last executing test programs: 24.601880527s ago: executing program 0 (id=83): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a0000000001", @ANYBLOB], 0x50) 24.443472093s ago: executing program 0 (id=85): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000"], 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, 0x0, 0x4) 17.856633581s ago: executing program 0 (id=87): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 16.243097847s ago: executing program 1 (id=92): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000002240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000022c0)="e8", 0x1}], 0x2}], 0x1, 0x40800) 15.713487589s ago: executing program 1 (id=93): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x4031, 0xffffffffffffffff, 0x910dc000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 15.563764245s ago: executing program 1 (id=94): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$nl_route(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000300)) 15.363360624s ago: executing program 1 (id=95): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r3, 0x0, 0x7fff, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) 9.383735487s ago: executing program 1 (id=96): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa000000000000000002001b"], 0x70}}, 0x0) 9.240724363s ago: executing program 1 (id=97): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) fanotify_init(0x0, 0x0) io_submit(0x0, 0x0, 0x0) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) 6.782278813s ago: executing program 0 (id=98): writev(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 6.442224908s ago: executing program 0 (id=99): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={0x0, r7, r8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x800000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r9, @ANYRES64=r9, @ANYRESOCT=r9, @ANYRES16=r9]) read$FUSE(r9, &(0x7f0000001740)={0x2020}, 0x2020) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 0s ago: executing program 0 (id=100): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:36210' (ED25519) to the list of known hosts. syzkaller login: [ 180.272297][ T3312] cgroup: Unknown subsys name 'net' [ 180.552310][ T3312] cgroup: Unknown subsys name 'cpuset' [ 180.597504][ T3312] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 181.318076][ T3312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 192.086702][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.198994][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.318356][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.422241][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.016613][ T3319] hsr_slave_0: entered promiscuous mode [ 194.033227][ T3319] hsr_slave_1: entered promiscuous mode [ 194.391722][ T3318] hsr_slave_0: entered promiscuous mode [ 194.397272][ T3318] hsr_slave_1: entered promiscuous mode [ 194.400352][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 194.401023][ T3318] Cannot create hsr debugfs directory [ 195.618483][ T3319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.689615][ T3319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.745905][ T3319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.816510][ T3319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.111322][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.140278][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.179026][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.237841][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.701274][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.886426][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.399773][ T3319] veth0_vlan: entered promiscuous mode [ 203.468721][ T3318] veth0_vlan: entered promiscuous mode [ 203.555611][ T3318] veth1_vlan: entered promiscuous mode [ 203.573082][ T3319] veth1_vlan: entered promiscuous mode [ 203.893801][ T3319] veth0_macvtap: entered promiscuous mode [ 203.977600][ T3318] veth0_macvtap: entered promiscuous mode [ 204.000039][ T3319] veth1_macvtap: entered promiscuous mode [ 204.047418][ T3318] veth1_macvtap: entered promiscuous mode [ 