last executing test programs: 3.818912427s ago: executing program 1 (id=638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000200, 0x0, 0x0) 3.479536392s ago: executing program 1 (id=639): r0 = socket$inet(0x2, 0x2, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x45}], 0x300) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) 749.232036ms ago: executing program 1 (id=651): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000400)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "ff0f80007910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6e000067b5cc888e1fd5102ae2d3d05f251f8d490200eab4152b6e6d87cd6088e97a9d06d29143", 0x2e}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0x0) keyctl$chown(0x4, r1, 0x0, 0xffffffffffffffff) 748.690746ms ago: executing program 0 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffffffa}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) 570.488569ms ago: executing program 1 (id=653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) 570.113039ms ago: executing program 0 (id=654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r1, &(0x7f0000000240)=[{&(0x7f00000004c0)='\n', 0x1}, {0x0}], 0x2) 433.882019ms ago: executing program 0 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 433.324369ms ago: executing program 1 (id=656): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x50) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 312.585387ms ago: executing program 0 (id=657): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) 160.128238ms ago: executing program 0 (id=658): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 159.676829ms ago: executing program 1 (id=659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 0s ago: executing program 0 (id=660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000340)={@dev, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0xe4, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4f, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x9}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:29333' (ED25519) to the list of known hosts. syzkaller login: [ 118.823193][ T3292] cgroup: Unknown subsys name 'net' [ 119.043661][ T3292] cgroup: Unknown subsys name 'cpuset' [ 119.089425][ T3292] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 119.647228][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 135.335388][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.360945][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.749534][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.775975][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.240715][ T3297] hsr_slave_0: entered promiscuous mode [ 137.255369][ T3297] hsr_slave_1: entered promiscuous mode [ 137.721935][ T3298] hsr_slave_0: entered promiscuous mode [ 137.733069][ T3298] hsr_slave_1: entered promiscuous mode [ 137.739128][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.739926][ T3298] Cannot create hsr debugfs directory [ 139.138621][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.195680][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.232727][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.301709][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.575335][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.605392][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.635163][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.679742][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.149889][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.425982][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.574267][ T3297] veth0_vlan: entered promiscuous mode [ 146.624736][ T3297] veth1_vlan: entered promiscuous mode [ 147.021065][ T3298] veth0_vlan: entered promiscuous mode [ 147.094611][ T3297] veth0_macvtap: entered promiscuous mode [ 147.117585][ T3298] veth1_vlan: entered promiscuous mode [ 147.162668][ T3297] veth1_macvtap: entered promiscuous mode [ 147.468285][ T3298] veth0_macvtap: entered promiscuous mode [ 147.554016][ T3298] veth1_macvtap: entered promiscuous mode [ 147.604230][ T3297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.605534][ T3297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.606048][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.617977][ T3297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.035925][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.040836][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.044752][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.050540][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.371894][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 149.735505][ T3453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.743396][ T3453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.078982][ T3471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 160.100889][ T3471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 173.975362][ T3494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.000307][ T3494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.345144][ T3505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 210.493592][ T3564] syz.1.34 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 211.253129][ T3568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36'. [ 211.394395][ T3568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 216.150519][ T3579] veth0_vlan: entered allmulticast mode [ 216.443389][ T30] audit: type=1326 audit(216.090:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3578 comm="syz.0.39" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa155a8a8 code=0x0 [ 217.777537][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 218.042912][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.103326][ T24] usb 1-1: config 84 has an invalid interface number: 111 but max is 0 [ 218.107623][ T24] usb 1-1: config 84 has no interface number 0 [ 218.118191][ T24] usb 1-1: config 84 interface 111 has no altsetting 0 [ 218.227174][ T24] usb 1-1: string descriptor 0 read error: -22 [ 218.228983][ T24] usb 1-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0 [ 218.240212][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.376217][ T24] usb 1-1: bad CDC descriptors [ 218.408941][ T24] cdc_acm 1-1:84.111: Zero length descriptor references [ 218.413691][ T24] cdc_acm 1-1:84.111: probe with driver cdc_acm failed with error -22 [ 219.386792][ C1] hrtimer: interrupt took 803150 ns [ 228.681055][ T3374] usb 1-1: USB disconnect, device number 2 [ 241.981376][ T3625] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 241.991604][ T3625] syzkaller0: persist disabled [ 247.462306][ T3647] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 251.949151][ T3672] sit0: entered allmulticast mode [ 264.665347][ T3707] pim6reg1: entered promiscuous mode [ 264.676200][ T3707] pim6reg1: entered allmulticast mode [ 265.933232][ T3717] pim6reg1: entered promiscuous mode [ 265.936079][ T3717] pim6reg1: entered allmulticast mode [ 266.509203][ T3719] pim6reg1: entered promiscuous mode [ 266.512175][ T3719] pim6reg1: entered allmulticast mode [ 268.833750][ T3733] pim6reg1: entered promiscuous mode [ 268.837367][ T3733] pim6reg1: entered allmulticast mode [ 270.762816][ T3751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 277.557788][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 