syzkaller login: [ 234.604120][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 234.708256][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 234.782320][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 261.844997][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:51357' (ECDSA) to the list of known hosts. 1970/01/01 00:04:40 fuzzer started 1970/01/01 00:04:50 dialing manager at localhost:43739 1970/01/01 00:04:53 syscalls: 2768 1970/01/01 00:04:53 code coverage: enabled 1970/01/01 00:04:53 comparison tracing: enabled 1970/01/01 00:04:53 extra coverage: enabled 1970/01/01 00:04:53 setuid sandbox: enabled 1970/01/01 00:04:53 namespace sandbox: enabled 1970/01/01 00:04:53 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:04:53 fault injection: enabled 1970/01/01 00:04:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:04:53 net packet injection: enabled 1970/01/01 00:04:53 net device setup: enabled 1970/01/01 00:04:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:04:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:04:53 USB emulation: enabled 1970/01/01 00:04:53 hci packet injection: /dev/vhci does not exist 1970/01/01 00:04:53 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:04:53 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:04:58 fetching corpus: 50, signal 20295/22054 (executing program) 1970/01/01 00:05:00 fetching corpus: 100, signal 31518/34748 (executing program) 1970/01/01 00:05:02 fetching corpus: 150, signal 36106/40776 (executing program) 1970/01/01 00:05:05 fetching corpus: 200, signal 42157/48127 (executing program) 1970/01/01 00:05:06 fetching corpus: 250, signal 44228/51540 (executing program) 1970/01/01 00:05:08 fetching corpus: 300, signal 47751/56263 (executing program) 1970/01/01 00:05:11 fetching corpus: 350, signal 51125/60777 (executing program) 1970/01/01 00:05:12 fetching corpus: 400, signal 53464/64242 (executing program) 1970/01/01 00:05:14 fetching corpus: 450, signal 56414/68227 (executing program) 1970/01/01 00:05:16 fetching corpus: 500, signal 58303/71202 (executing program) 1970/01/01 00:05:17 fetching corpus: 550, signal 59514/73548 (executing program) 1970/01/01 00:05:19 fetching corpus: 600, signal 60703/75802 (executing program) 1970/01/01 00:05:21 fetching corpus: 650, signal 61697/77848 (executing program) 1970/01/01 00:05:23 fetching corpus: 700, signal 63540/80633 (executing program) 1970/01/01 00:05:25 fetching corpus: 750, signal 65158/83184 (executing program) 1970/01/01 00:05:27 fetching corpus: 800, signal 66915/85779 (executing program) 1970/01/01 00:05:29 fetching corpus: 850, signal 67928/87762 (executing program) 1970/01/01 00:05:31 fetching corpus: 900, signal 69274/89942 (executing program) 1970/01/01 00:05:32 fetching corpus: 950, signal 70262/91834 (executing program) 1970/01/01 00:05:34 fetching corpus: 1000, signal 71268/93712 (executing program) 1970/01/01 00:05:36 fetching corpus: 1050, signal 73178/96241 (executing program) 1970/01/01 00:05:39 fetching corpus: 1100, signal 77031/100111 (executing program) 1970/01/01 00:05:40 fetching corpus: 1150, signal 78019/101866 (executing program) 1970/01/01 00:05:42 fetching corpus: 1200, signal 78868/103508 (executing program) 1970/01/01 00:05:44 fetching corpus: 1250, signal 79573/105028 (executing program) 1970/01/01 00:05:47 fetching corpus: 1300, signal 80705/106855 (executing program) 1970/01/01 00:05:49 fetching corpus: 1350, signal 81419/108305 (executing program) 1970/01/01 00:05:51 fetching corpus: 1400, signal 82426/110008 (executing program) 1970/01/01 00:05:52 fetching corpus: 1450, signal 83258/111532 (executing program) 1970/01/01 00:05:54 fetching corpus: 1500, signal 83690/112799 (executing program) 1970/01/01 00:05:55 fetching corpus: 1550, signal 84470/114285 (executing program) 1970/01/01 00:05:57 fetching corpus: 1600, signal 85601/115930 (executing program) 1970/01/01 00:05:59 fetching corpus: 1650, signal 86545/117437 (executing program) 1970/01/01 00:06:02 fetching corpus: 1700, signal 87827/119103 (executing program) 1970/01/01 00:06:04 fetching corpus: 1750, signal 88768/120563 (executing program) 1970/01/01 00:06:05 fetching corpus: 1800, signal 89791/121991 (executing program) 1970/01/01 00:06:06 fetching corpus: 1850, signal 90632/123377 (executing program) 1970/01/01 00:06:08 fetching corpus: 1900, signal 91448/124671 (executing program) 1970/01/01 00:06:10 fetching corpus: 1950, signal 92210/125886 (executing program) 1970/01/01 00:06:13 fetching corpus: 2000, signal 93579/127424 (executing program) 1970/01/01 00:06:14 fetching corpus: 2050, signal 94063/128519 (executing program) 1970/01/01 00:06:16 fetching corpus: 2100, signal 94837/129707 (executing program) 1970/01/01 00:06:18 fetching corpus: 2150, signal 95481/130829 (executing program) 1970/01/01 00:06:19 fetching corpus: 2200, signal 95994/131866 (executing program) 1970/01/01 00:06:21 fetching corpus: 2250, signal 96995/133143 (executing program) 1970/01/01 00:06:23 fetching corpus: 2300, signal 97485/134179 (executing program) 1970/01/01 00:06:26 fetching corpus: 2350, signal 98227/135273 (executing program) 1970/01/01 00:06:28 fetching corpus: 2400, signal 99477/136592 (executing program) 1970/01/01 00:06:30 fetching corpus: 2450, signal 99928/137519 (executing program) 1970/01/01 00:06:32 fetching corpus: 2500, signal 100448/138540 (executing program) 1970/01/01 00:06:33 fetching corpus: 2550, signal 101010/139507 (executing program) 1970/01/01 00:06:35 fetching corpus: 2600, signal 101675/140479 (executing program) 1970/01/01 00:06:36 fetching corpus: 2650, signal 102298/141448 (executing program) 1970/01/01 00:06:38 fetching corpus: 2700, signal 103030/142473 (executing program) 1970/01/01 00:06:39 fetching corpus: 2750, signal 103779/143441 (executing program) 1970/01/01 00:06:41 fetching corpus: 2800, signal 104533/144377 (executing program) 1970/01/01 00:06:43 fetching corpus: 2850, signal 104917/145208 (executing program) 1970/01/01 00:06:44 fetching corpus: 2880, signal 105914/146208 (executing program) 1970/01/01 00:06:45 fetching corpus: 2880, signal 105914/146932 (executing program) 1970/01/01 00:06:45 fetching corpus: 2880, signal 105914/147647 (executing program) 1970/01/01 00:06:45 fetching corpus: 2880, signal 105914/148353 (executing program) 1970/01/01 00:06:45 fetching corpus: 2880, signal 105914/149029 (executing program) 1970/01/01 00:06:45 fetching corpus: 2880, signal 105914/149720 (executing program) 1970/01/01 00:06:45 fetching corpus: 2880, signal 105914/150411 (executing program) 1970/01/01 00:06:45 fetching corpus: 2880, signal 105914/151110 (executing program) 1970/01/01 00:06:45 fetching corpus: 2880, signal 105914/151844 (executing program) 1970/01/01 00:06:46 fetching corpus: 2880, signal 105914/152529 (executing program) 1970/01/01 00:06:46 fetching corpus: 2880, signal 105914/153192 (executing program) 1970/01/01 00:06:46 fetching corpus: 2880, signal 105914/153903 (executing program) 1970/01/01 00:06:46 fetching corpus: 2880, signal 105914/154596 (executing program) 1970/01/01 00:06:46 fetching corpus: 2880, signal 105914/155304 (executing program) 1970/01/01 00:06:46 fetching corpus: 2880, signal 105914/156013 (executing program) 1970/01/01 00:06:46 fetching corpus: 2880, signal 105914/156681 (executing program) 1970/01/01 00:06:46 fetching corpus: 2880, signal 105914/157418 (executing program) 1970/01/01 00:06:46 fetching corpus: 2880, signal 105914/158138 (executing program) 1970/01/01 00:06:47 fetching corpus: 2880, signal 105914/158822 (executing program) 1970/01/01 00:06:47 fetching corpus: 2880, signal 105914/159556 (executing program) 1970/01/01 00:06:47 fetching corpus: 2880, signal 105914/160251 (executing program) 1970/01/01 00:06:47 fetching corpus: 2880, signal 105914/160965 (executing program) 1970/01/01 00:06:47 fetching corpus: 2880, signal 105914/161644 (executing program) 1970/01/01 00:06:47 fetching corpus: 2880, signal 105914/162057 (executing program) 1970/01/01 00:06:47 fetching corpus: 2880, signal 105914/162057 (executing program) 1970/01/01 00:08:28 starting 2 fuzzer processes 00:08:45 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121000, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x140, 0x17}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2028000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x41081}, 0x4000000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @local}}}, 0x84) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x190, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x2e}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x1}, 