last executing test programs: 17.001715904s ago: executing program 1 (id=278): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5414, 0x20000004) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r3) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5450, 0x0) 12.772830941s ago: executing program 1 (id=280): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 11.931828796s ago: executing program 0 (id=281): syz_clone(0x80, &(0x7f0000003440), 0x0, 0x0, &(0x7f0000003540), &(0x7f0000003580)) 10.668964628s ago: executing program 1 (id=282): pselect6(0x40, &(0x7f0000000180), 0xfffffffffffffffe, 0x0, 0x0, 0x0) 9.883864258s ago: executing program 0 (id=283): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) fcntl$setstatus(r0, 0x4, 0x7c00) write$P9_RREAD(r0, &(0x7f0000000180)={0x40, 0x75, 0x1, {0x35, "f909fb29816eb2203fa6f48c509cdc722038507ffabba0a1655c4df884e786c6227e47e22aa49633f5678ba85b1687e1f23c9220e2"}}, 0x40) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000020acb"], 0x14}}, 0x0) 8.998714167s ago: executing program 1 (id=284): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) 7.27943835s ago: executing program 1 (id=285): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x5450, 0x0) 6.150078021s ago: executing program 1 (id=286): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) 4.911825672s ago: executing program 0 (id=287): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000240)={0x1ec4, 0x13, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [], [0xffffffe1, 0x10000], 0x0, [0x40, 0x9]}, 0x7, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x45, 0x1, "1a4bac6a27bfbda1020fa85864898fc360e54bbd0f36f0d066ae9f6adcd2c1978298f5152a9cb714c00ac9869189d67751d1b1f9cee89c52c1fec763f3d99b654c"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "8482bf51c0a1c831b5c562bcefff4d90201e62e9a41e7b82ffced7a670fb7ec51c4434f3c6dde47b58ddb03b847db975328589ebaffedcd023860c27336266ef510558442f"}, @INET_DIAG_REQ_BYTECODE={0x1001, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xdde, 0x1, "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"}]}, 0x1ec4}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) 3.095957594s ago: executing program 0 (id=288): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$AUTOFS_IOC_READY(r0, 0x5450, 0x0) 1.707156288s ago: executing program 0 (id=289): r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5452, &(0x7f0000000300)) 0s ago: executing program 0 (id=290): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100), 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xc00440, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x140c, 0x0, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x95}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f00000004c0)='ns/cgroup\x00') setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x0, 0x6}, {0x7fff, 0x0, 0x7f, 0x7fff}, {0x100, 0xf6, 0x6, 0x5}, {0x6, 0x3, 0x4, 0x800}, {0x1ff, 0x40, 0xf8, 0x1}]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) socketpair(0x2, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000800)) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000840)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000880)=0x28) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x18, 0x3f9, 0x40a, 0x70bd2c, 0x25dfdbfd, {0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x44050) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000a00)={0x0, 0xda22}, &(0x7f0000000a40)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000a80)={r6, 0x7ff}, 0x8) mq_timedreceive(r2, &(0x7f0000000ac0)=""/79, 0x4f, 0x1, &(0x7f0000000b40)={0x77359400}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000b80)={0x0, 'ip6_vti0\x00'}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r4) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, r7, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x11}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000804) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xdc, 