last executing test programs: 33.611738575s ago: executing program 0 (id=348): r0 = socket(0x10, 0x3, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000600)) 30.631646818s ago: executing program 0 (id=350): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x200003, {0x0, 0x0, 0x0, r1, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 27.195128434s ago: executing program 0 (id=352): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) wait4(r2, 0x0, 0x2, 0x0) getresgid(0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x118, 0xffffb453) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003580)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001b40)}, {&(0x7f0000002b40)="8966468b754b85b2b743b4eb7e7e1b5a82bcae6ab83ceaf51f97a9ad7f1ab39231cc567e53b7fbb63127ce4a2925cba1a8e846a3d43c990a0d2179cfa1c85385d06a4a4965375acaf82d", 0x4a}, {0x0}, {&(0x7f0000002c80)="a41f23418048ec", 0x7}], 0x4, &(0x7f0000003140)=[@cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r1, r0]}}, @rights={{0x10, 0x1, 0x1, [r1]}}], 0x54, 0x20000800}}, {{&(0x7f00000031c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4815}}], 0x2, 0x4008000) 26.507200059s ago: executing program 1 (id=353): r0 = socket$nl_rdma(0x10, 0x3, 0x14) write$FUSE_BMAP(r0, &(0x7f0000001040)={0x18, 0xffffffffffffffda, 0x0, {0x9}}, 0x18) 24.026484458s ago: executing program 1 (id=354): r0 = openat$mice(0xffffff9c, 0x0, 0x840) r1 = socket(0x10, 0x3, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000600)) 19.907777429s ago: executing program 0 (id=355): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000400000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c0005"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 19.629785691s ago: executing program 1 (id=356): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x82600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 16.596967574s ago: executing program 0 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r4) socket(0x10, 0x3, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x10042}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)="2703", 0x2}], 0x1}, 0x0) 13.634588557s ago: executing program 1 (id=358): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x43, 0x345}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfbfffffe, 0x1a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x3, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 7.172752375s ago: executing program 0 (id=359): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x161a02, 0x0) preadv2(r0, &(0x7f0000002500)=[{0x0}], 0x1, 0x0, 0x0, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mremap(&(0x7f000048b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000164000/0x1000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.18809311s ago: executing program 1 (id=360): r0 = openat$mice(0xffffff9c, 0x0, 0x840) r1 = socket(0x10, 0x3, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000600)) 0s ago: executing program 1 (id=361): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000400000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c0005"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:3582' (ED25519) to the list of known hosts. syzkaller login: [ 475.691118][ T3210] cgroup: Unknown subsys name 'net' [ 476.532245][ T3210] cgroup: Unknown subsys name 'cpuset' [ 476.650111][ T3210] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 559.819787][ T3210] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 643.792231][ T3220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.450137][ T3220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.656596][ T3224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.795313][ T3224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.511744][ T3220] hsr_slave_0: entered promiscuous mode [ 664.550905][ T3220] hsr_slave_1: entered promiscuous mode [ 671.590995][ T3224] hsr_slave_0: entered promiscuous mode [ 671.628490][ T3224] hsr_slave_1: entered promiscuous mode [ 671.651040][ T3224] debugfs: 'hsr0' already exists in 'hsr' [ 671.652276][ T3224] Cannot create hsr debugfs directory [ 673.807907][ T3220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 674.020399][ T3220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.233004][ T3220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 674.296088][ T3220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 674.474443][ T3220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 674.572649][ T3220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 674.799849][ T3220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 674.877941][ T3220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 678.631035][ T3224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 678.768666][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 678.821049][ T3224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 679.086040][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 679.131219][ T3224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 679.389169][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.417571][ T3224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 679.620159][ T3224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 687.103024][ T3220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.082119][ T3224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.922572][ T3220] veth0_vlan: entered promiscuous mode [ 734.532320][ T3220] veth1_vlan: entered promiscuous mode [ 737.293345][ T3220] veth0_macvtap: entered promiscuous mode [ 737.532150][ T3220] veth1_macvtap: entered promiscuous mode [ 739.662004][ T3476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.671468][ T3476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.672337][ T3476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.683217][ T3476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.149137][ T3224] veth0_vlan: entered promiscuous mode [ 742.562895][ T3224] veth1_vlan: entered promiscuous mode [ 742.860758][ T3220] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 744.750637][ T3224] veth0_macvtap: entered promiscuous mode [ 745.019006][ T3224] veth1_macvtap: entered promiscuous mode [ 748.003254][ T3459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.056783][ T3481] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.197052][ T29] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.695918][ T3481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.840166][ T3853] Zero length message leads to an empty skb [ 778.271419][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 778.647271][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 778.867730][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 779.120134][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.129147][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 779.156693][ T31] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 779.198274][ T31] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 779.232399][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 779.245542][ T31] usb 2-1: config 1 interface 1 has no altsetting 0 [ 780.211168][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.222247][ T31] usb 2-1: Product: syz [ 780.222916][ T31] usb 2-1: Manufacturer: syz [ 780.239118][ T31] usb 2-1: SerialNumber: syz [ 783.619022][ T30] audit: type=1326 audit(782.900:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3855 comm="syz.1.6" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8893427a code=0x7ffc0000 [ 783.704936][ T30] audit: type=1326 audit(783.000:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3855 comm="syz.1.6" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8893427a code=0x7ffc0000 [ 784.000810][ T30] audit: type=1326 audit(783.340:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3855 comm="syz.1.6" exe="/syz-executor" sig=0 arch=c00000f3 syscall=56 compat=0 ip=0x7fff8893427a code=0x7ffc0000 [ 784.858179][ T30] audit: type=1326 audit(784.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3855 comm="syz.1.6" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8893427a code=0x7ffc0000 [ 784.881609][ T30] audit: type=1326 audit(784.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3855 comm="syz.1.6" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8893427a code=0x7ffc0000 [ 787.124437][ T30] audit: type=1326 audit(786.440:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3855 comm="syz.1.6" exe="/syz-executor" sig=0 arch=c00000f3 syscall=211 compat=0 ip=0x7fff8893427a code=0x7ffc0000 [ 787.153323][ T30] audit: type=1326 audit(786.470:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3855 comm="syz.1.6" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8893427a code=0x7ffc0000 [ 787.278618][ T31] usb 2-1: selecting invalid altsetting 0 [ 787.292567][ T30] audit: type=1326 audit(786.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3855 comm="syz.1.6" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8893427a code=0x7ffc0000 [ 787.335512][ T31] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 787.351021][ T31] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -32 [ 787.429244][ T30] audit: type=1326 audit(786.680:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3855 comm="syz.1.6" exe="/syz-executor" sig=0 arch=c00000f3 syscall=56 compat=0 ip=0x7fff8893427a code=0x7ffc0000 [ 787.690881][ T30] audit: type=1326 audit(787.