277.818694][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 277.822416][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 277.830062][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 277.837989][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 277.842668][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 277.878183][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 277.878713][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 277.879122][ T24] usb 1-1: Product: syz [ 277.879404][ T24] usb 1-1: Manufacturer: syz [ 278.000081][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 278.005014][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 278.042518][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 278.200314][ T24] usb 1-1: USB disconnect, device number 3 [ 289.475529][ T3816] sit0: entered promiscuous mode [ 289.519017][ T3816] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 289.522637][ T3816] netlink: 1 bytes leftover after parsing attributes in process `syz.0.130'. [ 292.308097][ T24] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 292.493019][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.493805][ T24] usb 1-1: config 0 has no interface number 0 [ 292.494485][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 292.494992][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 292.495632][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 292.496027][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.523306][ T24] usb 1-1: config 0 descriptor?? [ 292.560789][ T3830] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 292.619047][ T24] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 293.153364][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 293.164418][ T1903] usb 1-1: USB disconnect, device number 4 [ 306.427211][ T11] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 306.668863][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.669818][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 306.670350][ T11] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 306.670729][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.734103][ T11] usb 1-1: config 0 descriptor?? [ 312.175765][ T11] usbhid 1-1:0.0: can't add hid device: -32 [ 312.257938][ T11] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 314.652572][ T3893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.659608][ T3893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.628849][ T24] usb 1-1: USB disconnect, device number 5 [ 327.889400][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 330.937481][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.941741][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 330.951475][ T24] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 330.957354][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.989412][ T24] usb 1-1: config 0 descriptor?? [ 336.587095][ T24] usbhid 1-1:0.0: can't add hid device: -32 [ 336.591378][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 338.492552][ T11] usb 1-1: USB disconnect, device number 6 [ 340.765214][ T3946] dummy0: entered promiscuous mode [ 342.427724][ T3476] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 342.613469][ T3476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.614268][ T3476] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 342.614799][ T3476] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 342.615246][ T3476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.944773][ T3476] usb 1-1: config 0 descriptor?? [ 343.180956][ T3476] usbhid 1-1:0.0: can't add hid device: -71 [ 343.182179][ T3476] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 343.199583][ T3476] usb 1-1: USB disconnect, device number 7 [ 344.728914][ T3959] mmap: syz.0.166 (3959) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 346.326210][ T3972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.340396][ T3972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.579946][ T4009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.179'. [ 368.027194][ T3921] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 368.197562][ T3921] usb 1-1: Using ep0 maxpacket: 8 [ 368.217090][ T3921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.218105][ T3921] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.218678][ T3921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 368.297920][ T3921] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 368.298801][ T3921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 368.299194][ T3921] usb 1-1: Product: syz [ 368.299555][ T3921] usb 1-1: Manufacturer: syz [ 368.299989][ T3921] usb 1-1: SerialNumber: syz [ 368.343115][ T3921] usb 1-1: config 0 descriptor?? [ 368.533363][ T3921] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 368.633495][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 382.503225][ T3921] usb 1-1: USB disconnect, device number 8 [ 383.387946][ T24] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 383.623948][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 383.635943][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 383.643585][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.650232][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 383.655840][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 383.700575][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 383.702406][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 383.711556][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.714277][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 383.720017][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 383.730667][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 383.732655][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 383.735775][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.741058][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 383.745064][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 383.776018][ T24] usb 1-1: string descriptor 0 read error: -22 [ 383.779306][ T24] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 383.781626][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.843844][ T24] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 384.128821][ T3476] usb 1-1: USB disconnect, device number 9 [ 385.007161][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 385.183493][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.184415][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 385.185231][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.224596][ T9] usb 1-1: config 0 descriptor?? [ 385.438725][ T4081] netlink: 60 bytes leftover after parsing attributes in process `syz.1.199'. [ 385.528891][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 385.530089][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 385.593345][ T9] usb 1-1: USB disconnect, device number 10 [ 386.137417][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 386.307905][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 386.409837][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.410927][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 386.411378][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.459562][ T9] usb 1-1: config 0 descriptor?? [ 