syzkaller login: [ 278.964628][ T1861] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 288.180069][ T1861] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 288.221381][ T1861] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 319.730794][ T1861] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:44639' (ECDSA) to the list of known hosts. 1970/01/01 00:05:51 fuzzer started 1970/01/01 00:06:11 dialing manager at localhost:46487 [ 377.292897][ T2041] cgroup: Unknown subsys name 'net' [ 378.628051][ T2041] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:18 syscalls: 2827 1970/01/01 00:06:18 code coverage: enabled 1970/01/01 00:06:18 comparison tracing: ioctl(KCOV_DISABLE) failed: invalid argument 1970/01/01 00:06:18 extra coverage: enabled 1970/01/01 00:06:18 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:18 setuid sandbox: enabled 1970/01/01 00:06:18 namespace sandbox: enabled 1970/01/01 00:06:18 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:18 fault injection: enabled 1970/01/01 00:06:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:18 net packet injection: enabled 1970/01/01 00:06:18 net device setup: enabled 1970/01/01 00:06:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:18 USB emulation: enabled 1970/01/01 00:06:18 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:18 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:18 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:18 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:27 fetching corpus: 50, signal 37948/39394 (executing program) 1970/01/01 00:06:31 fetching corpus: 99, signal 50252/51198 (executing program) 1970/01/01 00:06:35 fetching corpus: 126, signal 55259/55819 (executing program) 1970/01/01 00:06:35 fetching corpus: 126, signal 55259/55976 (executing program) 1970/01/01 00:06:35 fetching corpus: 126, signal 55259/56133 (executing program) 1970/01/01 00:06:35 fetching corpus: 126, signal 55296/56309 (executing program) 1970/01/01 00:06:35 fetching corpus: 126, signal 55296/56441 (executing program) 1970/01/01 00:06:35 fetching corpus: 126, signal 55296/56597 (executing program) 1970/01/01 00:06:36 fetching corpus: 126, signal 55296/56747 (executing program) 1970/01/01 00:06:36 fetching corpus: 126, signal 55296/56928 (executing program) 1970/01/01 00:06:36 fetching corpus: 126, signal 55296/57107 (executing program) 1970/01/01 00:06:36 fetching corpus: 126, signal 55296/57269 (executing program) 1970/01/01 00:06:36 fetching corpus: 126, signal 55296/57422 (executing program) 1970/01/01 00:06:36 fetching corpus: 126, signal 55296/57619 (executing program) 1970/01/01 00:06:36 fetching corpus: 126, signal 55296/57766 (executing program) 1970/01/01 00:06:37 fetching corpus: 126, signal 55296/57907 (executing program) 1970/01/01 00:06:37 fetching corpus: 126, signal 55296/58064 (executing program) 1970/01/01 00:06:37 fetching corpus: 126, signal 55296/58228 (executing program) 1970/01/01 00:06:37 fetching corpus: 127, signal 55496/58450 (executing program) 1970/01/01 00:06:37 fetching corpus: 127, signal 55496/58588 (executing program) 1970/01/01 00:06:38 fetching corpus: 127, signal 55496/58738 (executing program) 1970/01/01 00:06:38 fetching corpus: 127, signal 55496/58878 (executing program) 1970/01/01 00:06:38 fetching corpus: 127, signal 55496/59017 (executing program) 