syzkaller login: [ 235.294398][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 235.367218][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 243.513703][ T2895] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:15606' (ECDSA) to the list of known hosts. 1970/01/01 00:04:37 fuzzer started 1970/01/01 00:04:47 dialing manager at localhost:43739 1970/01/01 00:04:51 syscalls: 2768 1970/01/01 00:04:51 code coverage: enabled 1970/01/01 00:04:51 comparison tracing: enabled 1970/01/01 00:04:51 extra coverage: enabled 1970/01/01 00:04:51 setuid sandbox: enabled 1970/01/01 00:04:51 namespace sandbox: enabled 1970/01/01 00:04:51 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:04:51 fault injection: enabled 1970/01/01 00:04:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:04:51 net packet injection: enabled 1970/01/01 00:04:51 net device setup: enabled 1970/01/01 00:04:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:04:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:04:51 USB emulation: enabled 1970/01/01 00:04:51 hci packet injection: /dev/vhci does not exist 1970/01/01 00:04:51 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:04:51 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:04:55 fetching corpus: 50, signal 15172/17005 (executing program) 1970/01/01 00:04:57 fetching corpus: 100, signal 26993/30405 (executing program) 1970/01/01 00:04:59 fetching corpus: 150, signal 36810/41554 (executing program) 1970/01/01 00:05:01 fetching corpus: 200, signal 41506/47618 (executing program) 1970/01/01 00:05:04 fetching corpus: 250, signal 45257/52689 (executing program) 1970/01/01 00:05:07 fetching corpus: 300, signal 47731/56474 (executing program) 1970/01/01 00:05:10 fetching corpus: 350, signal 53374/63167 (executing program) 1970/01/01 00:05:12 fetching corpus: 400, signal 55420/66430 (executing program) 1970/01/01 00:05:13 fetching corpus: 450, signal 57290/69439 (executing program) 1970/01/01 00:05:15 fetching corpus: 500, signal 58845/72141 (executing program) 1970/01/01 00:05:17 fetching corpus: 550, signal 60705/75118 (executing program) 1970/01/01 00:05:19 fetching corpus: 600, signal 62331/77816 (executing program) 1970/01/01 00:05:21 fetching corpus: 650, signal 63509/80058 (executing program) 1970/01/01 00:05:22 fetching corpus: 700, signal 64485/82143 (executing program) 1970/01/01 00:05:24 fetching corpus: 750, signal 65678/84403 (executing program) 1970/01/01 00:05:25 fetching corpus: 800, signal 68038/87573 (executing program) 1970/01/01 00:05:27 fetching corpus: 850, signal 69192/89727 (executing program) 1970/01/01 00:05:29 fetching corpus: 900, signal 71228/92605 (executing program) 1970/01/01 00:05:31 fetching corpus: 950, signal 72462/94772 (executing program) 1970/01/01 00:05:33 fetching corpus: 1000, signal 74482/97526 (executing program) 1970/01/01 00:05:36 fetching corpus: 1050, signal 75812/99735 (executing program) 1970/01/01 00:05:37 fetching corpus: 1100, signal 78185/102654 (executing program) 1970/01/01 00:05:39 fetching corpus: 1150, signal 79462/104741 (executing program) 1970/01/01 00:05:41 fetching corpus: 1200, signal 80527/106652 (executing program) 1970/01/01 00:05:42 fetching corpus: 1250, signal 81234/108254 (executing program) 1970/01/01 00:05:44 fetching corpus: 1300, signal 82659/110352 (executing program) 1970/01/01 00:05:46 fetching corpus: 1350, signal 83602/112100 (executing program) 1970/01/01 00:05:47 fetching corpus: 1400, signal 84555/113834 (executing program) 1970/01/01 00:05:49 fetching corpus: 1450, signal 85536/115528 (executing program) 1970/01/01 00:05:50 fetching corpus: 1500, signal 85942/116837 (executing program) 1970/01/01 00:05:51 fetching corpus: 1550, signal 86534/118246 (executing program) 1970/01/01 00:05:53 fetching corpus: 1600, signal 87482/119879 (executing program) 1970/01/01 00:05:54 fetching corpus: 1650, signal 88530/121521 (executing program) 1970/01/01 00:05:56 fetching corpus: 1700, signal 89709/123249 (executing program) 1970/01/01 00:05:58 fetching corpus: 1750, signal 91063/125086 (executing program) 1970/01/01 00:06:00 fetching corpus: 1800, signal 91931/126581 (executing program) 1970/01/01 00:06:01 fetching corpus: 1850, signal 92951/128174 (executing program) 1970/01/01 00:06:03 fetching corpus: 1900, signal 94462/130018 (executing program) 1970/01/01 00:06:05 fetching corpus: 1950, signal 94979/131235 (executing program) 1970/01/01 00:06:06 fetching corpus: 2000, signal 95510/132499 (executing program) 1970/01/01 00:06:08 fetching corpus: 2050, signal 96393/133866 (executing program) 1970/01/01 00:06:10 fetching corpus: 2100, signal 97302/135208 (executing program) 1970/01/01 00:06:11 fetching corpus: 2150, signal 97912/136436 (executing program) 1970/01/01 00:06:13 fetching corpus: 2200, signal 100018/138378 (executing program) 1970/01/01 00:06:14 fetching corpus: 2250, signal 101237/139878 (executing program) 1970/01/01 