386.621598][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 386.639719][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 386.828363][ T9] usb 1-1: USB disconnect, device number 11 [ 386.900530][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 396.147478][ T3921] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 396.373231][ T3921] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 396.373989][ T3921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.424178][ T3921] usb 1-1: config 0 descriptor?? [ 396.509238][ T3921] cp210x 1-1:0.0: cp210x converter detected [ 396.609947][ T4110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.633753][ T4110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.791069][ T3921] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 396.791956][ T3921] cp210x 1-1:0.0: querying part number failed [ 396.843602][ T3921] usb 1-1: cp210x converter now attached to ttyUSB0 [ 397.000023][ T3218] usb 1-1: USB disconnect, device number 12 [ 397.100621][ T3218] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 397.123131][ T3218] cp210x 1-1:0.0: device disconnected [ 405.504612][ T4144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.571065][ T4160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.227'. [ 407.799700][ T4165] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.228'. [ 410.730783][ T4196] netlink: 'syz.0.241': attribute type 2 has an invalid length. [ 410.731513][ T4196] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.241'. [ 413.527744][ T4231] syz.1.256 uses obsolete (PF_INET,SOCK_PACKET) [ 414.992613][ T4233] infiniband syz0: set down [ 414.995891][ T4233] infiniband syz0: added ipvlan1 [ 415.326002][ T4233] RDS/IB: syz0: added [ 415.330775][ T4233] smc: adding ib device syz0 with port count 1 [ 415.360204][ T4233] smc: ib device syz0 port 1 has pnetid [ 419.158025][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 419.435249][ T24] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 419.436318][ T24] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 419.443723][ T24] usb 1-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 419.444389][ T24] usb 1-1: config 220 has no interface number 2 [ 419.445322][ T24] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 419.445777][ T24] usb 1-1: config 220 interface 0 has no altsetting 0 [ 419.446198][ T24] usb 1-1: config 220 interface 76 has no altsetting 0 [ 419.458178][ T24] usb 1-1: config 220 interface 1 has no altsetting 0 [ 419.502259][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 419.502943][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.503367][ T24] usb 1-1: Product: syz [ 419.503745][ T24] usb 1-1: Manufacturer: syz [ 419.504155][ T24] usb 1-1: SerialNumber: syz [ 419.694349][ T4274] syz.1.273 (4274): /proc/4273/oom_adj is deprecated, please use /proc/4273/oom_score_adj instead. [ 419.993580][ T24] usb 1-1: USB disconnect, device number 13 [ 422.199964][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 422.412666][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 422.546126][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.547896][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.548844][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 422.549335][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.588196][ T24] usb 1-1: config 0 descriptor?? [ 427.712295][ T24] usbhid 1-1:0.0: can't add hid device: -32 [ 427.713470][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 428.866152][ T4316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.868403][ T4316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.254102][ T4327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.260152][ T4327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.962618][ T9] usb 1-1: USB disconnect, device number 14 [ 433.597946][ T3921] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 433.739923][ T4343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.746260][ T4343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.757729][ T3921] usb 1-1: Using ep0 maxpacket: 32 [ 433.804002][ T3921] usb 1-1: config 1 has an invalid interface number: 233 but max is 0 [ 433.808631][ T3921] usb 1-1: config 1 has no interface number 0 [ 433.812775][ T3921] usb 1-1: config 1 interface 233 has no altsetting 0 [ 433.860724][ T3921] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 433.865913][ T3921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.870551][ T3921] usb 1-1: Product: syz [ 433.872948][ T3921] usb 1-1: Manufacturer: syz [ 433.875376][ T3921] usb 1-1: SerialNumber: syz [ 434.260822][ T3921] usb 1-1: USB disconnect, device number 15 [ 434.431293][ T4349] netlink: 'syz.0.297': attribute type 6 has an invalid length. [ 435.417753][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 435.582162][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 435.598281][ T9] usb 1-1: config 0 has no interfaces? [ 435.613718][ T4358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.613774][ T9] usb 1-1: config 0 has no interfaces? [ 435.638282][ T9] usb 1-1: config 0 has no interfaces? [ 435.643766][ T4358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.671659][ T9] usb 1-1: config 0 has no interfaces? [ 435.692784][ T9] usb 1-1: config 0 has no interfaces? [ 435.724260][ T9] usb 1-1: config 0 has no interfaces? [ 435.746160][ T9] usb 1-1: config 0 has no interfaces? [ 435.764393][ T9] usb 1-1: config 0 has no interfaces? [ 435.805271][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 435.809984][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 435.816147][ T9] usb 1-1: Product: syz [ 435.820847][ T9] usb 1-1: Manufacturer: syz [ 435.824849][ T9] usb 1-1: SerialNumber: syz [ 435.853019][ T9] usb 1-1: config 0 descriptor?? [ 438.201662][ T9] usb 1-1: USB disconnect, device number 16 [ 438.927980][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 439.097810][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 439.124551][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.129801][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.133853][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 439.138156][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.159413][ T9] usb 1-1: config 0 descriptor?? [ 439.214736][ T9] hub 1-1:0.0: USB hub found [ 439.419206][ T9] hub 1-1:0.0: 1 port detected [ 440.088862][ T3926] hub 1-1:0.0: activate --> -90 [ 440.577831][ T1903] usb 1-1-port1: cannot disable (err = -71) [ 440.584217][ T1903] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 440.589241][ T1903] usb 1-1-port1: connect-debounce failed [ 440.599015][ T1903] usb 1-1-port1: cannot disable (err = -71) [ 440.600680][ T24] usb 1-1: USB disconnect, device number 17 [ 442.214276][ T4384] netlink: 'syz.0.307': attribute type 1 has an invalid length. [ 442.384843][ T4387] loop6: detected capacity change from 0 to 7 [ 442.825751][ T4392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.829304][ T4392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.622908][ T39] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 445.001652][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.007541][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 445.030234][ T39] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 445.037191][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.174699][ T39] usb 1-1: config 0 descriptor?? [ 447.540211][ T39] usbhid 1-1:0.0: can't add hid device: -71 [ 447.541419][ T39] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 447.587791][ T39] usb 1-1: USB disconnect, device number 18 [ 448.448777][ T11] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 448.528637][ T4420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.561039][ T4420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.650181][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 448.743615][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.744140][ T11] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 448.744578][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.771111][ T11] usb 1-1: config 0 descriptor?? [ 449.045922][ T39] usb 1-1: USB disconnect, device number 19 [ 449.392473][ T4429] netlink: 'syz.1.321': attribute type 6 has an invalid length. [ 449.939568][ T4440] netlink: 14 bytes leftover after parsing attributes in process `syz.1.325'. [ 450.442434][ T4448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.448936][ T4448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.745712][ T4459] netlink: 56 bytes leftover after parsing attributes in process `syz.1.332'. [ 453.053845][ T4463] netlink: 'syz.1.333': attribute type 21 has an invalid length. [ 453.054735][ T4463] netlink: 164 bytes leftover after parsing attributes in process `syz.1.333'. [ 453.559473][ T4471] netlink: 104 bytes leftover after parsing attributes in process `syz.0.337'. [ 458.110413][ T4495] syzkaller1: entered promiscuous mode [ 458.113564][ T4495] syzkaller1: entered allmulticast mode [ 458.910644][ T4497] vcan0: entered allmulticast mode [ 459.162342][ T4501] netlink: 666 bytes leftover after parsing attributes in process `syz.1.349'. [ 463.158470][ T4534] netlink: 14 bytes leftover after parsing attributes in process `syz.0.358'. [ 463.517922][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 463.697950][ T24] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 463.699887][ T24] usb 1-1: config 0 has no interface number 0 [ 463.700712][ T24] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 463.735652][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 463.744011][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.744976][ T24] usb 1-1: Product: syz [ 463.746055][ T24] usb 1-1: Manufacturer: syz [ 463.747261][ T24] usb 1-1: SerialNumber: syz [ 463.785305][ T24] usb 1-1: config 0 descriptor?? [ 463.863368][ T24] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 465.867162][ T4543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.874381][ T4543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.128030][ T9] usb 1-1: USB disconnect, device number 20 [ 466.171107][ T9] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 467.087983][ T4550] binder: 4549:4550 tried to acquire reference to desc 0, got 1 instead [ 467.101646][ T4550] binder: 4549:4550 got transaction with invalid parent offset or type [ 467.109799][ T4550] binder: 4549:4550 transaction async to 4549:0 failed 5/29201/-22, code 0 size 80-24 line 3545 [ 467.121572][ T3921] binder: undelivered TRANSACTION_ERROR: 29201 [ 473.922802][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.928254][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.932938][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.936836][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.942316][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.945787][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.950098][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.954450][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.958210][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.961365][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.965710][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.969344][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.972502][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.977362][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.980381][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.983380][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.987747][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.990487][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.993535][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 473.996985][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.001280][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.004270][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.007932][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.012147][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.015284][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.018946][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.023155][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.026778][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.029928][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.034299][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.037745][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.038121][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.038501][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.038873][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.039253][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.039623][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.039990][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.040369][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.040735][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.041121][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.041518][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.041887][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.042263][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 474.095034][ T3921] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 474.619256][ T4574] fido_id[4574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 476.153280][ T4588] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 480.182201][ T4595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 481.154344][ T4605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 481.867767][ T4609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.875945][ T4609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.621765][ T4623] sit0: left allmulticast mode [ 485.148116][ T4627] binder: 4626:4627 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 485.148992][ T4627] binder: 4627 RLIMIT_NICE not set [ 490.129236][ T4660] block device autoloading is deprecated and will be removed. [ 499.368980][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.379203][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.284629][ T4685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.406'. [ 500.446754][ T4685] Zero length message leads to an empty skb [ 501.450870][ T4692] netlink: 60 bytes leftover after parsing attributes in process `syz.1.409'. [ 501.992348][ T4701] netlink: 'syz.1.411': attribute type 9 has an invalid length. [ 504.726249][ T4731] sit0: left promiscuous mode [ 504.950534][ T4731] vcan0: left allmulticast mode [ 504.962791][ T4731] dummy0: left promiscuous mode [ 505.178128][ T4731] veth0_vlan: left promiscuous mode [ 505.180250][ T4731] veth0_vlan: left allmulticast mode [ 505.186026][ T4731] veth0_vlan: entered promiscuous mode [ 505.494394][ T11] syz0: Port: 1 Link ACTIVE [ 506.427601][ T3476] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 506.613830][ T3476] usb 1-1: Using ep0 maxpacket: 8 [ 506.626829][ T3476] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 506.644372][ T3476] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 506.645106][ T3476] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 506.645500][ T3476] usb 1-1: Product: syz [ 506.645850][ T3476] usb 1-1: Manufacturer: syz [ 506.646198][ T3476] usb 1-1: SerialNumber: syz [ 506.701039][ T3476] usb 1-1: config 0 descriptor?? [ 509.638283][ T4745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.641062][ T4745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.214565][ T4756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'. [ 516.262855][ T4756] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.263698][ T4756] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.264201][ T4756] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.264688][ T4756] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.294450][ T4756] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.295408][ T4756] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.295909][ T4756] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.297914][ T4756] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.570854][ T4758] netlink: 308 bytes leftover after parsing attributes in process `syz.1.432'. [ 517.283992][ T3218] usb 1-1: USB disconnect, device number 21 [ 517.716140][ T4768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.748941][ T4768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.730060][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.738098][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.018528][ T11] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 519.187194][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 519.214090][ T11] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 519.220847][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.243380][ T11] usb 1-1: config 0 descriptor?? [ 521.039200][ T4796] bond1: entered promiscuous mode [ 521.041063][ T4796] bond1: entered allmulticast mode [ 521.046098][ T4796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.147534][ T4799] binder: 4798:4799 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 522.974902][ T4799] syz.1.446 (4799): drop_caches: 2 [ 523.232140][ T4799] syz.1.446 (4799): drop_caches: 2 [ 523.752901][ T4804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.762694][ T4804] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 524.043032][ T4810] netlink: 68 bytes leftover after parsing attributes in process `syz.1.449'. [ 524.586390][ T4814] netlink: 'syz.1.451': attribute type 10 has an invalid length. [ 526.304316][ T4820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.318221][ T4820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.524663][ T39] usb 1-1: USB disconnect, device number 22 [ 532.967482][ T3476] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 533.202986][ T3476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.209423][ T3476] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 533.218107][ T3476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.253740][ T3476] usb 1-1: config 0 descriptor?? [ 533.510444][ T3476] usbhid 1-1:0.0: can't add hid device: -71 [ 533.515836][ T3476] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 533.542280][ T3476] usb 1-1: USB disconnect, device number 23 [ 534.027624][ T3476] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 534.187296][ T3476] usb 1-1: Using ep0 maxpacket: 32 [ 534.214985][ T3476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.215849][ T3476] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 534.216246][ T3476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.235361][ T3476] usb 1-1: config 0 descriptor?? [ 534.285831][ T3476] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 534.298156][ T3476] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 534.725978][ T3218] usb 1-1: USB disconnect, device number 24 [ 534.743624][ T3218] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 536.377898][ T3218] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 536.547476][ T3218] usb 1-1: Using ep0 maxpacket: 32 [ 536.572831][ T3218] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 536.573525][ T3218] usb 1-1: config 0 has no interface number 0 [ 536.574431][ T3218] usb 1-1: config 0 interface 12 has no altsetting 0 [ 536.602246][ T3218] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 536.603040][ T3218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.603432][ T3218] usb 1-1: Product: syz [ 536.603808][ T3218] usb 1-1: Manufacturer: syz [ 536.604186][ T3218] usb 1-1: SerialNumber: syz [ 536.629777][ T3218] usb 1-1: config 0 descriptor?? [ 538.603658][ T3218] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 538.608551][ T3218] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 538.608981][ T3218] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 538.609830][ T3218] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 538.733022][ T3218] usb 1-1: USB disconnect, device number 25 [ 538.802454][ T4850] netlink: 'syz.0.461': attribute type 5 has an invalid length. [ 538.805983][ T4850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.461'. [ 538.811420][ T4850] bond0: Unable to set down delay as MII monitoring is disabled [ 540.548055][ T3476] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 540.885527][ T3476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.886024][ T3476] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 540.886801][ T3476] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 540.887106][ T3476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.970109][ T3476] usb 1-1: config 0 descriptor?? [ 542.969753][ T4863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.018642][ T4863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.129889][ T3476] usbhid 1-1:0.0: can't add hid device: -71 [ 543.133836][ T3476] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 543.212524][ T3476] usb 1-1: USB disconnect, device number 26 [ 543.744798][ T4872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.752150][ T4872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.167906][ T11] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 544.334620][ T11] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 544.335055][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.337431][ T11] usb 1-1: config 0 has no interface number 0 [ 544.365541][ T11] usb 1-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 544.365983][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.366763][ T11] usb 1-1: Product: syz [ 544.367062][ T11] usb 1-1: Manufacturer: syz [ 544.367265][ T11] usb 1-1: SerialNumber: syz [ 544.378632][ T11] usb 1-1: config 0 descriptor?? [ 544.603837][ T11] usb 1-1: USB disconnect, device number 27 [ 547.458676][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.461234][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.077132][ T4900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.080802][ T4900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.211674][ T4904] binder: 4903:4904 ioctl c0306201 0 returned -14 [ 548.228177][ T4904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.234627][ T4904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.268051][ T4925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.274334][ T4925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.494272][ T4928] loop2: detected capacity change from 0 to 7 [ 557.690617][ T4932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.699696][ T4932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.997527][ T1903] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 559.185641][ T1903] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 559.189357][ T1903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.204495][ T1903] usb 1-1: config 0 descriptor?? [ 560.089266][ T4955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.091488][ T4955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.622598][ T4962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.367557][ T30] audit: type=1326 audit(561.010:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4969 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb20de804 code=0x7ffc0000 [ 561.377705][ T30] audit: type=1326 audit(561.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4969 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb20de804 code=0x7ffc0000 [ 561.396086][ T30] audit: type=1326 audit(561.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4969 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb20de804 code=0x7ffc0000 [ 561.398326][ T30] audit: type=1326 audit(561.040:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4969 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb20de804 code=0x7ffc0000 [ 561.398842][ T30] audit: type=1326 audit(561.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4969 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb20de804 code=0x7ffc0000 [ 561.399329][ T30] audit: type=1326 audit(561.040:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4969 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb20de804 code=0x7ffc0000 [ 561.399841][ T30] audit: type=1326 audit(561.040:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4969 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb20de804 code=0x7ffc0000 [ 561.400360][ T30] audit: type=1326 audit(561.040:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4969 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb20de804 code=0x7ffc0000 [ 561.403211][ T30] audit: type=1326 audit(561.040:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4969 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 561.405337][ T30] audit: type=1326 audit(561.050:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4969 comm="syz.1.508" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 561.616865][ T1903] pegasus 1-1:0.0: setup Pegasus II specific registers [ 563.305181][ T1903] pegasus 1-1:0.0: can't locate MII phy, using default [ 563.394359][ T1903] pegasus 1-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, ee:15:45:7c:30:3f [ 563.421751][ T1903] usb 1-1: USB disconnect, device number 28 [ 563.907482][ T1903] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 564.077420][ T1903] usb 1-1: Using ep0 maxpacket: 32 [ 564.116039][ T1903] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 564.117160][ T1903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.134596][ T1903] usb 1-1: config 0 descriptor?? [ 574.408774][ T1903] usb 1-1: USB disconnect, device number 29 [ 581.307683][ T5001] netlink: 'syz.0.514': attribute type 4 has an invalid length. [ 587.743845][ T5012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.519'. [ 587.746354][ T5012] netlink: 136 bytes leftover after parsing attributes in process `syz.0.519'. [ 597.978054][ T11] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 598.151546][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.155551][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.171084][ T11] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 598.175542][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 598.179708][ T11] usb 1-1: SerialNumber: syz [ 598.501796][ T11] usb 1-1: 0:2 : does not exist [ 598.590848][ T11] usb 1-1: USB disconnect, device number 30 [ 598.775303][ T5058] netlink: 'syz.1.530': attribute type 4 has an invalid length. [ 599.161834][ T5056] udevd[5056]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.557863][ T39] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 599.861222][ T39] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 599.864838][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.870003][ T39] usb 1-1: Product: syz [ 599.873526][ T39] usb 1-1: Manufacturer: syz [ 599.877554][ T39] usb 1-1: SerialNumber: syz [ 599.904831][ T39] usb 1-1: config 0 descriptor?? [ 608.099746][ T5073] binder: 5072:5073 tried to acquire reference to desc 0, got 1 instead [ 608.112557][ T5073] binder: 5072:5073 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 608.113280][ T5073] binder: 5073 RLIMIT_NICE not set [ 608.116007][ T5073] binder: 5073 RLIMIT_NICE not set [ 608.122607][ T5073] binder: send failed reply for transaction 12 to 5072:5073 [ 608.124408][ T5073] binder: 5072:5073 ioctl c0306201 20000240 returned -14 [ 608.142762][ T1903] binder: undelivered TRANSACTION_COMPLETE [ 608.147655][ T1903] binder: undelivered TRANSACTION_ERROR: 29201 [ 608.307129][ T5077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.314237][ T5077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.823005][ T5084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.829934][ T5084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.157321][ T3218] usb 1-1: USB disconnect, device number 31 [ 612.865522][ T5103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.910465][ T5103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.449443][ T39] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 620.618475][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 620.693368][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.698260][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.739734][ T39] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 620.743374][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.747568][ T39] usb 1-1: Product: syz [ 620.749705][ T39] usb 1-1: Manufacturer: syz [ 620.752029][ T39] usb 1-1: SerialNumber: syz [ 621.039038][ T39] usb 1-1: 0:2 : does not exist [ 621.072972][ T39] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 621.248843][ T39] usb 1-1: USB disconnect, device number 32 [ 621.703071][ T5135] udevd[5135]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.767839][ T39] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 621.938318][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 621.961138][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.965694][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 621.972325][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 621.977008][ T39] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 621.980845][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.998145][ T39] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 622.001948][ T39] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 622.005595][ T39] usb 1-1: Manufacturer: syz [ 622.032291][ T39] usb 1-1: config 0 descriptor?? [ 627.208627][ T5156] netlink: 308 bytes leftover after parsing attributes in process `syz.1.560'. [ 632.428274][ T1903] usb 1-1: USB disconnect, device number 33 [ 632.751291][ T5179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.806138][ T5179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.057741][ T11] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 633.305336][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.306158][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.318866][ T11] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 633.319394][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.343974][ T11] usb 1-1: config 0 descriptor?? [ 633.755281][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.785285][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.804926][ T11] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 633.805477][ T11] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 633.817883][ T11] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 633.818493][ T11] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 633.818751][ T11] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 633.819323][ T11] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 633.819561][ T11] hid-generic 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 633.837631][ T11] hid-generic 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 634.133865][ T5192] vlan2: entered allmulticast mode [ 634.134474][ T5192] veth1: entered allmulticast mode [ 634.292229][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 634.299469][ T30] audit: type=1326 audit(633.940:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5193 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 634.300496][ T30] audit: type=1326 audit(633.950:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5193 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 634.315014][ T30] audit: type=1326 audit(633.960:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5193 comm="syz.1.572" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 635.929420][ T5204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.576'. [ 636.045057][ T5206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.051224][ T5206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.130187][ T5215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.135569][ T5215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.268557][ T5217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.274996][ T5217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.349288][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.363498][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.402662][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.404382][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.947283][ T5242] netlink: 'syz.1.590': attribute type 13 has an invalid length. [ 644.565685][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.329815][ T5242] bond_slave_0: entered promiscuous mode [ 645.331360][ T5242] bond_slave_1: entered promiscuous mode [ 645.346270][ T5242] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 647.584503][ T4953] usb 1-1: USB disconnect, device number 34 [ 648.924854][ T5261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 648.939997][ T5261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.597'. [ 651.525830][ T30] audit: type=1326 audit(651.170:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5292 comm="syz.1.611" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 651.531727][ T30] audit: type=1326 audit(651.180:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5292 comm="syz.1.611" exe="/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 651.532140][ T30] audit: type=1326 audit(651.180:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5292 comm="syz.1.611" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 651.540496][ T30] audit: type=1326 audit(651.190:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5292 comm="syz.1.611" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 651.763434][ T30] audit: type=1326 audit(651.410:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5294 comm="syz.1.612" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 651.783574][ T30] audit: type=1326 audit(651.420:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5294 comm="syz.1.612" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 651.801847][ T30] audit: type=1326 audit(651.450:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5294 comm="syz.1.612" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 651.810809][ T30] audit: type=1326 audit(651.450:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5294 comm="syz.1.612" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 651.830545][ T30] audit: type=1326 audit(651.480:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5294 comm="syz.1.612" exe="/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 651.837871][ T30] audit: type=1326 audit(651.480:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5294 comm="syz.1.612" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 652.199312][ T5299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 657.755486][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 660.610709][ T5350] tmpfs: Unknown parameter '01777777777777777777777' [ 665.282325][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 665.285823][ T30] audit: type=1326 audit(664.930:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5364 comm="syz.1.637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 665.293368][ T30] audit: type=1326 audit(664.930:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5364 comm="syz.1.637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 665.293763][ T30] audit: type=1326 audit(664.940:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5364 comm="syz.1.637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=51 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 665.294211][ T30] audit: type=1326 audit(664.940:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5364 comm="syz.1.637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 665.302705][ T30] audit: type=1326 audit(664.950:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5364 comm="syz.1.637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 665.531815][ T30] audit: type=1326 audit(665.180:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5366 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 665.551811][ T30] audit: type=1326 audit(665.200:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5366 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 665.577151][ T30] audit: type=1326 audit(665.210:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5366 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 665.590745][ T30] audit: type=1326 audit(665.230:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5366 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=443 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 665.602283][ T30] audit: type=1326 audit(665.250:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5366 comm="syz.1.638" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135a8a8 