1970/01/01 00:06:38 fetching corpus: 127, signal 55496/59154 (executing program) 1970/01/01 00:06:38 fetching corpus: 127, signal 55496/59294 (executing program) 1970/01/01 00:06:38 fetching corpus: 127, signal 55496/59431 (executing program) 1970/01/01 00:06:38 fetching corpus: 127, signal 55496/59563 (executing program) 1970/01/01 00:06:39 fetching corpus: 127, signal 55496/59727 (executing program) 1970/01/01 00:06:39 fetching corpus: 127, signal 55496/59863 (executing program) 1970/01/01 00:06:39 fetching corpus: 127, signal 55496/59863 (executing program) 1970/01/01 00:08:57 starting 2 fuzzer processes 00:08:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x25}}) 00:08:58 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) [ 557.359610][ C0] ================================================================== [ 557.363472][ C0] BUG: KASAN: slab-out-of-bounds in walk_stackframe+0x11c/0x260 [ 557.365141][ C0] Read of size 8 at addr ffffaf800ff4ff70 by task syz-executor.1/2053 [ 557.367006][ C0] [ 557.369594][ C0] CPU: 0 PID: 2053 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 557.371498][ C0] Hardware name: riscv-virtio,qemu (DT) [ 557.373819][ C0] Call Trace: [ 557.374860][ C0] [] dump_backtrace+0x2e/0x3c [ 557.376285][ C0] [] show_stack+0x34/0x40 [ 557.377575][ C0] [] dump_stack_lvl+0xe4/0x150 [ 557.378961][ C0] [] print_address_description.constprop.0+0x2a/0x330 [ 557.380621][ C0] [] kasan_report+0x184/0x1e0 [ 557.382466][ C0] [] __asan_load8+0x6e/0x96 [ 557.383835][ C0] [] walk_stackframe+0x11c/0x260 [ 557.385247][ C0] [] arch_stack_walk+0x2c/0x3c [ 557.386628][ C0] [] stack_trace_save+0xa6/0xd8 [ 557.388260][ C0] [ 557.389441][ C0] Allocated by task 108: [ 557.390411][ C0] (stack is not available) [ 557.391280][ C0] [ 557.392284][ C0] Freed by task 2057: [ 557.393421][ C0] stack_trace_save+0xa6/0xd8 [ 557.394706][ C0] kasan_save_stack+0x2c/0x58 [ 557.395982][ C0] kasan_set_track+0x1a/0x26 [ 557.397200][ C0] kasan_set_free_info+0x1e/0x3a [ 557.398414][ C0] ____kasan_slab_free+0x15e/0x180 [ 557.399706][ C0] __kasan_slab_free+0x10/0x18 [ 557.400998][ C0] slab_free_freelist_hook+0x8e/0x1cc [ 557.402760][ C0] kfree+0xe0/0x3e4 [ 557.403890][ C0] tomoyo_find_next_domain+0x6b6/0x1192 [ 557.405156][ C0] tomoyo_bprm_check_security+0xdc/0x136 [ 557.406480][ C0] security_bprm_check+0x44/0x96 [ 557.407658][ C0] bprm_execve+0x532/0x1140 [ 557.408892][ C0] kernel_execve+0x204/0x288 [ 557.410108][ C0] call_usermodehelper_exec_async+0x1c0/0x2dc [ 557.411561][ C0] ret_from_exception+0x0/0x10 [ 557.412815][ C0] [ 557.413573][ C0] Last potentially related work creation: [ 557.414605][ C0] ------------[ cut here ]------------ [ 557.415604][ C0] slab index 1372224 out of bounds (287) for stack id 0ff4f040 [ 557.420430][ C0] WARNING: CPU: 0 PID: 2053 at lib/stackdepot.c:304 stack_depot_print+0x66/0x70 [ 557.423292][ C0] Modules linked in: [ 557.424674][ C0] CPU: 0 PID: 2053 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 557.426223][ C0] Hardware name: riscv-virtio,qemu (DT) [ 557.427310][ C0] epc : stack_depot_print+0x66/0x70 [ 557.428708][ C0] ra : stack_depot_print+0x66/0x70 [ 557.430073][ C0] epc : ffffffff80c00b8a ra : ffffffff80c00b8a sp : ffffaf800ff4fe30 [ 557.431421][ C0] gp : ffffffff85863ac0 tp : ffffaf800b98e100 t0 : ffffffff86bcb657 [ 557.433477][ C0] t1 : fffff5ef0b53910c