0x48800) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000041) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/nvme-fabrics\x00', 0x20040, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000001040)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000b40)={0x484, 0x0, 0xd20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x55}}}}, [@NL80211_ATTR_FRAME={0x44c, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x9a}, @broadcast, @device_a, @broadcast, {0xa, 0x800}, @broadcast}, @random="3bbb8f043e7810ddafc706e80db2285ac11894f7639f0ce12c30a9fa2f28a81c2f28e7855ab80f48e5dfa6f48c23c3e22e42cdb5c43bf6d3171c0d02875a51ab38711688117f21615579e91acf5e7c0a8312bfa9dd9139955ef36ac55e13f06b415773cef99604da53503aa1c482a8a856050df534ae7147d4fd2bb09c994df95000354a7b63e0724f0771d49cc0923b2a52182498c7d4c7edcc24f5f0b862aa11ba96d0eeaad3fe11a90d88470c777331d83b06d626d88235a4643a850c70f9ebda13a5236a4698ec6ac29aee4cf0f1340bbf6dec74660b932f5951d1f25fdd046e282febc502e1486dbe419334c5bb880b0e6acfa82865c81c7c701e13c3b8187f2f5ffbfeca20677f34e39f37f94f8087ed7b866f0f8769ed5b341f95686f0d5f381e892d1fe41377b3f30c1e4caded518ebc4c4a4f8c404027d90611dfabee94d01328170f2fbf0721f125242385a164cf597109c1c729fb87fa80135242c26fcd3b8583eef4a011ff79dd4a6daf1a7f369e3557508e7976ddf59baf8eb7fdf0c84e3f534d4ad7c5b49e6744b0acd55ec5075b68ddea78b2efe4fbbf1fc439d03e8b008f8f64307c881b54304ab97ad3d193cbf668fb9c57134ad9ac587db29a964b3b34694492826609fc5d4b6caacfd9622ea65a34daae959e3747ae3c59389ae497f14c9e35f48db3a1e85bb9ad911bd7ed1006abb938d2edb8751506e254da6e07872c2044fa02355327b75dcb7dbdcd91fc233cbffbae21bfc9d015457b27a4bf41494da23fe55281f80ddb206e1d16fb9cc121b65b5b2f16fe346b05e0e4e012f002e431e4aa640860d6fb8a5e75a8626d62e4428e16dc0cea445f4131680ed281e6708f2fe494ada96e145b576631da91651a254a0c2ea286669dd80204905644a0356d1f6a6a185f92bdfacba58c8936266466e5c83bf9b9efe81dece7d7877dca326361ccbe4278caa3d6f97a1b1d3a24ee589b41e72e459b8b11eda1cb29cfd1bc4bd6f8d7cc8155ae82c08fcaf9ac7c3d42be3202a34a569c6ce01a54c60e18aa3b4b82325eca83d98f715d32ab6cb9396b59e97d6c03936d7344620982c00f1854c6c119f92fe847de1e5ab095e00a61c4a9358742c420a338de23e137d89510a681959c6db0ba052104e91319264ddd7dfc91b744e1d5124a489e09dcfe7d098f749cef64dcbabd76134ab4893a55cb01ae55c878cc19ef7bb9bd70a72d8dc9647772b5140539c4e62eadef7ee1084f5eeb64032916197b749376f05ffa757892d93e194def3454ee66be51dba6d1e07695f9707cf80a8151cbdecea49966e66c88d7ed601d3e914ded4558e04844f32eea5c4dd195bb8c12a334ff9f0b2fc5ff57151e319cf4b60b478cd7227a5d4a3229cc93875b39539f4a0fcf1d46f75303f65d9a4653f62cfb32e875bda3f9905d2a307ef27e8fbca9cdfd5dc13bd1e9b5f3743eaeb6bd0d4045d72d00eabcab6f67109ac652ad9be1756996e5fe249de42a"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x484}, 0x1, 0x0, 0x0, 0x288c0}, 0x240400d0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0)='nl802154\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x110, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0xdc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "73413b067da8748264e3d7a47d7fc2b6"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "127f09f73fa916e378d50f91042654100c85b7a4983accb810d8e31cc2afcb6a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1e45d7980544ab5d39cb315754363c1418e20a70f287d65cf22ae973f7bc2165"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2985f7daa3834a41cffbe21101fdd1a70882673fdd1c1c002f5c713f6342623c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfe}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "48bb416e7e9767f57c869aee95edbd9f"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a34c28fbfdfd037b5b844ec0c1bb6c01173246171f43fb8b256c10d261c3901b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ae07e139ea3c842a21ec937ea4aca721"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x110}, 0x1, 0x0, 0x0, 0x40800}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4080) r6 = openat$incfs(r2, &(0x7f0000001400)='.log\x00', 0x44a881, 0x152) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x40000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001540)='/dev/ubi_ctrl\x00', 0x14800, 0x0) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4801}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x4000) 00:09:06 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000001580)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/214, 0xd6}, {&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000200)=""/25, 0x19}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/74, 0x4a}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/105, 0x69}, {&(0x7f00000013c0)=""/27, 0x1b}, {&(0x7f0000001400)=""/188, 0xbc}], 0x9}, 0x2}], 0x1, 0x10100, 0x0) lgetxattr(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)=@random={'os2.', '*!)