last executing test programs: 659.09535ms ago: executing program 1 (id=2): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="a905000000007464000100000000000000", 0x11}, {&(0x7f0000000200)="82f57c000200000000000000000008000004ac", 0x13}, {&(0x7f0000000300)="7edd84c485d99c2a", 0x8}], 0x3}}], 0x1, 0x20000044) 575.311449ms ago: executing program 1 (id=5): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170928bd7000000000000100000005000700000000000800090001000000080024f5b1c60a00000000000600020001000000", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) 575.133295ms ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000e00)=ANY=[], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYBLOB="5f50773360cd15cb3e5c34d18c4542c60062c946b005a71d5cccd0c1b044950b2cf530fb0b51e04b35a836fd9e4e393a16f859e4bb0293c647ecb446b41aa2339239de3ecd3c7d7afb2f930cb92e84af99ed", @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r3, @ANYBLOB="080004"], 0x4c}}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r5, 0x89e5, &(0x7f0000000080)=@netrom) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file1', [{}], 0xa, "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"}, 0x100c) socket$netlink(0x10, 0x3, 0x15) 574.778466ms ago: executing program 1 (id=6): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="18000000010005", 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454cc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x0) epoll_create1(0x80000) remap_file_pages(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x0, 0x3, 0x100000) 491.174044ms ago: executing program 2 (id=3): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x53, 0x800, 0xfffc, {0x4, 0x1}, {0x3a, 0x2}, @cond=[{0x7, 0x5, 0x200, 0xfe2d, 0xb, 0xfbfe}, {0xff, 0x800, 0xfffb, 0x801, 0x0, 0x529}]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000000), 0x618008, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee01]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 445.790186ms ago: executing program 0 (id=1): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f00000002c0)={0x18, 0x0, r1, {0x1}}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000700000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r6}], 0x1, &(0x7f00000000c0), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0xc0) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r8, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000100)=0x7) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r5, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x100, 0x0) 425.046554ms ago: executing program 3 (id=7): bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000001400000000000000006c5c00"], 0x50) prctl$PR_CAPBSET_READ(0x59616d61, 0xdaffffffffffffff) ptrace(0x10, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000003180), 0x200, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000001580)={r3}) readv(r2, &(0x7f0000001400)=[{&(0x7f0000000000)=""/157, 0x9d}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x7a05, 0x1700) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34}}, 0x4) splice(r0, 0x0, r4, 0x0, 0x88000cc, 0x0) fchdir(r0) fcntl$setpipe(r1, 0x407, 0x100004) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000100)=0x15) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000000)=0x5) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x280000b, 0x11, r7, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/route\x00') r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x4}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYRES32=r1], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1000, &(0x7f0000000240)=""/4096, 0x41100}, 0x94) 409.336745ms ago: executing program 2 (id=8): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)) 345.895784ms ago: executing program 2 (id=9): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [0x0, 0xfffffffe], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 338.097884ms ago: executing program 0 (id=10): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "64f9ff", 0x0, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2}}}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 194.455877ms ago: executing program 2 (id=11): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x24c2, 0x2001) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x714f, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0) sendfile(r9, r9, 0x0, 0x40008) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) 169.279724ms ago: executing program 1 (id=12): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r4, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 25.108384ms ago: executing program 1 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="080000002400000000060000000900000001000000200000000400000001020000020000007a000000"]) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fcfffffffbdbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="14000600080211"], 0x30}}, 0x0) 0s ago: executing program 0 (id=14): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020001ffe420370000000c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="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", 