syzkaller login: [ 283.669626][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 293.082805][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 293.123466][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 333.710160][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:30747' (ECDSA) to the list of known hosts. 1970/01/01 00:05:59 fuzzer started 1970/01/01 00:06:14 dialing manager at localhost:44947 [ 381.762364][ T2045] cgroup: Unknown subsys name 'net' [ 383.011262][ T2045] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:22 syscalls: 2827 1970/01/01 00:06:22 code coverage: enabled 1970/01/01 00:06:22 comparison tracing: enabled 1970/01/01 00:06:22 extra coverage: enabled 1970/01/01 00:06:22 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:22 setuid sandbox: enabled 1970/01/01 00:06:22 namespace sandbox: enabled 1970/01/01 00:06:22 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:22 fault injection: enabled 1970/01/01 00:06:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:22 net packet injection: enabled 1970/01/01 00:06:22 net device setup: enabled 1970/01/01 00:06:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:22 USB emulation: enabled 1970/01/01 00:06:22 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:22 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:22 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:23 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:28 fetching corpus: 49, signal 27553/30897 (executing program) 1970/01/01 00:06:34 fetching corpus: 99, signal 50832/55038 (executing program) 1970/01/01 00:06:39 fetching corpus: 149, signal 65261/70275 (executing program) 1970/01/01 00:06:42 fetching corpus: 198, signal 72163/78024 (executing program) 1970/01/01 00:06:46 fetching corpus: 247, signal 83130/89442 (executing program) 1970/01/01 00:06:50 fetching corpus: 296, signal 95586/101851 (executing program) 1970/01/01 00:06:53 fetching corpus: 345, signal 99386/106126 (executing program) 1970/01/01 00:06:58 fetching corpus: 395, signal 103588/110752 (executing program) 1970/01/01 00:07:00 fetching corpus: 445, signal 106640/114237 (executing program) 1970/01/01 00:07:04 fetching corpus: 494, signal 109508/117464 (executing program) 1970/01/01 00:07:08 fetching corpus: 544, signal 114705/122656 (executing program) 1970/01/01 00:07:11 fetching corpus: 594, signal 118790/126757 (executing program) 1970/01/01 00:07:14 fetching corpus: 644, signal 122688/130656 (executing program) 1970/01/01 00:07:17 fetching corpus: 694, signal 124822/132969 (executing program) 1970/01/01 00:07:19 fetching corpus: 744, signal 128876/136804 (executing program) 1970/01/01 00:07:22 fetching corpus: 794, signal 131911/139714 (executing program) 1970/01/01 00:07:26 fetching corpus: 844, signal 134717/142379 (executing program) 1970/01/01 00:07:29 fetching corpus: 894, signal 139090/146207 (executing program) 1970/01/01 00:07:31 fetching corpus: 943, signal 143648/150087 (executing program) 1970/01/01 00:07:35 fetching corpus: 992, signal 145394/151750 (executing program) 1970/01/01 00:07:39 fetching corpus: 1041, signal 147266/153433 (executing program) 1970/01/01 00:07:43 fetching corpus: 1090, signal 149203/155161 (executing program) 1970/01/01 00:07:46 fetching corpus: 1140, signal 151913/157386 (executing program) 1970/01/01 00:07:49 fetching corpus: 1189, signal 153766/158913 (executing program) 1970/01/01 00:07:51 fetching corpus: 1239, signal 155559/160389 (executing program) 1970/01/01 00:07:54 fetching corpus: 1289, signal 157525/161964 (executing program) 1970/01/01 00:07:57 fetching corpus: 1339, signal 159725/163620 (executing program) 1970/01/01 00:07:59 fetching corpus: 1389, signal 161048/164657 (executing program) 1970/01/01 00:08:03 fetching corpus: 1439, signal 162983/166071 (executing program) 1970/01/01 00:08:07 fetching corpus: 1489, signal 167488/169084 (executing program) 1970/01/01 00:08:11 fetching corpus: 1539, signal 169444/170347 (executing program) 1970/01/01 00:08:13 fetching corpus: 1549, signal 169769/170592 (executing program) 1970/01/01 00:08:13 fetching corpus: 1549, signal 169769/170617 (executing program) 1970/01/01 00:08:13 fetching corpus: 1549, signal 169770/170648 (executing program) 1970/01/01 00:08:13 fetching corpus: 1549, signal 169770/170676 (executing program) 1970/01/01 00:08:13 fetching corpus: 1549, signal 169770/170709 (executing program) 1970/01/01 00:08:13 fetching corpus: 1549, signal 169770/170741 (executing program) 1970/01/01 00:08:14 fetching corpus: 1549, signal 169770/170767 (executing program) 1970/01/01 00:08:14 fetching corpus: 1549, signal 169770/170795 (executing program) 1970/01/01 00:08:14 fetching corpus: 1549, signal 169770/170813 (executing program) 1970/01/01 00:08:14 fetching corpus: 1549, signal 169770/170840 (executing program) 1970/01/01 00:08:14 fetching corpus: 1549, signal 169770/170863 (executing program) 1970/01/01 00:08:14 fetching corpus: 1549, signal 169770/170892 (executing program) 1970/01/01 00:08:14 fetching corpus: 1549, signal 169770/170914 (executing program) 1970/01/01 00:08:15 fetching corpus: 1549, signal 169770/170941 (executing program) 1970/01/01 00:08:15 fetching corpus: 1549, signal 169770/170963 (executing program) 1970/01/01 00:08:15 fetching corpus: 1549, signal 169770/170990 (executing program) 1970/01/01 00:08:15 fetching corpus: 1549, signal 169770/171014 (executing program) 1970/01/01 00:08:15 fetching corpus: 1549, signal 169770/171031 (executing program) 1970/01/01 00:08:15 fetching corpus: 1549, signal 169770/171056 (executing program) 1970/01/01 00:08:16 fetching corpus: 1549, signal 169770/171078 (executing program) 1970/01/01 00:08:16 fetching corpus: 1549, signal 169770/171113 (executing program) 1970/01/01 00:08:16 fetching corpus: 1549, signal 169770/171140 (executing program) 1970/01/01 00:08:16 fetching corpus: 1549, signal 169770/171176 (executing program) 1970/01/01 00:08:16 fetching corpus: 1549, signal 169770/171211 (executing program) 1970/01/01 00:08:16 fetching corpus: 1549, signal 169770/171229 (executing program) 1970/01/01 00:08:16 fetching corpus: 1549, signal 169770/171255 (executing program) 1970/01/01 00:08:17 fetching corpus: 1549, signal 169770/171285 (executing program) 1970/01/01 00:08:17 fetching corpus: 1549, signal 169770/171312 (executing program) 1970/01/01 00:08:17 fetching corpus: 1549, signal 169770/171347 (executing program) 1970/01/01 00:08:17 fetching corpus: 1549, signal 169770/171367 (executing program) 1970/01/01 00:08:17 fetching corpus: 1549, signal 169770/171392 (executing program) 1970/01/01 00:08:17 fetching corpus: 1549, signal 169770/171416 (executing program) 1970/01/01 00:08:18 fetching corpus: 1549, signal 169770/171446 (executing program) 1970/01/01 00:08:18 fetching corpus: 1549, signal 169770/171466 (executing program) 1970/01/01 00:08:18 fetching corpus: 1549, signal 169770/171494 (executing program) 1970/01/01 00:08:18 fetching corpus: 1549, signal 169770/171518 (executing program) 1970/01/01 00:08:18 fetching corpus: 1549, signal 169770/171543 (executing program) 1970/01/01 00:08:18 fetching corpus: 1549, signal 169770/171572 (executing program) 1970/01/01 00:08:19 fetching corpus: 1549, signal 169770/171595 (executing program) 1970/01/01 00:08:19 fetching corpus: 1549, signal 169770/171623 (executing program) 1970/01/01 00:08:19 fetching corpus: 1549, signal 169770/171654 (executing program) 1970/01/01 00:08:19 fetching corpus: 1549, signal 169770/171682 (executing program) 1970/01/01 00:08:19 fetching corpus: 1549, signal 169770/171709 (executing program) 1970/01/01 00:08:20 fetching corpus: 1549, signal 169770/171743 (executing program) 1970/01/01 00:08:20 fetching corpus: 1549, signal 169770/171760 (executing program) 1970/01/01 00:08:20 fetching corpus: 1549, signal 169770/171786 (executing program) 1970/01/01 00:08:20 fetching corpus: 1550, signal 169772/171818 (executing program) 1970/01/01 00:08:21 fetching corpus: 1551, signal 169788/171844 (executing program) 1970/01/01 00:08:21 fetching corpus: 1551, signal 169788/171865 (executing program) 1970/01/01 00:08:21 fetching corpus: 1551, signal 169788/171890 (executing program) 1970/01/01 00:08:21 fetching corpus: 1551, signal 169788/171929 (executing program) 1970/01/01 