!*/{$)#\x00'}, &(0x7f0000001640)=""/149, 0x95) r0 = fspick(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x0) lsetxattr(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)=@random={'security.', '](,\x00'}, &(0x7f00000017c0)='.:^-\x00', 0x5, 0x3) setxattr$trusted_overlay_redirect(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)='trusted.overlay.redirect\x00', &(0x7f0000001880)='./file0\x00', 0x8, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)='trusted.overlay.origin\x00', &(0x7f0000001940)='y\x00', 0x2, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001980)={'ip_vti0\x00'}) lsetxattr$trusted_overlay_opaque(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='trusted.overlay.opaque\x00', &(0x7f0000001a40)='y\x00', 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000001a80)='./file0\x00', &(0x7f0000001b00)=[&(0x7f0000001ac0)='&\xf0#$\x00'], &(0x7f0000001b80)=[&(0x7f0000001b40)='trusted.overlay.opaque\x00'], 0x400) mknodat(0xffffffffffffffff, &(0x7f0000001bc0)='./file0\x00', 0x0, 0x7) lsetxattr$trusted_overlay_origin(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)='trusted.overlay.origin\x00', &(0x7f0000001c80)='y\x00', 0x2, 0x2) lsetxattr$trusted_overlay_opaque(&(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)='trusted.overlay.opaque\x00', &(0x7f0000001d40)='y\x00', 0x2, 0x2) accept4(0xffffffffffffffff, &(0x7f0000001d80)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000001e00)=0x80, 0x80000) setxattr$incfs_size(&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)='user.incfs.size\x00', &(0x7f0000001ec0)=0x40226f83, 0x8, 0x2) fchmodat(0xffffffffffffffff, &(0x7f0000001f00)='./file0\x00', 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/null\x00', 0xa800, 0x0) statx(r1, &(0x7f0000001f80)='./file0\x00', 0x2000, 0x400, &(0x7f0000001fc0)) execveat(r1, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002140)=[&(0x7f0000002100)='trusted.overlay.opaque\x00'], &(0x7f0000002200)=[&(0x7f0000002180)='trusted.overlay.origin\x00', &(0x7f00000021c0)='y\x00'], 0x100) pivot_root(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280)='.\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000022c0)=""/43, 0x2b}, {&(0x7f0000002300)=""/163, 0xa3}, {&(0x7f00000023c0)=""/169, 0xa9}, {&(0x7f0000002480)=""/108, 0x6c}], 0x4, &(0x7f0000002540)=""/248, 0xf8}, 0x2000) [ 549.995230][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.123239][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.702634][ T3088] device hsr_slave_0 entered promiscuous mode [ 557.741917][ T3088] device hsr_slave_1 entered promiscuous mode [ 561.319010][ T3088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 561.425588][ T3088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 561.513084][ T3088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 561.622735][ T3088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 569.868410][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.254581][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 570.345626][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 575.585464][ T3243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.691204][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 575.740977][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 575.872364][ T3243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.509795][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 576.570433][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 576.783680][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 577.150527][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 578.500941][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 578.521905][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 578.643028][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 