code=0x7ffc0000 [ 669.114713][ T5415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.658'. [ 669.115493][ T5415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.658'. [ 669.659285][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 669.861959][ T2852] smc: removing ib device syz0 [ 670.407161][ T3476] ================================================================== [ 670.416045][ T3476] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x20/0xb4 [ 670.417819][ T3476] Read at addr f0f00000077622e8 by task kworker/1:4/3476 [ 670.418343][ T3476] Pointer tag: [f0], memory tag: [fe] [ 670.418602][ T3476] [ 670.419634][ T3476] CPU: 1 UID: 0 PID: 3476 Comm: kworker/1:4 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT [ 670.420221][ T3476] Hardware name: linux,dummy-virt (DT) [ 670.420737][ T3476] Workqueue: infiniband ib_cache_event_task [ 670.421935][ T3476] Call trace: [ 670.422305][ T3476] show_stack+0x18/0x24 (C) [ 670.422775][ T3476] dump_stack_lvl+0x78/0x90 [ 670.423067][ T3476] print_report+0x108/0x630 [ 670.423291][ T3476] kasan_report+0x88/0xac [ 670.423507][ T3476] __do_kernel_fault+0x170/0x1c8 [ 670.423724][ T3476] do_tag_check_fault+0x78/0x8c [ 670.423947][ T3476] do_mem_abort+0x44/0x94 [ 670.424224][ T3476] el1_abort+0x40/0x60 [ 670.424452][ T3476] el1h_64_sync_handler+0xa4/0x120 [ 670.424670][ T3476] el1h_64_sync+0x6c/0x70 [ 670.425034][ T3476] __ethtool_get_link_ksettings+0x20/0xb4 (P) [ 670.425283][ T3476] ipvlan_ethtool_get_link_ksettings+0x14/0x20 [ 670.425562][ T3476] __ethtool_get_link_ksettings+0x5c/0xb4 [ 670.425778][ T3476] ib_get_eth_speed+0x84/0x354 [ 670.426003][ T3476] rxe_query_port+0xf8/0x1b4 [ 670.426222][ T3476] ib_query_port+0x150/0x200 [ 670.426475][ T3476] ib_cache_update.part.0+0x70/0x3e8 [ 670.426695][ T3476] ib_cache_event_task+0x60/0x90 [ 670.426920][ T3476] process_one_work+0x178/0x2cc [ 670.427137][ T3476] worker_thread+0x250/0x358 [ 670.427348][ T3476] kthread+0x130/0x1fc [ 670.427564][ T3476] ret_from_fork+0x10/0x20 [ 670.427990][ T3476] [ 670.430355][ T3476] Freed by task 5418: [ 670.430794][ T3476] kasan_save_stack+0x3c/0x64 [ 670.431228][ T3476] save_stack_info+0x40/0x158 [ 670.431532][ T3476] kasan_save_free_info+0x18/0x24 [ 670.431831][ T3476] __kasan_slab_free+0x74/0x8c [ 670.432141][ T3476] kfree+0xfc/0x30c [ 670.432439][ T3476] kvfree+0x3c/0x4c [ 670.432735][ T3476] netdev_release+0x30/0x44 [ 670.433046][ T3476] device_release+0x34/0x90 [ 670.433374][ T3476] kobject_put+0xa4/0x114 [ 670.433675][ T3476] netdev_run_todo+0x1f0/0x5a0 [ 670.433985][ T3476] rtnl_dellink+0x154/0x394 [ 670.434286][ T3476] rtnetlink_rcv_msg+0x304/0x398 [ 670.434586][ T3476] netlink_rcv_skb+0x5c/0x128 [ 670.434889][ T3476] rtnetlink_rcv+0x18/0x24 [ 670.436195][ T3476] netlink_unicast+0x1c8/0x2dc [ 670.436555][ T3476] netlink_sendmsg+0x194/0x400 [ 670.436864][ T3476] __sock_sendmsg+0x54/0x60 [ 670.437226][ T3476] ____sys_sendmsg+0x234/0x29c [ 670.437533][ T3476] ___sys_sendmsg+0xac/0x100 [ 670.437837][ T3476] __sys_sendmsg+0x98/0xf8 [ 670.438134][ T3476] __arm64_sys_sendmsg+0x24/0x30 [ 670.438406][ T3476] invoke_syscall+0x48/0x110 [ 670.438699][ T3476] el0_svc_common.constprop.0+0x40/0xe0 [ 670.438983][ T3476] do_el0_svc+0x1c/0x28 [ 670.439256][ T3476] el0_svc+0xa8/0x124 [ 670.439564][ T3476] el0t_64_sync_handler+0x10c/0x138 [ 670.439866][ T3476] el0t_64_sync+0x1a4/0x1a8 [ 670.440413][ T3476] [ 670.440689][ T3476] The buggy address belongs to the object at fff0000007762000 [ 670.440689][ T3476] which belongs to the cache kmalloc-cg-4k of size 4096 [ 670.441050][ T3476] The buggy address is located 744 bytes inside of [ 670.441050][ T3476] 4096-byte region [fff0000007762000, fff0000007763000) [ 670.441363][ T3476] [ 670.441766][ T3476] The buggy address belongs to the physical page: [ 670.442240][ T3476] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xf5f0000007763000 pfn:0x47760 [ 670.442879][ T3476] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 670.443338][ T3476] flags: 0x1ffc00000000240(workingset|head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x0) [ 670.444245][ T3476] page_type: f5(slab) [ 670.445037][ T3476] raw: 01ffc00000000240 f7f0000003008000 ffffc1ffc0272410 ffffc1ffc022f810 [ 670.445424][ T3476] raw: f5f0000007763000 0000000000080002 00000000f5000000 0000000000000000 [ 670.445833][ T3476] head: 01ffc00000000240 f7f0000003008000 ffffc1ffc0272410 ffffc1ffc022f810 [ 670.446275][ T3476] head: f5f0000007763000 0000000000080002 00000000f5000000 0000000000000000 [ 670.446606][ T3476] head: 01ffc00000000003 ffffc1ffc01dd801 00000000ffffffff 00000000ffffffff [ 670.446932][ T3476] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 670.447273][ T3476] page dumped because: kasan: bad access detected [ 670.447610][ T3476] [ 670.447895][ T3476] Memory state around the buggy address: [ 670.448432][ T3476] fff0000007762000: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 670.448801][ T3476] fff0000007762100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 670.449147][ T3476] >fff0000007762200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 670.449465][ T3476] ^ [ 670.449822][ T3476] fff0000007762300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 670.450110][ T3476] fff0000007762400: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 670.450444][ T3476] ================================================================== [ 670.453242][ T3476] Disabling lock debugging due to kernel taint [ 670.623098][ T3476] syz0: Port: 1 Link DOWN VM DIAGNOSIS: 13:47:42 Registers: info registers vcpu 0 CPU#0 PC=ffff8000801670e8 X00=ffff800080136b54 X01=0000000000000000 X02=0000000000000000 X03=0000000000000000 X04=ffff80008309c000 X05=ffff800080003df8 X06=ffff80008309bd80 X07=ffff80008309bd80 X08=ffff800080003d98 X09=ffff8000828e4640 X10=00000000000001ad X11=0000000000000002 X12=0000000000000001 X13=0000000000000001 X14=00000000000001ad X15=ffff80008309b9f0 X16=ffff800080000000 X17=fff07ffffd012000 X18=00000000ffffffff X19=fff000007f8cdf20 X20=fff000007f8cdf08 X21=0000009c05c50146 X22=ffff8000828d8000 X23=ffff80008309bc20 X24=0000009c05c497af X25=00000000000000c0 X26=0000000000000001 X27=ffff80008017cd50 X28=0000000000000000 X29=ffff800080003e40 X30=89ef80008017ce14 SP=ffff800080003e40 PSTATE=204020c9 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffd5eda5a0:0000ffffd5eda5a0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffd5eda570 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081afc244 X00=ffff800081afc240 X01=faf000000606c900 X02=0000000000000000 X03=0000000000000079 X04=000000000000b826 X05=00000000fa83b2da X06=00000000000f97ec X07=f0f00000066a4c00 X08=f0f00000066a4c80 X09=0000000000000400 X10=00000000000001a8 X11=0000000000000001 X12=0000000000000001 X13=0000000000000001 X14=00000000000001a8 X15=0000ffffdc36f088 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=0000000000000000 X20=ffff8000829f2348 X21=ffff8000829f2340 X22=0000000000000001 X23=0000000000000004 X24=ffff8000829f2348 X25=0000000000000028 X26=0000000000000000 X27=faf000000606c980 X28=00000000fffffdef X29=ffff8000896cba80 X30=ffff80008017c624 SP=ffff8000896cba80 PSTATE=814020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffdc36f0a0:0000ffffdc36f0a0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffdc36f070 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000