syzkaller login: [ 265.044500][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 273.918231][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 273.988197][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 274.031313][ T1858] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:60382' (ECDSA) to the list of known hosts. 1970/01/01 00:05:21 fuzzer started 1970/01/01 00:05:34 dialing manager at localhost:37453 [ 345.420921][ T2025] cgroup: Unknown subsys name 'net' [ 346.542980][ T2025] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:05:46 syscalls: 2853 1970/01/01 00:05:46 code coverage: enabled 1970/01/01 00:05:46 comparison tracing: enabled 1970/01/01 00:05:46 extra coverage: enabled 1970/01/01 00:05:46 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:05:46 setuid sandbox: enabled 1970/01/01 00:05:46 namespace sandbox: enabled 1970/01/01 00:05:46 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:46 fault injection: enabled 1970/01/01 00:05:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:46 net packet injection: enabled 1970/01/01 00:05:46 net device setup: enabled 1970/01/01 00:05:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:46 USB emulation: enabled 1970/01/01 00:05:46 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:46 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:46 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:46 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:05:52 fetching corpus: 50, signal 34500/37934 (executing program) 1970/01/01 00:05:55 fetching corpus: 100, signal 47285/52131 (executing program) 1970/01/01 00:06:00 fetching corpus: 150, signal 57699/63806 (executing program) 1970/01/01 00:06:04 fetching corpus: 199, signal 62625/70043 (executing program) 1970/01/01 00:06:07 fetching corpus: 249, signal 66734/75408 (executing program) 1970/01/01 00:06:10 fetching corpus: 299, signal 72474/82236 (executing program) 1970/01/01 00:06:13 fetching corpus: 349, signal 77592/88406 (executing program) 1970/01/01 00:06:16 fetching corpus: 399, signal 82182/94008 (executing program) 1970/01/01 00:06:19 fetching corpus: 448, signal 85158/98055 (executing program) 1970/01/01 00:06:21 fetching corpus: 498, signal 88962/102857 (executing program) 1970/01/01 00:06:23 fetching corpus: 548, signal 91630/106495 (executing program) 1970/01/01 00:06:27 fetching corpus: 597, signal 94712/110441 (executing program) 1970/01/01 00:06:29 fetching corpus: 647, signal 97706/114315 (executing program) 1970/01/01 00:06:31 fetching corpus: 696, signal 98928/116592 (executing program) 1970/01/01 00:06:34 fetching corpus: 746, signal 100801/119397 (executing program) 1970/01/01 00:06:36 fetching corpus: 796, signal 102075/121641 (executing program) 1970/01/01 00:06:38 fetching corpus: 846, signal 103914/124356 (executing program) 1970/01/01 00:06:40 fetching corpus: 896, signal 106338/127497 (executing program) 1970/01/01 00:06:43 fetching corpus: 945, signal 107836/129908 (executing program) 1970/01/01 00:06:45 fetching corpus: 995, signal 110441/133158 (executing program) 1970/01/01 00:06:49 fetching corpus: 1045, signal 112015/135519 (executing program) 1970/01/01 00:06:51 fetching corpus: 1095, signal 113767/138006 (executing program) 1970/01/01 00:06:54 fetching corpus: 1145, signal 115413/140387 (executing program) 1970/01/01 00:06:57 fetching corpus: 1195, signal 117162/142805 (executing program) 1970/01/01 00:06:59 fetching corpus: 1245, signal 119090/145373 (executing program) 1970/01/01 00:07:02 fetching corpus: 1295, signal 122614/149133 (executing program) 1970/01/01 00:07:04 fetching corpus: 1345, signal 123871/151044 (executing program) 1970/01/01 00:07:06 fetching corpus: 1395, signal 125538/153264 (executing program) 1970/01/01 00:07:08 fetching corpus: 1444, signal 126550/154925 (executing program) 1970/01/01 00:07:11 fetching corpus: 1494, signal 128017/156978 (executing program) 1970/01/01 00:07:12 fetching corpus: 1544, signal 129234/158805 (executing program) 1970/01/01 00:07:15 fetching corpus: 1593, signal 130379/160631 (executing program) 1970/01/01 00:07:17 fetching corpus: 1643, signal 131795/162567 (executing program) 1970/01/01 00:07:20 fetching corpus: 1693, signal 133677/164805 (executing program) 1970/01/01 00:07:22 fetching corpus: 1743, signal 135297/166840 (executing program) 1970/01/01 00:07:25 fetching corpus: 1793, signal 136892/168830 (executing program) 1970/01/01 00:07:27 fetching corpus: 1843, signal 