last executing test programs: 1.835788665s ago: executing program 1 (id=204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.835574114s ago: executing program 0 (id=205): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000016c0)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) 1.625708583s ago: executing program 1 (id=206): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe24}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.625495613s ago: executing program 0 (id=207): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)="9e", 0x1}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x2000) socketpair(0x25, 0x800, 0x9, &(0x7f0000000580)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="020000000012"}) 1.346174735s ago: executing program 1 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x2, 0x4, 0xffc, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.260568858s ago: executing program 0 (id=209): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x65}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.097928915s ago: executing program 1 (id=210): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids '], 0x6) 1.027494718s ago: executing program 0 (id=211): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="85200000bd5d020095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 837.129136ms ago: executing program 0 (id=212): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge0\x00', @local}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', @multicast}) 836.798886ms ago: executing program 1 (id=213): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x40002000) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x20000084}, 0x40880) 290.470538ms ago: executing program 0 (id=214): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:18260' (ED25519) to the list of known hosts. syzkaller login: [ 127.667502][ T3307] cgroup: Unknown subsys name 'net' [ 127.879745][ T3307] cgroup: Unknown subsys name 'cpuset' [ 127.920125][ T3307] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 128.646275][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 144.771742][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.857159][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.874493][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.940866][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.523840][ T3313] hsr_slave_0: entered promiscuous mode [ 146.539822][ T3313] hsr_slave_1: entered promiscuous mode [ 146.888978][ T3312] hsr_slave_0: entered promiscuous mode [ 146.896442][ T3312] hsr_slave_1: entered promiscuous mode [ 146.902742][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 146.903591][ T3312] Cannot create hsr debugfs directory [ 148.436186][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.496603][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.562562][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.636990][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.868452][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.923750][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.959937][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.019977][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.442505][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.637486][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.937424][ T3312] veth0_vlan: entered promiscuous mode [ 155.943529][ T3313] veth0_vlan: entered promiscuous mode [ 156.019994][ T3312] veth1_vlan: entered promiscuous mode [ 156.073342][ T3313] veth1_vlan: entered promiscuous mode [ 156.410322][ T3312] veth0_macvtap: entered promiscuous mode [ 156.439300][ T3313] veth0_macvtap: entered promiscuous mode [ 156.474107][ T3312] veth1_macvtap: entered promiscuous mode [ 156.508841][ T3313] veth1_macvtap: entered promiscuous mode [ 156.859891][ T728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.864047][ T728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.881679][ T728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.923409][ T728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.923862][ T728] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.957562][ T728] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.958500][ T728] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.958829][ T728] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.571504][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 158.719464][ T3464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.723149][ T3464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.864273][ T3486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.888197][ T3486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.599032][ T3501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 161.776343][ T3503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.780344][ T3503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.208181][ T964] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 167.786941][ T964] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 167.787725][ T964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.790912][ T964] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 196 [ 167.792059][ T964] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 167.792490][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.874395][ T964] usb 1-1: config 0 descriptor?? [ 168.264132][ T30] audit: type=1326 audit(168.030:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3520 comm="syz.1.24" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5c068 code=0x0 [ 168.435551][ T964] hid-generic 0003:17EF:6047.0001: unknown main item tag 0x0 [ 168.436213][ T964] hid-generic 0003:17EF:6047.0001: unknown main item tag 0x0 [ 168.436401][ T964] hid-generic 0003:17EF:6047.0001: unknown main item tag 0x0 [ 168.436601][ T964] hid-generic 0003:17EF:6047.0001: unknown main item tag 0x0 [ 168.436809][ T964] hid-generic 0003:17EF:6047.0001: unknown main item tag 0x0 [ 168.436989][ T964] hid-generic 0003:17EF:6047.0001: unknown main item tag 0x0 [ 168.437196][ T964] hid-generic 0003:17EF:6047.0001: unknown main item tag 0x0 [ 168.451438][ T964] hid-generic 0003:17EF:6047.0001: hidraw0: USB HID v10.