204.356427][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.367388][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.407145][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.408027][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.588773][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.589667][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.590902][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.591303][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.321372][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 206.606914][ T3468] binder: 3465:3468 tried to acquire reference to desc 0, got 1 instead [ 206.649997][ T3463] binder: undelivered transaction 5, process died. [ 206.851801][ T3471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.859766][ T3471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.772609][ T3488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 211.938504][ T3503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 217.248142][ T3512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.260061][ T3512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.927557][ T3525] lo speed is unknown, defaulting to 1000 [ 219.934032][ T3525] lo speed is unknown, defaulting to 1000 [ 219.951574][ T3525] lo speed is unknown, defaulting to 1000 [ 221.358320][ T3525] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 221.652611][ T3525] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 221.971046][ T3525] lo speed is unknown, defaulting to 1000 [ 222.002266][ T3525] lo speed is unknown, defaulting to 1000 [ 222.337360][ T3530] misc userio: Begin command sent, but we're already running [ 233.052554][ T31] audit: type=1326 audit(232.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3542 comm="syz.0.27" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b3a8 code=0x7fc00000 [ 234.079005][ T3551] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 234.720413][ T3555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.756176][ T3555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.528153][ T3565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.530410][ T3565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.772211][ T3565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.783917][ T3565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.021267][ T3574] block nbd0: shutting down sockets [ 239.276042][ T3314] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 239.482935][ T3314] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 239.489024][ T3314] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 239.493664][ T3314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.499172][ T3314] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 239.504042][ T3314] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 239.590488][ T3314] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.594090][ T3314] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.598029][ T3314] usb 1-1: Product: syz [ 239.600037][ T3314] usb 1-1: Manufacturer: syz [ 239.667113][ T3314] cdc_wdm 1-1:1.0: skipping garbage [ 239.669823][ T3314] cdc_wdm 1-1:1.0: skipping garbage [ 239.697133][ T3314] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 240.145999][ T9] usb 1-1: USB disconnect, device number 2 [ 241.557161][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 241.775838][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 241.800153][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.800709][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 241.847589][ T9] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 241.848148][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.848600][ T9] usb 1-1: Product: syz [ 241.848908][ T9] usb 1-1: Manufacturer: syz [ 241.849293][ T9] usb 1-1: SerialNumber: syz [ 241.877211][ T9] usb 1-1: config 0 descriptor?? [ 243.046152][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 243.049377][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 243.136608][ T9] usb 1-1: USB disconnect, device number 3 [ 243.611043][ T31] audit: type=1326 audit(242.580:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3599 comm="syz.0.51" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b3a8 code=0x7ffc0000 [ 243.627998][ T31] audit: type=1326 audit(242.580:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3599 comm="syz.0.51" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b3a8 code=0x7ffc0000 [ 243.637644][ T31] audit: type=1326 