t2 : 0000000000000000 s0 : ffffaf800ff4fe40 [ 557.434790][ C0] s1 : ffffaf807aac5c40 a0 : 000000000000003c a1 : 00000000000f0000 [ 557.436094][ C0] a2 : 0000000000000504 a3 : ffffffff8012252a a4 : 43c3799f919d1600 [ 557.437642][ C0] a5 : 43c3799f919d1600 a6 : 0000000000f00000 a7 : ffffaf805a9c8863 [ 557.438981][ C0] s2 : ffffaf800ff4ff70 s3 : ffffaf8007202140 s4 : ffffaf800ff4e000 [ 557.440325][ C0] s5 : ffffaf800ff4f000 s6 : 0000000000003fff s7 : ffffaf800ff4ff10 [ 557.442523][ C0] s8 : 0000000000400000 s9 : ffffffffffffc000 s10: ffffaf800ff4ffe0 [ 557.443985][ C0] s11: 0000000000000008 t3 : fffffffff3f3f300 t4 : fffff5ef0b53910c [ 557.445261][ C0] t5 : fffff5ef0b53910d t6 : ffffaf800ff4f938 [ 557.446368][ C0] status: 0000000000000100 badaddr: 0000000000000000 cause: 0000000000000003 [ 557.447836][ C0] [] print_address_description.constprop.0+0x2fc/0x330 [ 557.449542][ C0] [] kasan_report+0x184/0x1e0 [ 557.450970][ C0] [] __asan_load8+0x6e/0x96 [ 557.452851][ C0] [] walk_stackframe+0x11c/0x260 [ 557.454240][ C0] [] arch_stack_walk+0x2c/0x3c [ 557.455617][ C0] [] stack_trace_save+0xa6/0xd8 [ 557.457151][ C0] irq event stamp: 35149 [ 557.458211][ C0] hardirqs last enabled at (35148): [] _raw_spin_unlock_irqrestore+0x68/0x98 [ 557.459998][ C0] hardirqs last disabled at (35149): [] _raw_spin_lock_irqsave+0x60/0x62 [ 557.461918][ C0] softirqs last enabled at (35004): [] __do_softirq+0x618/0x8fc [ 557.463536][ C0] softirqs last disabled at (35019): [] __irq_exit_rcu+0x142/0x1f8 [ 557.465157][ C0] ---[ end trace 0000000000000000 ]--- [ 557.466645][ C0] [ 557.467388][ C0] Second to last potentially related work creation: [ 557.468446][ C0] ------------[ cut here ]------------ [ 557.469357][ C0] slab index 2097151 out of bounds (287) for stack id ffffffff [ 557.473261][ C0] WARNING: CPU: 0 PID: 2053 at lib/stackdepot.c:304 stack_depot_print+0x66/0x70 [ 557.475102][ C0] Modules linked in: [ 557.476401][ C0] CPU: 0 PID: 2053 Comm: syz-executor.1 Tainted: G W 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 557.478095][ C0] Hardware name: riscv-virtio,qemu (DT) [ 557.479132][ C0] epc : stack_depot_print+0x66/0x70 [ 557.480501][ C0] ra : stack_depot_print+0x66/0x70 [ 557.482249][ C0] epc : ffffffff80c00b8a ra : ffffffff80c00b8a sp : ffffaf800ff4fe30 [ 557.483645][ C0] gp : ffffffff85863ac0 tp : ffffaf800b98e100 t0 : ffffffff86bcb657 [ 557.484951][ C0] t1 : fffff5ef0b53910c t2 : 0000000000000000 s0 : ffffaf800ff4fe40 [ 557.486198][ C0] s1 : ffffaf807aac5c40 a0 : 000000000000003c a1 : 00000000000f0000 [ 557.487455][ C0] a2 : 0000000000000504 a3 : ffffffff8012252a a4 : 43c3799f919d1600 [ 557.488751][ C0] a5 : 43c3799f919d1600 a6 : 0000000000f00000 a7 : ffffaf805a9c8863 [ 557.490063][ C0] s2 : ffffaf800ff4ff70 s3 : ffffaf8007202140 s4 : ffffaf800ff4e000 [ 557.491441][ C0] s5 : ffffaf800ff4f000 s6 : 0000000000003fff s7 : ffffaf800ff4ff10 [ 557.493375][ C0] s8 : 0000000000400000 s9 : ffffffffffffc000 s10: ffffaf800ff4ffe0 [ 557.494649][ C0] s11: 0000000000000008 t3 : fffffffff3f3f300 t4 : fffff5ef0b53910c [ 557.495918][ C0] t5 : fffff5ef0b53910d t6 : ffffaf800ff4f938 [ 557.496979][ C0] status: 0000000000000100 badaddr: 0000000000000000 cause: 0000000000000003 [ 557.498271][ C0] [] print_address_description.constprop.0+0x2ae/0x330 [ 557.499972][ C0] [] kasan_report+0x184/0x1e0 [ 557.501392][ C0] [] __asan_load8+0x6e/0x96 [ 557.503128][ C0] [] walk_stackframe+0x11c/0x260 [ 557.504562][ C0] [] arch_stack_walk+0x2c/0x3c [ 557.505940][ C0] [] stack_trace_save+0xa6/0xd8 [ 557.507319][ C0] irq event stamp: 35149 [ 557.508244][ C0] hardirqs last enabled at (35148): [] _raw_spin_unlock_irqrestore+0x68/0x98 [ 557.509931][ C0] hardirqs last disabled at (35149): [] _raw_spin_lock_irqsave+0x60/0x62 [ 557.511739][ C0] softirqs last enabled at (35004): [] __do_softirq+0x618/0x8fc [ 557.513355][ C0] softirqs last disabled at (35019): [] __irq_exit_rcu+0x142/0x1f8 [ 557.514993][ C0] ---[ end trace 0000000000000000 ]--- [ 557.516083][ C0] [ 557.516821][ C0] The buggy address belongs to the object at ffffaf800ff4e000 [ 557.516821][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 557.518621][ C0] The buggy address is located 3952 bytes to the right of [ 557.518621][ C0] 4096-byte region [ffffaf800ff4e000, ffffaf800ff4f000) [ 557.520490][ C0] The buggy address belongs to the page: [ 557.521967][ C0] page:ffffaf807aac5c40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x90148 [ 557.523782][ C0] head:ffffaf807aac5c40 order:3 compound_mapcount:0 compound_pincount:0 [ 557.525291][ C0] flags: 0x9000010200(slab|head|section=18|node=0|zone=0) [ 557.528267][ C0] raw: 0000009000010200 0000000000000000 0000000000000122 ffffaf8007202140 [ 557.529759][ C0] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 557.531028][ C0] raw: 00000000000007ff [ 557.532411][ C0] page dumped because: kasan: bad access detected [ 557.533798][ C0] page_owner tracks the page as allocated [ 557.534853][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2057, ts 542826148700, free_ts 398958908800 [ 557.537107][ C0] __set_page_owner+0x48/0x136 [ 557.538329][ C0] post_alloc_hook+0xd0/0x10a [ 557.539487][ C0] get_page_from_freelist+0x8da/0x12d8 [ 557.540708][ C0] __alloc_pages+0x150/0x3b6 [ 557.542272][ C0] alloc_pages+0x132/0x2a6 [ 557.543486][ C0] alloc_slab_page.constprop.0+0xc2/0xfa [ 557.544799][ C0] new_slab+0x25a/0x2cc [ 557.545927][ C0] ___slab_alloc+0x56e/0x918 [ 557.547094][ C0] __slab_alloc.constprop.0+0x50/0x8c [ 557.548333][ C0] kmem_cache_alloc_trace+0x2a2/0x2e0 [ 557.549657][ C0] tomoyo_find_next_domain+0x104/0x1192 [ 557.550848][ C0] tomoyo_bprm_check_security+0xdc/0x136 [ 557.552549][ C0] security_bprm_check+0x44/0x96 [ 557.553811][ C0] bprm_execve+0x532/0x1140 [ 557.554985][ C0] kernel_execve+0x204/0x288 [ 557.556174][ C0] call_usermodehelper_exec_async+0x1c0/0x2dc [ 557.557628][ C0] page last free stack trace: [ 557.558519][ C0] __reset_page_owner+0x4a/0xea [ 557.559723][ C0] free_pcp_prepare+0x29c/0x45e [ 557.560934][ C0] free_unref_page+0x6a/0x31e [ 557.562367][ C0] __free_pages+0xe2/0x112 [ 557.563595][ C0] __free_slab+0x122/0x27c [ 557.564755][ C0] discard_slab+0x4c/0x7a [ 557.565899][ C0] __slab_free+0x20a/0x29c [ 557.567028][ C0] ___cache_free+0x17c/0x354 [ 557.568522][ C0] qlist_free_all+0x7c/0x132 [ 557.569739][ C0] kasan_quarantine_reduce+0x14c/0x1c8 [ 557.571000][ C0] __kasan_slab_alloc+0x5c/0x98 [ 557.572658][ C0] kmem_cache_alloc_node+0x368/0x41c [ 557.573921][ C0] __alloc_skb+0x234/0x2e4 [ 557.575114][ C0] tcp_stream_alloc_skb+0x70/0x4c0 [ 557.576312][ C0] tcp_sendmsg_locked+0x880/0x1d9e [ 557.577365][ C0] tcp_sendmsg+0x32/0x4e [ 557.578689][ C0] [ 557.579488][ C0] Memory state around the buggy