0x3, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3c5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1f}, @CTA_PROTOINFO_DCCP_STATE={0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1}]}}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xf4a6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfb}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32256' (ED25519) to the list of known hosts. syzkaller login: [ 313.746690][ T3031] cgroup: Unknown subsys name 'net' [ 314.570385][ T3031] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 367.557841][ T3031] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 421.600703][ T3041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.675422][ T3043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.725750][ T3041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.777459][ T3043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.482387][ T3041] hsr_slave_0: entered promiscuous mode [ 434.536846][ T3041] hsr_slave_1: entered promiscuous mode [ 436.630686][ T3043] hsr_slave_0: entered promiscuous mode [ 436.660350][ T3043] hsr_slave_1: entered promiscuous mode [ 436.689280][ T3043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.692795][ T3043] Cannot create hsr debugfs directory [ 441.563155][ T3041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 441.713002][ T3041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 441.818027][ T3041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 441.902280][ T3041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 443.117229][ T3043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 443.467144][ T3043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 443.690138][ T3043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 443.849382][ T3043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.927972][ T3041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.778416][ T3043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.947782][ T3041] veth0_vlan: entered promiscuous mode [ 487.469657][ T3041] veth1_vlan: entered promiscuous mode [ 489.568884][ T3041] veth0_macvtap: entered promiscuous mode [ 490.086883][ T3041] veth1_macvtap: entered promiscuous mode [ 490.530494][ T3043] veth0_vlan: entered promiscuous mode [ 491.426584][ T3043] veth1_vlan: entered promiscuous mode [ 492.448979][ T3041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.453137][ T3041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.466498][ T3041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.468681][ T3041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.541975][ T3043] veth0_macvtap: entered promiscuous mode [ 495.370914][ T3043] veth1_macvtap: entered promiscuous mode [ 496.747823][ T3043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.749414][ T3043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.751221][ T3043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.753360][ T3043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.818586][ T3787] fuse: Bad value for 'fd' [ 535.266301][ T3792] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 547.117436][ T3808] sctp: [Deprecated]: syz.1.31 (pid 3808) Use of int in maxseg socket option. [ 547.117436][ T3808] Use struct sctp_assoc_value instead [ 554.857845][ T3819] fuse: Bad value for 'fd' [ 556.016924][ T3822] Zero length message leads to an empty skb [ 563.258182][ T35] audit: type=1326 audit(562.680:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.1.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 563.294766][ T35] audit: type=1326 audit(562.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.1.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 563.298396][ T35] audit: type=1326 audit(562.700:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.1.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 563.316438][ T35] audit: type=1326 audit(562.730:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.1.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 563.339520][ T35] audit: type=1326 audit(562.730:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.1.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 563.364513][ T35] audit: type=1326 audit(562.790:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.1.