syzkaller login: [ 91.911479][ T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:23397' (ED25519) to the list of known hosts.
2025/09/01 14:47:10 parsed 1 programs
[ 123.543965][ T5368] cgroup: Unknown subsys name 'net'
[ 123.616106][ T5368] cgroup: Unknown subsys name 'cpuset'
[ 123.623514][ T5368] cgroup: Unknown subsys name 'rlimit'
[ 125.339900][ T5368] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 129.460753][ T5379] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 130.884674][ T3046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.888142][ T3046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.926224][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.929641][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 131.800983][ T5418] chnl_net:caif_netlink_parms(): no params data found
[ 131.866973][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 131.870528][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 131.874509][ T5418] bridge_slave_0: entered allmulticast mode
[ 131.878412][ T5418] bridge_slave_0: entered promiscuous mode
[ 131.884275][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 131.887384][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 131.890408][ T5418] bridge_slave_1: entered allmulticast mode
[ 131.896491][ T5418] bridge_slave_1: entered promiscuous mode
[ 131.921053][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 131.927163][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 131.954187][ T5418] team0: Port device team_slave_0 added
[ 131.958738][ T5418] team0: Port device team_slave_1 added
[ 131.982077][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 131.985015][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 131.996695][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 132.003763][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 132.006816][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 132.018339][ T5418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 132.055029][ T5418] hsr_slave_0: entered promiscuous mode
[ 132.058291][ T5418] hsr_slave_1: entered promiscuous mode
[ 132.213544][ T5418] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 132.226309][ T5418] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 132.233957][ T5418] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 132.240852][ T5418] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 132.328503][ T5418] 8021q: adding VLAN 0 to HW filter on device bond0
[ 132.353510][ T5418] 8021q: adding VLAN 0 to HW filter on device team0
[ 132.364339][ T3046] bridge0: port 1(bridge_slave_0) entered blocking state
[ 132.367588][ T3046] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 132.379877][ T3046] bridge0: port 2(bridge_slave_1) entered blocking state
[ 132.383179][ T3046] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 132.579221][ T5418] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 132.619378][ T5418] veth0_vlan: entered promiscuous mode
[ 132.628629][ T5418] veth1_vlan: entered promiscuous mode
[ 132.656382][ T5418] veth0_macvtap: entered promiscuous mode
[ 132.662583][ T5418] veth1_macvtap: entered promiscuous mode
[ 132.678738][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 132.690908][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 132.706200][ T158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 132.718674][ T158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 132.731021][ T158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 132.739950][ T158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 132.884099][ T158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 132.934881][ T158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 132.972739][ T158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 133.015674][ T158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 134.096035][ T5462] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 134.099953][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 134.106251][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 134.110144][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 134.113954][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/09/01 14:47:24 executed programs: 0