address: [ 557.580885][ C0] ffffaf800ff4fe00: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.583093][ C0] ffffaf800ff4fe80: fc fc fc fc 00 00 00 00 00 00 00 00 fc fc fc fc [ 557.584471][ C0] >ffffaf800ff4ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 557.585608][ C0] ^ [ 557.586891][ C0] ffffaf800ff4ff80: fc fc fc fc fc fc fc fc f1 f1 f1 f1 00 00 00 f3 [ 557.588219][ C0] ffffaf800ff50000: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 557.589528][ C0] ================================================================== [ 557.590677][ C0] Disabling lock debugging due to kernel taint [ 557.599286][ T2053] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 557.600733][ T2053] CPU: 0 PID: 2053 Comm: syz-executor.1 Tainted: G B W 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 557.603221][ T2053] Hardware name: riscv-virtio,qemu (DT) [ 557.604024][ T2053] Call Trace: [ 557.604694][ T2053] [] dump_backtrace+0x2e/0x3c [ 557.605960][ T2053] [] show_stack+0x34/0x40 [ 557.607054][ T2053] [] dump_stack_lvl+0xe4/0x150 [ 557.608289][ T2053] [] dump_stack+0x1c/0x24 [ 557.609494][ T2053] [] panic+0x24a/0x634 [ 557.610551][ T2053] [] schedule+0x0/0x14c [ 557.612106][ T2053] [] preempt_schedule_irq+0x4a/0x13e [ 557.613424][ T2053] [] resume_kernel+0x16/0x18 [ 557.615042][ T2053] SMP: stopping secondary CPUs [ 557.617499][ T2053] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:43:33 Registers: info registers vcpu 0 pc ffffffff801229fc mhartid 0000000000000000 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80ad5408 sepc ffffffff8010b26a mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff801229f8 x2/sp ffffaf800ff4fa30 x3/gp ffffffff85863ac0 x4/tp ffffaf800b98e100 x5/t0 ffffffff86bd8e80 x6/t1 fffff5ef01fe9f4c x7/t2 0000000000000000 x8/s0 ffffaf800ff4fb00 x9/s1 ffffaf800ff4fbe0 x10/a0 0000000000000000 x11/a1 00000000000f0000 x12/a2 0000000000000504 x13/a3 ffffffff801229f8 x14/a4 ffffaf800b98e100 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffaf800ff4fa67 x18/s2 0000000000000020 x19/s3 ffffaf800ff4fbe8 x20/s4 ffffffff85889780 x21/s5 1ffff5f001fe9f48 x22/s6 ffffffff84b3cd18 x23/s7 00000000ffffe2c5 x24/s8 00000000ffffe2c5 x25/s9 1ffff5f001fe9f6c x26/s10 ffffffff85889780 x27/s11 ffffaf800ff4fbe0 x28/t3 1ffff5f001fe9fb4 x29/t4 fffff5ef01fe9f4c x30/t5 fffff5ef01fe9f4d x31/t6 ffffffff86bd8e83 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80119b52 mhartid 0000000000000001 mstatus 00000000000000a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff804759a8 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80119b52 x2/sp ffffaf800c1db7e0 x3/gp ffffffff85863ac0 x4/tp ffffaf800b0b3080 x5/t0 00000000000001f8 x6/t1 43c3799f919d1600 x7/t2 ffffffffffffffff x8/s0 ffffaf800c1db820 x9/s1 ffffaf800c7b0c98 x10/a0 ffffaf800c7b0c98 x11/a1 0000000000000003 x12/a2 1ffff5f0018f6193 x13/a3 ffffffff80119b52 x14/a4 0000000000000000 x15/a5 ffffaf800c7b0c98 x16/a6 0000000000f00000 x17/a7 ffffffff826e6226 x18/s2 0000000000000001 x19/s3 ffffaf800b0b3080 x20/s4 ffffaf800c7b0ca8 x21/s5 ffffaf800c7b0ca0 x22/s6 ffffaf800c1db960 x23/s7 ffffaf800c1dbb00 x24/s8 0000000000000000 x25/s9 0000000000004000 x26/s10 0000000000000040 x27/s11 0000000000000001 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f00183b6b4 x31/t6 000000000378c67d f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000