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 168.633286][ T24] usb 1-1: USB disconnect, device number 2 [ 169.014534][ T3522] fido_id[3522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 169.111177][ T3527] VFS: Mount too revealing [ 173.690089][ T3553] IPv6: NLM_F_REPLACE set, but no existing node found! [ 181.276360][ T964] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.577578][ T964] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.578212][ T964] usb 1-1: config 0 has no interfaces? [ 181.578842][ T964] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.579155][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.622175][ T964] usb 1-1: config 0 descriptor?? [ 181.888836][ T964] usb 1-1: USB disconnect, device number 3 [ 182.746442][ T964] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.937933][ T964] usb 1-1: Using ep0 maxpacket: 16 [ 183.078854][ T964] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.181422][ T964] usb 1-1: config 91 has an invalid interface number: 112 but max is 0 [ 183.182149][ T964] usb 1-1: config 91 has an invalid interface number: 247 but max is 0 [ 183.182525][ T964] usb 1-1: config 91 has 2 interfaces, different from the descriptor's value: 1 [ 183.182830][ T964] usb 1-1: config 91 has no interface number 0 [ 183.183077][ T964] usb 1-1: config 91 has no interface number 1 [ 183.183695][ T964] usb 1-1: config 91 interface 112 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 64 [ 183.184041][ T964] usb 1-1: config 91 interface 112 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 183.184383][ T964] usb 1-1: too many endpoints for config 91 interface 247 altsetting 206: 131, using maximum allowed: 30 [ 183.187235][ T964] usb 1-1: config 91 interface 247 altsetting 206 has an invalid descriptor for endpoint zero, skipping [ 183.187611][ T964] usb 1-1: config 91 interface 247 altsetting 206 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 183.187973][ T964] usb 1-1: config 91 interface 247 altsetting 206 has an invalid descriptor for endpoint zero, skipping [ 183.188212][ T964] usb 1-1: config 91 interface 247 altsetting 206 has 3 endpoint descriptors, different from the interface descriptor's value: 131 [ 183.188507][ T964] usb 1-1: config 91 interface 112 has no altsetting 0 [ 183.188723][ T964] usb 1-1: config 91 interface 247 has no altsetting 0 [ 183.411414][ T964] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=51.47 [ 183.411795][ T964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.412158][ T964] usb 1-1: Product: syz [ 183.412275][ T964] usb 1-1: Manufacturer: syz [ 183.412383][ T964] usb 1-1: SerialNumber: syz [ 183.453815][ T3584] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.850874][ T964] usb 1-1: USB disconnect, device number 4 [ 188.794607][ T3638] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.631042][ T3647] input: syz0 as /devices/virtual/input/input2 [ 196.632933][ T964] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 197.286746][ T964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.291090][ T964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.302318][ T964] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 197.315858][ T964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.384089][ T964] usb 1-1: config 0 descriptor?? [ 198.513678][ T3652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.568407][ T3652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.889850][ T964] usbhid 1-1:0.0: can't add hid device: -71 [ 198.893517][ T964] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 199.026532][ T964] usb 1-1: USB disconnect, device number 5 [ 199.785389][ T3658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.792300][ T3658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.895483][ T3673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.896866][ T3673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.143640][ T3675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.160555][ T3675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.768663][ T3691] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 202.780414][ T3691] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 203.012767][ T3694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.81'. [ 203.017066][ T3694] Zero length message leads to an empty skb [ 203.151527][ T3696] netlink: 72 bytes leftover after parsing attributes in process `syz.0.82'. [ 203.324452][ T3698] binder: 3697:3698 unknown command 0 [ 203.326049][ T3698] binder: 3697:3698 ioctl c0306201 20000080 returned -22 [ 203.368158][ T3698] binder: 3697:3698 tried to acquire reference to desc 0, got 1 instead [ 203.387601][ T3698] binder: 3697:3698 got transaction with invalid offset (35, min 24 max 104) or object. [ 203.400736][ T3698] binder: 3697:3698 transaction call to 3697:0 failed 5/29201/-22, code 0 size 104-24 line 3451 [ 203.411029][ T3515] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.944576][ T3704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 205.067195][ T3515] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 205.144609][ T3713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.152436][ T3713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.279840][ T3515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.284589][ T3515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.289812][ T3515] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.296289][ T3515] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.300270][ T3515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.321411][ T3515] usb 1-1: config 0 descriptor?? [ 205.573117][ T3717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.580352][ T3717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.817364][ T3515] hid-generic 0003:047F:FFFF.0002: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 205.987534][ T39] usb 1-1: USB disconnect, device number 6 [ 206.362964][ T3725] batadv_slave_1: entered allmulticast mode [ 207.228439][ T3728] fido_id[3728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 207.704049][ T3736] netlink: 'syz.1.99': attribute type 6 has an invalid length. [ 207.916128][ T3736] netlink: 'syz.1.99': attribute type 4 has an invalid length. [ 212.698249][ T3768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.700892][ T3768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.663893][ T3790] capability: warning: `syz.1.119' uses deprecated v2 capabilities in a way that may be insecure [ 220.420302][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 220.886972][ T3848] netlink: 72 bytes leftover after parsing attributes in process `syz.0.142'. [ 230.066458][ T3889] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 234.176976][ T3515] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 234.435322][ T3515] usb 1-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 234.439127][ T3515] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.443820][ T3515] usb 1-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 234.448665][ T3515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.467225][ T3515] usb 1-1: config 0 descriptor?? [ 234.486490][ T3897] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 235.038426][ T3515] hid-generic 0003:056A:00DA.0003: hidraw0: USB HID v10.07 Device [HID 056a:00da] on usb-dummy_hcd.0-1/input0 [ 235.219861][ T3515] usb 1-1: USB disconnect, device number 7 [ 235.986803][ T3515] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 236.004702][ T3898] fido_id[3898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 236.308151][ T3515] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 236.315437][ T3515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.340106][ T3515] usb 1-1: config 0 descriptor?? [ 236.595613][ T3515] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 236.879938][ T3515] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 236.885381][ T3515] [drm] Initialized udl on minor 2 [ 237.025456][ T3515] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 237.033241][ T964] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 237.040232][ T3515] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 237.057373][ T3515] usb 1-1: USB disconnect, device number 8 [ 237.067091][ T964] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 237.072232][ T964] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 241.363783][ T3922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 241.675441][ T3926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.676849][ T3926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.582145][ T3932] process 'syz.0.170' launched './file1' with NULL argv: empty string added [ 242.774692][ T3934] cgroup: Unknown subsys name 'cpuset' [ 249.776656][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 249.936559][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 249.969802][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.970410][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 250.005597][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 250.006363][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.006620][ T9] usb 1-1: Product: syz [ 250.006815][ T9] usb 1-1: Manufacturer: syz [ 250.007012][ T9] usb 1-1: SerialNumber: syz [ 250.031023][ T9] usb 1-1: config 0 descriptor?? [ 258.880334][ T3970] pim6reg1: entered promiscuous mode [ 258.881069][ T3970] pim6reg1: entered allmulticast mode [ 260.299159][ T964] usb 1-1: USB disconnect, device number 9 [ 263.439298][ T4033] ------------[ cut here ]------------ [ 263.439673][ T4033] verifier bug: not inlined functions bpf_send_signal_thread#117 is missing func(1) [ 263.461299][ T4033] WARNING: CPU: 0 PID: 4033 at kernel/bpf/verifier.c:22838 do_misc_fixups+0x1784/0x1ab4 [ 263.468732][ T4033] Modules linked in: [ 263.471859][ T4033] CPU: 0 UID: 0 PID: 4033 Comm: syz.1.215 Not tainted syzkaller #0 PREEMPT [ 263.472521][ T4033] Hardware name: linux,dummy-virt (DT) [ 263.472971][ T4033] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 263.473488][ T4033] pc : do_misc_fixups+0x1784/0x1ab4 [ 263.473916][ T4033] lr : do_misc_fixups+0x1784/0x1ab4 [ 263.474296][ T4033] sp : ffff8000898eb9a0 [ 263.474627][ T4033] x29: ffff8000898eb9a0 x28: fbff800083915000 x27: 000000000000000a [ 263.475675][ T4033] x26: f4f0000008f80000 x25: 0000000000000000 x24: f4f0000008f86200 [ 263.476264][ T4033] x23: 000000000000f0ff x22: 000000000000000a x21: f4f0000008f86128 [ 