10 [ 89.721660][ T6947] netlink: 'syz.1.282': attribute type 4 has an invalid length. [ 89.732508][ T6947] netlink: 'syz.1.282': attribute type 4 has an invalid length. [ 89.874055][ T6042] psmouse serio2: Failed to enable mouse on [ 89.992623][ T6950] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 90.666815][ T6981] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.217961][ T5957] Bluetooth: hci3: link tx timeout [ 91.220060][ T5957] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 91.441240][ T6994] netlink: 72 bytes leftover after parsing attributes in process `syz.0.296'. [ 92.883361][ T5957] Bluetooth: hci3: link tx timeout [ 92.885783][ T5957] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 93.266104][ T5957] Bluetooth: hci3: command 0x0406 tx timeout [ 93.274275][ T839] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 93.434056][ T839] usb 8-1: Using ep0 maxpacket: 16 [ 93.441763][ T839] usb 8-1: config 0 has an invalid interface number: 48 but max is 0 [ 93.444664][ T839] usb 8-1: config 0 has no interface number 0 [ 93.448169][ T839] usb 8-1: config 0 interface 48 has no altsetting 0 [ 93.453693][ T839] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 93.460549][ T839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.463186][ T839] usb 8-1: Product: syz [ 93.465244][ T839] usb 8-1: Manufacturer: syz [ 93.469849][ T839] usb 8-1: SerialNumber: syz [ 93.485228][ T839] usb 8-1: config 0 descriptor?? [ 93.894452][ T3241] usb 8-1: USB disconnect, device number 7 [ 94.553764][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 94.606405][ T7057] input: syz0 as /devices/virtual/input/input12 [ 94.724763][ T6036] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 94.745037][ T839] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 94.884128][ T6036] usb 6-1: Using ep0 maxpacket: 16 [ 94.894705][ T6036] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 94.901655][ T6036] usb 6-1: config 0 has no interface number 0 [ 94.915348][ T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.921455][ T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.925495][ T839] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 94.928914][ T6036] usb 6-1: config 0 interface 48 has no altsetting 0 [ 94.931436][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.937786][ T6036] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 94.939237][ T839] usb 7-1: config 0 descriptor?? [ 94.940549][ T6036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.952575][ T6036] usb 6-1: Product: syz [ 94.954110][ T6036] usb 6-1: Manufacturer: syz [ 94.957280][ T6036] usb 6-1: SerialNumber: syz [ 94.964258][ T6036] usb 6-1: config 0 descriptor?? [ 95.170192][ T53] usb 6-1: USB disconnect, device number 4 [ 95.358259][ T839] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 95.414005][ T839] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 95.427836][ T839] hid-steam 0003:28DE:1142.0006: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 95.455547][ T7071] netlink: 72 bytes leftover after parsing attributes in process `syz.3.320'. [ 95.620479][ T6036] usb 7-1: USB disconnect, device number 5 [ 95.639765][ T6036] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 95.668044][ T7075] ISOFS: Unable to identify CD-ROM format. [ 95.714398][ T7077] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 95.823273][ T7078] bpq0: entered allmulticast mode [ 95.945334][ T7081] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 96.624057][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.627411][ T3241] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 96.630111][ T3241] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 96.864076][ T6036] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 96.869941][ T7102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.890873][ T7102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.014022][ T6036] usb 6-1: Using ep0 maxpacket: 16 [ 97.017684][ T6036] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 97.020271][ T6036] usb 6-1: config 0 has no interface number 0 [ 97.022305][ T6036] usb 6-1: config 0 interface 48 has no altsetting 0 [ 97.026653][ T6036] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 97.029578][ T6036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.032112][ T6036] usb 6-1: Product: syz [ 97.033604][ T6036] usb 6-1: Manufacturer: syz [ 97.035163][ T6036] usb 6-1: SerialNumber: syz [ 97.037835][ T6036] usb 6-1: config 0 descriptor?? [ 97.087409][ T7106] overlayfs: failed to resolve './file1': -2 [ 97.264067][ T6040] usb 6-1: USB disconnect, device number 5 [ 97.637231][ T7126] fuse: Bad value for 'fd' [ 98.201398][ T7147] tunl0: Caught tx_queue_len zero misconfig [ 98.205600][ T7147] binder: 7138:7147 ioctl c018620c 80000000 returned -22 [ 98.535302][ T1022] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 98.539892][ T7154] netlink: 'syz.0.353': attribute type 8 has an invalid length. [ 