138098/170458 (executing program) 1970/01/01 00:07:30 fetching corpus: 1893, signal 139124/171952 (executing program) 1970/01/01 00:07:32 fetching corpus: 1942, signal 140441/173656 (executing program) 1970/01/01 00:07:34 fetching corpus: 1992, signal 142000/175540 (executing program) 1970/01/01 00:07:36 fetching corpus: 2042, signal 143084/177097 (executing program) 1970/01/01 00:07:38 fetching corpus: 2091, signal 143964/178441 (executing program) 1970/01/01 00:07:40 fetching corpus: 2141, signal 145077/179918 (executing program) 1970/01/01 00:07:42 fetching corpus: 2191, signal 146229/181458 (executing program) 1970/01/01 00:07:45 fetching corpus: 2241, signal 147281/182915 (executing program) 1970/01/01 00:07:47 fetching corpus: 2291, signal 148066/184197 (executing program) 1970/01/01 00:07:51 fetching corpus: 2341, signal 149342/185766 (executing program) 1970/01/01 00:07:55 fetching corpus: 2390, signal 150414/187159 (executing program) 1970/01/01 00:07:58 fetching corpus: 2439, signal 152015/188842 (executing program) 1970/01/01 00:08:00 fetching corpus: 2489, signal 153012/190192 (executing program) 1970/01/01 00:08:03 fetching corpus: 2539, signal 154655/191875 (executing program) 1970/01/01 00:08:05 fetching corpus: 2589, signal 156556/193633 (executing program) 1970/01/01 00:08:08 fetching corpus: 2639, signal 157351/194723 (executing program) 1970/01/01 00:08:10 fetching corpus: 2688, signal 158316/195947 (executing program) 1970/01/01 00:08:12 fetching corpus: 2738, signal 159208/197181 (executing program) 1970/01/01 00:08:14 fetching corpus: 2787, signal 159816/198211 (executing program) 1970/01/01 00:08:16 fetching corpus: 2837, signal 160796/199388 (executing program) 1970/01/01 00:08:18 fetching corpus: 2887, signal 161735/200554 (executing program) 1970/01/01 00:08:21 fetching corpus: 2937, signal 162880/201770 (executing program) 1970/01/01 00:08:24 fetching corpus: 2987, signal 163637/202764 (executing program) 1970/01/01 00:08:26 fetching corpus: 3037, signal 164619/203897 (executing program) 1970/01/01 00:08:29 fetching corpus: 3086, signal 165478/204920 (executing program) 1970/01/01 00:08:32 fetching corpus: 3135, signal 166175/205857 (executing program) 1970/01/01 00:08:33 fetching corpus: 3185, signal 166909/206835 (executing program) 1970/01/01 00:08:35 fetching corpus: 3235, signal 167497/207707 (executing program) 1970/01/01 00:08:37 fetching corpus: 3285, signal 168085/208541 (executing program) 1970/01/01 00:08:39 fetching corpus: 3335, signal 168862/209434 (executing program) 1970/01/01 00:08:41 fetching corpus: 3384, signal 169672/210378 (executing program) 1970/01/01 00:08:43 fetching corpus: 3434, signal 170431/211342 (executing program) 1970/01/01 00:08:45 fetching corpus: 3483, signal 171360/212368 (executing program) 1970/01/01 00:08:49 fetching corpus: 3533, signal 171926/213128 (executing program) 1970/01/01 00:08:53 fetching corpus: 3581, signal 172657/213948 (executing program) 1970/01/01 00:08:55 fetching corpus: 3630, signal 173424/214811 (executing program) 1970/01/01 00:08:57 fetching corpus: 3680, signal 174370/215741 (executing program) 1970/01/01 00:08:59 fetching corpus: 3730, signal 174943/216511 (executing program) 1970/01/01 00:09:02 fetching corpus: 3778, signal 175868/217371 (executing program) 1970/01/01 00:09:05 fetching corpus: 3827, signal 176562/218156 (executing program) 1970/01/01 00:09:07 fetching corpus: 3877, signal 177303/218922 (executing program) 1970/01/01 00:09:10 fetching corpus: 3927, signal 178007/219659 (executing program) 1970/01/01 00:09:14 fetching corpus: 3977, signal 178815/220421 (executing program) 1970/01/01 00:09:17 fetching corpus: 4027, signal 179505/221186 (executing program) 1970/01/01 00:09:19 fetching corpus: 4077, signal 180058/221868 (executing program) 1970/01/01 00:09:21 fetching corpus: 4127, signal 180732/222554 (executing program) 1970/01/01 00:09:24 fetching corpus: 4177, signal 181361/223212 (executing program) 1970/01/01 00:09:27 fetching corpus: 4227, signal 181957/223870 (executing program) 1970/01/01 00:09:30 fetching corpus: 4277, signal 182488/224522 (executing program) 1970/01/01 00:09:32 fetching corpus: 4327, signal 183192/225236 (executing program) 1970/01/01 00:09:34 fetching corpus: 4377, signal 183918/225938 (executing program) 1970/01/01 00:09:36 fetching corpus: 4427, signal 184750/226623 (executing program) 1970/01/01 00:09:39 fetching corpus: 4477, signal 185473/227220 (executing program) 1970/01/01 00:09:41 fetching corpus: 4527, signal 186055/227845 (executing program) 1970/01/01 00:09:43 fetching corpus: 4577, signal 186842/228437 (executing program) 1970/01/01 00:09:45 fetching corpus: 4627, signal 187443/229011 (executing program) 1970/01/01 00:09:47 fetching corpus: 4677, signal 188184/229598 (executing program) 1970/01/01 00:09:50 fetching corpus: 4727, signal 188835/230205 (executing program) 1970/01/01 00:09:53 fetching corpus: 4775, signal 189408/230733 (executing program) 1970/01/01 00:09:55 fetching corpus: 4825, signal 189963/231276 (executing program) 1970/01/01 00:09:57 fetching corpus: 4875, signal 190625/231830 (executing program) 1970/01/01 00:10:00 fetching corpus: 4924, signal 191327/232351 (executing program) 1970/01/01 00:10:05 fetching corpus: 4974, signal 191831/232827 (executing program) 1970/01/01 00:10:08 fetching corpus: 5023, signal 192372/233330 (executing program) 1970/01/01 00:10:12 fetching corpus: 5073, signal 193186/233882 (executing program) 1970/01/01 00:10:15 fetching corpus: 5123, signal 193685/234335 (executing program) 1970/01/01 00:10:18 fetching corpus: 5172, signal 194125/234800 (executing program) 1970/01/01 00:10:21 fetching corpus: 5222, signal 194806/235279 (executing program) 1970/01/01 00:10:22 fetching corpus: 5271, signal 195295/235715 (executing program) 1970/01/01 00:10:25 fetching corpus: 5321, signal 195737/236141 (executing program) 1970/01/01 00:10:27 fetching corpus: 5371, signal 196227/236570 (executing program) 1970/01/01 00:10:31 fetching corpus: 5421, signal 196838/237011 (executing program) 1970/01/01 00:10:33 fetching corpus: 5471, signal 197345/237411 (executing program) 1970/01/01 00:10:35 fetching corpus: 5521, signal 198032/237793 (executing program) 1970/01/01 00:10:37 fetching corpus: 5570, signal 198672/238158 (executing program) 1970/01/01 00:10:39 fetching corpus: 5620, signal 199137/238546 (executing program) 1970/01/01 00:10:41 fetching corpus: 5670, signal 199564/238910 (executing program) 1970/01/01 00:10:44 fetching corpus: 5720, signal 200099/239286 (executing program) 1970/01/01 00:10:46 fetching corpus: 5770, signal 200810/239649 (executing program) 1970/01/01 00:10:48 fetching corpus: 5819, signal 201267/239984 (executing program) 1970/01/01 00:10:50 fetching corpus: 5868, signal 201820/240310 (executing program) 1970/01/01 00:10:52 fetching corpus: 5918, signal 202192/240634 (executing program) 1970/01/01 00:10:54 fetching corpus: 5968, signal 202734/240777 (executing program) 1970/01/01 00:10:56 fetching corpus: 6017, signal 203160/240777 (executing program) 1970/01/01 00:10:57 fetching corpus: 6067, signal 203624/240777 (executing program) 1970/01/01 00:11:00 fetching corpus: 6117, signal 204233/240793 (executing program) 1970/01/01 00:11:01 fetching corpus: 6166, signal 204652/240793 (executing program) 1970/01/01 00:11:05 fetching corpus: 6216, signal 205043/240793 (executing program) 1970/01/01 00:11:09 fetching corpus: 6266, signal 205525/240803 (executing program) 1970/01/01 00:11:11 fetching corpus: 6316, signal 205947/240817 (executing program) 1970/01/01 00:11:12 fetching corpus: 6366, signal 206382/240817 (executing program) 1970/01/01 00:11:14 fetching corpus: 6416, signal 206948/240817 (executing program) 1970/01/01 00:11:16 fetching corpus: 6465, signal 207326/240817 (executing program) 1970/01/01 00:11:19 fetching corpus: 6514, signal 207800/240817 (executing program) 1970/01/01 00:11:21 fetching corpus: 6562, signal 208464/240825 (executing program) 1970/01/01 00:11:23 fetching corpus: 6612, signal 208930/240830 (executing program) 1970/01/01 00:11:24 fetching corpus: 6661, signal 209275/240830 (executing program) 1970/01/01 00:11:27 fetching corpus: 6711, signal 209756/240830 (executing program) 1970/01/01 00:11:29 fetching corpus: 6761, signal 210245/240830 (executing program) 1970/01/01 00:11:33 fetching corpus: 6811, signal 210774/240833 (executing program) 1970/01/01 00:11:34 fetching corpus: 6859, signal 211197/240838 (executing program) 1970/01/01 00:11:36 fetching corpus: 6908, signal 211559/240838 (executing program) 1970/01/01 00:11:38 fetching corpus: 6958, signal 211945/240838 (executing program) 1970/01/01 00:11:40 fetching corpus: 7008, signal 212373/240855 (executing program) 1970/01/01 00:11:43 fetching corpus: 7058, signal 212800/240855 (executing program) 1970/01/01 00:11:46 fetching corpus: 7108, signal 213198/240875 (executing