Warning: Permanently added '[localhost]:1065' (ED25519) to the list of known hosts. 1970/01/01 00:11:54 fuzzer started 1970/01/01 00:12:05 dialing manager at localhost:30004 syzkaller login: [ 732.033031][ T3042] cgroup: Unknown subsys name 'net' [ 733.163059][ T3042] cgroup: Unknown subsys name 'rlimit' [ 793.739874][ T3042] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:13:13 syscalls: 211 1970/01/01 00:13:13 code coverage: enabled 1970/01/01 00:13:13 comparison tracing: enabled 1970/01/01 00:13:13 extra coverage: enabled 1970/01/01 00:13:13 delay kcov mmap: enabled 1970/01/01 00:13:13 setuid sandbox: enabled 1970/01/01 00:13:13 namespace sandbox: enabled 1970/01/01 00:13:13 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:13:13 fault injection: enabled 1970/01/01 00:13:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:13:13 net packet injection: enabled 1970/01/01 00:13:13 net device setup: enabled 1970/01/01 00:13:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:13:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:13:13 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:13:13 USB emulation: enabled 1970/01/01 00:13:13 hci packet injection: /dev/vhci does not exist 1970/01/01 00:13:13 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:13:13 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:13:13 swap file: enabled 1970/01/01 00:13:13 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:13:23 fetching corpus: 48, signal 21229/24027 (executing program) 1970/01/01 00:13:28 fetching corpus: 97, signal 28848/32356 (executing program) 1970/01/01 00:13:33 fetching corpus: 147, signal 31627/35957 (executing program) 1970/01/01 00:13:38 fetching corpus: 197, signal 36369/41117 (executing program) 1970/01/01 00:13:43 fetching corpus: 247, signal 39759/44826 (executing program) 1970/01/01 00:13:47 fetching corpus: 297, signal 42044/47447 (executing program) 1970/01/01 00:13:50 fetching corpus: 347, signal 43219/49148 (executing program) 1970/01/01 00:13:52 fetching corpus: 397, signal 44560/50871 (executing program) 1970/01/01 00:13:56 fetching corpus: 446, signal 45490/52220 (executing program) 1970/01/01 00:14:00 fetching corpus: 495, signal 46842/53835 (executing program) 1970/01/01 00:14:03 fetching corpus: 545, signal 47671/55025 (executing program) 1970/01/01 00:14:06 fetching corpus: 595, signal 48331/56083 (executing program) 1970/01/01 00:14:08 fetching corpus: 645, signal 49345/57283 (executing program) 1970/01/01 00:14:11 fetching corpus: 694, signal 50871/58771 (executing program) 1970/01/01 00:14:15 fetching corpus: 744, signal 51973/59935 (executing program) 1970/01/01 00:14:17 fetching corpus: 794, signal 52618/60752 (executing program) 1970/01/01 00:14:21 fetching corpus: 844, signal 53317/61527 (executing program) 1970/01/01 00:14:23 fetching corpus: 894, signal 53792/62188 (executing program) 1970/01/01 00:14:26 fetching corpus: 944, signal 54240/62847 (executing program) 1970/01/01 00:14:28 fetching corpus: 993, signal 54640/63404 (executing program) 1970/01/01 00:14:30 fetching corpus: 1043, signal 55023/63946 (executing program) 1970/01/01 00:14:34 fetching corpus: 1093, signal 55587/64560 (executing program) 1970/01/01 00:14:39 fetching corpus: 1143, signal 56422/65255 (executing program) 1970/01/01 00:14:42 fetching corpus: 1193, signal 56975/65807 (executing program) 1970/01/01 00:14:44 fetching corpus: 1242, signal 57318/66250 (executing program) 1970/01/01 00:14:47 fetching corpus: 1292, signal 57931/66718 (executing program) 1970/01/01 00:14:50 fetching corpus: 1341, signal 58315/67107 (executing program) 1970/01/01 00:14:52 fetching corpus: 1389, signal 58863/67500 (executing program) 1970/01/01 00:14:55 fetching corpus: 1439, signal 59314/67880 (executing program) 1970/01/01 00:14:57 fetching corpus: 1489, signal 59691/68157 (executing program) 1970/01/01 00:15:00 fetching corpus: 1538, signal 60067/68463 (executing program) 1970/01/01 00:15:02 fetching corpus: 1588, signal 60392/68732 (executing program) 1970/01/01 00:15:06 fetching corpus: 1638, signal 60713/69026 (executing program) 1970/01/01 00:15:09 fetching corpus: 1688, signal 