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3855 comm="syz.1.6" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8893427a code=0x7ffc0000 [ 794.884477][ T3773] usb 2-1: USB disconnect, device number 2 [ 805.087734][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 806.326021][ T31] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 806.460938][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.464565][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 806.467501][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.924133][ T31] usb 1-1: config 0 descriptor?? [ 807.392198][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 808.217182][ T10] usb 1-1: USB disconnect, device number 2 [ 810.159275][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 810.702337][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 811.700435][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.705912][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 34, changing to 9 [ 811.722451][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 812.412166][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.427241][ T10] usb 1-1: Product: syz [ 812.427679][ T10] usb 1-1: Manufacturer: syz [ 812.428043][ T10] usb 1-1: SerialNumber: syz [ 814.551071][ T10] snd-usb-6fire 1-1:1.0: unable to receive device firmware state. [ 814.552697][ T10] snd-usb-6fire 1-1:1.0: probe with driver snd-usb-6fire failed with error -110 [ 819.806096][ T3834] usb 1-1: USB disconnect, device number 3 [ 828.728248][ T3946] bond0: (slave bond_slave_0): Releasing backup interface [ 829.983435][ T3946] bond0: (slave bond_slave_1): Releasing backup interface [ 832.757816][ T3946] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 841.768499][ T3961] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14'. [ 844.572522][ T3959] syzkaller1: entered promiscuous mode [ 844.600656][ T3959] syzkaller1: entered allmulticast mode [ 859.504984][ T3978] syzkaller0: entered promiscuous mode [ 859.506675][ T3978] syzkaller0: entered allmulticast mode [ 872.859432][ T3997] : renamed from bond0 (while UP) [ 875.516738][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 875.517409][ T30] audit: type=1326 audit(874.850:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 875.570266][ T30] audit: type=1326 audit(874.860:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 875.681724][ T30] audit: type=1326 audit(875.020:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 875.692502][ T30] audit: type=1326 audit(875.030:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 875.750191][ T30] audit: type=1326 audit(875.030:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 875.915135][ T30] audit: type=1326 audit(875.250:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c00000f3 syscall=200 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 875.997536][ T30] audit: type=1326 audit(875.260:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 876.169691][ T30] audit: type=1326 audit(875.420:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 876.183134][ T30] audit: type=1326 audit(875.500:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 876.239935][ T30] audit: type=1326 audit(875.570:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4003 comm="syz.0.23" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 877.289479][ T4006] syzkaller0: entered promiscuous mode [ 877.290010][ T4006] syzkaller0: entered allmulticast mode [ 892.289529][ T4024] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 898.850538][ T4033] ip_tables: iptables: counters copy to user failed while replacing table [ 899.681606][ T4035] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 919.471345][ T4060] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 991.277544][ T4142] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 991.555713][ T4142] lo: entered promiscuous mode [ 991.959454][ T4142] tunl0: entered promiscuous mode [ 992.140348][ T4142] gre0: entered promiscuous mode [ 992.562106][ T4142] gretap0: entered promiscuous mode [ 993.061249][ T4142] erspan0: entered promiscuous mode [ 993.959162][ T4142] ip_vti0: entered promiscuous mode [ 995.006471][ T4142] ip6_vti0: entered promiscuous mode [ 995.572920][ T4142] sit0: entered promiscuous mode [ 995.865706][ T4142] ip6tnl0: entered promiscuous mode [ 996.178925][ T4142] ip6gre0: entered promiscuous mode [ 996.281284][ T4142] syz_tun: entered promiscuous mode [ 996.490741][ T4142] ip6gretap0: entered promiscuous mode [ 1055.447482][ T4207] syzkaller0: entered promiscuous mode [ 1055.448261][ T4207] syzkaller0: entered allmulticast mode [ 1087.817740][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1087.818396][ T30] audit: type=1326 audit(1087.130:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4239 comm="syz.0.76" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1087.954822][ T30] audit: type=1326 audit(1087.170:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4239 comm="syz.0.76" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1088.741677][ T30] audit: type=1326 audit(1088.060:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4239 comm="syz.0.76" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1088.903075][ T30] audit: type=1326 audit(1088.190:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4239 comm="syz.0.76" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1089.083388][ T30] audit: type=1326 audit(1088.360:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4239 comm="syz.0.76" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1089.328465][ T30] audit: type=1326 audit(1088.620:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4239 comm="syz.0.76" exe="/syz-executor" sig=0 arch=c00000f3 syscall=200 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1089.398050][ T30] audit: type=1326 audit(1088.690:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4239 comm="syz.0.76" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1089.472054][ T30] audit: type=1326 audit(1088.770:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4239 comm="syz.0.76" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1089.561857][ T30] audit: type=1326 audit(1088.840:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4239 comm="syz.0.76" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1089.618719][ T30] audit: type=1326 audit(1088.900:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4239 comm="syz.0.76" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1106.286061][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1106.292661][ T30] audit: type=1326 audit(1105.620:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.82" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1106.306679][ T30] audit: type=1326 audit(1105.640:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.82" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1106.479669][ T30] audit: type=1326 audit(1105.810:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.82" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1106.505159][ T30] audit: type=1326 audit(1105.840:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.82" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1106.630291][ T30] audit: type=1326 audit(1105.870:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.82" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1106.658263][ T30] audit: type=1326 audit(1105.990:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.82" exe="/syz-executor" sig=0 arch=c00000f3 syscall=200 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1106.670023][ T30] audit: type=1326 audit(1106.000:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.82" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1106.757250][ T30] audit: type=1326 audit(1106.030:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.82" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1106.819328][ T30] audit: type=1326 audit(1106.150:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.82" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1106.832472][ T30] audit: type=1326 audit(1106.160:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4254 comm="syz.0.82" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1121.599090][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1121.599636][ T30] audit: type=1326 audit(1120.940:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1121.624986][ T30] audit: type=1326 audit(1120.960:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1122.909235][ T30] audit: type=1326 audit(1122.210:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1123.041424][ T30] audit: type=1326 audit(1122.360:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1123.103381][ T30] audit: type=1326 audit(1122.440:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1123.278579][ T30] audit: type=1326 audit(1122.590:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c00000f3 syscall=200 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1123.316872][ T30] audit: type=1326 audit(1122.630:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1123.381416][ T30] audit: type=1326 audit(1122.670:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1123.592535][ T30] audit: type=1326 audit(1122.840:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1123.687854][ T30] audit: type=1326 