98.704064][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.706736][ T3241] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 98.708828][ T3241] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 98.714016][ T1022] usb 6-1: Using ep0 maxpacket: 16 [ 98.722330][ T1022] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 98.725742][ T1022] usb 6-1: config 0 has no interface number 0 [ 98.728282][ T1022] usb 6-1: config 0 interface 48 has no altsetting 0 [ 98.735110][ T1022] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 98.738248][ T1022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.740932][ T1022] usb 6-1: Product: syz [ 98.742350][ T1022] usb 6-1: Manufacturer: syz [ 98.744316][ T1022] usb 6-1: SerialNumber: syz [ 98.749458][ T1022] usb 6-1: config 0 descriptor?? [ 98.970597][ T1022] usb 6-1: USB disconnect, device number 6 [ 99.175544][ T7170] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 99.544108][ T53] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 99.693984][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 99.699541][ T53] usb 8-1: config 0 has no interfaces? [ 99.703187][ T53] usb 8-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 99.707348][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.710173][ T53] usb 8-1: Product: syz [ 99.711990][ T53] usb 8-1: Manufacturer: syz [ 99.713706][ T53] usb 8-1: SerialNumber: syz [ 99.717311][ T53] usb 8-1: config 0 descriptor?? [ 99.927944][ T53] usb 8-1: USB disconnect, device number 8 [ 100.224195][ T6036] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 100.394050][ T6036] usb 6-1: Using ep0 maxpacket: 16 [ 100.398500][ T6036] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 100.401254][ T6036] usb 6-1: config 0 has no interface number 0 [ 100.403526][ T6036] usb 6-1: config 0 interface 48 has no altsetting 0 [ 100.408747][ T6036] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 100.411883][ T6036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.414745][ T6036] usb 6-1: Product: syz [ 100.416128][ T6036] usb 6-1: Manufacturer: syz [ 100.417866][ T6036] usb 6-1: SerialNumber: syz [ 100.421331][ T6036] usb 6-1: config 0 descriptor?? [ 100.631635][ T6036] usb 6-1: USB disconnect, device number 7 [ 100.785817][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.788676][ T3241] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 100.803349][ T3241] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 101.349462][ T7221] overlayfs: failed to resolve './file0': -2 [ 102.684039][ T6036] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 102.794349][ T7252] veth1_macvtap: left promiscuous mode [ 102.796277][ T7252] macsec0: entered promiscuous mode [ 102.798144][ T7252] macsec0: entered allmulticast mode [ 102.864149][ T6036] usb 6-1: Using ep0 maxpacket: 16 [ 102.865909][ T5957] Bluetooth: hci3: command 0x0406 tx timeout [ 102.874305][ T3241] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 102.881872][ T6036] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 102.884472][ T3241] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 102.889286][ T6036] usb 6-1: config 0 has no interface number 0 [ 102.894734][ T6036] usb 6-1: config 0 interface 48 has no altsetting 0 [ 102.905252][ T6036] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 102.909255][ T6036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.911979][ T6036] usb 6-1: Product: syz [ 102.913679][ T6036] usb 6-1: Manufacturer: syz [ 102.915828][ T6036] usb 6-1: SerialNumber: syz [ 102.921317][ T6036] usb 6-1: config 0 descriptor?? [ 103.128629][ T53] usb 6-1: USB disconnect, device number 8 [ 103.637510][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 103.908472][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 103.911395][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 104.987611][ T7292] overlayfs: failed to resolve './file1': -2 [ 105.139680][ T7305] veth1_macvtap: left promiscuous mode [ 105.143111][ T7305] macsec0: entered promiscuous mode [ 105.145808][ T7305] macsec0: entered allmulticast mode [ 105.196464][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 106.146583][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.149614][ T7314] batadv_slave_0: entered promiscuous mode [ 106.151763][ T7314] batadv_slave_0: entered allmulticast mode [ 106.910291][ T7326] overlayfs: failed to resolve './file1': -2 [ 106.981727][ T40] audit: type=1800 audit(1753734807.369:6): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.415" name="bus" dev="overlay" ino=637 res=0 errno=0 [ 108.328499][ T7356] overlayfs: failed to resolve './file1': -2 [ 108.618838][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 109.403576][ T40] audit: type=1800 audit(1753734809.789:7): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.430" name="bus" dev="overlay" ino=499 res=0 errno=0 [ 110.061206][ T7400] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 110.061481][ T3241] IPVS: starting estimator