00:08:22 fetching corpus: 1551, signal 169788/171964 (executing program) 1970/01/01 00:08:22 fetching corpus: 1551, signal 169788/171988 (executing program) 1970/01/01 00:08:22 fetching corpus: 1551, signal 169788/172008 (executing program) 1970/01/01 00:08:22 fetching corpus: 1551, signal 169788/172008 (executing program) 1970/01/01 00:10:33 starting 2 fuzzer processes 00:10:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) 00:10:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCXONC(r0, 0x540f, 0xea007) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0xf000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) [ 661.579684][ T2059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.673867][ T2059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.848206][ T2058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.541045][ T2058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.010515][ T2059] device hsr_slave_0 entered promiscuous mode [ 675.049276][ T2059] device hsr_slave_1 entered promiscuous mode [ 676.829450][ T2058] device hsr_slave_0 entered promiscuous mode [ 676.879237][ T2058] device hsr_slave_1 entered promiscuous mode [ 676.920979][ T2058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 676.927994][ T2058] Cannot create hsr debugfs directory [ 685.552923][ T2059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 685.890622][ T2059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 686.452586][ T2059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 686.978987][ T2059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 688.833800][ T2058] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 689.171293][ T2058] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 689.499724][ T2058] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 690.055941][ T2058] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 708.551642][ T2058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.939330][ T2059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.191952][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 710.362733][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 711.057586][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 711.280586][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 721.209018][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 721.272904][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 721.487307][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 721.579880][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 721.747375][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 721.833936][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 722.098727][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 722.291079][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 722.373335][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 722.603721][ T2683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 722.848502][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 723.290928][ T2240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 724.250211][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.284084][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.786743][ T2240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 724.846427][ T2240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.931437][ T2240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.947604][ T2240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 725.371696][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 725.773021][ T2059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 725.831210][ T2059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 726.051845][ T2683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 726.093816][ T2683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 726.812637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 726.860771][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 727.107898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 727.110982][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 750.562046][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 