00:06:16 fetching corpus: 2300, signal 101926/141131 (executing program) 1970/01/01 00:06:18 fetching corpus: 2350, signal 102645/142333 (executing program) 1970/01/01 00:06:19 fetching corpus: 2400, signal 103167/143367 (executing program) 1970/01/01 00:06:21 fetching corpus: 2450, signal 103682/144470 (executing program) 1970/01/01 00:06:23 fetching corpus: 2500, signal 104325/145569 (executing program) 1970/01/01 00:06:25 fetching corpus: 2550, signal 104926/146637 (executing program) 1970/01/01 00:06:27 fetching corpus: 2600, signal 105426/147663 (executing program) 1970/01/01 00:06:28 fetching corpus: 2650, signal 106389/148888 (executing program) 1970/01/01 00:06:31 fetching corpus: 2700, signal 106798/149844 (executing program) 1970/01/01 00:06:32 fetching corpus: 2750, signal 107273/150873 (executing program) 1970/01/01 00:06:33 fetching corpus: 2800, signal 107665/151804 (executing program) 1970/01/01 00:06:35 fetching corpus: 2850, signal 107996/152755 (executing program) 1970/01/01 00:06:37 fetching corpus: 2900, signal 109035/153870 (executing program) 1970/01/01 00:06:38 fetching corpus: 2950, signal 109335/154761 (executing program) 1970/01/01 00:06:39 fetching corpus: 3000, signal 109723/155656 (executing program) 1970/01/01 00:06:40 fetching corpus: 3037, signal 109974/156512 (executing program) 1970/01/01 00:06:41 fetching corpus: 3037, signal 109974/157251 (executing program) 1970/01/01 00:06:41 fetching corpus: 3037, signal 109974/158027 (executing program) 1970/01/01 00:06:41 fetching corpus: 3037, signal 109974/158834 (executing program) 1970/01/01 00:06:41 fetching corpus: 3037, signal 109974/159590 (executing program) 1970/01/01 00:06:41 fetching corpus: 3037, signal 109974/160357 (executing program) 1970/01/01 00:06:41 fetching corpus: 3037, signal 109974/161121 (executing program) 1970/01/01 00:06:41 fetching corpus: 3037, signal 109974/161880 (executing program) 1970/01/01 00:06:42 fetching corpus: 3037, signal 109974/162611 (executing program) 1970/01/01 00:06:42 fetching corpus: 3037, signal 109974/163373 (executing program) 1970/01/01 00:06:42 fetching corpus: 3037, signal 109974/164128 (executing program) 1970/01/01 00:06:42 fetching corpus: 3037, signal 109974/164908 (executing program) 1970/01/01 00:06:42 fetching corpus: 3037, signal 109974/165657 (executing program) 1970/01/01 00:06:42 fetching corpus: 3037, signal 109974/166447 (executing program) 1970/01/01 00:06:42 fetching corpus: 3037, signal 109974/167189 (executing program) 1970/01/01 00:06:42 fetching corpus: 3037, signal 109974/167967 (executing program) 1970/01/01 00:06:43 fetching corpus: 3037, signal 109974/168760 (executing program) 1970/01/01 00:06:43 fetching corpus: 3037, signal 109974/169533 (executing program) 1970/01/01 00:06:43 fetching corpus: 3037, signal 109974/170264 (executing program) 1970/01/01 00:06:43 fetching corpus: 3037, signal 109974/171024 (executing program) 1970/01/01 00:06:43 fetching corpus: 3037, signal 109974/171821 (executing program) 1970/01/01 00:06:43 fetching corpus: 3037, signal 109974/172580 (executing program) 1970/01/01 00:06:43 fetching corpus: 3037, signal 109974/173377 (executing program) 1970/01/01 00:06:43 fetching corpus: 3037, signal 109974/174189 (executing program) 1970/01/01 00:06:43 fetching corpus: 3037, signal 109974/174986 (executing program) 1970/01/01 00:06:44 fetching corpus: 3037, signal 109974/175764 (executing program) 1970/01/01 00:06:44 fetching corpus: 3037, signal 109974/176491 (executing program) 1970/01/01 00:06:44 fetching corpus: 3037, signal 109974/177233 (executing program) 1970/01/01 00:06:44 fetching corpus: 3037, signal 109974/177464 (executing program) 1970/01/01 00:06:44 fetching corpus: 3037, signal 109974/177464 (executing program) 1970/01/01 00:08:15 starting 2 fuzzer processes 00:08:31 executing program 0: prctl$PR_SET_TIMERSLACK(0x1d, 0x40) prctl$PR_SET_TIMERSLACK(0x1d, 0xffff) prctl$PR_SET_TIMERSLACK(0x1d, 0x3b) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) prctl$PR_SET_TIMERSLACK(0x1d, 0x100000001) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) prctl$PR_SET_TIMERSLACK(0x1d, 0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0x7873) prctl$PR_SET_TIMERSLACK(0x1d, 0x100) prctl$PR_SET_TIMERSLACK(0x1d, 0x100) prctl$PR_SET_TIMERSLACK(0x1d, 0x100000000) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) prctl$PR_SET_TIMERSLACK(0x1d, 0x4) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) prctl$PR_SET_TIMERSLACK(0x1d, 0x1a94600000) 00:08:54 executing program 1: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0x4}, 0x16, 0x3) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) r1 = signalfd4(r0, &(0x7f0000000100)={[0x6]}, 0x8, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x17, "b03e64926f2b7d022b844ce25738d12dbebc1d6ed5c0f7"}, &(0x7f0000000180)=0x1f) fcntl$lock(r1, 0x7, &(0x7f00000001c0)={0x2, 0x2, 0x2, 0x9}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={r2, 