program) 1970/01/01 00:11:49 fetching corpus: 7158, signal 213724/240875 (executing program) 1970/01/01 00:11:52 fetching corpus: 7208, signal 214284/240875 (executing program) 1970/01/01 00:11:54 fetching corpus: 7258, signal 214761/240877 (executing program) 1970/01/01 00:11:57 fetching corpus: 7308, signal 215296/240877 (executing program) 1970/01/01 00:11:59 fetching corpus: 7356, signal 215740/240877 (executing program) 1970/01/01 00:12:01 fetching corpus: 7406, signal 216094/240877 (executing program) 1970/01/01 00:12:03 fetching corpus: 7454, signal 216446/240883 (executing program) 1970/01/01 00:12:05 fetching corpus: 7504, signal 216732/240883 (executing program) 1970/01/01 00:12:06 fetching corpus: 7554, signal 217079/240886 (executing program) 1970/01/01 00:12:09 fetching corpus: 7604, signal 217402/240886 (executing program) 1970/01/01 00:12:13 fetching corpus: 7654, signal 217892/240898 (executing program) 1970/01/01 00:12:16 fetching corpus: 7704, signal 218396/240898 (executing program) 1970/01/01 00:12:19 fetching corpus: 7753, signal 218813/240899 (executing program) 1970/01/01 00:12:22 fetching corpus: 7803, signal 219276/240906 (executing program) 1970/01/01 00:12:24 fetching corpus: 7853, signal 219813/240906 (executing program) 1970/01/01 00:12:27 fetching corpus: 7903, signal 220451/240911 (executing program) 1970/01/01 00:12:29 fetching corpus: 7952, signal 220906/240911 (executing program) 1970/01/01 00:12:31 fetching corpus: 8002, signal 221336/240924 (executing program) 1970/01/01 00:12:33 fetching corpus: 8052, signal 221735/240924 (executing program) 1970/01/01 00:12:36 fetching corpus: 8102, signal 222108/240924 (executing program) 1970/01/01 00:12:39 fetching corpus: 8151, signal 222589/240924 (executing program) 1970/01/01 00:12:41 fetching corpus: 8200, signal 223036/240924 (executing program) 1970/01/01 00:12:43 fetching corpus: 8249, signal 223704/240924 (executing program) 1970/01/01 00:12:45 fetching corpus: 8299, signal 224194/240924 (executing program) 1970/01/01 00:12:47 fetching corpus: 8349, signal 224540/240953 (executing program) 1970/01/01 00:12:49 fetching corpus: 8399, signal 224824/240977 (executing program) 1970/01/01 00:12:53 fetching corpus: 8447, signal 225215/240979 (executing program) 1970/01/01 00:12:55 fetching corpus: 8497, signal 225669/240979 (executing program) 1970/01/01 00:12:58 fetching corpus: 8547, signal 226112/240981 (executing program) 1970/01/01 00:13:00 fetching corpus: 8597, signal 226463/240981 (executing program) 1970/01/01 00:13:02 fetching corpus: 8647, signal 226784/240981 (executing program) 1970/01/01 00:13:05 fetching corpus: 8696, signal 227469/240981 (executing program) 1970/01/01 00:13:08 fetching corpus: 8746, signal 227851/240982 (executing program) 1970/01/01 00:13:10 fetching corpus: 8796, signal 228247/240990 (executing program) 1970/01/01 00:13:13 fetching corpus: 8845, signal 228753/240990 (executing program) 1970/01/01 00:13:15 fetching corpus: 8894, signal 229159/240991 (executing program) 1970/01/01 00:13:17 fetching corpus: 8944, signal 229562/240991 (executing program) 1970/01/01 00:13:19 fetching corpus: 8994, signal 229973/240991 (executing program) 1970/01/01 00:13:21 fetching corpus: 9044, signal 230244/240991 (executing program) 1970/01/01 00:13:24 fetching corpus: 9093, signal 230557/240997 (executing program) 1970/01/01 00:13:27 fetching corpus: 9143, signal 230891/240997 (executing program) 1970/01/01 00:13:31 fetching corpus: 9192, signal 231239/241006 (executing program) 1970/01/01 00:13:33 fetching corpus: 9241, signal 231574/241011 (executing program) 1970/01/01 00:13:36 fetching corpus: 9291, signal 231995/241011 (executing program) 1970/01/01 00:13:38 fetching corpus: 9341, signal 232561/241011 (executing program) 1970/01/01 00:13:40 fetching corpus: 9391, signal 232987/241011 (executing program) 1970/01/01 00:13:42 fetching corpus: 9441, signal 233458/241053 (executing program) 1970/01/01 00:13:44 fetching corpus: 9491, signal 233733/241053 (executing program) 1970/01/01 00:13:47 fetching corpus: 9541, signal 234080/241053 (executing program) 1970/01/01 00:13:50 fetching corpus: 9591, signal 234397/241053 (executing program) 1970/01/01 00:13:52 fetching corpus: 9641, signal 234703/241053 (executing program) 1970/01/01 00:13:54 fetching corpus: 9691, signal 235003/241053 (executing program) 1970/01/01 00:13:55 fetching corpus: 9740, signal 235272/241059 (executing program) 1970/01/01 