[ 134.759466][ T4703] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 134.765855][ T4703] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 134.769558][ T4703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 134.773791][ T4703] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 134.777514][ T4703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 134.958177][ T5472] chnl_net:caif_netlink_parms(): no params data found
[ 135.022585][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state
[ 135.025614][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state
[ 135.028771][ T5472] bridge_slave_0: entered allmulticast mode
[ 135.033003][ T5472] bridge_slave_0: entered promiscuous mode
[ 135.038383][ T5472] bridge0: port 2(bridge_slave_1) entered blocking state
[ 135.044063][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state
[ 135.047106][ T5472] bridge_slave_1: entered allmulticast mode
[ 135.050811][ T5472] bridge_slave_1: entered promiscuous mode
[ 135.075881][ T5472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 135.084002][ T5472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 135.108812][ T5472] team0: Port device team_slave_0 added
[ 135.113774][ T5472] team0: Port device team_slave_1 added
[ 135.135795][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 135.138706][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 135.150721][ T5472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 135.157883][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 135.160852][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 135.173588][ T5472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 135.210676][ T5472] hsr_slave_0: entered promiscuous mode
[ 135.216407][ T5472] hsr_slave_1: entered promiscuous mode
[ 135.219557][ T5472] debugfs: 'hsr0' already exists in 'hsr'
[ 135.222830][ T5472] Cannot create hsr debugfs directory
[ 135.644790][ T158] bridge_slave_1: left allmulticast mode
[ 135.647488][ T158] bridge_slave_1: left promiscuous mode
[ 135.650639][ T158] bridge0: port 2(bridge_slave_1) entered disabled state
[ 135.694534][ T158] bridge_slave_0: left allmulticast mode
[ 135.696868][ T158] bridge_slave_0: left promiscuous mode
[ 135.699310][ T158] bridge0: port 1(bridge_slave_0) entered disabled state
[ 136.177388][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 136.184194][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 136.188813][ T158] bond0 (unregistering): Released all slaves
[ 136.323292][ T158] hsr_slave_0: left promiscuous mode
[ 136.330408][ T158] hsr_slave_1: left promiscuous mode
[ 136.341047][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 136.352660][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 136.361531][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 136.364926][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 136.388699][ T158] veth1_macvtap: left promiscuous mode
[ 136.402177][ T158] veth0_macvtap: left promiscuous mode
[ 136.405451][ T158] veth1_vlan: left promiscuous mode
[ 136.408381][ T158] veth0_vlan: left promiscuous mode
[ 136.867391][ T4703] Bluetooth: hci0: command tx timeout
[ 136.973263][ T158] team0 (unregistering): Port device team_slave_1 removed
[ 137.014248][ T158] team0 (unregistering): Port device team_slave_0 removed
[ 137.706610][ T5472] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 137.729910][ T5472] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 137.751035][ T5472] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 137.774967][ T5472] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 137.995457][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[ 137.998224][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[ 138.523684][ T5472] 8021q: adding VLAN 0 to HW filter on device bond0
[ 138.586874][ T5472] 8021q: adding VLAN 0 to HW filter on device team0
[ 138.610209][ T3046] bridge0: port 1(bridge_slave_0) entered blocking state
[ 138.613462][ T3046] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 138.633865][ T3046] bridge0: port 2(bridge_slave_1) entered blocking state