0x0, 0x17, "f09cc4cbb9ce1986e96b9c5d52266aec5f9ead1379095a"}, 0x1f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000240)={0x6000200e}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000280)={0x1, 0x80, 0x5, 0x2}, 0x8) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000300)=""/137, &(0x7f00000003c0)=0x89) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000400)={r2, 0x1, 0x7, 0x101, 0x136d, 0xffff, 0xa47, 0x81, {r2, @in6={{0xa, 0x4e22, 0xc98, @mcast2, 0x4}}, 0x7, 0x7, 0xce, 0x10000, 0x401}}, &(0x7f00000004c0)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={r3, 0x3c, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x5, @private0, 0x84}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000580)=0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f00000005c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000640)={0x7, &(0x7f0000000600)=[{0x9, 0x40, 0x9, 0x80000001}, {0x7, 0x80, 0x12, 0x9}, {0xa230, 0x2f, 0x20, 0x1}, {0x9, 0x5, 0xf5, 0x3}, {0x4, 0x7, 0x7, 0xb92}, {0x5, 0x81, 0x3f, 0x5}, {0x200, 0x5, 0x20, 0x5}]}) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000780)={0x1, 0x6, 0xda, &(0x7f0000000680)=""/218}) r5 = syz_open_dev$sndpcmc(&(0x7f00000007c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x490000) close_range(r5, r0, 0x2) [ 538.457510][ T3071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.552059][ T3071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.539144][ T3071] device hsr_slave_0 entered promiscuous mode [ 545.562552][ T3071] device hsr_slave_1 entered promiscuous mode [ 549.179404][ T3071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 549.306897][ T3071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 549.442981][ T3071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 549.813092][ T3071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 557.875006][ T3071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.143882][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 559.200451][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 562.756667][ T3232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.861225][ T3232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.200666][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 564.253432][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.400533][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 564.452951][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 564.620136][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 565.405280][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.433562][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.486117][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.647159][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.656725][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 565.785929][ T3071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 566.425358][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 566.465560][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 574.256688][ T3232] device hsr_slave_0 entered promiscuous mode [ 574.863072][ T3232] device hsr_slave_1 entered promiscuous mode [ 574.912630][ T3232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.921457][ T3232] Cannot create hsr debugfs directory [ 581.261250][ T3232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 581.491834][ T3232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 581.673515][ T3232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 581.745587][ T3232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 583.707657][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 583.754326][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 593.824347][ T3206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 593.886434][ T3206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.044614][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.093014][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 594.266555][ T3071] device veth0_vlan entered promiscuous mode [ 594.985915][ T3071] device veth1_vlan entered promiscuous mode [ 595.425692][ T3232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.821835][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 595.855489][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 596.296968][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 596.322839][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 596.476624][ T3071] device veth0_macvtap entered promiscuous mode [ 596.787065][ T3071] device veth1_macvtap entered promiscuous mode [ 597.349958][ T3073] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 597.639730][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 597.683379][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 597.952584][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 598.034397][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 