578.709934][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 579.060087][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 580.273826][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 580.304447][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 590.303220][ T3243] device hsr_slave_0 entered promiscuous mode [ 590.360554][ T3243] device hsr_slave_1 entered promiscuous mode [ 590.393323][ T3243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.400030][ T3243] Cannot create hsr debugfs directory [ 596.555319][ T3243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 596.773655][ T3243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 596.956056][ T3243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 597.131925][ T3243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 598.453363][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 598.513791][ T1936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 607.328110][ T3088] device veth0_vlan entered promiscuous mode [ 607.813327][ T3425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 607.860294][ T3425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 607.960075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 608.012842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 608.055523][ T3088] device veth1_vlan entered promiscuous mode [ 608.310873][ T3243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.025040][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 609.080659][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.573076][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 609.635284][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 609.875382][ T3088] device veth0_macvtap entered promiscuous mode [ 609.924162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 610.174755][ T3088] device veth1_macvtap entered promiscuous mode [ 611.374455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 611.441072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.683730][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 611.741599][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 612.139579][ T3088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.142553][ T3088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.143840][ T3088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.145070][ T3088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.935498][ T3088] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 616.190700][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 616.242095][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 616.563911][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 616.614895][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 616.861704][ T3425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 617.114561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.214477][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 618.301535][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 618.454940][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 618.503749][ T3423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 618.928800][ T3243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 621.112975][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 621.152013][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:10:20 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180800) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0xe, 0x400023, 0x9, 0x2, 0x1, 0x7, 0x6, 0x143}) r1 = openat(r0, &(0x7f00000000c0)='/proc/self/exe\x00', 0x400000, 0xf1) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) 00:10:28 executing program 0: syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000dc0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$vhost_msg(r2, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$inet(r3, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c47000031fdcda5676b90eed9acdcdda1ecc3c445dce111f65dabe6629c6aed2d2f06be9edc6ba1a56d762458102b5abbed8e5075559ae1c8e337298b76d710c45536926b410c6b732115184f0a32425b4f8b88254a7b0a5f0417cc5dbc12622ba37b0fe2ce9744ca7f8ccb8aa527", @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000600040001000000080001007063690011000200303030303a30303a31302e3000000000080003000100000006000400020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000006000400010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000600040002000000080001007063690011000200303030303a30303a31302e300000000008000300000000000600040003000000fb1bf09caf65b5ecb0e155ec9da7a4213f8027c957d80f0ba797f803"], 