[ 138.636968][ T3046] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 138.688828][ T5472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 138.829842][ T5472] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 138.874031][ T5472] veth0_vlan: entered promiscuous mode
[ 138.883483][ T5472] veth1_vlan: entered promiscuous mode
[ 138.907509][ T5472] veth0_macvtap: entered promiscuous mode
[ 138.915078][ T5472] veth1_macvtap: entered promiscuous mode
[ 138.929376][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 138.940710][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 138.944246][ T4703] Bluetooth: hci0: command tx timeout
[ 138.959776][ T3046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.965959][ T3046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.969690][ T3046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.985052][ T3046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 139.037293][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 139.040656][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 139.076364][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 139.079775][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 139.148384][ T5514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 139.156514][ T5514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 139.163238][ T5514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 139.169706][ T5514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 139.185774][ T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[ 139.189833][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 139.302194][ T1040] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 139.412379][ T1040] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 139.521418][ T13] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 139.704183][ T5515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 139.709675][ T5515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 139.716996][ T5515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
2025/09/01 14:47:29 executed programs: 3
[ 139.725724][ T5515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 139.748920][ T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[ 139.754403][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 139.861376][ T3046] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 139.971914][ T1040] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 140.081427][ T1040] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 140.262864][ T5516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 140.269354][ T5516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 140.279518][ T5516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 140.287573][ T5516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 140.294037][ T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[ 140.297538][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 140.829766][ T5517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 140.836824][ T13] wlan1: authenticated
[ 140.839029][ T5517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 140.844294][ T13] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 140.849205][ T5517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 140.855893][ T13] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[ 140.860954][ T5517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 140.866446][ T13] wlan1: associated
[ 141.021463][ T4703] Bluetooth: hci0: command tx timeout
[ 141.385693][ T5518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 141.390835][ T5518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 141.398655][ T5518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 141.405073][ T3046] wlan1: AP 08:02:11:00:00:00 tries to chanswitch to same channel, ignore