598.457030][ T3071] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.464713][ T3071] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.466413][ T3071] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.467979][ T3071] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.026638][ T3071] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 603.395560][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 603.494805][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 603.745561][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 603.773543][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 604.404079][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 604.525452][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 605.117778][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 605.207704][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 605.393324][ T3281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 605.404738][ T3281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 605.746603][ T3232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:10:04 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2661, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x80800) ppoll(&(0x7f0000000080), 0x48, &(0x7f0000001940), 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x2) [ 606.652472][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 606.655429][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:10:08 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2661, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x80800) ppoll(&(0x7f0000000080), 0x48, &(0x7f0000001940), 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x2) 00:10:11 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2661, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x80800) ppoll(&(0x7f0000000080), 0x48, &(0x7f0000001940), 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x2) [ 619.619485][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 619.647726][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 624.452184][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 624.522759][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 624.604001][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 624.647711][ T3429] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 624.756635][ T3232] device veth0_vlan entered promiscuous mode [ 625.161173][ T3232] device veth1_vlan entered promiscuous mode [ 626.145557][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.222972][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.365181][ T3232] device veth0_macvtap entered promiscuous mode [ 626.617044][ T3232] device veth1_macvtap entered promiscuous mode [ 626.817059][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 626.867858][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 627.395699][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 627.435216][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 627.696770][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 627.744646][ T2830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 627.912598][ T3232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.914219][ T3232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.915620][ T3232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.917026][ T3232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:10:30 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2661, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x80800) ppoll(&(0x7f0000000080), 0x48, &(0x7f0000001940), 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x2) 00:10:30 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) getsockname$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10) 00:10:34 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2661, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x80800) ppoll(&(0x7f0000000080), 0x48, &(0x7f0000001940), 0x0, 0x0) 00:10:35 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) 00:10:37 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2661, 0x0) ppoll(&(0x7f0000000080), 0x48, &(0x7f0000001940), 0x0, 0x0) 00:10:40 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d2f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343237383831383900"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001182de0168a747c9ad124fbfbfe191f2010040000c00000000000000d2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000003400000000000000", 0x20, 0x560}, {&(0x7f0000010300)="03000000040000000500000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d2f4655fd2f4655fd2f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1480}, {&(0x7f0000010e00)="8081000000300404d2f4655fd2f4655fd2f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x1700}, {&(0x7f0000010f00)="c041000000300000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1900}, {&(0x7f0000011000)="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"/768, 