audit(1122.980:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.0.88" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1142.037796][ T4285] syzkaller0: entered promiscuous mode [ 1142.040769][ T4285] syzkaller0: entered allmulticast mode [ 1144.456096][ T4294] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 1163.310482][ T4312] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 1180.985511][ T4322] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1181.206397][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 1181.550819][ T4322] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1181.559407][ T4322] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1181.846642][ T4322] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1181.852308][ T4322] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1181.852795][ T4322] usb 2-1: config 14 has no interface number 0 [ 1181.853095][ T4322] usb 2-1: config 14 has no interface number 1 [ 1181.856552][ T4322] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1181.857206][ T4322] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1181.857692][ T4322] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1181.858187][ T4322] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1181.858742][ T4322] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1181.859156][ T4322] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1181.859570][ T4322] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1181.879101][ T4322] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1183.142426][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.148210][ T4322] usb 2-1: Product: syz [ 1183.148794][ T4322] usb 2-1: Manufacturer: syz [ 1183.177465][ T4322] usb 2-1: SerialNumber: syz [ 1186.300598][ T4322] legousbtower 2-1:14.57: interrupt endpoints not found [ 1186.939614][ T4322] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1187.316255][ T4322] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1195.490925][ T3863] usb 2-1: USB disconnect, device number 3 [ 1196.171699][ T3863] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 1202.569825][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 1248.347657][ T4396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 1299.162144][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1299.162514][ T30] audit: type=1326 audit(1298.500:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.128" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1299.221213][ T30] audit: type=1326 audit(1298.530:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.128" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1299.649677][ T30] audit: type=1326 audit(1298.980:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.128" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1299.745924][ T30] audit: type=1326 audit(1299.030:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.128" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1299.812570][ T30] audit: type=1326 audit(1299.130:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.128" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1299.943185][ T30] audit: type=1326 audit(1299.230:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.128" exe="/syz-executor" sig=0 arch=c00000f3 syscall=200 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1299.962812][ T30] audit: type=1326 audit(1299.290:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.128" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1300.038167][ T30] audit: type=1326 audit(1299.340:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.128" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1300.069831][ T30] audit: type=1326 audit(1299.380:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.128" exe="/syz-executor" sig=0 arch=c00000f3 syscall=198 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1300.146933][ T30] audit: type=1326 audit(1299.460:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.0.128" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff8713427a code=0x7ffc0000 [ 1340.632237][ T4486] netlink: 184 bytes leftover after parsing attributes in process `syz.1.140'. [ 1340.737794][ T4486] batadv_slave_0: entered allmulticast mode [ 1360.892313][ T3787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1361.197693][ T3787] usb 1-1: device descriptor read/64, error -71 [ 1361.589347][ T3787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1361.845836][ T3787] usb 1-1: device descriptor read/64, error -71 [ 1362.006355][ T3787] usb usb1-port1: attempt power cycle [ 1362.100280][ T4514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 1362.627653][ T3787] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1362.873064][ T3787] usb 1-1: device descriptor read/8, error -71 [ 1363.425932][ T3787] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1363.546624][ T3787] usb 1-1: device descriptor read/8, error -71 [ 1363.693360][ T3787] usb usb1-port1: unable to enumerate USB device [ 1375.799172][ T4529] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 1394.246917][ T4546] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 1401.457469][ T4555] syzkaller0: entered promiscuous mode [ 1401.457950][ T4555] syzkaller0: entered allmulticast mode [ 1413.987325][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 1423.146922][ T3787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1423.367398][ T3787] usb 2-1: Using ep0 maxpacket: 8 [ 1423.451042][ T3787] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1423.548929][ T3787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1423.550208][ T3787] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1423.550683][ T3787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 49, changing to 9 [ 1423.551142][ T3787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25209, setting to 1024 [ 1423.838987][ T3787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.842134][ T3787] usb 2-1: Product: syz [ 1423.842701][ T3787] usb 2-1: Manufacturer: syz [ 1423.852542][ T3787] usb 2-1: SerialNumber: syz [ 1423.921411][ T3787] usb 2-1: config 0 descriptor?? [ 1425.718860][ T3787] usb 2-1: USB disconnect, device number 4 [ 1437.757331][ T4620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.171'. [ 1454.290498][ T4634] netlink: 44 bytes leftover after parsing attributes in process `syz.0.177'. [ 1465.400431][ T4646] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1465.980358][ T4646] bond1 (unregistering): Released all slaves [ 1468.361247][ T4693] netlink: 32 bytes leftover after parsing attributes in process `syz.0.182'. [ 1482.352618][ T4735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 1482.353436][ T4735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 1493.371162][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 1493.372060][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 1494.489256][ T4746] netlink: 56 bytes leftover after parsing attributes in process `syz.1.192'. [ 1515.447527][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'. [ 1515.448182][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'. [ 1519.540478][ T4765] netlink: 56 bytes leftover after parsing attributes in process `syz.0.199'. [ 1553.471919][ T4807] netlink: 56 bytes leftover after parsing attributes in process `syz.0.213'. [ 1568.477770][ T4819] netlink: 56 bytes leftover after parsing attributes in process `syz.1.219'. [ 1615.427671][ T4877] C: renamed from batadv_slave_0 (while UP) [ 1615.879237][ T4877] netlink: 164 bytes leftover after parsing attributes in process `syz.0.226'. [ 1625.665599][ T4883] syzkaller0: entered promiscuous mode [ 1625.666262][ T4883] syzkaller0: entered allmulticast mode [ 1652.028492][ T3849] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1652.317062][ T3849] usb 1-1: Using ep0 maxpacket: 8 [ 1652.472396][ T3849] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1653.258432][ T3849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.258993][ T3849] usb 1-1: Product: syz [ 1653.261463][ T3849] usb 1-1: Manufacturer: syz [ 1653.261842][ T3849] usb 1-1: SerialNumber: syz [ 1659.177921][ T3849] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1659.209394][ T3849] usb 1-1: MIDIStreaming interface descriptor not found [ 1664.670061][ T3849] usb 1-1: USB disconnect, device number 8 [ 1690.662042][ T3787] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1691.094939][ T3787] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1691.120717][ T3787] usb 2-1: config 0 has no interfaces? [ 1691.478720][ T3787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.482941][ T3787] usb 2-1: Product: syz [ 1691.483288][ T3787] usb 2-1: Manufacturer: syz [ 1691.491388][ T3787] usb 2-1: SerialNumber: syz [ 1691.777226][ T3787] usb 2-1: config 0 descriptor?? [ 1693.661496][ T4881] usb 2-1: USB disconnect, device number 5 [ 1725.220196][ T5003] netlink: 44 bytes leftover after parsing attributes in process `syz.0.249'. [ 1747.132996][ T5021] netlink: 44 bytes leftover after parsing attributes in process `syz.0.255'. [ 1778.261159][ T5056] netlink: 44 bytes leftover after parsing attributes in process `syz.0.261'. [ 1813.136949][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.267'. [ 1838.198978][ T5113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.273'. [ 1848.751579][ T5128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.275'. [ 