0x407}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0xfffffffffffffffe, 0x163142) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x200007, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) recvfrom(r0, &(0x7f00000002c0)=""/95, 0x5f, 0x40000000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffffffffffeca}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000808) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close(r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="170928bd70000000010001000000080009000000000008000a0000000000060002000000000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) kernel console output (not intermixed with test programs): [ 38.118263][ T40] audit: type=1400 audit(1754978144.413:61): avc: denied { siginh } for pid=5871 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:34687' (ED25519) to the list of known hosts. [ 40.058332][ T40] audit: type=1400 audit(1754978146.383:62): avc: denied { name_bind } for pid=5896 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.073238][ T40] audit: type=1400 audit(1754978146.393:63): avc: denied { write } for pid=5897 comm="sh" path="pipe:[3736]" dev="pipefs" ino=3736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 40.085838][ T40] audit: type=1400 audit(1754978146.413:64): avc: denied { execute } for pid=5897 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.092656][ T40] audit: type=1400 audit(1754978146.413:65): avc: denied { execute_no_trans } for pid=5897 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.828579][ T40] audit: type=1400 audit(1754978148.153:66): avc: denied { mounton } for pid=5897 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.836743][ T5897] cgroup: Unknown subsys name 'net' [ 41.967074][ T5897] cgroup: Unknown subsys name 'cpuset' [ 41.975836][ T5897] cgroup: Unknown subsys name 'rlimit' [ 42.179683][ T5951] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.828611][ T5897] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.887894][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.887905][ T40] audit: type=1400 audit(1754978152.213:80): avc: denied { execmem } for pid=5959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.078585][ T40] audit: type=1400 audit(1754978152.403:81): avc: denied { create } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.092850][ T40] audit: type=1400 audit(1754978152.403:82): avc: denied { read write } for pid=5963 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.101354][ T40] audit: type=1400 audit(1754978152.403:83): avc: denied { open } for pid=5963 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.102649][ T5964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.109548][ T40] audit: type=1400 audit(1754978152.403:84): avc: denied { ioctl } for pid=5963 comm="syz-executor" path="socket:[6362]" dev="sockfs" ino=6362 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.113394][ T5964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.134185][ T5964] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.136951][ T5970] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.136989][ T5964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.139837][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.142635][ T5964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.144719][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.149610][ T5964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.152071][ T5964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.155050][ T5976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.155353][ T5327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.157704][ T5976] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.160307][ T5327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.162680][ T5976] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.163946][ T5970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.166804][ T5976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.169625][ T40] audit: type=1400 audit(1754978152.503:85): avc: denied { read } for pid=5963 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.172609][ T5976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.178683][ T40] audit: type=1400 audit(1754978152.503:86): avc: denied { open } for pid=5963 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.186457][ T5327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.189379][ T40] audit: type=1400 audit(1754978152.503:87): avc: denied { mounton } for pid=5963 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.192146][ T5327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.331274][ T40] audit: type=1400 audit(1754978152.653:88): avc: denied { module_request } for pid=5963 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.387170][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 46.480735][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 46.498001][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 46.589618][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.592485][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.595366][ T5963] bridge_slave_0: entered allmulticast mode [ 46.598765][ T5963] bridge_slave_0: entered promiscuous mode [ 46.619698][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.622019][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.624423][ T5963] bridge_slave_1: entered allmulticast mode [ 46.627271][ T5963] bridge_slave_1: entered promiscuous mode [ 46.630012][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 46.738072][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.741042][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.743273][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.746095][ T5967] bridge_slave_0: entered allmulticast mode [ 46.748680][ T5967] bridge_slave_0: entered promiscuous mode [ 46.751275][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.753527][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.756422][ T5972] bridge_slave_0: entered allmulticast mode [ 46.758909][ T5972] bridge_slave_0: entered promiscuous mode [ 46.762907][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.765292][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.767524][ T5972] bridge_slave_1: entered allmulticast mode [ 46.770072][ T5972] bridge_slave_1: entered promiscuous mode [ 46.789269][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.792430][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.794802][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.797091][ T5967] bridge_slave_1: entered allmulticast mode [ 46.799682][ T5967] bridge_slave_1: entered promiscuous mode [ 46.868656][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.894191][ T5963] team0: Port device team_slave_0 added [ 46.911348][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.916742][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.937808][ T5963] team0: Port device team_slave_1 added [ 46.941934][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.053158][ T5972] team0: Port device team_slave_0 added [ 47.056778][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.059062][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.061356][ T5973] bridge_slave_0: entered allmulticast mode [ 47.063990][ T5973] bridge_slave_0: entered promiscuous mode [ 47.067216][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.069408][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.080149][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.085436][ T5967] team0: Port device team_slave_0 added [ 47.088257][ T5972] team0: Port device team_slave_1 added [ 47.102879][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.105824][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.108239][ T5973] bridge_slave_1: entered allmulticast mode [ 47.110877][ T5973] bridge_slave_1: entered promiscuous mode [ 47.113645][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.116331][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.124761][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.129402][ T5967] team0: Port device team_slave_1 added [ 47.190901][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.193389][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.202106][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.206488][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.208690][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.216769][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.225273][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.241986][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.244212][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.253183][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.257506][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.259658][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.267561][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.276130][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.309045][ T5963] hsr_slave_0: entered promiscuous mode [ 47.311341][ T5963] hsr_slave_1: entered promiscuous mode [ 47.356219][ T5972] hsr_slave_0: entered promiscuous mode [ 47.358597][ T5972] hsr_slave_1: entered promiscuous mode [ 47.360665][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 47.362548][ T5972] Cannot create hsr debugfs directory [ 47.379947][ T5973] team0: Port device team_slave_0 added [ 47.421435][ T5967] hsr_slave_0: entered promiscuous mode [ 47.423707][ T5967] hsr_slave_1: entered promiscuous mode [ 47.425900][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 47.427743][ T5967] Cannot create hsr debugfs directory [ 47.430374][ T5973] team0: Port device team_slave_1 added [ 47.490667][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.492906][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.501293][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.535466][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.537707][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.546586][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.666518][ T5973] hsr_slave_0: entered promiscuous mode [ 47.668727][ T5973] hsr_slave_1: entered promiscuous mode [ 47.670750][ T5973] debugfs: 'hsr0' already