0x300, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011400)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011600)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011700)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011800)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012000)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012100)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000012200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000012700)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x20000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x203e0}, {&(0x7f0000012a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x28000}], 0x0, &(0x7f0000012b00)) r1 = dup3(r0, r0, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/78, 0x4e, 0x102, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 00:10:41 executing program 0: ppoll(&(0x7f0000000080), 0x48, &(0x7f0000001940), 0x0, 0x0) [ 643.452310][ T3561] Unable to handle kernel access to user memory without uaccess routines at virtual address 000000001b7fd0d0 [ 643.455195][ T3561] Oops [#1] [ 643.457240][ T3561] Modules linked in: [ 643.460060][ T3561] CPU: 0 PID: 3561 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller-00715-ga5e13c6df0e4 #0 [ 643.461764][ T3561] Hardware name: riscv-virtio,qemu (DT) [ 643.463185][ T3561] epc : schedule_tail+0x72/0xb2 [ 643.464448][ T3561] ra : schedule_tail+0x70/0xb2 [ 643.466191][ T3561] epc : ffffffe00008f4c4 ra : ffffffe00008f4c2 sp : ffffffe009d4fec0 [ 643.470429][ T3561] gp : ffffffe004588b08 tp : ffffffe00cbcc740 t0 : 0000000000000000 [ 643.474723][ T3561] t1 : 0000000000000001 t2 : 00000000000f4240 s0 : ffffffe009d4fee0 [ 643.479288][ T3561] s1 : 000000001b7fd0d0 a0 : 0000000000000010 a1 : 0000000000000003 [ 643.481781][ T3561] a2 : 1ffffffc0cfa8708 a3 : ffffffe0000d30bc a4 : 22e1d98c8ca21700 [ 643.482981][ T3561] a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffffffe000084f3a [ 643.484104][ T3561] s2 : 0000000000040000 s3 : ffffffe008d14740 s4 : ffffffe006f1ffe0 [ 643.485389][ T3561] s5 : 0000000000004020 s6 : ffffffe008d14bd8 s7 : ffffffe067d55910 [ 643.486518][ T3561] s8 : ffffffe067d54ed8 s9 : 0000000000000000 s10: ffffffe0078d5a00 [ 643.487596][ T3561] s11: 00000095c2e95e8c t3 : 22e1d98c8ca21700 t4 : 0000000000000002 [ 643.489567][ T3561] t5 : ffffffc4019538d9 t6 : ffffffe0061f2e72 [ 643.490605][ T3561] status: 0000000000000120 badaddr: 000000001b7fd0d0 cause: 000000000000000f [ 643.491693][ T3561] Call Trace: [ 643.492405][ T3561] [] schedule_tail+0x72/0xb2 [ 643.494369][ T3561] [] ret_from_exception+0x0/0x14 [ 643.512550][ T3561] ---[ end trace 7766fd86399605ec ]--- [ 643.515627][ T3561] Kernel panic - not syncing: Fatal exception [ 643.516991][ T3561] SMP: stopping secondary CPUs [ 643.518795][ T3561] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:12:32 Registers: info registers vcpu 0 pc ffffffe00006a39c mhartid 0000000000000000 mstatus 00000000000001a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000e9d4 sepc ffffffe00008f4c4 mcause 0000000000000009 scause 000000000000000f mtval 0000000000000000 stval 000000001b7fd0d0 x0/zero 0000000000000000 x1/ra ffffffe000c198ca x2/sp ffffffe009d4f8f0 x3/gp ffffffe004588b08 x4/tp ffffffe00cbcc740 x5/t0 ffffffe004ffdbb7 x6/t1 ffffffc4009ffb76 x7/t2 0000000000000000 x8/s0 ffffffe009d4f910 x9/s1 ffffffe005230480 x10/a0 ffffffd000633001 x11/a1 0000000000000007 x12/a2 1ffffffc00a46099 x13/a3 ffffffe000c198ca x14/a4 0000000000000000 x15/a5 ffffffe0052304c8 x16/a6 0000000000f00000 x17/a7 ffffffe004ffdbb6 x18/s2 0000000000000001 x19/s3 0000000000000120 x20/s4 0000000000000000 x21/s5 ffffffe004ffdba0 x22/s6 000000000000002a x23/s7 0000000000000001 x24/s8 0000000000000001 x25/s9 ffffffe00458c0d0 x26/s10 ffffffe0043a57b8 x27/s11 ffffffe0052304d0 x28/t3 000000000000004d x29/t4 ffffffc4009ffb74 x30/t5 ffffffc4009ffb77 x31/t6 ffffffe004ffdbb7 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffe0003bd542 mhartid 0000000000000001 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe0001a24e2 sepc ffffffe0001a24e2 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe0000ef81a x2/sp ffffffe01f1a7970 x3/gp ffffffe004588b08 x4/tp ffffffe00cbcdf00 x5/t0 0000000000046000 x6/t1 0000000020011520 x7/t2 0000000000000000 x8/s0 ffffffe01f1a79c0 x9/s1 ffffffe005623800 x10/a0 ffffffe0056c8010 x11/a1 0000000000000007 x12/a2 1ffffffc00ad9000 x13/a3 ffffffe0000ef80a x14/a4 0000000000000000 x15/a5 ffffffe0056c8000 x16/a6 0000000000f00000 x17/a7 ffffffe02268a41f x18/s2 0000000000000000 x19/s3 ffffffe0056c8000 x20/s4 ffffffe0050495b0 x21/s5 ffffffe0050495a8 x22/s6 0000000000000005 x23/s7 ffffffe004396b10 x24/s8 ffffffe001da5456 x25/s9 ffffffe01f1a7a50 x26/s10 ffffffe00458c140 x27/s11 0000000000000020 x28/t3 22e1d98c8ca21700 x29/t4 ffffffc4044d1480 x30/t5 ffffffc4044d1484 x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000