audit(242.600:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3599 comm="syz.0.51" exe="/syz-executor" sig=0 arch=c00000b7 syscall=24 compat=0 ip=0xffff91b5b3a8 code=0x7ffc0000 [ 243.659222][ T31] audit: type=1326 audit(242.610:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3599 comm="syz.0.51" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b3a8 code=0x7ffc0000 [ 245.222144][ T3617] binder: 3616:3617 tried to acquire reference to desc 0, got 1 instead [ 246.720568][ T3634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'. [ 246.972693][ T3638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.008995][ T3638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.218201][ T3640] mmap: syz.0.69 (3640) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 267.322522][ T3463] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 267.515392][ T3463] usb 1-1: Using ep0 maxpacket: 32 [ 267.592083][ T3463] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 267.592457][ T3463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.619658][ T3463] usb 1-1: config 0 descriptor?? [ 269.356093][ T31] audit: type=1326 audit(268.320:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3712 comm="syz.1.94" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb115b3a8 code=0x7ffc0000 [ 269.362567][ T31] audit: type=1326 audit(268.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3712 comm="syz.1.94" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb115b3a8 code=0x7ffc0000 [ 269.371746][ T31] audit: type=1326 audit(268.340:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3712 comm="syz.1.94" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb115b3a8 code=0x7ffc0000 [ 269.379269][ T31] audit: type=1326 audit(268.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3712 comm="syz.1.94" exe="/syz-executor" sig=0 arch=c00000b7 syscall=80 compat=0 ip=0xffffb115b3a8 code=0x7ffc0000 [ 269.387160][ T31] audit: type=1326 audit(268.350:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3712 comm="syz.1.94" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb115b3a8 code=0x7ffc0000 [ 277.970854][ T3463] usb 1-1: USB disconnect, device number 4 [ 281.204902][ T3735] fuse: Unknown parameter '00000000000000000008' [ 284.994264][ T3737] ================================================================== [ 284.997948][ T3737] BUG: KASAN: invalid-access in __memcpy+0xc/0x54 [ 285.000236][ T3737] Write at addr fbff80008335d160 by task syz.0.100/3737 [ 285.000780][ T3737] Pointer tag: [fb], memory tag: [fe] [ 285.000930][ T3737] [ 285.001768][ T3737] CPU: 0 UID: 0 PID: 3737 Comm: syz.0.100 Not tainted syzkaller #0 PREEMPT [ 285.002302][ T3737] Hardware name: linux,dummy-virt (DT) [ 285.002652][ T3737] Call trace: [ 285.003000][ T3737] show_stack+0x18/0x24 (C) [ 285.003448][ T3737] dump_stack_lvl+0x78/0x90 [ 285.003710][ T3737] print_report+0x108/0x61c [ 285.003973][ T3737] kasan_report+0x88/0xac [ 285.004228][ T3737] __do_kernel_fault+0x170/0x1c8 [ 285.004430][ T3737] do_bad_area+0x68/0x78 [ 285.004626][ T3737] do_tag_check_fault+0x34/0x44 [ 285.004860][ T3737] do_mem_abort+0x44/0x94 [ 285.005057][ T3737] el1_abort+0x44/0x68 [ 285.005245][ T3737] el1h_64_sync_handler+0x50/0xac [ 285.005426][ T3737] el1h_64_sync+0x6c/0x70 [ 285.005763][ T3737] __memcpy+0xc/0x54 (P) [ 285.005982][ T3737] do_misc_fixups+0x14bc/0x1aac [ 285.006195][ T3737] bpf_check+0x1348/0x2a24 [ 285.006406][ T3737] bpf_prog_load+0x63c/0xcd4 [ 285.006618][ T3737] __sys_bpf+0x2e0/0x1a88 [ 285.006836][ T3737] __arm64_sys_bpf+0x24/0x34 [ 285.007048][ T3737] invoke_syscall+0x48/0x110 [ 285.007262][ T3737] el0_svc_common.constprop.0+0x40/0xe0 [ 285.007476][ T3737] do_el0_svc+0x1c/0x28 [ 285.007689][ T3737] el0_svc+0x34/0x10c [ 285.007937][ T3737] el0t_64_sync_handler+0xa0/0xe4 [ 285.008207][ T3737] el0t_64_sync+0x1a4/0x1a8 [ 285.008803][ T3737] [ 285.009157][ T3737] The buggy address belongs to a 1-page vmalloc region starting at 0xfbff80008335d000 allocated at bpf_check+0x8c/0x2a24 [ 285.010658][ T3737] The buggy address belongs to the physical page: [ 285.011081][ T3737] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff9eaff pfn:0x4a2f4 [ 285.011517][ T3737] flags: 0x1ffd00000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x4) [ 285.012557][ T3737] raw: 01ffd00000000000 0000000000000000 dead000000000122 