last executing test programs: 3.488921275s ago: executing program 3 (id=4): r0 = syz_usb_connect$uac1(0x4, 0xac, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES16, @ANYRES16, @ANYRES64, @ANYRES32], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, 0x0) r1 = syz_io_uring_setup(0x3012, &(0x7f0000000100)={0x0, 0x5a85, 0x8, 0x0, 0x108}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x5884, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x28, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000440)={0x0, 0x10, 0xcb, {0xcb, 0x23, "94027490310c0b95ecaf35ec5e79f679fd3d1f6cce6249055e69c3aef4cd1087f8953aff4f2ed0df7fd923a15ec62671a1af239bdbc19529e3511ff05fda929340ff8a375c943d3ef46db0df1bb2620c04d8ce5ee2c386fd49949ead788b1db583576856d6c4c5242c207f047c0b794e59b3cbd296600d3d5d291904843bfceae4c646e218ceb9b862be606cd7d3072c08ebb16c3386d29d1da75ca68ccbdd0a307f09ac7970c64f3cfc13821f4a0166f0d582acaf90f1700d648253f2fa2178d65e716c1b9db38f7f"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3479}}, &(0x7f0000000180)=ANY=[@ANYBLOB="000f1a000000050f1a000303100b0710ef0c5f00100b107a519117000e060002"], &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x2, 0x5, 0x1, "9170f3ce", "e6f07786"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x2, 0x6, 0xd, 0x9, 0x900}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000380)={0x0, 0x6, 0x1c, "7210fb7b3da630c189453a808def8a00"/28}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x0, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x400, 0x1}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0xe5}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, "0400"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, 0x0, &(0x7f00000008c0)={0x40, 0x19, 0x2, "18a2"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 3.485763557s ago: executing program 0 (id=1): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 3.480041556s ago: executing program 1 (id=2): r0 = syz_usb_connect$uac1(0x4, 0xac, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES16, @ANYRES16, @ANYRES64, @ANYRES32], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, 0x0) r1 = syz_io_uring_setup(0x3012, &(0x7f0000000100)={0x0, 0x5a85, 0x8, 0x0, 0x108}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x5884, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x28, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3479}}, &(0x7f0000000180)=ANY=[@ANYBLOB="000f1a000000050f1a000303100b0710ef0c5f00100b107a519117000e060002"], &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x2, 0x5, 0x1, "9170f3ce", "e6f07786"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x2, 0x6, 0xd, 0x9, 0x900}}}, &(0x7f0000000a00)={0x84, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x0, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x400, 0x1}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0xe5}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, "0400"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @random="23327b1f3d55"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "18a2"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x9}, 0x0, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x8}}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 3.380690399s ago: executing program 2 (id=5): io_uring_setup(0x3f0c, &(0x7f0000000140)={0x0, 0xec22, 0x1000, 0x2, 0x31f}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000300)={0x0, 0x3, 0x9}) dup2(r2, r1) 3.231682866s ago: executing program 2 (id=6): acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xd4bb]}, 0x0, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)=')\x80', 0x0) 2.00010523s ago: executing program 2 (id=7): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1.993780502s ago: executing program 2 (id=8): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/75, 0x8e, 0x0) 1.581512474s ago: executing program 3 (id=9): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000340)=""/98, 0x62}], 0x1) 1.489987994s ago: executing program 1 (id=10): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'geneve0\x00', 0x0}) syz_80211_inject_frame(0x0, 0x0, 0xb5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x400, 0x0, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(0x0, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff00600300000000", 0x16, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.030520675s ago: executing program 2 (id=11): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0), 0xfea7) copy_file_range(r6, &(0x7f00000001c0), r5, 0x0, 0x81, 0x10000000000000) shmdt(0x0) 660.114176ms ago: executing program 3 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x13) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x8000, @empty}, 0x1c) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f043}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x2007}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 340.468272ms ago: executing program 0 (id=13): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6a, 0xe8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x3, 0x9) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) listen(0xffffffffffffffff, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 145.463203ms ago: executing program 2 (id=14): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x100}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x64ecaf37, 0xe, 0x8, 0xfffffffd, 0x16a6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = eventfd2(0x0, 0x800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000900)={0x0, 0xd000, 0x1, r2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) flock(r3, 0x8) r4 = open(0x0, 0x2, 0x142) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ptrace$pokeuser(0x6, r5, 0xfffffffffffff3cd, 0x8a) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$video(0x0, 0xa7, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r7, &(0x7f0000000080)=""/75, 0x8e, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002c00010026bd7000fcdbdf25040000001400"], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$qrtrtun(r4, &(0x7f0000000040)=""/10, 0xa) syz_usb_connect(0x0, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 0s ago: executing program 1 (id=15): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 1 [ 