00:13:58 fetching corpus: 9790, signal 235552/241059 (executing program) 1970/01/01 00:14:00 fetching corpus: 9840, signal 235984/241059 (executing program) 1970/01/01 00:14:02 fetching corpus: 9890, signal 236288/241070 (executing program) 1970/01/01 00:14:05 fetching corpus: 9940, signal 236646/241071 (executing program) 1970/01/01 00:14:08 fetching corpus: 9990, signal 236948/241071 (executing program) 1970/01/01 00:14:10 fetching corpus: 10040, signal 237311/241071 (executing program) 1970/01/01 00:14:12 fetching corpus: 10090, signal 237735/241071 (executing program) 1970/01/01 00:14:14 fetching corpus: 10139, signal 237956/241106 (executing program) 1970/01/01 00:14:17 fetching corpus: 10189, signal 238287/241106 (executing program) 1970/01/01 00:14:19 fetching corpus: 10238, signal 238623/241106 (executing program) 1970/01/01 00:14:19 fetching corpus: 10238, signal 238629/241106 (executing program) 1970/01/01 00:14:19 fetching corpus: 10238, signal 238629/241106 (executing program) 1970/01/01 00:16:12 starting 2 fuzzer processes 00:16:12 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, '\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "dcb6d0fec848186a5768e5d905000064e55f41414f00"}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) connect$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 00:16:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x8008af26, 0xe9002) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = getpid() process_vm_readv(r1, &(0x7f0000000480)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000dc0)=[{&(0x7f0000002f00)=""/4096, 0x1000}], 0x1, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x9, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003f00)={0x2020}, 0x2020) [ 1005.643471][ T2046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.726188][ T2046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.170195][ T2048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.427255][ T2048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.272954][ T2046] device hsr_slave_0 entered promiscuous mode [ 1024.328361][ T2046] device hsr_slave_1 entered promiscuous mode [ 1026.439945][ T2048] device hsr_slave_0 entered promiscuous mode [ 1026.513546][ T2048] device hsr_slave_1 entered promiscuous mode [ 1026.572929][ T2048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.600504][ T2048] Cannot create hsr debugfs directory [ 1034.584190][ T2046] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1034.719354][ T2046] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1034.806085][ T2046] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1035.117994][ T2046] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1036.132011][ T2048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1036.257902][ T2048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1036.413880][ T2048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1036.659195][ T2048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1037.228543][ C0] ================================================================== [ 1037.232573][ C0] [ 1037.232746][ C0] ====================================================== [ 1037.232827][ C0] WARNING: possible circular locking dependency detected [ 1037.233037][ C0] 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Not tainted [ 1037.233313][ C0] ------------------------------------------------------ [ 1037.233405][ C0] syz-executor.1/2048 is trying to acquire lock: [ 1037.233636][ C0] ffffffff84a888e0 (console_owner){-.-.}-{0:0}, at: console_unlock+0x2b2/0x97a [ 1037.234929][ C0] [ 1037.234929][ C0] but task is already holding lock: [ 1037.235003][ C0] ffffffff84c3a588 (report_lock){-.-.}-{2:2}, at: kasan_report+0x84/0x1e0 [ 1037.235771][ C0] [ 1037.235771][ C0] which lock already depends on the new lock. [ 1037.235771][ C0] [ 1037.235850][ C0] [ 1037.235850][ C0] the existing dependency chain (in reverse order) is: [ 1037.235952][ C0] [ 1037.235952][ C0] -> #7 (report_lock){-.-.