0000000000000000 [ 285.012743][ T3737] raw: 0000000ffff9eaff 0000000000000000 00000001ffffffff 0000000000000000 [ 285.012945][ T3737] page dumped because: kasan: bad access detected [ 285.013064][ T3737] [ 285.013155][ T3737] Memory state around the buggy address: [ 285.013714][ T3737] Unable to handle kernel paging request at virtual address ffff80008335cf00 [ 285.013925][ T3737] Mem abort info: [ 285.014011][ T3737] ESR = 0x0000000096000007 [ 285.014225][ T3737] EC = 0x25: DABT (current EL), IL = 32 bits [ 285.014377][ T3737] SET = 0, FnV = 0 [ 285.014570][ T3737] EA = 0, S1PTW = 0 [ 285.014774][ T3737] FSC = 0x07: level 3 translation fault [ 285.014971][ T3737] Data abort info: [ 285.015127][ T3737] ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000 [ 285.015263][ T3737] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 285.015406][ T3737] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 285.015639][ T3737] swapper pgtable: 4k pages, 52-bit VAs, pgdp=0000000042981000 [ 285.015818][ T3737] [ffff80008335cf00] pgd=1000000042ed3003, p4d=1000000042ed4003, pud=1000000042ed5003, pmd=1000000044e6f403, pte=0000000000000000 [ 285.017572][ T3737] Internal error: Oops: 0000000096000007 [#1] SMP [ 285.061027][ T3737] Modules linked in: [ 285.062419][ T3737] CPU: 0 UID: 0 PID: 3737 Comm: syz.0.100 Not tainted syzkaller #0 PREEMPT [ 285.064039][ T3737] Hardware name: linux,dummy-virt (DT) [ 285.065189][ T3737] pstate: 624020c9 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 285.066568][ T3737] pc : kasan_metadata_fetch_row+0xc/0x28 [ 285.068091][ T3737] lr : print_report+0x29c/0x61c [ 285.068770][ T3737] sp : ffff800089bbb5a0 [ 285.069365][ T3737] x29: ffff800089bbb5a0 x28: f1f0000008af92c0 x27: fcff800083355060 [ 285.070781][ T3737] x26: 0000000000000058 x25: ffff800082448bd0 x24: ffff800082448bd8 [ 285.072064][ T3737] x23: ffff80008335d160 x22: ffff800082419660 x21: ffff80008335d000 [ 285.073374][ T3737] x20: 00000000fffffffe x19: ffff80008335cf00 x18: 0000000000000010 [ 285.075070][ T3737] x17: ffff8000828ffa60 x16: 0000000000006200 x15: ffff800089bbb420 [ 285.076869][ T3737] x14: ffff800089bbb61c x13: ffff800089bbb609 x12: ffff8000829ff3c0 [ 285.078521][ T3737] x11: 0000000000000001 x10: 0000000000000001 x9 : 000000000002ffe8 [ 285.080782][ T3737] x8 : f1f0000008af92c0 x7 : 0000000000000010 x6 : ffff800081c70640 [ 285.082308][ T3737] x5 : 0000000000000030 x4 : 0000000000000002 x3 : ffff80008335d000 [ 285.083698][ T3737] x2 : ffff80008335cf00 x1 : ffff80008335cf10 x0 : ffff800089bbb5f8 [ 285.085511][ T3737] Call trace: [ 285.086382][ T3737] kasan_metadata_fetch_row+0xc/0x28 (P) [ 285.087826][ T3737] kasan_report+0x88/0xac [ 285.088722][ T3737] __do_kernel_fault+0x170/0x1c8 [ 285.089726][ T3737] do_bad_area+0x68/0x78 [ 285.090468][ T3737] do_tag_check_fault+0x34/0x44 [ 285.091297][ T3737] do_mem_abort+0x44/0x94 [ 285.092117][ T3737] el1_abort+0x44/0x68 [ 285.092952][ T3737] el1h_64_sync_handler+0x50/0xac [ 285.093801][ T3737] el1h_64_sync+0x6c/0x70 [ 285.094879][ T3737] __memcpy+0xc/0x54 (P) [ 285.095764][ T3737] do_misc_fixups+0x14bc/0x1aac [ 285.096606][ T3737] bpf_check+0x1348/0x2a24 [ 285.097595][ T3737] bpf_prog_load+0x63c/0xcd4 [ 285.098463][ T3737] __sys_bpf+0x2e0/0x1a88 [ 285.099360][ T3737] __arm64_sys_bpf+0x24/0x34 [ 285.100139][ T3737] invoke_syscall+0x48/0x110 [ 285.101010][ T3737] el0_svc_common.constprop.0+0x40/0xe0 [ 285.102020][ T3737] do_el0_svc+0x1c/0x28 [ 285.102800][ T3737] el0_svc+0x34/0x10c [ 285.103610][ T3737] el0t_64_sync_handler+0xa0/0xe4 [ 285.104781][ T3737] el0t_64_sync+0x1a4/0x1a8 [ 285.106049][ T3737] Code: d65f03c0 91040023 aa0103e2 91004021 (d9600042) [ 285.107706][ T3737] ---[ end trace 0000000000000000 ]--- [ 285.109139][ T3737] Kernel panic - not syncing: Oops: Fatal exception [ 285.110406][ T3737] SMP: stopping secondary CPUs [ 285.111885][ T3737] Kernel Offset: disabled [ 285.113262][ T3737] CPU features: 0x000000,0000d198,2fbe33e0,557ffebf [ 285.115140][ T3737] Memory Limit: none [ 285.116910][ T3737] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:24:08 Registers: info registers vcpu 0 CPU#0 PC=ffff8000809005f0 X00=0000000000000002 X01=0000000000000018 X02=ffff800082d15018 X03=ffff800082abef10 X04=faf0000004121080 X05=000000000000006b X06=0000000000000037 X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff800082abef40 