43.706247][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.706704][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.708977][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.712940][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.713276][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.716543][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.719707][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.721779][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.721832][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.723431][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.723881][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.724221][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.726489][ T5954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 43.726851][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.727158][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.727288][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.728333][ T5952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.730738][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.731899][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.733909][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.753412][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.756047][ T5955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.758053][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.937472][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 43.948468][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 43.972828][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 44.030899][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 44.074167][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.077120][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.079175][ T5942] bridge_slave_0: entered allmulticast mode [ 44.081411][ T5942] bridge_slave_0: entered promiscuous mode [ 44.085019][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.087083][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.089102][ T5942] bridge_slave_1: entered allmulticast mode [ 44.091145][ T5942] bridge_slave_1: entered promiscuous mode [ 44.117603][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.119649][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.121578][ T5947] bridge_slave_0: entered allmulticast mode [ 44.123647][ T5947] bridge_slave_0: entered promiscuous mode [ 44.149440][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.151695][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.154224][ T5947] bridge_slave_1: entered allmulticast mode [ 44.157503][ T5947] bridge_slave_1: entered promiscuous mode [ 44.168971][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.206475][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.208974][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.210904][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.212838][ T5949] bridge_slave_0: entered allmulticast mode [ 44.214881][ T5949] bridge_slave_0: entered promiscuous mode [ 44.228708][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.246949][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.249425][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.252034][ T5949] bridge_slave_1: entered allmulticast mode [ 44.254736][ T5949] bridge_slave_1: entered promiscuous mode [ 44.258415][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.260478][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.262446][ T5941] bridge_slave_0: entered allmulticast mode [ 44.264573][ T5941] bridge_slave_0: entered promiscuous mode [ 44.267663][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.272148][ T5942] team0: Port device team_slave_0 added [ 44.291331][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.293418][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.295887][ T5941] bridge_slave_1: entered allmulticast mode [ 44.298759][ T5941] bridge_slave_1: entered promiscuous mode [ 44.324419][ T5942] team0: Port device team_slave_1 added [ 44.327626][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.356048][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.359731][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.364191][ T5947] team0: Port device team_slave_0 added [ 44.367400][ T5947] team0: Port device team_slave_1 added [ 44.388527][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.401828][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.403772][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.411381][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.438869][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.440830][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.448416][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.453340][ T5949] team0: Port device team_slave_0 added [ 44.463464][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.465990][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.472993][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.477007][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.479139][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.485977][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.492866][ T5949] team0: Port device team_slave_1 added [ 44.496349][ T5941] team0: Port device team_slave_0 added [ 44.500509][ T5941] team0: Port device team_slave_1 added [ 44.528455][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.530356][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.537324][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.541763][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.543765][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.550770][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.562674][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.564634][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.571471][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.607348][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.609347][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.616475][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.625548][ T5942] hsr_slave_0: entered promiscuous mode [ 44.627610][ T5942] hsr_slave_1: entered promiscuous mode [ 44.641086][ T5947] hsr_slave_0: entered promiscuous mode [ 44.642974][ T5947] hsr_slave_1: entered promiscuous mode [ 44.644742][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.647128][ T5947] Cannot create hsr debugfs directory [ 44.703505][ T5949] hsr_slave_0: entered promiscuous mode [ 44.705696][ T5949] hsr_slave_1: entered promiscuous mode [ 44.707483][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.709503][ T5949] Cannot create hsr debugfs directory [ 44.725936][ T5941] hsr_slave_0: entered promiscuous mode [ 44.727908][ T5941] hsr_slave_1: entered promiscuous mode [ 44.729723][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.731875][ T5941] Cannot create hsr debugfs directory [ 44.900484][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.905813][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.909362][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.912744][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.931292][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.934767][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.938085][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.941085][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.956191][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.958292][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.960710][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.962724][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.967051][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.970104][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.997875][ T5947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.002064][ T5947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.006177][ T5947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.009755][ T5947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.030833][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.042722][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.046370][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.050070][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.086875][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.098046][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.116012][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.122973][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.128716][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.130748][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.136722][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.141953][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.144257][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.158304][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.161224][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.163263][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.168481][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.170509][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.176972][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.181766][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.183800][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.202362][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.206445][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.209180][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.229598][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.231660][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.239140][ T5942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.242559][ T5942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.261157][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.263114][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.282591][ T5941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.286038][ T5941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.337445][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.343522][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.372793][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.377895][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.382145][ T5949] veth0_vlan: entered promiscuous mode [ 45.394814][ T5942] veth0_vlan: entered promiscuous mode [ 45.400225][ T5949] veth1_vlan: entered promiscuous mode [ 45.419993][ T5942] veth1_vlan: entered promiscuous mode [ 45.427921][ T5941] veth0_vlan: entered promiscuous mode [ 45.434096][ T5941] veth1_vlan: entered promiscuous mode [ 45.437449][ T5947] veth0_vlan: entered promiscuous mode [ 45.445868][ T5947] veth1_vlan: entered promiscuous mode [ 45.450775][ T5949] veth0_macvtap: entered promiscuous mode [ 45.461789][ T5949] veth1_macvtap: entered promiscuous mode [ 45.468063][ T5942] veth0_macvtap: entered promiscuous mode [ 45.473388][ T5942] veth1_macvtap: entered promiscuous mode [ 45.481405][ T5941] veth0_macvtap: entered promiscuous mode [ 45.487357][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.491228][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.496570][ T5941] veth1_macvtap: entered promiscuous mode [ 45.500243][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.503143][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.506397][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.513141][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.516669][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.519987][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.523313][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.526158][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.528571][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.531457][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.536084][ T5947] veth0_macvtap: entered promiscuous mode [ 45.540099][ T5947] veth1_macvtap: entered promiscuous mode [ 