syzkaller login: [ 335.911401][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 336.024708][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 336.101117][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 345.939962][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:13813' (ECDSA) to the list of known hosts. 1970/01/01 00:06:34 fuzzer started 1970/01/01 00:06:50 dialing manager at localhost:44045 [ 418.502992][ T2025] cgroup: Unknown subsys name 'net' [ 419.702310][ T2025] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:59 syscalls: 2817 1970/01/01 00:06:59 code coverage: enabled 1970/01/01 00:06:59 comparison tracing: enabled 1970/01/01 00:06:59 extra coverage: enabled 1970/01/01 00:06:59 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:59 setuid sandbox: enabled 1970/01/01 00:06:59 namespace sandbox: enabled 1970/01/01 00:06:59 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:59 fault injection: enabled 1970/01/01 00:06:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:59 net packet injection: enabled 1970/01/01 00:06:59 net device setup: enabled 1970/01/01 00:06:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:59 USB emulation: enabled 1970/01/01 00:06:59 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:59 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:59 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:59 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:07:06 fetching corpus: 50, signal 34864/37994 (executing program) 1970/01/01 00:07:10 fetching corpus: 99, signal 44773/49091 (executing program) 1970/01/01 00:07:15 fetching corpus: 148, signal 54829/60081 (executing program) 1970/01/01 00:07:19 fetching corpus: 196, signal 61870/67989 (executing program) 1970/01/01 00:07:22 fetching corpus: 246, signal 67346/74288 (executing program) 1970/01/01 00:07:27 fetching corpus: 296, signal 72791/80428 (executing program) 1970/01/01 00:07:30 fetching corpus: 344, signal 77724/85978 (executing program) 1970/01/01 00:07:34 fetching corpus: 393, signal 81308/90166 (executing program) 1970/01/01 00:07:36 fetching corpus: 443, signal 83834/93326 (executing program) 1970/01/01 00:07:39 fetching corpus: 493, signal 86481/96563 (executing program) 1970/01/01 00:07:42 fetching corpus: 542, signal 89591/100054 (executing program) 1970/01/01 00:07:45 fetching corpus: 592, signal 93101/103860 (executing program) 1970/01/01 00:07:50 fetching corpus: 642, signal 96915/107863 (executing program) 1970/01/01 00:07:53 fetching corpus: 692, signal 98824/110177 (executing program) 1970/01/01 00:07:55 fetching corpus: 740, signal 102387/113801 (executing program) 1970/01/01 00:07:58 fetching corpus: 789, signal 105873/117239 (executing program) 1970/01/01 00:08:02 fetching corpus: 837, signal 107867/119499 (executing program) 1970/01/01 00:08:04 fetching corpus: 886, signal 109213/121200 (executing program) 1970/01/01 00:08:07 fetching corpus: 935, signal 112181/124103 (executing program) 1970/01/01 00:08:11 fetching corpus: 985, signal 114188/126169 (executing program) 1970/01/01 00:08:13 fetching corpus: 1035, signal 116024/128076 (executing program) 1970/01/01 00:08:16 fetching corpus: 1085, signal 117851/129932 (executing program) 1970/01/01 00:08:19 fetching corpus: 1133, signal 119390/131521 (executing