}-{2:2}: [ 1037.236384][ C0] lock_acquire.part.0+0x1d0/0x424 [ 1037.236776][ C0] lock_acquire+0x54/0x6a [ 1037.237038][ C0] _raw_spin_lock_irqsave+0x3e/0x62 [ 1037.237336][ C0] kasan_report+0x84/0x1e0 [ 1037.237620][ C0] __asan_load8+0x6e/0x96 [ 1037.237863][ C0] timerqueue_add+0xb0/0x1d0 [ 1037.238190][ C0] [ 1037.238190][ C0] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 1037.238627][ C0] lock_acquire.part.0+0x1d0/0x424 [ 1037.238890][ C0] lock_acquire+0x54/0x6a [ 1037.239156][ C0] _raw_spin_lock_irqsave+0x3e/0x62 [ 1037.239415][ C0] hrtimer_start_range_ns+0x9e/0x6dc [ 1037.239713][ C0] enqueue_task_rt+0x520/0x568 [ 1037.239922][ C0] enqueue_task+0x66/0x136 [ 1037.240192][ C0] __sched_setscheduler.constprop.0+0x704/0xdd4 [ 1037.240483][ C0] sched_set_fifo+0xc8/0x108 [ 1037.240742][ C0] drm_vblank_worker_init+0xea/0x10c [ 1037.240998][ C0] drm_vblank_init+0xec/0x24e [ 1037.241267][ C0] vkms_init+0x272/0x45c [ 1037.241554][ C0] do_one_initcall+0x13a/0x7ea [ 1037.241776][ C0] kernel_init_freeable+0x510/0x5b4 [ 1037.242022][ C0] kernel_init+0x28/0x21c [ 1037.242262][ C0] ret_from_exception+0x0/0x10 [ 1037.242607][ C0] [ 1037.242607][ C0] -> #5 (&rt_b->rt_runtime_lock){-...}-{2:2}: [ 1037.243010][ C0] lock_acquire.part.0+0x1d0/0x424 [ 1037.243278][ C0] lock_acquire+0x54/0x6a [ 1037.243507][ C0] _raw_spin_lock+0x32/0x48 [ 1037.243758][ C0] rq_online_rt+0x78/0x1b8 [ 1037.243980][ C0] set_rq_online.part.0+0xaa/0xc2 [ 1037.244242][ C0] sched_cpu_activate+0x1c0/0x250 [ 1037.244460][ C0] cpuhp_invoke_callback+0x282/0x504 [ 1037.244758][ C0] cpuhp_thread_fun+0x2f6/0x4b0 [ 1037.244987][ C0] smpboot_thread_fn+0x448/0x6cc [ 1037.245286][ C0] kthread+0x19e/0x1fa [ 1037.245563][ C0] ret_from_exception+0x0/0x10 [ 1037.245794][ C0] [ 1037.245794][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1037.246161][ C0] lock_acquire.part.0+0x1d0/0x424 [ 1037.246425][ C0] lock_acquire+0x54/0x6a [ 1037.246713][ C0] _raw_spin_lock_nested+0x36/0x4e [ 1037.246980][ C0] raw_spin_rq_lock_nested+0x22/0x34 [ 1037.247244][ C0] task_fork_fair+0xa8/0x218 [ 1037.247527][ C0] sched_post_fork+0x16e/0x196 [ 1037.247809][ C0] copy_process+0x3378/0x3c34 [ 1037.248064][ C0] kernel_clone+0xee/0x920 [ 1037.248312][ C0] kernel_thread+0xf8/0x130 [ 1037.248593][ C0] rest_init+0x34/0x3f2 [ 1037.248852][ C0] arch_call_rest_init+0x18/0x20 [ 1037.249093][ C0] start_kernel+0x66a/0x698 [ 1037.249323][ C0] [ 1037.249323][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1037.249717][ C0] lock_acquire.part.0+0x1d0/0x424 [ 1037.249979][ C0] lock_acquire+0x54/0x6a [ 1037.250237][ C0] _raw_spin_lock_irqsave+0x3e/0x62 [ 1037.250470][ C0] try_to_wake_up+0xa4/0x748 [ 1037.250778][ C0] default_wake_function+0x28/0x36 [ 1037.251050][ C0] woken_wake_function+0x38/0x48 [ 1037.251280][ C0] __wake_up_common+0xb6/0x236 [ 1037.251518][ C0] __wake_up_common_lock+0xd6/0x136 [ 1037.251777][ C0] __wake_up+0x10/0x18 [ 1037.252025][ C0] tty_wakeup+0x58/0xbe [ 1037.252271][ C0] tty_port_default_wakeup+0x2c/0x44 [ 1037.252517][ C0] tty_port_tty_wakeup+0x3a/0x46 [ 1037.252756][ C0] uart_write_wakeup+0x34/0x48 [ 1037.253044][ C0] serial8250_tx_chars+0x322/0x592 [ 1037.253372][ C0] serial8250_handle_irq.part.0+0x284/0x286 [ 1037.253751][ C0] serial8250_default_handle_irq+0xac/0x142 [ 1037.254119][ C0] serial8250_interrupt+0xbe/0x1a6 [ 1037.254402][ C0] __handle_irq_event_percpu+0x16e/0x6ec [ 1037.254729][ C0] handle_irq_event+0x6a/0xfa [ 1037.254952][ C0] handle_fasteoi_irq+0x1c0/0x4d6 [ 1037.255230][ C0] generic_handle_domain_irq+0x7c/0x9c [ 1037.255507][ C0] plic_handle_irq+0x122/0x242 [ 1037.255821][ C0] generic_handle_domain_irq+0x7c/0x9c [ 1037.256089][ C0] riscv_intc_irq+0x7e/0xc8 [ 1037.256383][ C0] generic_handle_arch_irq+0x36/0x54 [ 1037.256681][ C0] ret_from_exception+0x0/0x10 [ 1037.256916][ C0] arch_cpu_idle+0x10/0x20 [ 1037.257135][ C0] [ 1037.257135][ C0] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 1037.257553][ C0] lock_acquire.part.0+0x1d0/0x424 [ 1037.257844][ C0] lock_acquire+0x54/0x6a [ 1037.258079][ C0] _raw_spin_lock_irqsave+0x3e/0x62 [ 1037.258310][ C0] __wake_up_common_lock+0xc4/0x136 [ 1037.258610][ C0] __wake_up+0x10/0x18 [ 1037.258831][ C0] tty_wakeup+0x58/0xbe [ 1037.259067][ C0] tty_port_default_wakeup+0x2c/0x44 [ 1037.259306][ C0] tty_port_tty_wakeup+0x3a/0x46 [ 1037.259581][ C0] uart_write_wakeup+0x34/0x48 [ 1037.259814][ C0] serial8250_tx_chars+0x322/0x592 [ 1037.260081][ C0] serial8250_handle_irq.part.0+0x284/0x286 [ 1037.260391][ C0] serial8250_default_handle_irq+0xac/0x142 [ 1037.260702][ C0] serial8250_interrupt+0xbe/0x1a6 [ 1037.260953][ C0] __handle_irq_event_percpu+0x16e/0x6ec [ 1037.261193][ C0] handle_irq_event+0x6a/0xfa [ 1037.261411][ C0] handle_fasteoi_irq+0x1c0/0x4d6 [ 1037.261683][ C0] generic_handle_domain_irq+0x7c/0x9c [ 1037.261943][ C0] plic_handle_irq+0x122/0x242 [ 1037.262251][ C0] generic_handle_domain_irq+0x7c/0x9c [ 1037.262558][ C0] riscv_intc_irq+0x7e/0xc8 [ 1037.262887][ C0] generic_handle_arch_irq+0x36/0x54 [ 1037.263202][ C0] ret_from_exception+0x0/0x10 [ 1037.263450][ C0] _raw_spin_unlock_irqrestore+0x68/0x98 [ 1037.263726][ C0] [ 1037.263726][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1037.264166][ C0] lock_acquire.part.0+0x1d0/0x424 [ 1037.264452][ C0] lock_acquire+0x54/0x6a [ 1037.264761][ C0] _raw_spin_lock_irqsave+0x3e/0x62 [ 1037.264997][ C0] serial8250_console_write+0x848/0x8e6 [ 1037.265303][ C0] univ8250_console_write+0x46/0x54 [ 1037.265632][ C0] console_unlock+0x666/0x97a [ 1037.265912][ C0] register_console+0x250/0x534 [ 1037.266184][ C0] uart_add_one_port+0xbf2/0xc14 [ 1037.266431][ C0] serial8250_register_8250_port+0x8ce/0xc6e [ 1037.266801][ C0] of_platform_serial_probe+0x7ae/0xa9c [ 1037.267031][ C0] platform_probe+0xc8/0x172 [ 1037.267265][ C0] really_probe+0x1a6/0x89e [ 1037.267538][ C0] __driver_probe_device+0x24a/0x2d4 [ 1037.267775][ C0] driver_probe_device+0x60/0x1a4 [ 1037.267987][ C0] __driver_attach+0x178/0x33e [ 1037.268196][ C0] bus_for_each_dev+0x122/0x194 [ 1037.268496][ C0] driver_attach+0x32/0x3c [ 1037.268729][ C0] bus_add_driver+0x2c6/0x41a [ 1037.268934][ C0] driver_register+0x144/0x286 [ 1037.269167][ C0] __platform_driver_register+0x46/0x52 [ 1037.269440][ C0] of_platform_serial_driver_init+0x22/0x2a [ 1037.269771][ C0] do_one_initcall+0x13a/0x7ea [ 1037.270002][ C0] kernel_init_freeable+0x510/0x5b4 [ 1037.270258][ C0] kernel_init+0x28/0x21c [ 1037.270586][ C0] ret_from_exception+0x0/0x10 [ 1037.270830][ C0] [ 1037.270830][ C0] -> #0 (console_owner){-.-.}-{0:0}: [ 1037.271217][ C0] check_noncircular+0x1de/0x1fe [ 1037.271500][ C0] __lock_acquire+0x19a4/0x333e [ 1037.271765][ C0] lock_acquire.part.0+0x1d0/0x424 [ 1037.272055][ C0] lock_acquire+0x54/0x6a [ 1037.272309][ C0] console_unlock+0x304/0x97a [ 1037.272613][ C0] vprintk_emit+0xd2/0x416 [ 1037.272936][ C0] vprintk_default+0x22/0x2e [ 1037.273246][ C0] vprintk+0x108/0x13e [ 1037.273443][ C0] _printk+0xa0/0xc8 [ 1037.273683][ C0] kasan_report+0x9a/0x1e0 [ 1037.274003][ C0] __asan_load8+0x6e/0x96 [ 1037.274242][ C0] timerqueue_add+0xb0/0x1d0 [ 1037.274642][ C0] [ 1037.274642][ C0] other info that might help us debug this: [ 1037.274642][ C0] [ 1037.274767][ C0] Chain exists of: [ 1037.274767][ C0] console_owner --> hrtimer_bases.lock --> report_lock [ 1037.274767][ C0] [ 1037.275332][ C0] Possible unsafe locking scenario: [ 1037.275332][ C0] [ 1037.275424][ C0] CPU0 CPU1 [ 1037.275481][ C0] ---- ---- [ 1037.275535][ C0] lock(report_lock); [ 1037.275726][ C0] lock(hrtimer_bases.lock); [ 1037.275953][ C0] lock(report_lock); [ 1037.276166][ C0] lock(console_owner); [ 1037.276332][ C0] [ 1037.276332][ C0] *** DEADLOCK *** [ 1037.276332][ C0] [ 1037.276428][ C0] 7 locks held by syz-executor.1/2048: [ 1037.276637][ C0] #0: ffffffff855cf108 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x2fe/0x9a0 [ 1037.277375][ C0] #1: ffffffff84b73e00 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_list_internal+0x244/0x816 [ 1037.278147][ C0] #2: ffffffff84b73e00 (rcu_read_lock){....}-{1:2}, at: ip_local_deliver_finish+0x7e/0x278 [ 1037.278912][ C0] #3: ffffaf800bba18b0 (slock-AF_INET/1){+.-.}-{2:2}, at: tcp_v4_rcv+0x1bd4/0x1f46 [ 1037.279659][ C0] #4: ffffaf805a9cb418 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x262/0xa16 [ 1037.280340][ C0] #5: ffffffff84c3a588 (report_lock){-.-.}-{2:2}, at: kasan_report+0x84/0x1e0 [ 1037.281089][ C0] #6: ffffffff84a88600 (console_lock){+.+.}-{0:0}, at: vprintk_default+0x22/0x2e [ 1037.281795][ C0] [ 1037.281795][ C0] stack backtrace: [ 1037.282087][ C0] CPU: 0 PID: 2048 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1037.282429][ C0] Hardware name: riscv-virtio,qemu (DT) [ 1037.282810][ C0] Call Trace: [ 1037.282972][ C0] [] dump_backtrace+0x2e/0x3c [ 1037.283325][ C0] [] show_stack+0x34/0x40 [ 1037.283580][ C0] [] dump_stack_lvl+0xe4/0x150 [ 1037.283928][ C0] [] dump_stack+0x1c/0x24 [ 1037.284269][ C0] [] print_circular_bug+0x34e/0x3d8 [ 1037.284652][ C0] [] check_noncircular+0x1de/0x1fe [ 1037.284973][ C0] [] __lock_acquire+0x19a4/0x333e [ 1037.285350][ C0] [] lock_acquire.part.0+0x1d0/0x424 [ 1037.285686][ C0] [] lock_acquire+0x54/0x6a [ 1037.285991][ C0] [] console_unlock+0x304/0x97a [ 1037.286348][ C0] [] vprintk_emit+0xd2/0x416 [ 1037.286746][ C0] [] vprintk_default+0x22/0x2e [ 1037.287120][ C0] [] vprintk+0x108/0x13e [ 1037.287376][ C0] [] _printk+0xa0/0xc8 [ 