45.547406][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.550028][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.552374][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.554674][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.562147][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.565085][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.568137][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.570902][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.574254][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.579850][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.582778][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.585480][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.588197][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.590768][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.593726][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.597763][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.602214][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.605826][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.609437][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.612574][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.616471][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.621210][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.624014][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.626916][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.629698][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.632294][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.635083][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.638684][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.644313][ T5947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.646889][ T5947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.649202][ T5947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.651511][ T5947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.657389][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.659743][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.662037][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.664366][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.711293][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.713600][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.726253][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.728546][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.739155][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.741323][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.750760][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.753013][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.756636][ T5945] Bluetooth: hci3: command tx timeout [ 45.756759][ T5955] Bluetooth: hci1: command tx timeout [ 45.756780][ T66] Bluetooth: hci0: command tx timeout [ 45.765997][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.768169][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.771949][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.774682][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.787390][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.790205][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.815237][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.818007][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.823080][ T5942] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.846981][ T5955] Bluetooth: hci2: command tx timeout [ 46.075698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 47.321481][ T6025] netlink: 'syz.2.7': attribute type 4 has an invalid length. [ 47.838116][ T66] Bluetooth: hci1: command tx timeout [ 47.838140][ T5955] Bluetooth: hci0: command tx timeout [ 47.839858][ T5945] Bluetooth: hci3: command tx timeout [ 47.855821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.925528][ T5945] Bluetooth: hci2: command tx timeout [ 48.103856][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 48.677049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.701048][ T6031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.348020][ T6053] ------------[ cut here ]------------ [ 49.350144][ T6053] kernel BUG at mm/hugetlb.c:2333! [ 49.352052][ T6053] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 49.356090][ T6053] CPU: 1 UID: 0 PID: 6053 Comm: syz.1.15 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 49.359718][ T6053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.362572][ T6053] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 49.364358][ T6053] Code: a3 d0 00 00 00 e8 e4 73 a2 ff 48 c7 c7 40 56 e1 8d e8 88 c2 32 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 c5 73 a2 ff 90 <0f> 0b e8 2d 55 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 49.370669][ T6053] RSP: 0018:ffffc900036078f0 EFLAGS: 00010087 [ 49.373002][ T6053] RAX: 00000000000007ee RBX: ffffffff9a83d758 RCX: ffffc9000c402000 [ 49.375527][ T6053] RDX: 0000000000080000 RSI: ffffffff82167acb RDI: 0000000000000007 [ 49.377682][ T6053] RBP: ffffea0000478000 R08: 0000000000000007 R09: 0000000000000000 [ 49.379756][ T6053] R10: 0000000000000000 R11: 0000000000000026 R12: 0000000000000000 [ 49.381893][ T6053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 49.383958][ T6053] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:00000000f5096b40 [ 49.386288][ T6053] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 49.388253][ T6053] CR2: 000000000c3213b9 CR3: 000000006b2a4000 CR4: 0000000000352ef0 [ 49.391235][ T6053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.394258][ T6053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.396659][ T6053] Call Trace: [ 49.397616][ T6053] [ 49.398510][ T6053] ? die+0x31/0x80 [ 49.399671][ T6053] ? do_trap+0x232/0x430 [ 49.400860][ T6053] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 49.402482][ T6053] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 49.404115][ T6053] ? do_error_trap+0xf4/0x230 [ 49.405430][ T6053] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 49.405525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 49.407044][ T6053] ? handle_invalid_op+0x34/0x40 [ 49.411223][ T6053] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 49.413469][ T6053] ? exc_invalid_op+0x2e/0x50 [ 49.415249][ T6053] ? asm_exc_invalid_op+0x1a/0x20 [ 49.416877][ T6053] ? alloc_hugetlb_folio_reserve+0xab/0xc0 [ 49.418469][ T6053] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 49.420194][ T6053] memfd_alloc_folio+0x16c/0x3b0 [ 49.421563][ T6053] memfd_pin_folios+0xe8c/0x1150 [ 49.422937][ T6053] ? __pfx_memfd_pin_folios+0x10/0x10 [ 49.424415][ T6053] ? __pfx___lock_acquire+0x10/0x10 [ 49.425898][ T6053] ? __pfx_down_read+0x10/0x10 [ 49.427250][ T6053] ? __fget_files+0x206/0x3a0 [ 49.428599][ T6053] udmabuf_create+0x641/0x11e0 [ 49.429927][ T6053] ? __pfx_udmabuf_create+0x10/0x10 [ 49.431739][ T6053] ? lock_acquire+0x2f/0xb0 [ 49.433485][ T6053] ? __might_fault+0xe3/0x190 [ 49.435308][ T6053] ? __might_fault+0xe3/0x190 [ 49.437117][ T6053] udmabuf_ioctl+0x193/0x310 [ 49.438565][ T6053] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 49.439977][ T6053] ? __fget_files+0x206/0x3a0 [ 49.441308][ T6053] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 49.443001][ T6053] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 49.444409][ T6053] __do_fast_syscall_32+0x73/0x120 [ 49.445811][ T6053] do_fast_syscall_32+0x32/0x80 [ 49.447105][ T6053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 49.448816][ T6053] RIP: 0023:0xf7f76579 [ 49.449922][ T6053] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 49.456448][ T6053] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 49.459386][ T6053] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040187542 [ 49.461577][ T6053] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.463943][ T6053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 49.466063][ T6053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.468148][ T6053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.470269][ T6053] [ 49.471121][ T6053] Modules linked in: [ 49.472229][ T6053] ---[ end trace 0000000000000000 ]--- [ 49.473926][ T6053] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 49.476348][ T6053] Code: a3 d0 00 00 00 e8 e4 73 a2 ff 48 c7 c7 40 56 e1 8d e8 88 c2 32 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 c5 73 a2 ff 90 <0f> 0b e8 2d 55 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 49.482676][ T6053] RSP: 0018:ffffc900036078f0 EFLAGS: 00010087 [ 49.484377][ T6053] RAX: 00000000000007ee RBX: ffffffff9a83d758 RCX: ffffc9000c402000 [ 49.486459][ T6053] RDX: 0000000000080000 RSI: ffffffff82167acb RDI: 0000000000000007 [ 49.488607][ T6053] RBP: ffffea0000478000 R08: 0000000000000007 R09: 0000000000000000 [ 49.490771][ T6053] R10: 0000000000000000 R11: 0000000000000026 R12: 0000000000000000 [ 49.493002][ T6053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 49.495424][ T6053] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:00000000f5096b40 [ 49.498845][ T6053] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 49.501396][ T6053] CR2: 000000000c3213b9 CR3: 000000006b2a4000 CR4: 0000000000352ef0 [ 49.503825][ T6053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.506272][ T6053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.508583][ T6053] Kernel panic - not syncing: Fatal exception [ 49.510796][ T6053] Kernel Offset: disabled [ 49.512060][ T6053] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:47:29 Registers: info registers vcpu 0 CPU#0 RAX=ffff7fffffffffff RBX=0000000000000000 RCX=ffffffff819542bc RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff905fea10 RBP=ffffffff905fea10 RSP=ffffc900034f7858 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff905fea17 R11=0000000000000001 R12=0000000000000000 R13=000000000003da8c R14=0000000000000001 R15=0000000000000000 RIP=ffffffff821bc84c RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f017d891280 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73fec2c CR3=000000004c894000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c003480 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f00534b4e494c56 454400454d414e56 4544005845444e49 464900524f4e494d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000032 2e6364755f796d6d 75642f6364752f32 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f84b2f583dd32ff 000056504e230ae8 0000000000000031 0000000000000032 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b27697a787c7a30 23333a3a38263342 4943213f395b2249 5a6e786b6e646b7e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000054 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85388475 RDI=ffffffff9aad4e20 RBP=ffffffff9aad4de0 RSP=ffffc90003607278 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000054 R14=ffffffff9aad4de0 R15=0000000000000000 RIP=ffffffff8538849f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3213b9 CR3=000000006b2a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88804cbe2000 RCX=ffffffff89f4f124 RDX=1ffff1100997c467 RSI=ffffffff89fcad87 RDI=ffff88804cbe2000 RBP=ffffc90000548bf0 RSP=ffffc90000548b48 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000005b0b R12=1ffff920000a917a R13=ffffffff8cafb1a0 R14=ffff88804cbe2000 R15=ffff88804cbe2338 RIP=ffffffff89fcad9c RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f50f2e7c CR3=000000005abba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000e1819000 Opmask01=000000000000003f Opmask02=000000003f37ffbf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 69253a6925632500 3d45444f4d564544 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c002c80 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ffffffff00000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4bffb098 00007ffc00302e74 65676461672d7761 7200524556495244 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4bffb098 00007ffc00302e74 65676461672d7761 723d524556495244 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000042c14bc28d98 000042c1000d1349 585a595c5a104a5c 4f00524556495244 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000040 000000000000322e 7465676461672f32 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0048544150564544 0000000000000021 0000000000007374 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b27697a787c7a30 23333a3a38263342 4943213f395b2249 5a6e786b6e646b7e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000041e8c RBX=0000000000000003 RCX=ffffffff8b46be39 RDX=ffffed10056e6f86 RSI=ffffffff8bd2d660 RDI=ffffffff818ffe49 RBP=ffffed1003ad3488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6f85 R10=ffff88802b737c2b R11=0000000000000001 R12=0000000000000003 R13=ffff88801d69a440 R14=ffffffff905fea10 R15=0000000000000000 RIP=ffffffff8b46d21f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080005000 CR3=000000004c3fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73bcff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000