exists in 'hsr' [ 47.672555][ T5973] Cannot create hsr debugfs directory [ 47.830834][ T5972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.839007][ T5972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.843127][ T5972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.852126][ T5972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.879793][ T5963] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.887139][ T5963] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.892283][ T5963] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.897181][ T5963] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.947926][ T5967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.952168][ T5967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.968507][ T5967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.972881][ T5967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.002837][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.018302][ T5973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.023356][ T5973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.029717][ T5973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.042850][ T5973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.057500][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.064625][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.067272][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.082843][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.092044][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.094938][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.109004][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.119618][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.121912][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.147096][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.149461][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.176092][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.198240][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.208552][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.211378][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.215181][ T5327] Bluetooth: hci1: command tx timeout [ 48.221620][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.224028][ T40] audit: type=1400 audit(1754978154.543:89): avc: denied { sys_module } for pid=5972 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.224490][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.225143][ T5974] Bluetooth: hci0: command tx timeout [ 48.225312][ T63] Bluetooth: hci2: command tx timeout [ 48.225342][ T5327] Bluetooth: hci3: command tx timeout [ 48.243964][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.268374][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.276578][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.278882][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.288490][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.290793][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.331492][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.363764][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.378859][ T5972] veth0_vlan: entered promiscuous mode [ 48.385701][ T5972] veth1_vlan: entered promiscuous mode [ 48.408663][ T5963] veth0_vlan: entered promiscuous mode [ 48.416369][ T5972] veth0_macvtap: entered promiscuous mode [ 48.419666][ T5963] veth1_vlan: entered promiscuous mode [ 48.427551][ T5972] veth1_macvtap: entered promiscuous mode [ 48.449200][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.452826][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.456709][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.466287][ T5963] veth0_macvtap: entered promiscuous mode [ 48.470799][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.478268][ T1252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.481790][ T5963] veth1_macvtap: entered promiscuous mode [ 48.488525][ T1252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.491318][ T1252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.496887][ T1252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.518512][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.523526][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.532314][ T5973] veth0_vlan: entered promiscuous mode [ 48.537878][ T5973] veth1_vlan: entered promiscuous mode [ 48.543973][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.553196][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.556398][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.567706][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.581945][ T5967] veth0_vlan: entered promiscuous mode [ 48.590005][ T1252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.592695][ T1252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.593369][ T5967] veth1_vlan: entered promiscuous mode [ 48.627435][ T5973] veth0_macvtap: entered promiscuous mode [ 48.636786][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.639302][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.646475][ T5967] veth0_macvtap: entered promiscuous mode [ 48.650268][ T5973] veth1_macvtap: entered promiscuous mode [ 48.655838][ T5967] veth1_macvtap: entered promiscuous mode [ 48.658925][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.661375][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.682208][ T5972] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.683186][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.690607][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.692254][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.693069][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.702439][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.707337][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.710175][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.719434][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.722111][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.725618][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.747672][ T1252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.750440][ T1252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.760058][ T1252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.765023][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5'. [ 48.768864][ T1252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.773505][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.776377][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.797871][ T6057] Bluetooth: MGMT ver 1.23 [ 48.800202][ T6055] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 48.803938][ T6055] syzkaller1: entered promiscuous mode [ 48.806999][ T6055] syzkaller1: entered allmulticast mode [ 48.820676][ T6055] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4'. [ 48.827181][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.832715][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.867886][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.870691][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.887104][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.889805][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.945787][ T6065] ptrace attach of "/syz-executor exec"[5963] was attempted by "/syz-executor exec"[6065] [ 49.082603][ T6057] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6'. [ 49.088557][ T6057] mmap: syz.1.6 (6057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.216171][ T6078] batadv_slave_0: entered promiscuous mode [ 49.218831][ T6078] batadv_slave_0: left promiscuous mode [ 49.387079][ T6079] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x525d6 [ 49.390119][ T6079] memcg:ffff888053b98000 [ 49.391498][ T6079] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 49.393971][ T6079] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 49.397352][ T6079] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888053b98000 [ 49.400075][ T6079] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 49.403435][ T6079] page_owner tracks the page as allocated [ 49.406017][ T6079] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6079, tgid 6073 (syz.2.11), ts 49387062377, free_ts 49375312621 [ 49.408163][ T6082] netlink: 'syz.1.13': attribute type 11 has an invalid length. [ 49.412939][ T6079] post_alloc_hook+0x1c0/0x230 [ 49.417433][ T6079] get_page_from_freelist+0x132b/0x38e0 [ 49.419281][ T6079] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 49.421192][ T6079] alloc_pages_mpol+0x1fb/0x550 [ 49.421445][ T6084] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 49.422757][ T6079] folio_alloc_noprof+0x20/0x2d0 [ 49.425844][ T6084] netlink: 17 bytes leftover after parsing attributes in process `syz.0.14'. [ 49.427584][ T6079] filemap_alloc_folio_noprof+0x3a1/0x470 [ 49.432080][ T6079] page_cache_ra_order+0x4e1/0xd70 [ 49.434532][ T6079] filemap_fault+0x152e/0x2930 [ 49.436416][ T6079] __do_fault+0x10a/0x490 [ 49.437808][ T6079] do_pte_missing+0x1a6/0x3ba0 [ 49.439409][ T6079] __handle_mm_fault+0x152a/0x2a50 [ 49.441064][ T6079] handle_mm_fault+0x589/0xd10 [ 49.442670][ T6079] do_user_addr_fault+0x7a6/0x1370 [ 49.444921][ T6079] exc_page_fault+0x5c/0xb0 [ 49.446370][ T6079] asm_exc_page_fault+0x26/0x30 [ 49.448000][ T6079] page last free pid 29 tgid 29 stack trace: [ 49.449879][ T6079] __free_frozen_pages+0x7d5/0x10f0 [ 49.451532][ T6079] vfree+0x1fd/0xb50 [ 49.452808][ T6079] delayed_vfree_work+0x56/0x70 [ 49.454416][ T6079] process_one_work+0x9cc/0x1b70 [ 49.455988][ T6079] worker_thread+0x6c8/0xf10 [ 49.457463][ T6079] kthread+0x3c5/0x780 [ 49.458759][ T6079] ret_from_fork+0x5d7/0x6f0 [ 49.460236][ T6079] ret_from_fork_asm+0x1a/0x30 [ 49.463322][ T6079] ------------[ cut here ]------------ [ 49.465323][ T6079] kernel BUG at mm/filemap.c:867! [ 49.466995][ T6079] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 49.469931][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.2.11 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 49.474829][ T6079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.478195][ T6079] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 49.480120][ T6079] Code: 7a c8 ff 48 c7 c6 a0 23 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 95 7a c8 ff 48 c7 c6 