1862.344613][ T5136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'. [ 1870.462280][ T5144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.281'. [ 1877.867072][ T5147] netlink: 56 bytes leftover after parsing attributes in process `syz.1.282'. [ 1883.866801][ T5152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'. [ 1890.110512][ T5062] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1890.746953][ T5062] usb 2-1: Using ep0 maxpacket: 8 [ 1890.790501][ T5062] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1890.956047][ T5062] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1890.960151][ T5062] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1890.960682][ T5062] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1890.973349][ T5062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.710115][ T5062] usbtmc 2-1:16.0: bulk endpoints not found [ 1897.718321][ T5169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.288'. [ 1913.811333][ T4881] usb 2-1: USB disconnect, device number 6 [ 1921.514864][ T5192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.293'. [ 1996.729696][ T3787] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1996.986911][ T3787] usb 2-1: Using ep0 maxpacket: 16 [ 1997.140646][ T3787] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1997.226118][ T3787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1997.244786][ T3787] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1997.736913][ T3787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.739792][ T3787] usb 2-1: Product: syz [ 1997.740132][ T3787] usb 2-1: Manufacturer: syz [ 1997.740412][ T3787] usb 2-1: SerialNumber: syz [ 1998.166687][ T3787] usb 2-1: config 0 descriptor?? [ 1998.394675][ T3787] hub 2-1:0.0: bad descriptor, ignoring hub [ 1998.396635][ T3787] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1998.767536][ T3787] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2001.916983][ T3787] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2002.756177][ T3787] usb 2-1: USB disconnect, device number 7 [ 2009.039911][ T5290] netlink: 64 bytes leftover after parsing attributes in process `syz.1.315'. [ 2009.229019][ T5290] syzkaller1: entered promiscuous mode [ 2009.229538][ T5290] syzkaller1: entered allmulticast mode [ 2016.349025][ T5299] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2070.691476][ T5363] binder: BINDER_SET_CONTEXT_MGR already set [ 2070.702796][ T5363] binder: 5361:5363 ioctl 4018620d 200000000100 returned -16 [ 2071.435525][ T5363] binder: BINDER_SET_CONTEXT_MGR already set [ 2071.499504][ T5363] binder: 5361:5363 ioctl 4018620d 2000000002c0 returned -16 [ 2081.937372][ T5362] syz.0.331 (5362): drop_caches: 2 [ 2083.000674][ T3787] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 2083.492483][ T3787] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2083.638719][ T3787] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2083.648082][ T3787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2083.968004][ T3787] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2083.968528][ T3787] usb 2-1: Product: syz [ 2083.975500][ T3787] usb 2-1: Manufacturer: syz [ 2083.975920][ T3787] usb 2-1: SerialNumber: syz [ 2084.320349][ T3787] usb 2-1: config 0 descriptor?? [ 2085.172403][ T3787] usb 2-1: selecting invalid altsetting 0 [ 2086.497393][ T5368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.547517][ T5368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2087.339619][ T3848] usb 2-1: USB disconnect, device number 8 [ 2103.382893][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 2119.240247][ T5425] netlink: 56 bytes leftover after parsing attributes in process `syz.0.343'. [ 2123.458251][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 2138.022630][ T5452] netlink: 56 bytes leftover after parsing attributes in process `syz.1.349'. [ 2140.341454][ T5454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 2140.996986][ T5456] fuse: Bad value for 'fd' [ 2150.810415][ T5469] netlink: 56 bytes leftover after parsing attributes in process `syz.0.355'. [ 2170.919710][ T5489] netlink: 56 bytes leftover after parsing attributes in process `syz.1.361'. [ 2173.983936][ C0] ------------[ cut here ]------------ [ 2173.984266][ C0] kernel BUG at [] mm/page_table_check.c:118! [ 2173.985214][ C0] Kernel BUG [#1] [ 2173.989857][ C0] Modules linked in: [ 2173.992269][ C0] CPU: 0 UID: 0 PID: 5484 Comm: syz.0.359 Not tainted syzkaller #0 PREEMPT [ 2173.994545][ C0] Hardware name: riscv-virtio,qemu (DT) [ 2173.996198][ C0] epc : page_table_check_set+0x9ca/0xc72 [ 2173.997901][ C0] ra : page_table_check_set+0x9ca/0xc72 [ 2173.999247][ C0] epc : ffffffff80cbd16e