61221/69168 (executing program) 1970/01/01 00:15:12 fetching corpus: 1738, signal 61562/69168 (executing program) 1970/01/01 00:15:15 fetching corpus: 1788, signal 61867/69168 (executing program) 1970/01/01 00:15:18 fetching corpus: 1838, signal 62140/69168 (executing program) 1970/01/01 00:15:20 fetching corpus: 1888, signal 62395/69168 (executing program) 1970/01/01 00:15:23 fetching corpus: 1937, signal 62730/69168 (executing program) 1970/01/01 00:15:25 fetching corpus: 1986, signal 62971/69168 (executing program) 1970/01/01 00:15:28 fetching corpus: 2035, signal 63225/69168 (executing program) 1970/01/01 00:15:31 fetching corpus: 2085, signal 63534/69168 (executing program) 1970/01/01 00:15:33 fetching corpus: 2135, signal 63820/69168 (executing program) 1970/01/01 00:15:36 fetching corpus: 2185, signal 64151/69168 (executing program) 1970/01/01 00:15:45 fetching corpus: 2234, signal 64402/69168 (executing program) 1970/01/01 00:15:53 fetching corpus: 2284, signal 64640/69170 (executing program) 1970/01/01 00:16:01 fetching corpus: 2334, signal 64881/69172 (executing program) 1970/01/01 00:16:10 fetching corpus: 2384, signal 65135/69172 (executing program) 1970/01/01 00:16:17 fetching corpus: 2433, signal 65280/69173 (executing program) 1970/01/01 00:16:25 fetching corpus: 2483, signal 65702/69173 (executing program) 1970/01/01 00:16:40 fetching corpus: 2530, signal 65952/69173 (executing program) 1970/01/01 00:16:50 fetching corpus: 2580, signal 66139/69174 (executing program) 1970/01/01 00:17:02 fetching corpus: 2630, signal 66300/69174 (executing program) 1970/01/01 00:17:09 fetching corpus: 2677, signal 66722/69184 (executing program) 1970/01/01 00:17:15 fetching corpus: 2727, signal 66996/69185 (executing program) 1970/01/01 00:17:22 fetching corpus: 2777, signal 67216/69186 (executing program) 1970/01/01 00:17:30 fetching corpus: 2827, signal 67499/69189 (executing program) 1970/01/01 00:17:36 fetching corpus: 2877, signal 67738/69195 (executing program) 1970/01/01 00:17:45 fetching corpus: 2927, signal 67887/69195 (executing program) 1970/01/01 00:17:52 fetching corpus: 2975, signal 68153/69201 (executing program) 1970/01/01 00:18:01 fetching corpus: 3024, signal 68336/69202 (executing program) 1970/01/01 00:18:13 fetching corpus: 3074, signal 68537/69202 (executing program) 1970/01/01 00:18:21 fetching corpus: 3124, signal 68771/69202 (executing program) 1970/01/01 00:18:30 fetching corpus: 3169, signal 68981/69203 (executing program) 1970/01/01 00:18:35 fetching corpus: 3190, signal 69044/69203 (executing program) 1970/01/01 00:18:35 fetching corpus: 3190, signal 69048/69203 (executing program) 1970/01/01 00:18:36 fetching corpus: 3190, signal 69048/69203 (executing program) 1970/01/01 00:21:44 starting 2 fuzzer processes [ 1343.393369][ T3059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1343.602314][ T3059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.303485][ T3060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.410254][ T3060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.392545][ T3059] hsr_slave_0: entered promiscuous mode [ 1359.544072][ T3059] hsr_slave_1: entered promiscuous mode [ 1370.630317][ T3060] hsr_slave_0: entered promiscuous mode [ 1370.670573][ T3060] hsr_slave_1: entered promiscuous mode [ 1370.700897][ T3060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1370.705396][ T3060] Cannot create hsr debugfs directory [ 1382.424412][ T3059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1382.751017][ T3059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1383.021544][ T3059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1383.384321][ T3059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1390.284244][ T3060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1390.775796][ T3060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1390.871382][ T3060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1390.964807][ T3060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1403.178106][ T3059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.812357][ T3060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.025358][ T3059] veth0_vlan: entered promiscuous mode [ 1465.475046][ T3059] veth1_vlan: entered promiscuous mode [ 1468.402592][ T3059] veth0_macvtap: entered promiscuous mode [ 1468.675522][ T3059] veth1_macvtap: entered promiscuous mode [ 1470.908303][ T3059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.911890][ T3059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.913696][ T3059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.915472][ T3059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.034038][ T3060] veth0_vlan: entered promiscuous mode [ 1475.000782][ T3060] veth1_vlan: entered promiscuous mode [ 1477.099284][ T3060] veth0_macvtap: entered promiscuous mode 00:24:36 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) [ 1477.414641][ T3060] veth1_macvtap: entered promiscuous mode [ 1479.332899][ T3060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.335168][ T3060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.355745][ T3060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.380156][ T3060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.783147][ T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1483.189671][ T30] usb 2-1: Using ep0 maxpacket: 32 00:24:42 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv6}}, 0x0) [ 1483.360672][ T30] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1483.363197][ T30] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 0 [ 1483.364763][ T30] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1483.379674][ T30] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 0 [ 1483.381141][ T30] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1484.363662][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1484.365139][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.368801][ T30] usb 2-1: Product: syz [ 1484.383403][ T30] usb 2-1: Manufacturer: syz [ 1484.384584][ T30] usb 2-1: SerialNumber: syz [ 1484.980616][ T30] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1485.613374][ T30] usb 2-1: USB disconnect, device number 2 00:24:46 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0xa6ea, 0x87200) 00:24:48 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x2b, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:24:51 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xc883, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:24:53 executing program 1: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902"], 0x0) syz_usb_disconnect(r0) syz_open_dev$amidi(&(0x7f0000000040), 0xa6f6, 0x88001) syz_usb_disconnect(r0) [ 1496.030515][ T3246] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1497.210959][ T3246] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1497.213966][ T3246] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1497.248714][ T3246] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1497.251354][ T3246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.513278][ T3773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1501.108288][ T3246] Insufficient stack space to handle exception! [ 1501.110542][ T3246] Task stack: [0xff200000078c8000..0xff200000078cc000] [ 1501.111585][ T3246] Overflow stack: [0xff6000007cd07070..0xff6000007cd08070] [ 1501.112778][ T3246] CPU: 1 PID: 3246 Comm: kworker/1:0 Not tainted 6.8.0-rc1-syzkaller-00020-g325731481cea #0 [ 1501.114478][ T3246] Hardware name: riscv-virtio,qemu (DT) [ 1501.115778][ T3246] Workqueue: usb_hub_wq hub_event [ 1501.117371][ T3246] epc : mark_lock+0x2e/0x1ad2 [ 1501.118930][ T3246] ra : __lock_acquire+0xaa8/0x784c [ 1501.120197][ T3246] epc : ffffffff80212286 ra : ffffffff8021516e sp : ff200000078c7ed0 [ 1501.121367][ T3246] gp : ffffffff8863e360 tp : 0000000000000000 t0 : 0000000000000000 [ 1501.122529][ T3246] t1 : ff60000033624060 t2 : ff60000033623ef8 s0 : ff200000078c8080 [ 1501.123733][ T3246] s1 : ffffffff8866b780 a0 : ff60000033623400 a1 : ff60000033624060 [ 1501.124816][ T3246] a2 : 0000000000000008 a3 : 0000000041b58ab3 a4 : 0000000000001fff [ 1501.125866][ T3246] a5 : ff200000078c8010 a6 : ffffffff89a752a0 a7 : ffffffff85c4d444 [ 1501.127012][ T3246] s2 : 0000000000000009 s3 : 0000000000000009 s4 : ff200000078c8000 [ 1501.128069][ T3246] s5 : 1fec0000066c47de s6 : ffffffff8864aec0 s7 : ffffffff886acca0 [ 1501.129176][ T3246] s8 : ff60000033623edc s9 : 0000000000000000 s10: 0000000000000003 [ 1501.130286][ T3246] s11: ff60000033623400 t3 : 0000000000000004 t4 : 1fec0000066c47db [ 1501.132466][ T3246] t5 : 0000000000000001 t6 : 1fec0000066c4810 [ 1501.133932][ T3246] status: 0000000200000100 badaddr: ff200000078c7f20 cause: 000000000000000f [ 1501.135768][ T3246] Kernel panic - not syncing: Kernel stack overflow [ 1501.137350][ T3246] CPU: 1 PID: 3246 Comm: kworker/1:0 Not tainted 6.8.0-rc1-syzkaller-00020-g325731481cea #0 [ 1501.139311][ T3246] Hardware name: riscv-virtio,qemu (DT) [ 1501.140549][ T3246] Workqueue: usb_hub_wq hub_event [ 1501.141826][ T3246] Call Trace: [ 1501.142940][ T3246] [] dump_backtrace+0x2e/0x3c [ 1501.144500][ T3246] [] show_stack+0x34/0x40 [ 1501.145654][ T3246] [] dump_stack_lvl+0xe8/0x154 [ 1501.147289][ T3246] [] dump_stack+0x1c/0x24 [ 1501.148539][ T3246] [] panic+0x33c/0x77a [ 1501.149596][ T3246] [] handle_bad_stack+0xe0/0xf4 [ 1501.150807][ T3246] [] __lock_acquire+0xaa8/0x784c [ 1501.152498][ T3246] SMP: stopping secondary CPUs [ 1501.155476][ T3246] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:10:16 Registers: info registers vcpu 0 CPU#0 V = 0 pc 00000000000312c0 mhartid 0000000000000000 mstatus 8000000a000060a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000408 stvec ffffffff85929640 vstvec 0000000000000000 mepc ffffffff8001d200 sepc 0000000000079d78 vsepc 0000000000000000 mcause 0000000000000009 scause 0000000000000008 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080036000 sscratch ff600000152ab400 satp a015a0000009183b x0/zero 0000000000000000 x1/ra 0000000000025b3c x2/sp 00007fff747f3ec8 x3/gp 000055556dad3800 x4/tp 00007fff8e58ec20 x5/t0 0000000000000001 x6/t1 0000000000000004 x7/t2 000000000b25e191 x8/s0 000000000174db08 x9/s1 00007fff76b85fff x10/a0 00007fff76b76000 x11/a1 0000000000010000 x12/a2 0000000000000004 x13/a3 000000000000000f x14/a4 00007fff76b76000 x15/a5 0000000000000000 x16/a6 0000000000e63440 x17/a7 00000000000000e9 x18/s2 0000000000e63480 x19/s3 0000000000e634c0 x20/s4 000000000000ffff x21/s5 0000000000000001 x22/s6 0000000000000018 x23/s7 000000000007fff8 x24/s8 00007fff9ec36000 x25/s9 000000000007fff0 x26/s10 ffffffffffffffff x27/s11 00007fff748be9c0 x28/t3 000000000000ffff x29/t4 000000000007fff8 x30/t5 00000003827bf055 x31/t6 000000000b26e191 f0/ft0 0000000000000000 f1/ft1 412e848000000000 f2/ft2 40c3880000000000 f3/ft3 0000000000000000 f4/ft4 4046d9b15e947b59 f5/ft5 4046d0694e6cfb9d f6/ft6 41486a0000000000 f7/ft7 41cdcd6500000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 4046d0694e6cfb9d f11/fa1 3f847ae147ae147b f12/fa2 4192b83000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8022fffe mhartid 0000000000000001 mstatus 0000000a00000180 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000022 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000408 stvec ffffffff85929640 vstvec 0000000000000000 mepc ffffffff8023affe sepc ffffffff80212286 vsepc 0000000000000000 mcause 8000000000000003 scause 000000000000000f vscause 0000000000000000 mtval 0000000000000000 stval ff200000078c7f20 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080034000 sscratch 0000000000000000 satp a0170000000b31d4 x0/zero 0000000000000000 x1/ra ffffffff8022fff0 x2/sp ff6000007cd075e0 x3/gp ffffffff8863e360 x4/tp ff60000033623400 x5/t0 2000000000000000 x6/t1 0000000000000048 x7/t2 2065726177647261 x8/s0 ff6000007cd07730 x9/s1 000000000000003e x10/a0 0000000000000007 x11/a1 0000000000000000 x12/a2 0000000000040000 x13/a3 ffffffff8022fff0 x14/a4 1fec00000f9a0ef1 x15/a5 ffebffff0f9a0ef1 x16/a6 0000000000000003 x17/a7 0000000000000038 x18/s2 0000000000000025 x19/s3 ffffffff8a3116fc x20/s4 0000000000000017 x21/s5 0000000000000017 x22/s6 000000000000003d x23/s7 0000000000000800 x24/s8 ff6000007cd07650 x25/s9 0000000000000000 x26/s10 00000000000007e7 x27/s11 000000000000003c x28/t3 ffffffff8a3116d7 x29/t4 ffffffff8a3116d7 x30/t5 ffffffff8a3116d8 x31/t6 ffffffff8a3116d7 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000