[ 141.409173][ T5518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 141.930580][ T5519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 141.936517][ T5519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 141.944183][ T5519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 141.949460][ T5519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 142.469417][ T5520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 142.475354][ T5520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 142.480585][ T5520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 142.487582][ T5520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 143.009227][ T5521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 143.015100][ T5521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 143.020418][ T5521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 143.030070][ T5521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 143.104327][ T4703] Bluetooth: hci0: command tx timeout
[ 143.547525][ T13] ==================================================================
[ 143.551290][ T13] BUG: KASAN: slab-use-after-free in cmp_bss+0xd4d/0xe80
[ 143.554515][ T13] Read of size 4 at addr ffff8880597b3918 by task kworker/u4:1/13
[ 143.558624][ T13]
[ 143.559793][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u4:1 Not tainted syzkaller #0 PREEMPT(full)
[ 143.559808][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 143.559816][ T13] Workqueue: events_unbound cfg80211_wiphy_work
[ 143.559838][ T13] Call Trace:
[ 143.559846][ T13]
[ 143.559852][ T13] dump_stack_lvl+0x189/0x250
[ 143.559867][ T13] ? __kasan_check_byte+0x12/0x40
[ 143.559929][ T13] ? __pfx_dump_stack_lvl+0x10/0x10
[ 143.559941][ T13] ? lock_release+0x4b/0x3e0
[ 143.559958][ T13] ? __virt_addr_valid+0x4a5/0x5c0
[ 143.559973][ T13] print_report+0xca/0x240
[ 143.559984][ T13] ? cmp_bss+0xd4d/0xe80
[ 143.559995][ T13] kasan_report+0x118/0x150
[ 143.560007][ T13] ? ret_from_fork_asm+0x1a/0x30
[ 143.560022][ T13] ? cmp_bss+0xd4d/0xe80
[ 143.560034][ T13] cmp_bss+0xd4d/0xe80
[ 143.560047][ T13] ? __lock_acquire+0xab9/0xd20
[ 143.560061][ T13] __cfg80211_bss_update+0xdb/0x2120
[ 143.560079][ T13] ? do_raw_spin_lock+0x121/0x290
[ 143.560092][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 143.560105][ T13] ? trace_kmalloc+0x1f/0xd0
[ 143.560116][ T13] ? cfg80211_inform_single_bss_data+0xb90/0x1ac0
[ 143.560129][ T13] cfg80211_inform_single_bss_data+0xba9/0x1ac0
[ 143.560144][ T13] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[ 143.560160][ T13] ? arch_stack_walk+0x11c/0x150
[ 143.560174][ T13] ? cfg80211_inform_bss_data+0x1e8/0x3b30
[ 143.560186][ T13] cfg80211_inform_bss_data+0x1fb/0x3b30
[ 143.560198][ T13] ? __pfx_stack_trace_save+0x10/0x10
[ 143.560211][ T13] ? stack_depot_save_flags+0x40/0x860
[ 143.560226][ T13] ? kasan_save_track+0x4f/0x80
[ 143.560237][ T13] ? kasan_save_track+0x3e/0x80
[ 143.560247][ T13] ? kasan_save_free_info+0x46/0x50
[ 143.560261][ T13] ? __kasan_slab_free+0x5b/0x80
[ 143.560272][ T13] ? kfree+0x18e/0x440
[ 143.560281][ T13] ? ieee80211_rx_mgmt_beacon+0x20f7/0x2cd0
[ 143.560335][ T13] ? ieee80211_sta_rx_queued_mgmt+0x4ed/0x4470
[ 143.560346][ T13] ? ieee80211_iface_work+0x652/0x12d0
[ 143.560361][ T13] ? cfg80211_wiphy_work+0x2bb/0x470
[ 143.560375][ T13] ? process_scheduled_works+0xae1/0x17b0
[ 143.560390][ T13] ? worker_thread+0x8a0/0xda0
[ 143.560399][ T13] ? kthread+0x70e/0x8a0
[ 143.560411][ T13] ? ret_from_fork_asm+0x1a/0x30
[ 143.560426][ T13] ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[ 143.560449][ T13] ? kasan_quarantine_put+0xdd/0x220
[ 143.560466][ T13] ? lockdep_hardirqs_on+0x9c/0x150
[ 143.560484][ T13] cfg80211_inform_bss_frame_data+0x3d7/0x730
[ 143.560498][ T13] ? ieee80211_bss_info_update+0x2dc/0x9e0
[ 143.560512][ T13] ieee80211_bss_info_update+0x746/0x9e0
[ 143.560530][ T13] ? __pfx_ieee80211_bss_info_update+0x10/0x10
[ 143.560546][ T13] ? ieee80211_get_channel_khz+0x15b/0x8a0
[ 143.560570][ T13] ieee80211_rx_bss_info+0x176/0x280
[ 143.560587][ T13] ieee80211_sta_rx_queued_mgmt+0x1294/0x4470
[ 143.560597][ T13] ? rcu_is_watching+0x15/0xb0
[ 143.560610][ T13] ? switch_mm_irqs_off+0x5b6/0x7a0
[ 143.560625][ T13] ? __pfx_ieee80211_sta_rx_queued_mgmt+0x10/0x10
[ 143.560644][ T13] ? __lock_acquire+0xab9/0xd20
[ 143.560660][ T13] ? rcu_is_watching+0x15/0xb0
[ 143.560677][ T13] ? do_raw_spin_unlock+0x4d/0x240
[ 143.560691][ T13] ? __lock_acquire+0xab9/0xd20
[ 143.560707][ T13] ? __lock_acquire+0xab9/0xd20
[ 143.560723][ T13] ? __lock_acquire+0xab9/0xd20
[ 143.560742][ T13] ? kcov_remote_start+0x18e/0x7f0