program) 1970/01/01 00:08:22 fetching corpus: 1183, signal 121528/133506 (executing program) 1970/01/01 00:08:25 fetching corpus: 1233, signal 123044/135034 (executing program) 1970/01/01 00:08:27 fetching corpus: 1282, signal 124270/136258 (executing program) 1970/01/01 00:08:30 fetching corpus: 1332, signal 126097/137892 (executing program) 1970/01/01 00:08:34 fetching corpus: 1380, signal 128563/139956 (executing program) 1970/01/01 00:08:36 fetching corpus: 1430, signal 130082/141281 (executing program) 1970/01/01 00:08:39 fetching corpus: 1480, signal 131528/142540 (executing program) 1970/01/01 00:08:42 fetching corpus: 1530, signal 132874/143689 (executing program) 1970/01/01 00:08:46 fetching corpus: 1579, signal 134723/145146 (executing program) 1970/01/01 00:08:49 fetching corpus: 1627, signal 135761/146094 (executing program) 1970/01/01 00:08:53 fetching corpus: 1677, signal 137276/147247 (executing program) 1970/01/01 00:08:56 fetching corpus: 1725, signal 138738/148349 (executing program) 1970/01/01 00:08:59 fetching corpus: 1774, signal 140141/149381 (executing program) 1970/01/01 00:09:02 fetching corpus: 1824, signal 143381/151303 (executing program) 1970/01/01 00:09:05 fetching corpus: 1874, signal 144750/152220 (executing program) 1970/01/01 00:09:08 fetching corpus: 1924, signal 146171/153144 (executing program) 1970/01/01 00:09:11 fetching corpus: 1973, signal 146987/153720 (executing program) 1970/01/01 00:09:14 fetching corpus: 2023, signal 147868/154342 (executing program) 1970/01/01 00:09:16 fetching corpus: 2072, signal 148801/154916 (executing program) 1970/01/01 00:09:19 fetching corpus: 2122, signal 149534/155398 (executing program) 1970/01/01 00:09:22 fetching corpus: 2172, signal 150689/156027 (executing program) 1970/01/01 00:09:25 fetching corpus: 2222, signal 151931/156630 (executing program) 1970/01/01 00:09:28 fetching corpus: 2272, signal 152731/157118 (executing program) 1970/01/01 00:09:31 fetching corpus: 2321, signal 154573/157962 (executing program) 1970/01/01 00:09:36 fetching corpus: 2371, signal 155286/158308 (executing program) 1970/01/01 00:09:39 fetching corpus: 2420, signal 156467/158833 (executing program) 1970/01/01 00:09:44 fetching corpus: 2470, signal 157229/159177 (executing program) 1970/01/01 00:09:45 fetching corpus: 2478, signal 157401/159270 (executing program) 1970/01/01 00:09:45 fetching corpus: 2479, signal 157413/159319 (executing program) 1970/01/01 00:09:45 fetching corpus: 2479, signal 157413/159359 (executing program) 1970/01/01 00:09:45 fetching corpus: 2479, signal 157413/159395 (executing program) 1970/01/01 00:09:45 fetching corpus: 2479, signal 157413/159428 (executing program) 1970/01/01 00:09:46 fetching corpus: 2479, signal 157413/159471 (executing program) 1970/01/01 00:09:46 fetching corpus: 2479, signal 157413/159509 (executing program) 1970/01/01 00:09:46 fetching corpus: 2479, signal 157413/159543 (executing program) 1970/01/01 00:09:46 fetching corpus: 2479, signal 157413/159579 (executing program) 1970/01/01 00:09:46 fetching corpus: 2479, signal 157413/159609 (executing program) 1970/01/01 00:09:46 fetching corpus: 2480, signal 157419/159647 (executing program) 1970/01/01 00:09:47 fetching corpus: 2480, signal 157419/159686 (executing program) 1970/01/01 