1037.287684][ C0] [] kasan_report+0x9a/0x1e0 [ 1037.288046][ C0] [] __asan_load8+0x6e/0x96 [ 1037.288294][ C0] [] timerqueue_add+0xb0/0x1d0 [ 1037.428631][ C0] BUG: KASAN: user-memory-access in timerqueue_add+0xb0/0x1d0 [ 1037.430012][ C0] Read of size 8 at addr 000000003c18dd1d by task syz-executor.1/2048 [ 1037.431213][ C0] [ 1037.431774][ C0] CPU: 0 PID: 2048 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1037.433151][ C0] Hardware name: riscv-virtio,qemu (DT) [ 1037.433961][ C0] Call Trace: [ 1037.434641][ C0] [] dump_backtrace+0x2e/0x3c [ 1037.435807][ C0] [] show_stack+0x34/0x40 [ 1037.436829][ C0] [] dump_stack_lvl+0xe4/0x150 [ 1037.438046][ C0] [] kasan_report+0x1de/0x1e0 [ 1037.439270][ C0] [] __asan_load8+0x6e/0x96 [ 1037.440354][ C0] [] timerqueue_add+0xb0/0x1d0 [ 1037.441640][ C0] ================================================================== [ 1037.443544][ C0] Unable to handle kernel paging request at virtual address 000000003c18dd1d [ 1037.446080][ C0] Oops [#1] [ 1037.446900][ C0] Modules linked in: [ 1037.448320][ C0] CPU: 0 PID: 2048 Comm: syz-executor.1 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1037.450049][ C0] Hardware name: riscv-virtio,qemu (DT) [ 1037.450945][ C0] epc : timerqueue_add+0xb0/0x1d0 [ 1037.452138][ C0] ra : timerqueue_add+0xb0/0x1d0 [ 1037.453246][ C0] epc : ffffffff80c2bca8 ra : ffffffff80c2bca8 sp : ffffaf801211bfd0 [ 1037.454535][ C0] gp : ffffffff85863ac0 tp : ffffaf800ecf0000 t0 : ffffffff86bcb657 [ 1037.455826][ C0] t1 : fffffffef0b0dfa4 t2 : 0000000000000000 s0 : ffffaf801211c020 [ 1037.456935][ C0] s1 : 000000003c18dd05 a0 : 0000000000000001 a1 : 0000000000000003 [ 1037.458096][ C0] a2 : 1ffff5f001d9e001 a3 : ffffffff831afd3a a4 : 0000000000000000 [ 1037.459245][ C0] a5 : ffffaf800ecf1000 a6 : 0000000000f00000 a7 : ffffffff8586fd23 [ 1037.460305][ C0] s2 : ffffaf801211bab8 s3 : 00000000209ad193 s4 : ffffaf805a9cbd18 [ 1037.461398][ C0] s5 : 000000f1323d5a80 s6 : 0000000000000000 s7 : ffffaf805a9cb4d0 [ 1037.462452][ C0] s8 : ffffaf805a9cb490 s9 : ffffaf805a9cbd50 s10: ffffaf805a9cb400 [ 1037.463563][ C0] s11: 0000000000010101 t3 : 000000000000003d t4 : fffffffef0b0dfa4 [ 1037.464674][ C0] t5 : fffffffef0b0dfa5 t6 : ffffaf801211ba38 [ 1037.465987][ C0] status: 0000000000000100 badaddr: 000000003c18dd1d cause: 000000000000000d [ 1037.467685][ C0] ---[ end trace 0000000000000000 ]--- [ 1037.469163][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1037.470887][ C0] SMP: stopping secondary CPUs [ 1037.472731][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:02:04 Registers: info registers vcpu 0 pc ffffffff802372d0 mhartid 0000000000000000 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff80200f00 mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80237290 x2/sp ffffaf800cccf860 x3/gp ffffffff85863ac0 x4/tp ffffaf800bfa0000 x5/t0 fffff5ef04345000 x6/t1 ffffffffab100000 x7/t2 0000000000000018 x8/s0 ffffaf800cccf8a0 x9/s1 0000000000000000 x10/a0 ffffaf800bfa0000 x11/a1 00000000000f0000 x12/a2 0000000000000002 x13/a3 ffffffff802372d0 x14/a4 ffffaf800bfa1000 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffffffaf56e100 x18/s2 0000000000000000 x19/s3 ffffffff838a05a0 x20/s4 ffffffff831a24fc x21/s5 ffffaf8009a36100 x22/s6 0000000000000000 x23/s7 ffffffff80468584 x24/s8 ffffaf800cccfa70 x25/s9 ffffaf807a8fed80 x26/s10 0000000000000000 x27/s11 0000000000000000 x28/t3 ffffffff803e7d2e x29/t4 fffff5ef0f5f7d26 x30/t5 fffff5ef0f5f7d27 x31/t6 00000000ffffffff f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff8011c7d8 mhartid 0000000000000001 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80009fb4 sepc ffffffff80009fb4 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff8011c7d8 x2/sp ffffaf801211ba80 x3/gp ffffffff85863ac0 x4/tp ffffaf800ecf0000 x5/t0 ffffffff86bcb657 x6/t1 fffffffef0d796ca x7/t2 0000000000000000 x8/s0 ffffaf801211bbd0 x9/s1 0000000000000000 x10/a0 0000000000000000 x11/a1 ffffaf800ecf0000 x12/a2 0000000000010104 x13/a3 ffffaf801211bb07 x14/a4 0000000000000003 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffffff86bcb656 x18/s2 0000000000000022 x19/s3 ffffffff86bcb640 x20/s4 0000000000000018 x21/s5 0000000000000017 x22/s6 0000000000000018 x23/s7 0000000000000400 x24/s8 ffffaf801211baf0 x25/s9 0000000000000000 x26/s10 00000000000003e7 x27/s11 0000000000000017 x28/t3 000000000000000a x29/t4 fffffffef0d796c8 x30/t5 fffffffef0d796cb x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000