[ 143.560797][ T13] ieee80211_iface_work+0x652/0x12d0
[ 143.560814][ T13] cfg80211_wiphy_work+0x2bb/0x470
[ 143.560829][ T13] ? process_scheduled_works+0x9ef/0x17b0
[ 143.560841][ T13] process_scheduled_works+0xae1/0x17b0
[ 143.560858][ T13] ? __pfx_process_scheduled_works+0x10/0x10
[ 143.560871][ T13] worker_thread+0x8a0/0xda0
[ 143.560888][ T13] kthread+0x70e/0x8a0
[ 143.560901][ T13] ? __pfx_worker_thread+0x10/0x10
[ 143.560911][ T13] ? __pfx_kthread+0x10/0x10
[ 143.560923][ T13] ? _raw_spin_unlock_irq+0x23/0x50
[ 143.560938][ T13] ? lockdep_hardirqs_on+0x9c/0x150
[ 143.560953][ T13] ? __pfx_kthread+0x10/0x10
[ 143.560966][ T13] ret_from_fork+0x3fc/0x770
[ 143.560979][ T13] ? __pfx_ret_from_fork+0x10/0x10
[ 143.560992][ T13] ? __pfx_kthread+0x10/0x10
[ 143.561004][ T13] ret_from_fork_asm+0x1a/0x30
[ 143.561022][ T13]
[ 143.561026][ T13]
[ 143.742167][ T13] Allocated by task 3046:
[ 143.744133][ T13] kasan_save_track+0x3e/0x80
[ 143.746303][ T13] __kasan_kmalloc+0x93/0xb0
[ 143.748310][ T13] __kmalloc_noprof+0x27a/0x4f0
[ 143.750472][ T13] cfg80211_inform_single_bss_data+0x905/0x1ac0
[ 143.753159][ T13] cfg80211_inform_bss_data+0x1fb/0x3b30
[ 143.755459][ T13] cfg80211_inform_bss_frame_data+0x3d7/0x730
[ 143.758014][ T13] ieee80211_bss_info_update+0x746/0x9e0
[ 143.760460][ T13] ieee80211_rx_bss_info+0x176/0x280
[ 143.762794][ T13] ieee80211_rx_mgmt_beacon+0x197d/0x2cd0
[ 143.765237][ T13] ieee80211_sta_rx_queued_mgmt+0x4ed/0x4470
[ 143.768206][ T13] ieee80211_iface_work+0x652/0x12d0
[ 143.770910][ T13] cfg80211_wiphy_work+0x2bb/0x470
[ 143.773284][ T13] process_scheduled_works+0xae1/0x17b0
[ 143.775656][ T13] worker_thread+0x8a0/0xda0
[ 143.777367][ T13] kthread+0x70e/0x8a0
[ 143.779165][ T13] ret_from_fork+0x3fc/0x770
[ 143.781088][ T13] ret_from_fork_asm+0x1a/0x30
[ 143.782826][ T13]
[ 143.783730][ T13] Freed by task 3046:
[ 143.785203][ T13] kasan_save_track+0x3e/0x80
[ 143.787056][ T13] kasan_save_free_info+0x46/0x50
[ 143.789277][ T13] __kasan_slab_free+0x5b/0x80
[ 143.791344][ T13] kmem_cache_free_bulk+0x2d1/0x520
[ 143.793516][ T13] kvfree_rcu_bulk+0xe5/0x1f0
[ 143.795695][ T13] kfree_rcu_monitor+0x211/0x2a0
[ 143.798001][ T13] process_scheduled_works+0xae1/0x17b0
[ 143.800546][ T13] worker_thread+0x8a0/0xda0
[ 143.802492][ T13] kthread+0x70e/0x8a0
[ 143.804114][ T13] ret_from_fork+0x3fc/0x770
[ 143.806129][ T13] ret_from_fork_asm+0x1a/0x30
[ 143.808180][ T13]
[ 143.809273][ T13] Last potentially related work creation:
[ 143.811648][ T13] kasan_save_stack+0x3e/0x60
[ 143.813652][ T13] kasan_record_aux_stack+0xbd/0xd0
[ 143.815896][ T13] kvfree_call_rcu+0xbb/0x410
[ 143.817921][ T13] cfg80211_update_known_bss+0x454/0x1330
[ 143.820351][ T13] cfg80211_update_assoc_bss_entry+0x4ba/0x6a0
[ 143.822970][ T13] cfg80211_ch_switch_notify+0x3c1/0x780
[ 143.825520][ T13] ieee80211_sta_process_chanswitch+0xad4/0x2870
[ 143.828223][ T13] ieee80211_rx_mgmt_beacon+0x19c7/0x2cd0
[ 143.831074][ T13] ieee80211_sta_rx_queued_mgmt+0x4ed/0x4470
[ 143.834356][ T13] ieee80211_iface_work+0x652/0x12d0
[ 143.837239][ T13] cfg80211_wiphy_work+0x2bb/0x470
[ 143.839696][ T13] process_scheduled_works+0xae1/0x17b0
[ 143.842591][ T13] worker_thread+0x8a0/0xda0
[ 143.844918][ T13] kthread+0x70e/0x8a0
[ 143.846675][ T13] ret_from_fork+0x3fc/0x770
[ 143.848707][ T13] ret_from_fork_asm+0x1a/0x30
[ 143.850798][ T13]
[ 143.851822][ T13] The buggy address belongs to the object at ffff8880597b3900
[ 143.851822][ T13] which belongs to the cache kmalloc-96 of size 96
[ 143.857540][ T13] The buggy address is located 24 bytes inside of
[ 143.857540][ T13] freed 96-byte region [ffff8880597b3900, ffff8880597b3960)
[ 143.863225][ T13]
[ 143.864277][ T13] The buggy address belongs to the physical page:
[ 143.866994][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880597b3880 pfn:0x597b3
[ 143.871081][ T13] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 143.874188][ T13] page_type: f5(slab)
[ 143.875963][ T13] raw: 04fff00000000000 ffff88801a441280 ffffea00013711c0 dead000000000002
[ 143.879716][ T13] raw: ffff8880597b3880 000000000020001e 00000000f5000000 0000000000000000
[ 143.883367][ T13] page dumped because: kasan: bad access detected