00:09:47 fetching corpus: 2480, signal 157419/159721 (executing program) 1970/01/01 00:09:47 fetching corpus: 2480, signal 157419/159760 (executing program) 1970/01/01 00:09:47 fetching corpus: 2480, signal 157419/159797 (executing program) 1970/01/01 00:09:47 fetching corpus: 2480, signal 157419/159834 (executing program) 1970/01/01 00:09:47 fetching corpus: 2480, signal 157419/159865 (executing program) 1970/01/01 00:09:48 fetching corpus: 2480, signal 157419/159903 (executing program) 1970/01/01 00:09:48 fetching corpus: 2480, signal 157419/159931 (executing program) 1970/01/01 00:09:48 fetching corpus: 2480, signal 157419/159956 (executing program) 1970/01/01 00:09:48 fetching corpus: 2480, signal 157419/159996 (executing program) 1970/01/01 00:09:48 fetching corpus: 2480, signal 157420/160036 (executing program) 1970/01/01 00:09:48 fetching corpus: 2480, signal 157420/160070 (executing program) 1970/01/01 00:09:49 fetching corpus: 2480, signal 157420/160103 (executing program) 1970/01/01 00:09:49 fetching corpus: 2480, signal 157420/160144 (executing program) 1970/01/01 00:09:49 fetching corpus: 2480, signal 157420/160181 (executing program) 1970/01/01 00:09:49 fetching corpus: 2480, signal 157420/160224 (executing program) 1970/01/01 00:09:49 fetching corpus: 2480, signal 157420/160258 (executing program) 1970/01/01 00:09:49 fetching corpus: 2480, signal 157425/160296 (executing program) 1970/01/01 00:09:49 fetching corpus: 2480, signal 157425/160308 (executing program) 1970/01/01 00:09:50 fetching corpus: 2480, signal 157425/160308 (executing program) 1970/01/01 00:11:45 starting 2 fuzzer processes 00:11:45 executing program 0: mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x2000)=nil, 0x3) 00:11:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', 0x0}) [ 733.524292][ T2038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.806624][ C0] ================================================================== [ 733.810401][ C0] BUG: KASAN: use-after-free in walk_stackframe+0x11c/0x260 [ 733.811999][ C0] Read of size 8 at addr ffffaf800c0dbf80 by task syz-executor.1/2040 [ 733.815155][ C0] [ 733.816718][ C0] CPU: 0 PID: 2040 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 733.820179][ C0] Hardware name: riscv-virtio,qemu (DT) [ 733.821748][ C0] Call Trace: [ 733.822915][ C0] [] dump_backtrace+0x2e/0x3c [ 733.824442][ C0] [] show_stack+0x34/0x40 [ 733.825860][ C0] [] dump_stack_lvl+0xe4/0x150 [ 733.827399][ C0] [] print_address_description.constprop.0+0x2a/0x330 [ 733.829209][ C0] [] kasan_report+0x184/0x1e0 [ 733.830763][ C0] [] __asan_load8+0x6e/0x96 [ 733.832232][ C0] [] walk_stackframe+0x11c/0x260 [ 733.833710][ C0] [] arch_stack_walk+0x2c/0x3c [ 733.835130][ C0] [] stack_trace_save+0xa6/0xd8 [ 733.836903][ C0] [ 733.837867][ C0] The buggy address belongs to the page: [ 733.840163][ C0] page:ffffaf807a9acd98 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8c2db [ 733.842130][ C0] flags: 0x8800000000(section=17|node=0|zone=0) [ 733.844892][ C0] raw: 0000008800000000 0000000000000000 ffffffff7a9a0101 0000000000000000 [ 733.846425][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 733.847901][ C0] raw: 00000000000007ff [ 733.849050][ C0] page dumped because: kasan: bad access detected [ 733.850439][ C0] page_owner