X10=0000000000000001 X11=ffff800089bbb050 X12=ffff8000829ff3c0 X13=ffff800089bbae1d X14=ffff800089bbae28 X15=ffff800089bbac90 X16=0000000000006200 X17=ffff8000828ffa60 X18=00000000ffffffff X19=f5f000000412803d X20=ffff800080900794 X21=faf0000004121080 X22=f5f000000412804d X23=0000000000000000 X24=0000000000000000 X25=ffff8000829211f0 X26=00000000000000c0 X27=ffff80008267c000 X28=ffffffffffffffff X29=ffff800089bbaf40 X30=ffff8000809007bc SP=ffff800089bbaf40 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:e9b5dba5b5c0fbcf:71374491428a2f98 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ab1c5ed5923f82a4:59f111f13956c25b Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:550c7dc3243185be:12835b01d807aa98 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c19bf1749bdc06a7:80deb1fe72be5d74 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:240ca1cc0fc19dc6:efbe4786e49b69c1 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:76f988da5cb0a9dc:4a7484aa2de92c6f Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bf597fc7b00327c8:a831c66d983e5152 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:1429296706ca6351:d5a79147c6e00bf3 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:53380d134d2c6dfc:2e1b213827b70a85 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:92722c8581c2c92e:766a0abb650a7354 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c76c51a3c24b8b70:a81a664ba2bfe8a1 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:106aa070f40e3585:d6990624d192e819 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:34b0bcb52748774c:1e376c0819a4c116 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:682e6ff35b9cca4f:4ed8aa4a391c0cb3 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8cc7020884c87814:78a5636f748f82ee Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c67178f2bef9a3f7:a4506ceb90befffa Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3f1e5e78c0f818b1:54521ff8fdef1825 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b759b2014d24d5ca:d02c24849eac5e28 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c3da4b11ff790e63:1c450fa72530b4f7 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:356645013caac898:0c90352d4ea690ef Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:374e72746c56c455:13a5fcb07ba31553 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:5b6168fc6f10a2e6:b625c654484b1fdb Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:50a14d1984418677:94ea731699c037e5 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:fbd7bdf3fba46c8f:b0e0a218df6590e9 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:91fe7d3a2fe7d0e3:583e4e2b11992eec Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ff809be34f8cc93b:1b205dc8f73ccd5c Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:11875b9d6a846c8d:b67511095e0ff9b3 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081b14b2c X00=ffff800081b14b28 X01=f8f00000061addc0 X02=0000000000000000 X03=0000000000000116 X04=000000000000ba2b X05=00000000fa83b2da X06=000000000018e7a3 X07=faf000000a235e00 X08=faf000000a235e80 X09=0000000000000400 X10=00000000000003ad X11=0000000000000001 X12=0000000000000001 X13=0000000000000001 X14=00000000000003ad X15=0000000000000000 X16=ffff800082cf0000 X17=fff07ffffcfec000 X18=0000000000000000 X19=0000000000000000 X20=ffff800082a31688 X21=ffff800082a31680 X22=f8f00000061addc0 X23=0000000000000004 X24=ffff800082a31688 X25=0000000000000028 X26=0000000000000001 X27=ffff8000801800e0 X28=0000000000000000 X29=ffff800082cf3cb0 X30=ffff80008017f9b0 SP=ffff800082cf3cb0 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2c2c2c2c2c2c2c2c:2c2c2c2c2c2c2c2c Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:676e697070696b53:0000000000006572 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:cccccccccccc0000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3333333333333333:3333333333333333 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000cccccc00 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000073:0000aaaae7620c90 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000074:0000aaaae761df70 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffffe00e570:0000fffffe00e570 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000fffffe00e540 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000