00 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 7e 7a c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 70 7a c8 ff 48 [ 49.487903][ T6079] RSP: 0018:ffffc900027b7450 EFLAGS: 00010246 [ 49.490443][ T6079] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90027c7c000 [ 49.493667][ T6079] RDX: 0000000000080000 RSI: ffffffff81f3189a RDI: ffff8880326f4cc4 [ 49.496936][ T6079] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 49.500085][ T6079] R10: ffffffff90ab3597 R11: 0000000000000002 R12: 0000000000000002 [ 49.503442][ T6079] R13: ffffea0001497580 R14: 0000000000000000 R15: 000000000000001c [ 49.506610][ T6079] FS: 00007f9bb7e256c0(0000) GS:ffff8880d66bc000(0000) knlGS:0000000000000000 [ 49.509539][ T6079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.511614][ T6079] CR2: 00007fe8c8d74980 CR3: 0000000056e0d000 CR4: 0000000000352ef0 [ 49.514202][ T6079] Call Trace: [ 49.515294][ T6079] [ 49.516278][ T6079] ? rcu_is_watching+0x12/0xc0 [ 49.517835][ T6079] ? __pfx___filemap_add_folio+0x10/0x10 [ 49.519612][ T6079] filemap_add_folio+0x10e/0x220 [ 49.521220][ T6079] ? __pfx_filemap_add_folio+0x10/0x10 [ 49.522987][ T6079] ? css_rstat_updated+0x1c2/0x510 [ 49.524775][ T6079] page_cache_ra_order+0x5a7/0xd70 [ 49.526424][ T6079] filemap_fault+0x152e/0x2930 [ 49.527960][ T6079] ? __pfx_filemap_fault+0x10/0x10 [ 49.529606][ T6079] ? __pfx_filemap_map_pages+0x10/0x10 [ 49.531324][ T6079] __do_fault+0x10a/0x490 [ 49.532742][ T6079] ? __pfx_filemap_map_pages+0x10/0x10 [ 49.534462][ T6079] do_pte_missing+0x1a6/0x3ba0 [ 49.536009][ T6079] ? find_held_lock+0x2b/0x80 [ 49.537532][ T6079] ? __handle_mm_fault+0x14fd/0x2a50 [ 49.539210][ T6079] __handle_mm_fault+0x152a/0x2a50 [ 49.540859][ T6079] ? mt_find+0x3ef/0xa30 [ 49.542587][ T6079] ? __pfx___handle_mm_fault+0x10/0x10 [ 49.544759][ T6079] ? __pfx_mt_find+0x10/0x10 [ 49.546611][ T6079] ? find_vma+0xbf/0x140 [ 49.548422][ T6079] ? __pfx_find_vma+0x10/0x10 [ 49.550566][ T6079] handle_mm_fault+0x589/0xd10 [ 49.552553][ T6079] ? __bpf_trace_exceptions+0x1/0x40 [ 49.554649][ T6079] do_user_addr_fault+0x7a6/0x1370 [ 49.556679][ T6079] ? rcu_is_watching+0x12/0xc0 [ 49.558464][ T6079] exc_page_fault+0x5c/0xb0 [ 49.559911][ T6079] asm_exc_page_fault+0x26/0x30 [ 49.561469][ T6079] RIP: 0010:_copy_to_user+0xb6/0xd0 [ 49.563215][ T6079] Code: 89 ee 48 89 ef e8 aa 44 d8 fc 4d 85 ff 75 a8 e8 f0 49 d8 fc 89 de 4c 89 e7 e8 e6 a9 3e fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 80 66 2e 0f 1f 84 00 00 00 00 [ 49.569262][ T6079] RSP: 0018:ffffc900027b7c40 EFLAGS: 00050246 [ 49.571174][ T6079] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000000008 [ 49.573691][ T6079] RDX: fffff520004f6f97 RSI: ffffc900027b7cb0 RDI: 000020000001c2d0 [ 49.576184][ T6079] RBP: 000020000001c2d0 R08: 0000000000000000 R09: fffff520004f6f96 [ 49.578673][ T6079] R10: ffffc900027b7cb7 R11: 0000000000000000 R12: ffffc900027b7cb0 [ 49.581155][ T6079] R13: 000020000001c2d8 R14: 00007ffffffff000 R15: 0000000000000000 [ 49.583767][ T6079] msr_read+0x14e/0x250 [ 49.585120][ T6079] ? __pfx_msr_read+0x10/0x10 [ 49.586632][ T6079] ? bpf_lsm_file_permission+0x9/0x10 [ 49.588356][ T6079] ? security_file_permission+0x71/0x210 [ 49.590270][ T6079] ? rw_verify_area+0xcf/0x6c0 [ 49.591783][ T6079] ? __pfx_msr_read+0x10/0x10 [ 49.593398][ T6079] vfs_read+0x1e1/0xcf0 [ 49.594723][ T6079] ? __pfx_vfs_read+0x10/0x10 [ 49.596229][ T6079] ? find_held_lock+0x2b/0x80 [ 49.597736][ T6079] ? __fget_files+0x204/0x3c0 [ 49.599226][ T6079] ? __fget_files+0x20e/0x3c0 [ 49.600749][ T6079] ksys_read+0x12a/0x250 [ 49.602135][ T6079] ? __pfx_ksys_read+0x10/0x10 [ 49.603625][ T6079] do_syscall_64+0xcd/0x4c0 [ 49.605071][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.606936][ T6079] RIP: 0033:0x7f9bb6f8ebe9 [ 49.608355][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.614351][ T6079] RSP: 002b:00007f9bb7e25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.616953][ T6079] RAX: ffffffffffffffda RBX: 00007f9bb71b6180 RCX: 00007f9bb6f8ebe9 [ 49.619633][ T6079] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 000000000000000a [ 49.622173][ T6079] RBP: 00007f9bb7011e19 R08: 0000000000000000 R09: 0000000000000000 [ 49.624660][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.627127][ T6079] R13: 00007f9bb71b6218 R14: 00007f9bb71b6180 R15: 00007fff977dcf88 [ 49.629609][ T6079] [ 49.630602][ T6079] Modules linked in: [ 49.632366][ T6079] ---[ end trace 0000000000000000 ]--- [ 49.635005][ T6079] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 49.637077][ T6079] Code: 7a c8 ff 48 c7 c6 a0 23 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 95 7a c8 ff 48 c7 c6 00 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 7e 7a c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 70 7a c8 ff 48 [ 49.644492][ T6079] RSP: 0018:ffffc900027b7450 EFLAGS: 00010246 [ 49.646898][ T6079] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90027c7c000 [ 49.649774][ T6079] RDX: 0000000000080000 RSI: ffffffff81f3189a RDI: ffff8880326f4cc4 [ 49.652868][ T6079] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 49.656389][ T6079] R10: ffffffff90ab3597 