last executing test programs: 916.143719ms ago: executing program 1 (id=156): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x113, 0x8}}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0xfff, 0xf1, 0x3, 0x7fffffffffffd, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x200000001, 0xbdb], 0x40000, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 915.925319ms ago: executing program 0 (id=157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-', @ANYRESDEC=r0], 0x27) 828.173395ms ago: executing program 1 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc4b0}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xfffffff6, 0x9, 0x4}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 737.962831ms ago: executing program 0 (id=159): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x2c, 0x14, 0x68, 0x0, 0x22, 0x6, 0x0, @rand_addr=0x64010101, @local}}}}}, 0x0) 639.253508ms ago: executing program 1 (id=160): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x2000, 0x90, "ffa3d4888900000b00000020afa800ce00"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0xffff, 0x1ffffffe, 0x0, 0x200007, 0x17, "680c1acfa4a5000000070000faffffff000800"}) 564.992623ms ago: executing program 0 (id=161): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x53) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x18, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 475.495089ms ago: executing program 1 (id=162): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @empty, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) 397.307764ms ago: executing program 0 (id=163): r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7f, 0x372, 0x401, 0x3, 0x3, 0xe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x80000009, 0x800, 0x0, 0x0, 0x2, 0xfffffffffffffffc}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xeb0, 0x101, 0x81, 0x10, 0x1000}}]}]}}}]}, 0x94}}, 0x0) 397.042584ms ago: executing program 1 (id=164): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x30, 0x32, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f5}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008884}, 0x40090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c001280"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 248.150154ms ago: executing program 0 (id=165): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18) 247.717014ms ago: executing program 1 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000009, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) r5 = accept4$unix(r4, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000280)=""/271, 0x10f, 0x102, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) socket$inet6(0xa, 0x80001, 0x0) timerfd_create(0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1, 0x0, r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 0 (id=167): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000cc0)=""/169, 0xce, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000300)={0x2, 0x0, {&(0x7f00000002c0)=""/3, 0x3, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000001080)=""/185, 0xb9, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000840)={0x2, 0x0, {&(0x7f00000008c0)=""/225, 0xe1, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:15202' (ED25519) to the list of known hosts. syzkaller login: [ 79.719846][ T3312] cgroup: Unknown subsys name 'net' [ 79.936595][ T3312] cgroup: Unknown subsys name 'cpuset' [ 79.958519][ T3312] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.449065][ T3312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.781877][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.796486][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.002975][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.012986][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.770556][ T3317] hsr_slave_0: entered promiscuous mode [ 90.778944][ T3317] hsr_slave_1: entered promiscuous mode [ 90.847872][ T3318] hsr_slave_0: entered promiscuous mode [ 90.852080][ T3318] hsr_slave_1: entered promiscuous mode [ 90.856859][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 90.857609][ T3318] Cannot create hsr debugfs directory [ 91.825223][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.875857][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.893353][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.936723][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.072475][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.099072][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.125786][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.162457][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.085370][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.239822][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.206172][ T3317] veth0_vlan: entered promiscuous mode [ 96.246535][ T3317] veth1_vlan: entered promiscuous mode [ 96.328490][ T3318] veth0_vlan: entered promiscuous mode [ 96.383799][ T3317] veth0_macvtap: entered promiscuous mode [ 96.409940][ T3317] veth1_macvtap: entered promiscuous mode [ 96.432550][ T3318] veth1_vlan: entered promiscuous mode [ 96.631526][ T241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.638123][ T241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.640116][ T241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.641441][ T241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.706757][ T3318] veth0_macvtap: entered promiscuous mode [ 96.754213][ T3318] veth1_macvtap: entered promiscuous mode [ 96.906764][ T1007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.910096][ T1007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.913252][ T1007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.914023][ T1007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.988500][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.153833][ T3480] syzkaller0: entered promiscuous mode [ 98.154326][ T3480] syzkaller0: entered allmulticast mode [ 101.398411][ T3496] syzkaller0: entered promiscuous mode [ 101.398627][ T3496] syzkaller0: entered allmulticast mode [ 101.869139][ T3504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'. [ 102.271598][ T3510] Illegal XDP return value 3212316672 on prog (id 4) dev syz_tun, expect packet loss! [ 103.010761][ T3522] syzkaller0: entered promiscuous mode [ 103.011998][ T3522] syzkaller0: entered allmulticast mode [ 105.387066][ T3554] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.491985][ T3596] netlink: 'syz.1.56': attribute type 49 has an invalid length. [ 109.557689][ T3598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.57'. [ 112.829251][ T3639] syzkaller0: entered promiscuous mode [ 112.831413][ T3639] syzkaller0: entered allmulticast mode [ 114.017874][ T3649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 114.656401][ T3659] syzkaller0: entered promiscuous mode [ 114.656946][ T3659] syzkaller0: entered allmulticast mode [ 118.555343][ T3679] bond1 (unregistering): Released all slaves [ 123.428511][ T3721] netlink: 32 bytes leftover after parsing attributes in process `syz.0.102'. [ 124.176462][ T3730] GUP no longer grows the stack in syz.0.104 (3730): 20010000-20018000 (2000e000) [ 124.178788][ T3730] CPU: 0 UID: 0 PID: 3730 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT [ 124.179061][ T3730] Hardware name: linux,dummy-virt (DT) [ 124.179386][ T3730] Call trace: [ 124.179775][ T3730] show_stack+0x18/0x24 (C) [ 124.180749][ T3730] dump_stack_lvl+0x78/0x90 [ 124.180854][ T3730] dump_stack+0x18/0x24 [ 124.180922][ T3730] gup_vma_lookup+0x98/0xac [ 124.180991][ T3730] __get_user_pages+0x90/0xcb4 [ 124.181056][ T3730] get_user_pages_remote+0xe0/0x35c [ 124.181118][ T3730] __access_remote_vm+0xfc/0x324 [ 124.181184][ T3730] access_remote_vm+0x10/0x1c [ 124.181244][ T3730] proc_pid_cmdline_read+0x27c/0x468 [ 124.181309][ T3730] vfs_readv+0x1f8/0x26c [ 124.181375][ T3730] do_preadv+0x90/0xec [ 124.181438][ T3730] __arm64_sys_preadv+0x20/0x2c [ 124.181508][ T3730] invoke_syscall+0x48/0x110 [ 124.181577][ T3730] el0_svc_common.constprop.0+0x40/0xe0 [ 124.181642][ T3730] do_el0_svc+0x1c/0x28 [ 124.181716][ T3730] el0_svc+0x34/0x128 [ 124.181782][ T3730] el0t_64_sync_handler+0xa0/0xe4 [ 124.181846][ T3730] el0t_64_sync+0x1a4/0x1a8 [ 125.459963][ T3743] syzkaller0: entered promiscuous mode [ 125.465843][ T3743] syzkaller0: entered allmulticast mode [ 126.334894][ T3747] gre1: entered promiscuous mode [ 127.829115][ T3757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 127.872261][ T3757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.879710][ T3757] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 128.013536][ T3760] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.262724][ T3766] netlink: 'syz.1.122': attribute type 1 has an invalid length. [ 128.307692][ T3766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.312394][ T3766] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 130.069812][ T3788] fuse: Bad value for 'fd' [ 131.242961][ T3799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 131.246857][ T3799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.135'. [ 131.917911][ T3807] netlink: 'syz.1.138': attribute type 14 has an invalid length. [ 133.188107][ T3838] capability: warning: `syz.0.152' uses deprecated v2 capabilities in a way that may be insecure [ 134.029194][ T3862] netlink: 44 bytes leftover after parsing attributes in process `syz.1.164'. [ 134.531987][ T2159] ================================================================== [ 134.535265][ T2159] BUG: KASAN: slab-use-after-free in defer_free+0x3c/0xbc [ 134.537031][ T2159] Write at addr f7f0000003a7eb20 by task kworker/u8:11/2159 [ 134.537313][ T2159] Pointer tag: [f7], memory tag: [fe] [ 134.537356][ T2159] [ 134.538031][ T2159] CPU: 0 UID: 0 PID: 2159 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT [ 134.538391][ T2159] Hardware name: linux,dummy-virt (DT) [ 134.538763][ T2159] Workqueue: events_unbound bpf_map_free_deferred [ 134.539518][ T2159] Call trace: [ 134.539701][ T2159] show_stack+0x18/0x24 (C) [ 134.539882][ T2159] dump_stack_lvl+0x78/0x90 [ 134.539945][ T2159] print_report+0x108/0x61c [ 134.539970][ T2159] kasan_report+0x88/0xac [ 134.539991][ T2159] __do_kernel_fault+0x170/0x1c8 [ 134.540015][ T2159] do_bad_area+0x68/0x78 [ 134.540038][ T2159] do_tag_check_fault+0x34/0x44 [ 134.540106][ T2159] do_mem_abort+0x44/0x94 [ 134.540145][ T2159] el1_abort+0x44/0x68 [ 134.540169][ T2159] el1h_64_sync_handler+0x50/0xac [ 134.540218][ T2159] el1h_64_sync+0x6c/0x70 [ 134.540350][ T2159] defer_free+0x3c/0xbc (P) [ 134.540382][ T2159] kfree_nolock+0x1a0/0x1d4 [ 134.540405][ T2159] range_tree_destroy+0x74/0x90 [ 134.540429][ T2159] arena_map_free+0x64/0x90 [ 134.540451][ T2159] bpf_map_free_deferred+0x70/0x180 [ 134.540513][ T2159] process_one_work+0x178/0x2cc [ 134.540543][ T2159] worker_thread+0x24c/0x354 [ 134.540567][ T2159] kthread+0x130/0x1fc [ 134.540588][ T2159] ret_from_fork+0x10/0x20 [ 134.540736][ T2159] [ 134.540771][ T2159] Allocated by task 3865: [ 134.540885][ T2159] kasan_save_stack+0x3c/0x64 [ 134.541041][ T2159] save_stack_info+0x40/0x158 [ 134.541083][ T2159] kasan_save_alloc_info+0x14/0x20 [ 134.541121][ T2159] __kasan_kmalloc+0xb4/0xb8 [ 134.541152][ T2159] kmalloc_nolock_noprof+0x1dc/0x4fc [ 134.541189][ T2159] range_tree_set+0x644/0x778 [ 134.541223][ T2159] arena_map_alloc+0x11c/0x17c [ 134.541258][ T2159] map_create+0x19c/0xa98 [ 134.541293][ T2159] __sys_bpf+0x348/0x1a88 [ 134.541329][ T2159] __arm64_sys_bpf+0x24/0x34 [ 134.541361][ T2159] invoke_syscall+0x48/0x110 [ 134.541400][ T2159] el0_svc_common.constprop.0+0x40/0xe0 [ 134.541438][ T2159] do_el0_svc+0x1c/0x28 [ 134.541476][ T2159] el0_svc+0x34/0x128 [ 134.541511][ T2159] el0t_64_sync_handler+0xa0/0xe4 [ 134.541546][ T2159] el0t_64_sync+0x1a4/0x1a8 [ 134.541625][ T2159] [ 134.541670][ T2159] Freed by task 2159: [ 134.541730][ T2159] kasan_save_stack+0x3c/0x64 [ 134.541768][ T2159] save_stack_info+0x40/0x158 [ 134.541802][ T2159] kasan_save_free_info+0x18/0x24 [ 134.541838][ T2159] __kasan_slab_free+0x7c/0x8c [ 134.541917][ T2159] kfree_nolock+0xcc/0x1d4 [ 134.541956][ T2159] range_tree_destroy+0x74/0x90 [ 134.541995][ T2159] arena_map_free+0x64/0x90 [ 134.542031][ T2159] bpf_map_free_deferred+0x70/0x180 [ 134.542067][ T2159] process_one_work+0x178/0x2cc [ 134.542102][ T2159] worker_thread+0x24c/0x354 [ 134.542137][ T2159] kthread+0x130/0x1fc [ 134.542169][ T2159] ret_from_fork+0x10/0x20 [ 134.542219][ T2159] [ 134.542262][ T2159] The buggy address belongs to the object at fff0000003a7eb00 [ 134.542262][ T2159] which belongs to the cache kmalloc-64 of size 64 [ 134.542356][ T2159] The buggy address is located 32 bytes inside of [ 134.542356][ T2159] 64-byte region [fff0000003a7eb00, fff0000003a7eb40) [ 134.542381][ T2159] [ 134.542520][ T2159] The buggy address belongs to the physical page: [ 134.542862][ T2159] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xfcf0000003a7e900 pfn:0x43a7e [ 134.543180][ T2159] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x0) [ 134.543600][ T2159] page_type: f5(slab) [ 134.544057][ T2159] raw: 01ffc00000000000 f8f0000003001600 ffffc1ffc00f1640 0000000000000004 [ 134.544102][ T2159] raw: fcf0000003a7e900 0000000080400024 00000000f5000000 0000000000000000 [ 134.544214][ T2159] page dumped because: kasan: bad access detected [ 134.544240][ T2159] [ 134.544257][ T2159] Memory state around the buggy address: [ 134.544476][ T2159] fff0000003a7e900: fe fe fe fe fe fe fe fe f1 f1 f1 f1 fe fe fe fe [ 134.544531][ T2159] fff0000003a7ea00: fa fa fa fe fe fe fe fe f4 f4 f4 fe fe fe fe fe [ 134.544561][ T2159] >fff0000003a7eb00: fe fe fe fe f8 f8 f8 fe fe fe fe fe fe fe fe fe [ 134.544594][ T2159] ^ [ 134.544657][ T2159] fff0000003a7ec00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 134.544672][ T2159] fff0000003a7ed00: f5 f5 f5 f5 fe fe fe fe fe fe fe fe fe fe fe fe [ 134.544747][ T2159] ================================================================== [ 134.545506][ T2159] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.291618][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.350777][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.445244][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.536592][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.174819][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.222532][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.244206][ T12] bond0 (unregistering): Released all slaves [ 136.339383][ T12] hsr_slave_0: left promiscuous mode [ 136.347838][ T12] hsr_slave_1: left promiscuous mode [ 136.385970][ T12] veth1_macvtap: left promiscuous mode [ 136.386501][ T12] veth0_macvtap: left promiscuous mode [ 136.387018][ T12] veth1_vlan: left promiscuous mode [ 136.387406][ T12] veth0_vlan: left promiscuous mode [ 137.526485][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.597688][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.666918][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.743163][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.409370][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.443606][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.497821][ T12] bond0 (unregistering): Released all slaves [ 138.510527][ T12] bond1 (unregistering): Released all slaves [ 138.527728][ T12] bond2 (unregistering): Released all slaves [ 138.617830][ T12] hsr_slave_0: left promiscuous mode [ 138.621392][ T12] hsr_slave_1: left promiscuous mode [ 138.632403][ T12] veth1_macvtap: left promiscuous mode [ 138.633374][ T12] veth0_macvtap: left promiscuous mode [ 138.634870][ T12] veth1_vlan: left promiscuous mode [ 138.636421][ T12] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 07:06:26 Registers: info registers vcpu 0 CPU#0 PC=ffff800080143c00 X00=fbf0000005ab4a00 X01=f6f0000006499080 X02=fbf0000005ab4a00 X03=ffff800082ddbf70 X04=fff07ffffcf04000 X05=ffff800080010000 X06=0000000000000001 X07=ffff8000829f3b18 X08=ffffffffffffffff X09=00000000000000c0 X10=d6b03ab0a10d30e0 X11=00000000000000c0 X12=000000000000000b X13=0000000000000000 X14=0000000000000070 X15=ffff800081bd4430 X16=ffff800082dd8000 X17=fff07ffffcf04000 X18=ffff80008725bc30 X19=fbf000000557bc80 X20=fbf0000005ab4aac X21=fbf0000005ab4a30 X22=fbf0000005ab4aac X23=000000000000001a X24=ffff8000829d0f00 X25=0000000000000000 X26=ffff800082a19be8 X27=0000000000000000 X28=f6f0000006499080 X29=ffff800082ddbef0 X30=c48f800080143e54 SP=ffff800082ddbef0 PSTATE=004020c9 ---- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c3005828153fc6b6:5fd49ae981cf941b Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:56f58758f932bd5a:a17ad02c5f325841 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2b5b7d6ddd752208:fceceffcbbc20557 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:07cc1093093f6d12:0c318bd6b9591b54 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:5f1161278764132d:191295023633675a Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6932489b1cec0acb:cb7a39920aa9a250 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:889dc65d6a6d8ac3:ab1a5c62a238b106 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b34274cd7f0f9e48:75c12d1502a9eed2 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c30858281535c6b2:5fd49ae281c39411 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:1b240a716f45bd5a:a17ad32c5f325841 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:936162b09228fef3:e64a3d71ed225b47 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:d383772ac2b2f5ce:68a4b7a0d0a46cd7 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f3625736e1301b47:a8cce6c26b8975a5 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ea93d9e7ad4184d8:ba3c083f8b2ff9e3 info registers vcpu 1 CPU#1 PC=ffff80008092cb78 X00=0000000000000002 X01=0000000000000018 X02=ffff800082e05018 X03=ffff800082b9dee8 X04=f2f00000030e5880 X05=000000000000000a X06=000000000000005d X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff800082b9df18 X10=0000000000000001 X11=ffff8000831dbe20 X12=ffff800082acf248 X13=ffff8000831dbb8d X14=ffff8000831dbb98 X15=ffff8000831dba00 X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=f0f000000304303b X20=ffff80008092cd1c X21=f2f00000030e5880 X22=f0f000000304303b X23=ffff80008092cd1c X24=000000000000003b X25=faf000000323b180 X26=0000000000000001 X27=0000000000000000 X28=0000000000000000 X29=ffff8000831dbca0 X30=ffff80008092cd44 SP=ffff8000831dbca0 PSTATE=814020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0200000000000000:0200000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000200000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00d000a800000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002:0000000000000002 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffdbe6b340:0000ffffdbe6b340 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffdbe6b310 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000