[ 143.886370][ T13] page_owner tracks the page as allocated
[ 143.888953][ T13] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9, tgid 9 (kworker/0:0), ts 132372320684, free_ts 130490331282
[ 143.897163][ T13] post_alloc_hook+0x240/0x2a0
[ 143.899259][ T13] get_page_from_freelist+0x21e4/0x22c0
[ 143.901746][ T13] __alloc_frozen_pages_noprof+0x181/0x370
[ 143.904286][ T13] alloc_pages_mpol+0x232/0x4a0
[ 143.906397][ T13] allocate_slab+0x8a/0x370
[ 143.908336][ T13] ___slab_alloc+0xbeb/0x1410
[ 143.910390][ T13] __kmalloc_cache_noprof+0x296/0x3d0
[ 143.912705][ T13] dst_cow_metrics_generic+0x56/0x1c0
[ 143.915019][ T13] icmp6_dst_alloc+0x264/0x420
[ 143.917102][ T13] mld_sendpack+0x678/0xd80
[ 143.919027][ T13] mld_ifc_work+0x83e/0xd60
[ 143.921013][ T13] process_scheduled_works+0xae1/0x17b0
[ 143.923381][ T13] worker_thread+0x8a0/0xda0
[ 143.925343][ T13] kthread+0x70e/0x8a0
[ 143.927103][ T13] ret_from_fork+0x3fc/0x770
[ 143.929092][ T13] ret_from_fork_asm+0x1a/0x30
[ 143.931125][ T13] page last free pid 5385 tgid 5385 stack trace:
[ 143.933869][ T13] __free_frozen_pages+0xbc4/0xd30
[ 143.936053][ T13] vfree+0x25a/0x400
[ 143.937643][ T13] kcov_close+0x28/0x50
[ 143.939494][ T13] __fput+0x44c/0xa70
[ 143.941121][ T13] task_work_run+0x1d4/0x260
[ 143.943081][ T13] do_exit+0x6b5/0x2300
[ 143.944904][ T13] do_group_exit+0x21c/0x2d0
[ 143.946823][ T13] get_signal+0x1286/0x1340
[ 143.948680][ T13] arch_do_signal_or_restart+0x9a/0x750
[ 143.951093][ T13] exit_to_user_mode_loop+0x75/0x110
[ 143.953406][ T13] do_syscall_64+0x2bd/0x3b0
[ 143.955493][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.957822][ T13]
[ 143.958688][ T13] Memory state around the buggy address:
[ 143.961015][ T13] ffff8880597b3800: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 143.964226][ T13] ffff8880597b3880: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 143.967651][ T13] >ffff8880597b3900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 143.971077][ T13] ^
[ 143.973165][ T13] ffff8880597b3980: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 143.977075][ T13] ffff8880597b3a00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 143.981024][ T13] ==================================================================
[ 143.984602][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 143.988231][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u4:1 Not tainted syzkaller #0 PREEMPT(full)
[ 143.992325][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 143.996886][ T13] Workqueue: events_unbound cfg80211_wiphy_work
[ 143.999490][ T13] Call Trace:
[ 144.000969][ T13]
[ 144.002263][ T13] dump_stack_lvl+0x99/0x250
[ 144.004269][ T13] ? __asan_memcpy+0x40/0x70
[ 144.006305][ T13] ? __pfx_dump_stack_lvl+0x10/0x10
[ 144.008630][ T13] ? __pfx__printk+0x10/0x10
[ 144.010881][ T13] vpanic+0x281/0x750
[ 144.012671][ T13] ? __pfx_vpanic+0x10/0x10
[ 144.014664][ T13] ? irqentry_exit+0x74/0x90
[ 144.016672][ T13] panic+0xb9/0xc0
[ 144.018216][ T13] ? __pfx_panic+0x10/0x10
[ 144.020152][ T13] ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 144.022584][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 144.025291][ T13] ? cmp_bss+0xd4d/0xe80
[ 144.027122][ T13] check_panic_on_warn+0x89/0xb0
[ 144.029303][ T13] ? cmp_bss+0xd4d/0xe80
[ 144.031216][ T13] end_report+0x78/0x160
[ 144.033094][ T13] kasan_report+0x129/0x150
[ 144.035095][ T13] ? ret_from_fork_asm+0x1a/0x30
[ 144.037173][ T13] ? cmp_bss+0xd4d/0xe80
[ 144.038897][ T13] cmp_bss+0xd4d/0xe80
[ 144.040633][ T13] ? __lock_acquire+0xab9/0xd20
[ 144.042736][ T13] __cfg80211_bss_update+0xdb/0x2120
[ 144.044995][ T13] ? do_raw_spin_lock+0x121/0x290
[ 144.047102][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 144.049469][ T13] ? trace_kmalloc+0x1f/0xd0
[ 144.051456][ T13] ? cfg80211_inform_single_bss_data+0xb90/0x1ac0
[ 144.054139][ T13] cfg80211_inform_single_bss_data+0xba9/0x1ac0
[ 144.056450][ T13] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[ 144.059275][ T13] ? arch_stack_walk+0x11c/0x150
[ 144.061124][ T13] ? cfg80211_inform_bss_data+0x1e8/0x3b30
[ 144.063445][ T13] cfg80211_inform_bss_data+0x1fb/0x3b30
[ 144.065921][ T13] ? __pfx_stack_trace_save+0x10/0x10