tracks the page as freed [ 733.851478][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2015, ts 444949025800, free_ts 732723938400 [ 733.854441][ C0] __set_page_owner+0x48/0x136 [ 733.855914][ C0] post_alloc_hook+0xd0/0x10a [ 733.857275][ C0] get_page_from_freelist+0x8da/0x12d8 [ 733.859314][ C0] __alloc_pages+0x150/0x3b6 [ 733.860651][ C0] alloc_pages+0x132/0x2a6 [ 733.861959][ C0] alloc_slab_page.constprop.0+0xc2/0xfa [ 733.863312][ C0] new_slab+0x25a/0x2cc [ 733.864551][ C0] ___slab_alloc+0x56e/0x918 [ 733.865844][ C0] __slab_alloc.constprop.0+0x50/0x8c [ 733.867170][ C0] kmem_cache_alloc_node+0x1f2/0x41c [ 733.869094][ C0] __alloc_skb+0x234/0x2e4 [ 733.870581][ C0] tcp_stream_alloc_skb+0x70/0x4c0 [ 733.871559][ C0] tcp_sendmsg_locked+0x880/0x1d9e [ 733.872441][ C0] tcp_sendmsg+0x32/0x4e [ 733.873446][ C0] inet_sendmsg+0x74/0x94 [ 733.874591][ C0] sock_sendmsg+0xa0/0xc4 [ 733.875958][ C0] page last free stack trace: [ 733.876858][ C0] __reset_page_owner+0x4a/0xea [ 733.878228][ C0] free_pcp_prepare+0x29c/0x45e [ 733.879428][ C0] free_unref_page+0x6a/0x31e [ 733.880242][ C0] __free_pages+0xe2/0x112 [ 733.881008][ C0] __free_slab+0x122/0x27c [ 733.881781][ C0] discard_slab+0x4c/0x7a [ 733.882558][ C0] __slab_free+0x20a/0x29c [ 733.883346][ C0] ___cache_free+0x17c/0x354 [ 733.884176][ C0] qlist_free_all+0x7c/0x132 [ 733.884940][ C0] kasan_quarantine_reduce+0x14c/0x1c8 [ 733.886097][ C0] __kasan_slab_alloc+0x5c/0x98 [ 733.887361][ C0] __kmalloc_node_track_caller+0x174/0x362 [ 733.889076][ C0] __alloc_skb+0xee/0x2e4 [ 733.890072][ C0] alloc_uevent_skb+0x68/0x11e [ 733.890946][ C0] kobject_uevent_env+0xc3a/0xdfe [ 733.891842][ C0] kobject_uevent+0x22/0x2e [ 733.892942][ C0] [ 733.893534][ C0] Memory state around the buggy address: [ 733.894846][ C0] ffffaf800c0dbe80: ff ff ff ff 00 00 00 00 00 00 00 00 ff ff ff ff [ 733.896263][ C0] ffffaf800c0dbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 733.897612][ C0] >ffffaf800c0dbf80: ff ff ff ff ff ff ff ff ff ff ff ff f1 f1 f1 f1 [ 733.900035][ C0] ^ [ 733.901136][ C0] ffffaf800c0dc000: 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 733.902366][ C0] ffffaf800c0dc080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 733.903729][ C0] ================================================================== [ 733.905016][ C0] Disabling lock debugging due to kernel taint [ 733.915149][ T2040] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 733.916758][ T2040] CPU: 0 PID: 2040 Comm: syz-executor.1 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 733.919545][ T2040] Hardware name: riscv-virtio,qemu (DT) [ 733.921228][ T2040] Call Trace: [ 733.921901][ T2040] [] dump_backtrace+0x2e/0x3c [ 733.923240][ T2040] [] show_stack+0x34/0x40 [ 733.924301][ T2040] [] dump_stack_lvl+0xe4/0x150 [ 733.925485][ T2040] [] dump_stack+0x1c/0x24 [ 733.927525][ T2040] [] panic+0x24a/0x634 [ 733.929411][ T2040] [] schedule+0x0/0x14c [ 733.930622][ T2040] [] preempt_schedule_common+0x4e/0xde [ 733.932129][ T2040] [] preempt_schedule+0x34/0x36 [ 733.933649][ T2040] [] _raw_spin_unlock_irqrestore+0x8c/0x98 [ 733.934843][ T2040] [] __stack_depot_save+0x384/0x4b2 [ 733.936137][ T2040] [] stack_depot_save+0xe/0x18 [ 733.937317][ T2040] [] save_stack+0x122/0x16c [ 733.939285][ T2040] [] __set_page_owner+0x48/0x136 [ 733.940524][ T2040] [] post_alloc_hook+0xd0/0x10a [ 733.941788][ T2040] [] get_page_from_freelist+0x8da/0x12d8 [ 733.943268][ T2040] [] __alloc_pages+0x150/0x3b6 [ 733.944682][ T2040] [] alloc_pages+0x132/0x2a6 [ 733.945947][ T2040] [] alloc_slab_page.constprop.0+0xc2/0xfa [ 733.947209][ T2040] [] new_slab+0x25a/0x2cc [ 733.949141][ T2040] [] ___slab_alloc+0x56e/0x918 [ 733.950399][ T2040] [] __slab_alloc.constprop.0+0x50/0x8c [ 733.951612][ T2040] [] kmem_cache_alloc_trace+0x2a2/0x2e0 [ 733.952878][ T2040] [] device_add+0xce0/0x129e [ 733.954053][ T2040] [] netdev_register_kobject+0xcc/0x208 [ 733.955443][ T2040] [] register_netdevice+0x8ee/0xc6a [ 733.956733][ T2040] [] veth_newlink+0x454/0x7dc [ 733.958572][ T2040] [] __rtnl_newlink+0xc16/0xfa0 [ 733.959841][ T2040] [] rtnl_newlink+0x60/0x8c [ 733.961010][ T2040] [] rtnetlink_rcv_msg+0x338/0x9a0 [ 733.962198][ T2040] [] netlink_rcv_skb+0xf8/0x2be [ 733.963299][ T2040] [] rtnetlink_rcv+0x26/0x30 [ 733.964433][ T2040] [] netlink_unicast+0x40e/0x5fe [ 733.965529][ T2040] [] netlink_sendmsg+0x4e0/0x994 [ 733.966625][ T2040] [] sock_sendmsg+0xa0/0xc4 [ 733.968059][ T2040] [] __sys_sendto+0x1f2/0x2e0 [ 733.969130][ T2040] [] sys_sendto+0x3e/0x52 [ 733.970581][ T2040] [] ret_from_syscall+0x0/0x2 [ 733.972009][ T2040] SMP: stopping secondary CPUs [ 733.974311][ T2040] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:54:07 Registers: info registers vcpu 0 pc ffffffff80dc337e mhartid 0000000000000000 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8010b22c sepc ffffffff80473a78 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80dc337e x2/sp ffffaf800c0db950 x3/gp ffffffff85863ac0 x4/tp ffffaf800b61c8c0 x5/t0 ffffffff86bcb657 x6/t1 81107fe7db668400 x7/t2 0000000000000000 x8/s0 ffffaf800c0db980 x9/s1 ffffffff86e58900 x10/a0 ffffffff86e58948 x11/a1 ffff8f800066c000 x12/a2 1ffffffff0dcb129 x13/a3 ffffffff80dc337e x14/a4 0000000000000000 x15/a5 ffffffff86e58948 x16/a6 ffffffff86e589f1 x17/a7 ffffffff80dcc9fe x18/s2 ffff8f800066c000 x19/s3 000000000000000a x20/s4 ffffffff86e58900 x21/s5 ffffffff80dc333e x22/s6 0000000000000001 x23/s7 ffffffff86bcb69b x24/s8 0000000000000010 x25/s9 ffffffff86e58958 x26/s10 0000000000000010 x27/s11 0000000000000000 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f00181b6d8 x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80475986 mhartid 0000000000000001 mstatus 00000000000000a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff80119b52 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80119b52 x2/sp ffffaf800bedb7e0 x3/gp ffffffff85863ac0 x4/tp ffffaf800ec5e100 x5/t0 00000000000001f8 x6/t1 81107fe7db668400 x7/t2 ffffffffffffffff x8/s0 ffffaf800bedb7e0 x9/s1 ffffaf8008df8c98 x10/a0 ffffaf8008df8c98 x11/a1 0000000000000003 x12/a2 1ffff5f0011bf193 x13/a3 ffffffff80119b52 x14/a4 0000000000000000 x15/a5 ffffaf8008df8c98 x16/a6 0000000000f00000 x17/a7 ffffffff826e6226 x18/s2 0000000000000001 x19/s3 ffffaf800ec5e100 x20/s4 ffffaf8008df8ca8 x21/s5 ffffaf8008df8ca0 x22/s6 ffffaf800bedb960 x23/s7 ffffaf800bedbb00 x24/s8 0000000000000000 x25/s9 0000000000004000 x26/s10 0000000000000040 x27/s11 0000000000000001 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f0017db6b4 x31/t6 0000000002a43323 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000