750.617496][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 751.153854][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 751.242286][ T83] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 760.329597][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 760.403750][ T2681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 760.849479][ T2035] BUG: Bad page map in process sshd pte:ffffffff801110db pmd:23496c01 [ 760.850607][ T2058] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 760.852109][ T2035] addr:00007fffb8bff000 vm_flags:00000075 anon_vma:0000000000000000 mapping:ffffaf800e0ec068 index:48 [ 760.853894][ T2058] CPU: 0 PID: 2058 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 760.856105][ T2058] Hardware name: riscv-virtio,qemu (DT) [ 760.856797][ T2058] Call Trace: [ 760.857239][ T2058] [] dump_backtrace+0x2e/0x3c [ 760.859588][ T2058] [] show_stack+0x34/0x40 [ 760.860622][ T2035] file:sshd fault:filemap_fault mmap:ext4_file_mmap readpage:ext4_readpage [ 760.861516][ T2058] [] dump_stack_lvl+0xe4/0x150 [ 760.862999][ T2058] [] dump_stack+0x1c/0x24 [ 760.865426][ T2058] [] panic+0x24a/0x634 [ 760.866617][ T2058] [] schedule+0x0/0x14c [ 760.867844][ T2058] [] preempt_schedule_irq+0x4a/0x13e [ 760.869238][ T2058] [] resume_kernel+0x16/0x18 [ 760.870623][ T2035] CPU: 1 PID: 2035 Comm: sshd Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 760.870860][ T2058] SMP: stopping secondary CPUs [ 760.873203][ T2035] Hardware name: riscv-virtio,qemu (DT) [ 760.874458][ T2035] Call Trace: [ 760.875353][ T2035] [] dump_backtrace+0x2e/0x3c [ 760.876877][ T2035] [] show_stack+0x34/0x40 [ 760.877933][ T2035] [] dump_stack_lvl+0xe4/0x150 [ 760.879440][ T2035] [] dump_stack+0x1c/0x24 [ 760.881106][ T2035] [] print_bad_pte+0x3d4/0x4a0 [ 760.883004][ T2035] [] vm_normal_page+0x20c/0x22a [ 760.884951][ T2035] [] __handle_mm_fault+0xdc8/0x23a4 [ 760.886820][ T2035] [] handle_mm_fault+0x296/0x674 [ 760.888761][ T2035] [] do_page_fault+0x308/0xa3c [ 760.890777][ T2035] [] ret_from_exception+0x0/0x10 [ 760.894523][ T2058] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:21:59 Registers: info registers vcpu 0 pc ffffffff80c0b452 mhartid 0000000000000000 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc ffffffff80475986 mcause 0000000000000009 scause 8000000000000009 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80c0b48c x2/sp ffffaf800d05e270 x3/gp ffffffff85863ac0 x4/tp ffffaf800bdce100 x5/t0 ffffffff86bcb657 x6/t1 fffffffef0b0caa0 x7/t2 0000000000000000 x8/s0 ffffaf800d05e2d0 x9/s1 ffffffff838d2e20 x10/a0 ffffaf800bdce6c0 x11/a1 0000000000000003 x12/a2 1ffff5f0017b9cd8 x13/a3 ffffffff80c0b48c x14/a4 0000000000000000 x15/a5 ffffaf800bdce6c0 x16/a6 0000000000f00000 x17/a7 ffffffff85865503 x18/s2 ffffaf800bdce100 x19/s3 0000000000000001 x20/s4 0000000000000000 x21/s5 000000000000080a x22/s6 ffffffff83623360 x23/s7 ffffffff8344cc80 x24/s8 ffffffff831a70f8 x25/s9 ffffaf800d05c000 x26/s10 ffffaf800d05e760 x27/s11 0000000000000008 x28/t3 fffffffff3f3f300 x29/t4 fffffffef0b0caa0 x30/t5 fffffffef0b0caa1 x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80dc337e mhartid 0000000000000001 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80dcc32e sepc 00007fffb8bff420 mcause 8000000000000007 scause 000000000000000c mtval 0000000000000000 stval 00007fffb8bff420 x0/zero 0000000000000000 x1/ra ffffffff80dc337e x2/sp ffffaf800ffbf560 x3/gp ffffffff85863ac0 x4/tp ffffaf800b366100 x5/t0 ffffffff86bcb657 x6/t1 9a48caa7e38edc00 x7/t2 0000000000000000 x8/s0 ffffaf800ffbf590 x9/s1 ffffffff86e58900 x10/a0 ffffffff86e58948 x11/a1 ffff8f800066c000 x12/a2 1ffffffff0dcb129 x13/a3 ffffffff80dc337e x14/a4 0000000000000000 x15/a5 ffffffff86e58948 x16/a6 ffffffff86e589f1 x17/a7 ffffffff80dcc2ca x18/s2 ffff8f800066c000 x19/s3 0000000000000066 x20/s4 ffffffff86e58900 x21/s5 ffffffff80dc333e x22/s6 0000000000000000 x23/s7 ffffffff86bcb6bb x24/s8 0000000000000010 x25/s9 ffffffff86e58958 x26/s10 0000000000000010 x27/s11 0000000000000000 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f001ff7e5c x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000