[ 144.068438][ T13] ? stack_depot_save_flags+0x40/0x860
[ 144.070822][ T13] ? kasan_save_track+0x4f/0x80
[ 144.073025][ T13] ? kasan_save_track+0x3e/0x80
[ 144.075116][ T13] ? kasan_save_free_info+0x46/0x50
[ 144.077450][ T13] ? __kasan_slab_free+0x5b/0x80
[ 144.079572][ T13] ? kfree+0x18e/0x440
[ 144.081222][ T13] ? ieee80211_rx_mgmt_beacon+0x20f7/0x2cd0
[ 144.083887][ T13] ? ieee80211_sta_rx_queued_mgmt+0x4ed/0x4470
[ 144.086404][ T13] ? ieee80211_iface_work+0x652/0x12d0
[ 144.088961][ T13] ? cfg80211_wiphy_work+0x2bb/0x470
[ 144.091590][ T13] ? process_scheduled_works+0xae1/0x17b0
[ 144.094035][ T13] ? worker_thread+0x8a0/0xda0
[ 144.096217][ T13] ? kthread+0x70e/0x8a0
[ 144.098059][ T13] ? ret_from_fork_asm+0x1a/0x30
[ 144.100187][ T13] ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[ 144.102726][ T13] ? kasan_quarantine_put+0xdd/0x220
[ 144.105000][ T13] ? lockdep_hardirqs_on+0x9c/0x150
[ 144.107087][ T13] cfg80211_inform_bss_frame_data+0x3d7/0x730
[ 144.109779][ T13] ? ieee80211_bss_info_update+0x2dc/0x9e0
[ 144.112304][ T13] ieee80211_bss_info_update+0x746/0x9e0
[ 144.114712][ T13] ? __pfx_ieee80211_bss_info_update+0x10/0x10
[ 144.117375][ T13] ? ieee80211_get_channel_khz+0x15b/0x8a0
[ 144.119877][ T13] ieee80211_rx_bss_info+0x176/0x280
[ 144.122217][ T13] ieee80211_sta_rx_queued_mgmt+0x1294/0x4470
[ 144.124833][ T13] ? rcu_is_watching+0x15/0xb0
[ 144.126925][ T13] ? switch_mm_irqs_off+0x5b6/0x7a0
[ 144.129169][ T13] ? __pfx_ieee80211_sta_rx_queued_mgmt+0x10/0x10
[ 144.131841][ T13] ? __lock_acquire+0xab9/0xd20
[ 144.134101][ T13] ? rcu_is_watching+0x15/0xb0
[ 144.136578][ T13] ? do_raw_spin_unlock+0x4d/0x240
[ 144.138893][ T13] ? __lock_acquire+0xab9/0xd20
[ 144.141064][ T13] ? __lock_acquire+0xab9/0xd20
[ 144.143138][ T13] ? __lock_acquire+0xab9/0xd20
[ 144.145348][ T13] ? kcov_remote_start+0x18e/0x7f0
[ 144.147609][ T13] ieee80211_iface_work+0x652/0x12d0
[ 144.149844][ T13] cfg80211_wiphy_work+0x2bb/0x470
[ 144.152098][ T13] ? process_scheduled_works+0x9ef/0x17b0
[ 144.154662][ T13] process_scheduled_works+0xae1/0x17b0
[ 144.157124][ T13] ? __pfx_process_scheduled_works+0x10/0x10
[ 144.159792][ T13] worker_thread+0x8a0/0xda0
[ 144.162036][ T13] kthread+0x70e/0x8a0
[ 144.163741][ T13] ? __pfx_worker_thread+0x10/0x10
[ 144.165889][ T13] ? __pfx_kthread+0x10/0x10
[ 144.168016][ T13] ? _raw_spin_unlock_irq+0x23/0x50
[ 144.170390][ T13] ? lockdep_hardirqs_on+0x9c/0x150
[ 144.172561][ T13] ? __pfx_kthread+0x10/0x10
[ 144.174589][ T13] ret_from_fork+0x3fc/0x770
[ 144.176497][ T13] ? __pfx_ret_from_fork+0x10/0x10
[ 144.178650][ T13] ? __pfx_kthread+0x10/0x10
[ 144.180590][ T13] ret_from_fork_asm+0x1a/0x30
[ 144.182448][ T13]
[ 144.183915][ T13] Kernel Offset: disabled
[ 144.185630][ T13] Rebooting in 86400 seconds..
VM DIAGNOSIS:
14:47:33 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001f6450
R8 =ffff8880339e8237 R9 =1ffff1100673d046 R10=dffffc0000000000 R11=ffffffff8550ca40
R12=dffffc0000000000 R13=ffffffff99b088e9 R14=ffffffff99dfd820 R15=0000000000000000
RIP=ffffffff8550cabc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808d20d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000555585748808 CR3=0000000041d3e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000004000 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000316e616c77
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcee9f4d86
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcee9f4d86 00007ffcee9f4d8c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f826ea12e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f826ea12e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f826ea12e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f826ea12e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f826ea12ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f826ea12fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000110208 0000001102080100 0011020800000050
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8201010202020202 0206000001006400 0000000000000000 0000000011020800
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f68000700080006
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000