ra : ffffffff80cbd16e sp : ffff8f800a896dc0 [ 2174.000813][ C0] gp : ffffffff8a6d9c00 tp : ffffaf801c2d1ac0 t0 : ffff8f800a897378 [ 2174.002344][ C0] t1 : fffff5ef027b2009 t2 : ffffffff80acb032 s0 : ffff8f800a896e40 [ 2174.004026][ C0] s1 : 0000000000000001 a0 : 0000000000000001 a1 : 0000000000000000 [ 2174.005631][ C0] a2 : 0000000000080000 a3 : ffffffff80cbd16e a4 : ffff8f8004d33870 [ 2174.007359][ C0] a5 : 0000000000038870 a6 : 0000000000000003 a7 : ffffaf8013d9004b [ 2174.008968][ C0] s2 : 00000000000b5000 s3 : 0000000000000000 s4 : ffffaf8013d90000 [ 2174.010562][ C0] s5 : 0000000000000200 s6 : 0000000000000001 s7 : dfffffff00000000 [ 2174.012130][ C0] s8 : ffffffff88e6d260 s9 : 0000000000007fff s10: 0000000000000000 [ 2174.013661][ C0] s11: ffffffff8a7f9d60 t3 : 00000000000000c8 t4 : fffff5ef027b2009 [ 2174.015136][ C0] t5 : fffff5ef027b200a t6 : 0000000000000002 ssp : 0000000000000000 [ 2174.016843][ C0] status: 0000000200000120 badaddr: ffffffff80cbd16e cause: 0000000000000003 [ 2174.018560][ C0] [] page_table_check_set+0x9ca/0xc72 [ 2174.020467][ C0] [] __page_table_check_ptes_set+0x23c/0x4a4 [ 2174.022070][ C0] [] split_huge_pmd_locked+0x1f00/0x241e [ 2174.023568][ C0] [] __split_huge_pmd+0x2aa/0x3d4 [ 2174.025045][ C0] [] vma_adjust_trans_huge+0x272/0x4b2 [ 2174.026668][ C0] [] __split_vma+0xbce/0x1f38 [ 2174.028063][ C0] [] vms_gather_munmap_vmas+0x1dc/0x160a [ 2174.029582][ C0] [] do_vmi_align_munmap+0x240/0x6d6 [ 2174.031021][ C0] [] do_vmi_munmap+0x1ce/0x3bc [ 2174.032397][ C0] [] do_munmap+0xd4/0x10a [ 2174.033714][ C0] [] mremap_to+0x28c/0x474 [ 2174.035011][ C0] [] __do_sys_mremap+0xa56/0x1490 [ 2174.036497][ C0] [] __riscv_sys_mremap+0xa0/0x15a [ 2174.037983][ C0] [] syscall_handler+0x92/0x114 [ 2174.039398][ C0] [] do_trap_ecall_u+0x4ca/0x658 [ 2174.040859][ C0] [] handle_exception+0x168/0x174 [ 2174.042867][ C0] Code: 3097 ff88 80e7 a900 82e3 e404 3097 ff88 80e7 f8e0 (9002) 3097 [ 2174.045455][ C0] ---[ end trace 0000000000000000 ]--- [ 2174.047645][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 2174.049595][ C0] SMP: stopping secondary CPUs [ 2174.052197][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:56:47 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff8025ad6a mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f4b509 hedeleg 0000000000000000 mtvec 00000000800004f8 stvec ffffffff8663b0b0 vstvec 0000000000000000 mepc ffffffff8007ebdc sepc ffffffff801dc278 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080049000 sscratch 0000000000000000 satp 9011f0000009eaf4 x0/zero 0000000000000000 x1/ra ffffffff80424cca x2/sp ffff8f8000017dc0 x3/gp ffffffff8a6d9c00 x4/tp ffffaf801a791ac0 x5/t0 ffffaf805cbe14d0 x6/t1 ffffffff8a7eea80 x7/t2 ffffaf805cbe18a8 x8/s0 ffff8f8000017dc0 x9/s1 ffffffff918f1940 x10/a0 0000000000000007 x11/a1 0000000000000000 x12/a2 0000000000000000 x13/a3 ffffffff84ad3a94 x14/a4 0000000000000000 x15/a5 ffffaf801a791ac0 x16/a6 000000001f000100 x17/a7 0000000000000003 x18/s2 000000000002b185 x19/s3 dfffffff00000000 x20/s4 ffffaf805cbe14c8 x21/s5 000001fa0504c9f4 x22/s6 ffffaf805cbe1628 x23/s7 000000000006a02e x24/s8 ffffaf805cbe1728 x25/s9 ffffaf805cbe16a8 x26/s10 ffffffff80424cde x27/s11 ffffaf805cbe14cf x28/t3 ffffffff8829f558 x29/t4 fffff1ef00002f80 x30/t5 fffff1ef00002f81 x31/t6 ffffffff8829cb08 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8015b1e4 mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000220 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f4b509 hedeleg 0000000000000000 mtvec 00000000800004f8 stvec ffffffff8663b0b0 vstvec 0000000000000000 mepc ffffffff80095c36 sepc ffffffff80cbd16e vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000003 vscause 0000000000000000 mtval 0000000000000000 stval ffffffff80cbd16e htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080047000 sscratch 0000000000000000 satp 903be000000b38ac x0/zero 0000000000000000 x1/ra ffffffff8015c4ec x2/sp ffff8f800a896a80 x3/gp ffffffff8a6d9c00 x4/tp ffffaf801c2d1ac0 x5/t0 ffff8f800a8967a4 x6/t1 fffff5ef0b977322 x7/t2 6c2073656c75646f x8/s0 ffff8f800a896a90 x9/s1 ffffffff86c07440 x10/a0 0000000000000000 x11/a1 ffffffff870279e0 x12/a2 0000000000000007 x13/a3 ffffffff8015c4e6 x14/a4 0000000000000000 x15/a5 ffffaf801c2d1ac0 x16/a6 000000001f000100 x17/a7 ffffaf805cbb9913 x18/s2 0000000000000000 x19/s3 ffffaf801c2d1ac0 x20/s4 ffffaf801ccf1000 x21/s5 1ffff1f001512d94 x22/s6 0000000000000000 x23/s7 000000000000156c x24/s8 ffffffff88e6d260 x25/s9 ffff8f800a896a00 x26/s10 0000000000000000 x27/s11 ffffffff8a7f9d60 x28/t3 ffffffff882a15c0 x29/t4 fffff5ef0b977322 x30/t5 fffff5ef0b977323 x31/t6 ffff8f800a896438 fcsr 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000