thread 0... [ 110.154952][ T7404] IPVS: using max 44 ests per chain, 105600 per kthread [ 111.223556][ T40] audit: type=1800 audit(1753734811.609:8): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.455" name="bus" dev="overlay" ino=541 res=0 errno=0 [ 111.287781][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 112.644887][ T7491] netlink: 'syz.0.468': attribute type 21 has an invalid length. [ 112.647648][ T7491] netlink: 'syz.0.468': attribute type 6 has an invalid length. [ 112.650074][ T7491] netlink: 132 bytes leftover after parsing attributes in process `syz.0.468'. [ 114.434041][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 114.594043][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 114.598237][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.602943][ T34] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 114.607120][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.613582][ T34] usb 6-1: config 0 descriptor?? [ 115.028447][ T7532] comedi comedi1: pcl730: I/O port conflict (0x7,4) [ 115.033760][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 115.037339][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 115.042670][ T34] usb 6-1: USB disconnect, device number 9 [ 115.324013][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 115.474105][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 115.478243][ T24] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 115.481715][ T24] usb 7-1: config 0 has no interface number 0 [ 115.484861][ T24] usb 7-1: config 0 interface 48 has no altsetting 0 [ 115.490028][ T24] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 115.493761][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.497446][ T24] usb 7-1: Product: syz [ 115.499222][ T24] usb 7-1: Manufacturer: syz [ 115.501211][ T24] usb 7-1: SerialNumber: syz [ 115.505982][ T24] usb 7-1: config 0 descriptor?? [ 115.609786][ T7560] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 115.711133][ T24] usb 7-1: USB disconnect, device number 6 [ 116.689763][ T40] audit: type=1800 audit(1753734817.079:9): pid=7582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.500" name="bus" dev="overlay" ino=752 res=0 errno=0 [ 116.775906][ T7590] overlayfs: missing 'lowerdir' [ 117.000088][ T7601] netlink: 72 bytes leftover after parsing attributes in process `syz.3.508'. [ 117.044005][ T6018] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.205679][ T6018] usb 5-1: Using ep0 maxpacket: 16 [ 117.216526][ T6018] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 117.219695][ T6018] usb 5-1: config 0 has no interface number 0 [ 117.222095][ T6018] usb 5-1: config 0 interface 48 has no altsetting 0 [ 117.230830][ T6018] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 117.234950][ T6018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.238059][ T6018] usb 5-1: Product: syz [ 117.239770][ T6018] usb 5-1: Manufacturer: syz [ 117.241685][ T6018] usb 5-1: SerialNumber: syz [ 117.246730][ T6018] usb 5-1: config 0 descriptor?? [ 117.451280][ T24] usb 5-1: USB disconnect, device number 5 [ 117.571991][ T40] audit: type=1800 audit(1753734817.959:10): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.511" name="bus" dev="overlay" ino=835 res=0 errno=0 [ 118.774500][ T7627] input: syz0 as /devices/virtual/input/input13 [ 118.948798][ T7640] netlink: 56 bytes leftover after parsing attributes in process `syz.0.522'. [ 119.192175][ T7653] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 119.196755][ T7653] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 119.201153][ T7653] CPU: 2 UID: 0 PID: 7653 Comm: syz.0.528 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 119.204357][ T7653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.208388][ T7653] RIP: 0010:iter_file_splice_write+0xa4e/0x1150 [ 119.210861][ T7653] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 1a 05 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 ee 04 00 00 49 8b 54 24 08 4c 89 ee 4c 89 f7 83 [ 119.217726][ T7653] RSP: 0018:ffffc9000dd6f900 EFLAGS: 00010202 [ 119.220088][ T7653] RAX: 0000000000000ac0 RBX: dffffc0000000000 RCX: ffffc9000c402000 [ 119.223142][ T7653] RDX: 0000000000000001 RSI: ffffffff824256b6 RDI: 0000000000000008 [ 119.226224][ T7653] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000000 [ 119.229269][ T7653] R10: 7ffffffffffffffa R11: 0000000000000000 R12: 0000000000000000 [ 119.232359][ T7653] R13: ffff88806c71e828 R14: ffff888060d1ec00 R15: 7ffffffffffffffa [ 119.235404][ T7653] FS: 0000000000000000(0000) GS:ffff88809772d000(0063) knlGS:00000000f510eb40 [ 119.238821][ T7653] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 119.241402][ T7653] CR2: 000000000c389353 CR3: 0000000042ece000 CR4: 0000000000352ef0 [ 119.244447][ T7653] Call Trace: [ 119.245786][ T7653] [ 119.246975][ T7653] ? __pfx_iter_file_splice_write+0x10/0x10 [ 119.249340][ T7653] ? __pfx_iter_file_splice_write+0x10/0x10 [ 119.251681][ T7653] direct_splice_actor+0x18f/0x6c0 [ 119.253686][ T7653] splice_direct_to_actor+0x342/0xa30 [ 119.255773][ T7653] ? __pfx_direct_splice_actor+0x10/0x10 [ 119.257998][ T7653] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 119.260295][ T7653] do_splice_direct+0x174/0x240 [ 119.262215][ T7653] ? __pfx_do_splice_direct+0x10/0x10 [ 119.264319][ T7653] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 119.266640][ T7653] ? rw_verify_area+0xcf/0x680 [ 119.268536][ T7653] do_sendfile+0xb06/0xe50 [ 119.270277][ T7653] ? __pfx_do_sendfile+0x10/0x10 [ 119.272236][ T7653] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 119.274390][ T7653] ? __ia32_sys_futex_time32+0x2fc/0x460 [ 119.276577][ T7653] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 119.278782][ T7653] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 119.281202][ T7653] ? rcu_is_watching+0x12/0xc0 [ 119.283097][ T7653] __do_fast_syscall_32+0x7c/0x3a0 [ 119.285133][ T7653] do_fast_syscall_32+0x32/0x80 [ 119.287023][ T7653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.289464][ T7653] RIP: 0023:0xf711e579 [ 119.291078][ T7653] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.298435][ T7653] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 119.301709][ T7653] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000008 [ 119.304735][ T7653] RDX: 0000000000000000 RSI: 000000007ffff000 RDI: 0000000000000000 [ 119.307748][ T7653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.310804][ T7653] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 119.313825][ T7653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.316875][ T7653] [ 119.318118][ T7653] Modules linked in: [ 119.320004][ T7653] ---[ end trace 0000000000000000 ]--- [ 119.324059][ T7653] RIP: 0010:iter_file_splice_write+0xa4e/0x1150 [ 119.326476][ T7653] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 1a 05 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 ee 04 00 00 49 8b 54 24 08 4c 89 ee 4c 89 f7 83 [ 119.334682][ T7653] RSP: 0018:ffffc9000dd6f900 EFLAGS: 00010202 [ 119.337499][ T7653] RAX: 0000000000000ac0 RBX: dffffc0000000000 RCX: ffffc9000c402000 [ 119.340666][ T7653] RDX: 0000000000000001 RSI: ffffffff824256b6 RDI: 0000000000000008 [ 119.343851][ T7653] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000000 [ 119.347324][ T7653] R10: 7ffffffffffffffa R11: 0000000000000000 R12: 0000000000000000 [ 119.350480][ T7653] R13: ffff88806c71e828 R14: ffff888060d1ec00 R15: 7ffffffffffffffa [ 119.353661][ T7653] FS: 0000000000000000(0000) GS:ffff88809772d000(0063) knlGS:00000000f510eb40 [ 119.357334][ T7653] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 119.359979][ T7653] CR2: 000000000c389353 CR3: 0000000042ece000 CR4: 0000000000352ef0 [ 119.363122][ T7653] Kernel panic - not syncing: Fatal exception [ 119.366232][ T7653] Kernel Offset: disabled [ 119.367919][ T7653] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:33:38 Registers: info registers vcpu 0 CPU#0 RAX=00000000005182d4 RBX=0000000000000000 RCX=ffffffff8b82bc69 RDX=ffffed1005646646 RSI=ffffffff8c155de0 RDI=ffffffff819197c1 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646645 R10=ffff88802b23322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a95d50 R15=0000000000000000 RIP=ffffffff8b82a7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809752d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3430c2 CR3=000000004beb6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffffbfff2152baa RBX=fffffbfff2152bab RCX=ffffffff81c3237f RDX=fffffbfff2152bab RSI=0000000000000008 RDI=ffffffff90a95d50 RBP=fffffbfff2152baa RSP=ffffc9000046fda8 R8 =0000000000000000 R9 =fffffbfff2152baa R10=ffffffff90a95d57 R11=ffffffff9af9cd78 R12=0000000000000002 R13=0000001bb973324f R14=ffffffff90a95d50 R15=0000000000000000 RIP=ffffffff821fa96c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809762d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008001e000 CR3=000000006cb0a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000c0c00000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8556d185 RDI=ffffffff9b09f540 RBP=ffffffff9b09f500 RSP=ffffc9000dd6f300 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b09f500 R15=ffffffff8556d120 RIP=ffffffff8556d1af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809772d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c389353 CR3=0000000042ece000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001c82c4 RBX=0000000000000003 RCX=ffffffff8b82bc69 RDX=ffffed10056a6646 RSI=ffffffff8c155de0 RDI=ffffffff819197c1 RBP=ffffed100386a000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6645 R10=ffff88802b53322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801c350000 R14=ffffffff90a95d50 R15=0000000000000000 RIP=ffffffff8b82a7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809782d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74b6188 CR3=0000000042ece000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000