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 563.368529][ T35] audit: type=1326 audit(562.790:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.1.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 563.370927][ T35] audit: type=1326 audit(562.800:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3829 comm="syz.1.40" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 571.460144][ T35] audit: type=1326 audit(570.880:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.1.45" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 571.469281][ T35] audit: type=1326 audit(570.900:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.1.45" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 571.528223][ T35] audit: type=1326 audit(570.930:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.1.45" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 571.562716][ T35] audit: type=1326 audit(570.940:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.1.45" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 571.787456][ T35] audit: type=1326 audit(571.210:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.1.45" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 571.805476][ T35] audit: type=1326 audit(571.220:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.1.45" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 571.818308][ T35] audit: type=1326 audit(571.230:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.1.45" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 571.828586][ T35] audit: type=1326 audit(571.240:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.1.45" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 592.756879][ T35] audit: type=1326 audit(592.160:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3868 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 592.775012][ T35] audit: type=1326 audit(592.200:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3868 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 592.812202][ T35] audit: type=1326 audit(592.240:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3868 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 592.840751][ T35] audit: type=1326 audit(592.240:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3868 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 592.845385][ T35] audit: type=1326 audit(592.270:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3868 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 592.878029][ T35] audit: type=1326 audit(592.300:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3868 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 592.881331][ T35] audit: type=1326 audit(592.300:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3868 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 592.902650][ T35] audit: type=1326 audit(592.330:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3868 comm="syz.1.56" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xd8e7a code=0x7ffc0000 [ 606.312305][ T3893] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 637.079059][ T3940] geneve2: entered promiscuous mode [ 637.082161][ T3940] geneve2: entered allmulticast mode [ 651.503447][ T3975] netlink: 'syz.1.92': attribute type 29 has an invalid length. [ 651.590795][ T3975] netlink: 'syz.1.92': attribute type 29 has an invalid length. [ 651.792809][ T3975] netlink: 'syz.1.92': attribute type 29 has an invalid length. [ 652.275396][ T3975] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 653.131868][ T3980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.92'. [ 684.288471][ T4031] sctp: failed to load transform for md5: -2 [ 703.721088][ T4070] tmpfs: Unknown parameter 'ethtool' [ 705.213325][ T4068] syz.0.132: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 705.266708][ T4068] CPU: 0 PID: 4068 Comm: syz.0.132 Not tainted 6.10.0-rc6-syzkaller-gc562ba719df5 #0 [ 705.269359][ T4068] Hardware name: riscv-virtio,qemu (DT) [ 705.271200][ T4068] Call Trace: [ 705.272486][ T4068] [] dump_backtrace+0x2e/0x3c [ 705.275723][ T4068] [] show_stack+0x34/0x40 [ 705.277275][ T4068] [] dump_stack_lvl+0x122/0x196 [ 705.279862][ T4068] [] dump_stack+0x1c/0x24 [ 705.281475][ T4068] [] warn_alloc+0x170/0x292 [ 705.282996][ T4068] [] __vmalloc_node_range_noprof+0xe0a/0x11d6 [ 705.284941][ T4068] [] vzalloc_noprof+0xf8/0x126 [ 705.286701][ T4068] [] packet_set_ring+0xbbc/0x1a04 [ 705.288540][ T4068] [] packet_setsockopt+0x1758/0x3454 [ 705.290458][ T4068] [] do_sock_setsockopt+0x20a/0x402 [ 705.292169][ T4068] [] __sys_setsockopt+0xf0/0x1aa [ 705.293985][ T4068] [] __riscv_sys_setsockopt+0xa6/0x114 [ 705.295726][ T4068] [] syscall_handler+0x94/0x118 [ 705.297285][ T4068] [] do_trap_ecall_u+0x14c/0x214 [ 705.298959][ T4068] [] ret_from_exception+0x0/0x64 [ 705.379163][ T4068] Mem-Info: [ 705.381256][ T4068] active_anon:1733 inactive_anon:0 isolated_anon:0 [ 705.381256][ T4068] active_file:419 inactive_file:34346 isolated_file:0 [ 705.381256][ T4068] unevictable:768 dirty:16 writeback:0 [ 705.381256][ T4068] slab_reclaimable:2462 slab_unreclaimable:27187 [ 705.381256][ T4068] mapped:6290 shmem:802 pagetables:317 [ 705.381256][ T4068] sec_pagetables:0 bounce:0 [ 705.381256][ T4068] kernel_misc_reclaimable:0 [ 705.381256][ T4068] free:264954 free_pcp:541 free_cma:3968 [ 705.396266][ T4068] Node 0 active_anon:6932kB inactive_anon:0kB active_file:1676kB inactive_file:137384kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:25160kB dirty:64kB writeback:0kB shmem:3208kB writeback_tmp:0kB kernel_stack:2864kB pagetables:1268kB sec_pagetables:0kB all_unreclaimable? no [ 705.400082][ T4068] Node 0 DMA32 free:1059816kB boost:0kB min:4960kB low:6496kB high:8032kB reserved_highatomic:0KB active_anon:6932kB inactive_anon:0kB active_file:1676kB inactive_file:137384kB unevictable:3072kB writepending:56kB present:2097152kB managed:1540256kB mlocked:0kB bounce:0kB free_pcp:2160kB local_pcp:880kB free_cma:15872kB [ 705.403101][ T4068] lowmem_reserve[]: 0 0 0 [ 705.417999][ T4068] Node 0 DMA32: 0*4kB 4*8kB (ME) 3*16kB (UME) 5*32kB (E) 4*64kB (UME) 4*128kB (ME) 2*256kB (UE) 11*512kB (UMEC) 8*1024kB (UMEC) 6*2048kB (UMC) 252*4096kB (UMC) = 1059824kB [ 705.452647][ T4068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 705.466146][ T4068] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 705.467886][ T4068] 35569 total pagecache pages [ 705.469302][ T4068] 0 pages in swap cache [ 705.470589][ T4068] Free swap = 124996kB [ 705.471491][ T4068] Total swap = 124996kB [ 705.472459][ T4068] 524288 pages RAM [ 705.473210][ T4068] 0 pages HighMem/MovableOnly [ 705.485111][ T4068] 139224 pages reserved [ 705.487337][ T4068] 4096 pages cma reserved [ 713.700815][ T4082] tmpfs: Unknown parameter 'ethtool' [ 718.358957][ T34] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 718.402590][ C1] hrtimer: interrupt took 748400 ns [ 718.782003][ T34] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.790831][ T34] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.793374][ T34] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 718.800196][ T34] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 718.802350][ T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.976766][ T34] usb 1-1: config 0 descriptor?? [ 721.292626][ T34] usbhid 1-1:0.0: can't add hid device: -71 [ 721.302446][ T34] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 721.425704][ T34] usb 1-1: USB disconnect, device number 2 [ 724.852325][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.581894][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.190906][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.803113][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.998129][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.369715][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.536418][ T12] bond0 (unregistering): Released all slaves [ 741.016094][ T12] hsr_slave_0: left promiscuous mode [ 741.104992][ T12] hsr_slave_1: left promiscuous mode [ 741.745491][ T12] veth1_macvtap: left promiscuous mode [ 741.751693][ T12] veth0_macvtap: left promiscuous mode [ 741.796958][ T12] veth1_vlan: left promiscuous mode [ 741.803202][ T12] veth0_vlan: left promiscuous mode [ 758.681484][ T4147] serio: Serial port pts0 [ 796.086547][ T4327] sctp: failed to load transform for md5: -2 [ 797.479985][ T4128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.880744][ T4128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.338295][ T4128] hsr_slave_0: entered promiscuous mode [ 819.410579][ T4128] hsr_slave_1: entered promiscuous mode [ 831.812371][ T4128] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 831.929661][ T4128] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 831.989540][ T4128] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 832.130182][ T4128] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 845.741664][ T4128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.008989][ T4586] fuse: Invalid rootmode [ 870.977762][ T4624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.177'. [ 871.120902][ T4617] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 871.863155][ T4617] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 873.906612][ T4617] siw: device registration error -19 [ 883.502487][ T4649] fuse: Invalid rootmode [ 894.810903][ T4128] veth0_vlan: entered promiscuous mode [ 895.261220][ T4128] veth1_vlan: entered promiscuous mode [ 897.299434][ T4128] veth0_macvtap: entered promiscuous mode [ 898.021635][ T4128] veth1_macvtap: entered promiscuous mode [ 900.217866][ T4128] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.220747][ T4128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.222866][ T4128] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.231514][ T4128] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.608286][ T4780] serio: Serial port pts0 [ 1008.497199][ T4855] binder: 4854:4855 ioctl c0306201 20000380 returned -14 [ 1033.727855][ T4909] sctp: failed to load transform for md5: -2 [ 1048.219061][ T4939] sctp: failed to load transform for md5: -2 [ 1056.178735][ T4955] sctp: failed to load transform for md5: -2 [ 1077.508590][ T5006] ================================================================== [ 1077.511925][ T5006] BUG: KASAN: global-out-of-bounds in memcmp+0xc0/0xca [ 1077.515658][ T5006] Read of size 1 at addr ffffffff89077f80 by task syz.0.290/5006 [ 1077.517523][ T5006] [ 1077.519725][ T5006] CPU: 0 PID: 5006 Comm: syz.0.290 Not tainted 6.10.0-rc6-syzkaller-gc562ba719df5 #0 [ 1077.521708][ T5006] Hardware name: riscv-virtio,qemu (DT) [ 1077.522978][ T5006] Call Trace: [ 1077.524408][ T5006] [] dump_backtrace+0x2e/0x3c [ 1077.525773][ T5006] [] show_stack+0x34/0x40 [ 1077.527020][ T5006] [] dump_stack_lvl+0x122/0x196 [ 1077.528443][ T5006] [] print_report+0x288/0x596 [ 1077.529749][ T5006] [] kasan_report+0xec/0x118 [ 1077.531043][ T5006] [] __asan_report_load1_noabort+0x12/0x1a [ 1077.532440][ T5006] [] memcmp+0xc0/0xca [ 1077.533703][ T5006] [] __hw_addr_add_ex+0xee/0x676 [ 1077.535229][ T5006] [] dev_mc_add+0xac/0x108 [ 1077.536618][ T5006] [] mrp_init_applicant+0xe8/0x56e [ 1077.537979][ T5006] [] vlan_mvrp_init_applicant+0x26/0x30 [ 1077.539324][ T5006] [] register_vlan_dev+0x1b4/0x922 [ 1077.540794][ T5006] [] vlan_ioctl_handler+0x54e/0x956 [ 1077.542307][ T5006] [] sock_ioctl+0x1f6/0x61a [ 1077.543945][ T5006] [] __riscv_sys_ioctl+0x186/0x1d6 [ 1077.545401][ T5006] [] syscall_handler+0x94/0x118 [ 1077.546926][ T5006] [] do_trap_ecall_u+0x14c/0x214 [ 1077.548570][ T5006] [] ret_from_exception+0x0/0x64 [ 1077.550266][ T5006] [ 1077.551089][ T5006] The buggy address belongs to the variable: [ 1077.552201][ T5006] vlan_mrp_app+0x60/0x3e80 [ 1077.553351][ T5006] [ 1077.554250][ T5006] The buggy address belongs to the physical page: [ 1077.555877][ T5006] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x89277 [ 1077.557894][ T5006] flags: 0xffe000000002000(reserved|node=0|zone=0|lastcpupid=0x7ff) [ 1077.561217][ T5006] raw: 0ffe000000002000 ff1c000000249dc8 ff1c000000249dc8 0000000000000000 [ 1077.562584][ T5006] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1077.563935][ T5006] page dumped because: kasan: bad access detected [ 1077.565227][ T5006] page_owner info is not present (never set?) [ 1077.566204][ T5006] [ 1077.566923][ T5006] Memory state around the buggy address: [ 1077.568419][ T5006] ffffffff89077e80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.569631][ T5006] ffffffff89077f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.570908][ T5006] >ffffffff89077f80: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.572048][ T5006] ^ [ 1077.573243][ T5006] ffffffff89078000: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 00 [ 1077.575226][ T5006] ffffffff89078080: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 1077.576576][ T5006] ================================================================== [ 1077.580276][ T5006] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1077.581949][ T5006] CPU: 0 PID: 5006 Comm: syz.0.290 Not tainted 6.10.0-rc6-syzkaller-gc562ba719df5 #0 [ 1077.583358][ T5006] Hardware name: riscv-virtio,qemu (DT) [ 1077.584327][ T5006] Call Trace: [ 1077.585704][ T5006] [] dump_backtrace+0x2e/0x3c [ 1077.587110][ T5006] [] show_stack+0x34/0x40 [ 1077.588316][ T5006] [] dump_stack_lvl+0x108/0x196 [ 1077.590756][ T5006] [] dump_stack+0x1c/0x24 [ 1077.592321][ T5006] [] panic+0x382/0x800 [ 1077.593713][ T5006] [] check_panic_on_warn+0xc0/0xe4 [ 1077.595367][ T5006] [] end_report.part.0+0x4a/0xaa [ 1077.596892][ T5006] [] kasan_report+0x102/0x118 [ 1077.598352][ T5006] [] __asan_report_load1_noabort+0x12/0x1a [ 1077.600032][ T5006] [] memcmp+0xc0/0xca [ 1077.601273][ T5006] [] __hw_addr_add_ex+0xee/0x676 [ 1077.602654][ T5006] [] dev_mc_add+0xac/0x108 [ 1077.604515][ T5006] [] mrp_init_applicant+0xe8/0x56e [ 1077.605935][ T5006] [] vlan_mvrp_init_applicant+0x26/0x30 [ 1077.607336][ T5006] [] register_vlan_dev+0x1b4/0x922 [ 1077.608702][ T5006] [] vlan_ioctl_handler+0x54e/0x956 [ 1077.610096][ T5006] [] sock_ioctl+0x1f6/0x61a [ 1077.611426][ T5006] [] __riscv_sys_ioctl+0x186/0x1d6 [ 1077.612671][ T5006] [] syscall_handler+0x94/0x118 [ 1077.614000][ T5006] [] do_trap_ecall_u+0x14c/0x214 [ 1077.615453][ T5006] [] ret_from_exception+0x0/0x64 [ 1077.617133][ T5006] SMP: stopping secondary CPUs [ 1077.619858][ T5006] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:35:26 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff8128ce0e mhartid 0000000000000000 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000428 stvec ffffffff85cb3190 vstvec 0000000000000000 mepc ffffffff8001c77e sepc ffffffff8023436a vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080029000 sscratch 0000000000000000 satp a03ca00000092d4e x0/zero 0000000000000000 x1/ra ffffffff807e3354 x2/sp ff20000003293810 x3/gp ffffffff8925ab80 x4/tp ff60000015791a40 x5/t0 0000000000000000 x6/t1 ffe37fff001166b6 x7/t2 ff60000015792560 x8/s0 ff20000003293820 x9/s1 ffffffff81679c1a x10/a0 0000000000000001 x11/a1 0000000000000008 x12/a2 0000000000040000 x13/a3 ffffffff8000a16c x14/a4 ff200000040ed000 x15/a5 0000000000040000 x16/a6 0000000000000003 x17/a7 ff1c0000008b35b7 x18/s2 ff20000003294000 x19/s3 ffffffffffffffff x20/s4 0000000000000001 x21/s5 0000000000000000 x22/s6 ffffffff85c90236 x23/s7 dfffffff00000000 x24/s8 dfffffff00000000 x25/s9 ffffffff85cb3264 x26/s10 0000000000003fff x27/s11 ff20000003293760 x28/t3 5a7d817b6a18ed45 x29/t4 ffe37fff001166b6 x30/t5 ffe37fff001166b7 x31/t6 1fec000002af24ba f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff85c3e2b4 mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000220 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000428 stvec ffffffff85cb3190 vstvec 0000000000000000 mepc ffffffff8022b0e6 sepc ffffffff85cb203c vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080027000 sscratch 0000000000000000 satp a03ce000000958ad x0/zero 0000000000000000 x1/ra ffffffff85c3e288 x2/sp ff2000000303b870 x3/gp ffffffff8925ab80 x4/tp ff60000015598000 x5/t0 ff2000000303b180 x6/t1 0000000000000001 x7/t2 7320666f20646165 x8/s0 ff2000000303b8f0 x9/s1 ff2000000303b900 x10/a0 ff60000015598008 x11/a1 ffffffff8b1c2900 x12/a2 0000000000000203 x13/a3 1ffffffff12696d0 x14/a4 0000000000000001 x15/a5 ff60000000000000 x16/a6 ffffffff85c3e1e6 x17/a7 0000000000000001 x18/s2 ffffffff89077f80 x19/s3 ffffffff875c3ec8 x20/s4 ff6000007cdec1e0 x21/s5 0000000089277f80 x22/s6 ffffffff875c3ed0 x23/s7 0000000000000004 x24/s8 ff60000015e7c600 x25/s9 0000000000000004 x26/s10 0000000000000000 x27/s11 ff60000016c963d8 x28/t3 ff60000015598008 x29/t4 0000000000000000 x30/t5 1fec000002ab3001 x31/t6 ff2000000303b298 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000