R11: 0000000000000002 R12: 0000000000000002 [ 49.659017][ T6079] R13: ffffea0001497580 R14: 0000000000000000 R15: 000000000000001c [ 49.661798][ T6079] FS: 00007f9bb7e256c0(0000) GS:ffff8880d67bc000(0000) knlGS:0000000000000000 [ 49.665414][ T6079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.668106][ T6079] CR2: 00007fe8c9b58f98 CR3: 0000000056e0d000 CR4: 0000000000352ef0 [ 49.671258][ T6079] Kernel panic - not syncing: Fatal exception [ 49.674225][ T6079] Kernel Offset: disabled [ 49.675929][ T6079] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:55:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000053 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856401d5 RDI=ffffffff9b10dfa0 RBP=ffffffff9b10df60 RSP=ffffc900027b6df0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000053 R14=ffffffff9b10df60 R15=ffffffff85640170 RIP=ffffffff856401ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9bb7e256c0 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe8c8d74980 CR3=0000000056e0d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8160bade ffffffff89636a82 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff89636a82 ffffffff8160bade ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8160bade ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff977dd496 00007fff977dd49c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb71874a8 00007f9bb71874a0 00007f9bb7187498 00007f9bb7187470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7ced100 00007f9bb7187460 00007f9b00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb71874b8 00007f9bb71874b0 00007f9bb71874a8 00007f9bb71874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000001f18c RBX=0000000000000001 RCX=ffffffff8b934c29 RDX=ffffed100d4a6656 RSI=ffffffff8c162400 RDI=ffffffff819133c1 RBP=ffffed1003bd6488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deb2440 R14=ffffffff90ab3590 R15=0000000000000000 RIP=ffffffff8b93378f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe8c9b78fb8 CR3=0000000056e0d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8160bade ffffffff89636a82 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff89636a82 ffffffff8160bade ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8160bade ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff977dd496 00007fff977dd49c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb71874a8 00007f9bb71874a0 00007f9bb7187498 00007f9bb7187470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7ced100 00007f9bb7187460 00007f9b00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb71874b8 00007f9bb71874b0 00007f9bb71874a8 00007f9bb71874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000002e29c RBX=0000000000000002 RCX=ffffffff8b934c29 RDX=ffffed100d4c6656 RSI=ffffffff8c162400 RDI=ffffffff819133c1 RBP=ffffed1003bd6910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801deb4880 R14=ffffffff90ab3590 R15=0000000000000000 RIP=ffffffff8b93378f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b31a09ff8 CR3=0000000056e0d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8160bade ffffffff89636a82 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff89636a82 ffffffff8160bade ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8160bade ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff977dd496 00007fff977dd49c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb71874a8 00007f9bb71874a0 00007f9bb7187498 00007f9bb7187470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb7ced100 00007f9bb7187460 00007f9b00040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9bb71874b8 00007f9bb71874b0 00007f9bb71874a8 00007f9bb71874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=fffff940001caed0 RBX=fffff940001caed1 RCX=ffffffff81fd5651 RDX=fffff940001caed1 RSI=0000000000000008 RDI=ffffea0000e57680 RBP=fffff940001caed0 RSP=ffffc9000462fb60 R8 =0000000000000000 R9 =fffff940001caed0 R10=ffffea0000e57687 R11=0000000000000000 R12=0000000000000f00 R13=ffff888054941518 R14=0000000000000f00 R15=ffff888054941568 RIP=ffffffff8221e4ec RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe8c9b7a6c0 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00002000004a2000 CR3=0000000056c88000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fedefff0 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc588460c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc588460c6 00007ffc588460cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8c8e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8c8e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8c8e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8c8e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8c8e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8c8e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8c8f874a8 00007fe8c8f874a0 00007fe8c8f87498 00007fe8c8f87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8c9aed100 00007fe8c8f87460 00007fe8c8f87478 00007fe8c8f874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8c8f874b8 00007fe8c8f874b0 00007fe8c8f874a8 00007fe8c8f874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000