263.476837][ T4033] x20: f4f0000008f80aa8 x19: ffff80008242bb10 x18: 0000000000000000 [ 263.477369][ T4033] x17: 0000000000000000 x16: 0000000000000000 x15: 0000ffffca4e1e38 [ 263.478015][ T4033] x14: 00000000000001ac x13: 0000000000000000 x12: ffff800082911258 [ 263.478535][ T4033] x11: 00000000000000c0 x10: f741697d2bb9a7b4 x9 : 8ff861aa3ca13ad5 [ 263.479332][ T4033] x8 : f7f000000aff91f8 x7 : 0000000000000004 x6 : 0000000263472700 [ 263.480048][ T4033] x5 : 0000000000000002 x4 : fbffff3fffffffff x3 : 000000000000ffff [ 263.480806][ T4033] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f7f000000aff8000 [ 263.481662][ T4033] Call trace: [ 263.482225][ T4033] do_misc_fixups+0x1784/0x1ab4 (P) [ 263.482928][ T4033] bpf_check+0x1308/0x2aac [ 263.483362][ T4033] bpf_prog_load+0x634/0xb74 [ 263.483718][ T4033] __sys_bpf+0x2e0/0x1a3c [ 263.484057][ T4033] __arm64_sys_bpf+0x24/0x34 [ 263.484418][ T4033] invoke_syscall+0x48/0x110 [ 263.484853][ T4033] el0_svc_common.constprop.0+0x40/0xe0 [ 263.485443][ T4033] do_el0_svc+0x1c/0x28 [ 263.485819][ T4033] el0_svc+0x34/0x10c [ 263.486207][ T4033] el0t_64_sync_handler+0xa0/0xe4 [ 263.486581][ T4033] el0t_64_sync+0x1a4/0x1a8 [ 263.487126][ T4033] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 264.390518][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.520131][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.603103][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.737555][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.654109][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.686380][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.729825][ T40] bond0 (unregistering): Released all slaves [ 265.890977][ T40] hsr_slave_0: left promiscuous mode [ 265.901385][ T40] hsr_slave_1: left promiscuous mode [ 265.930594][ T40] veth1_macvtap: left promiscuous mode [ 265.932341][ T40] veth0_macvtap: left promiscuous mode [ 265.937228][ T40] veth1_vlan: left promiscuous mode [ 265.939023][ T40] veth0_vlan: left promiscuous mode [ 266.678307][ T40] batadv_slave_1 (unregistering): left allmulticast mode [ 268.044180][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.120318][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.190509][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.270065][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.540068][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.610287][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.649182][ T40] bond0 (unregistering): Released all slaves [ 269.805262][ T40] hsr_slave_0: left promiscuous mode [ 269.809393][ T40] hsr_slave_1: left promiscuous mode [ 269.843088][ T40] veth1_macvtap: left promiscuous mode [ 269.843738][ T40] veth0_macvtap: left promiscuous mode [ 269.849579][ T40] veth1_vlan: left promiscuous mode [ 269.850632][ T40] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 09:27:13 Registers: info registers vcpu 0 CPU#0 PC=ffff800081b1a65c X00=ffff800082c63b60 X01=00000000000003c0 X02=ffff800082c63b40 X03=0000000000000000 X04=0000000000000000 X05=0a0a0a0a0a0a0a0a X06=000000000000003a X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff800082aaf1a0 X10=0000000000000001 X11=ffff8000898eb490 X12=ffff8000829ef238 X13=ffff8000898eb25d X14=ffff8000898eb268 X15=ffff8000898eb0d0 X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=0000000000000000 X20=00000000000003c0 X21=0000000000000000 X22=0000000000000000 X23=0000000000000000 X24=0000000000000000 X25=ffff8000829111f0 X26=00000000000003c0 X27=0000000000000000 X28=f7f000000aff8000 X29=ffff8000898eb390 X30=ffff800080857718 SP=ffff8000898eb390 PSTATE=624023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000756c6c2570:6f6f6c2f7665642f Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fff000f0000000f0 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff000000ff00:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fff000f000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffca4e1e50:0000ffffca4e1e50 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffca4e1e20 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000816b9e2c X00=0000000000000000 X01=0000000000000200 X02=0000000000000000 X03=0000000000000000 X04=ffff8000898fbce4 X05=00000000005153e2 X06=0000000000568fe2 X07=0000000000000000 X08=0000000000000001 X09=ffff8000817750e4 X10=f3f000000affdd00 X11=000000000000159e X12=0000000000000019 X13=0000000000000000 X14=f3f000000affdd00 X15=fff000007f8ed980 X16=ffff800080008000 X17=fff07ffffcffa000 X18=0000000000000001 X19=f2ff8000838ed000 X20=ffff8000898fbbe8 X21=f3f000000affdc80 X22=f3f000000affdc80 X23=ffff8000898fbbe8 X24=f2ff8000838ed048 X25=ffff8000898fbce0 X26=ffff8000898fbaf0 X27=0000000000000000 X28=ffff8000898fbbd0 X29=ffff8000898fbaa0 X30=4fcf800082de7fb0 SP=ffff8000898fbb10 PSTATE=61402009 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000000000a2bf:00000000fff88a7b Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8a7b000000000000:08b7000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0207000000000000:a2bf00000000fff8 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa6166458:0000ffffa6166430 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa6166468:0000ffffa6166460 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa6166468:0000ffffa6166460 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffa6166478:0000ffffa6166470 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffca4e1e50:0000ffffca4e1e50 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffca4e1e20 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000