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) [ 631.159477][ T3544] Unable to handle kernel access to user memory without uaccess routines at virtual address 0000000020000080 [ 631.198244][ T3544] Oops [#1] [ 631.199220][ T3544] Modules linked in: [ 631.200402][ T3544] CPU: 1 PID: 3544 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller-00715-ga5e13c6df0e4 #0 [ 631.201810][ T3544] Hardware name: riscv-virtio,qemu (DT) [ 631.202888][ T3544] epc : sock_ioctl+0x4c4/0x66c [ 631.204222][ T3544] ra : sock_ioctl+0x4c4/0x66c [ 631.205261][ T3544] epc : ffffffe0020e60a2 ra : ffffffe0020e60a2 sp : ffffffe0061e3da0 [ 631.206768][ T3544] gp : ffffffe004588b08 tp : ffffffe00d86df00 t0 : 0000000000000000 [ 631.210057][ T3544] t1 : 0000000000000001 t2 : 00000000000f4240 s0 : ffffffe0061e3e30 [ 631.211585][ T3544] s1 : 0000000000040000 a0 : 0000000000000000 a1 : 0000000000000007 [ 631.212713][ T3544] a2 : 1ffffffc01b0dbe0 a3 : ffffffe002a94d2e a4 : 0000000000000000 [ 631.213838][ T3544] a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffffffe000084f3a [ 631.214988][ T3544] s2 : 0000000000000000 s3 : 0000000000008902 s4 : 0000000020000080 [ 631.216094][ T3544] s5 : ffffffe00458c0d0 s6 : ffffffe00d0fa4c0 s7 : ffffffe01f098000 [ 631.217795][ T3544] s8 : 0000000000008903 s9 : ffffffe00d0fa580 s10: 0000000000000000 [ 631.219466][ T3544] s11: 0000000000020000 t3 : 7422c3c34ae5c600 t4 : ffffffc403df3fb2 [ 631.220652][ T3544] t5 : ffffffc403df3fba t6 : 0000000000040000 [ 631.221633][ T3544] status: 0000000000000120 badaddr: 0000000020000080 cause: 000000000000000f [ 631.222936][ T3544] Call Trace: [ 631.223705][ T3544] [] sock_ioctl+0x4c4/0x66c [ 631.225016][ T3544] [] sys_ioctl+0x5c2/0xd56 [ 631.226370][ T3544] [] ret_from_syscall+0x0/0x2 [ 631.268679][ T3544] ---[ end trace 08debf4e7ccf71fb ]--- [ 631.279524][ T3544] Kernel panic - not syncing: Fatal exception [ 631.280915][ T3544] SMP: stopping secondary CPUs [ 631.282611][ T3544] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:58:00 Registers: info registers vcpu 0 pc ffffffe000999316 mhartid 0000000000000000 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000542c sepc ffffffe0000054fa mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe000999312 x2/sp ffffffe01ef9fc70 x3/gp ffffffe004588b08 x4/tp ffffffe006ea0000 x5/t0 0000000000046000 x6/t1 0000000000000001 x7/t2 0000000000000003 x8/s0 ffffffe01ef9fc80 x9/s1 0000000000000001 x10/a0 0000000000000120 x11/a1 00000000000f0000 x12/a2 0000000000000002 x13/a3 ffffffe000999312 x14/a4 ffffffe006ea1000 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffffe002a90d78 x18/s2 0000000000000000 x19/s3 ffffffe0037e6d88 x20/s4 ffffffe0036548e0 x21/s5 ffffffe002a90fc8 x22/s6 0000000000000000 x23/s7 ffffffe005622000 x24/s8 0000000000000001 x25/s9 ffffffe01ef9fdc0 x26/s10 00000000000001f4 x27/s11 0000000000000002 x28/t3 7422c3c34ae5c600 x29/t4 0000000000000018 x30/t5 0016a65700000000 x31/t6 000000017c4c403a f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffe001da544e mhartid 0000000000000001 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000542c sepc ffffffe0000054fa mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe001da544a x2/sp ffffffe022587920 x3/gp ffffffe004588b08 x4/tp ffffffe0077ddf00 x5/t0 0000000000046000 x6/t1 ee74dfad172f4000 x7/t2 0000000000000018 x8/s0 ffffffe022587930 x9/s1 ffffffe00432f930 x10/a0 000000017c4e06f2 x11/a1 00000000000f0000 x12/a2 0000000000010001 x13/a3 ffffffe001da544a x14/a4 ffffffe0077ddf00 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 9dda5e376d400000 x18/s2 0000000000001000 x19/s3 0000000000000004 x20/s4 ffffffe0077ddf00 x21/s5 ffffffe00432f900 x22/s6 ffffffe004589898 x23/s7 ffffffe00432f930 x24/s8 ffffffe067d54ed8 x25/s9 ffffffe067d48a40 x26/s10 ffffffe067d48100 x27/s11 ffffffe00013c116 x28/t3 7422c3c34ae5c600 x29/t4 ffffffc400a08107 x30/t5 ffffffc400a0810e x31/t6 000000000000000f f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000