Warning: Permanently added '[localhost]:48789' (ED25519) to the list of known hosts. 1970/01/01 00:48:16 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:48:21 parsed 1 programs syzkaller login: [ 2903.604969][ T2954] cgroup: Unknown subsys name 'net' [ 2903.914473][ T2954] cgroup: Unknown subsys name 'rlimit' [ 2972.647294][ T2954] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 2972.711116][ T2952] syz-execprog[2952]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2972.732024][ T2952] syz-execprog[2952]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 1970/01/01 00:49:32 executed programs: 0 [ 2981.482726][ T2962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2981.525130][ T2962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2985.602045][ T2962] hsr_slave_0: entered promiscuous mode [ 2985.622026][ T2962] hsr_slave_1: entered promiscuous mode [ 2987.757730][ T2962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2987.833072][ T2962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2987.897555][ T2962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2987.967426][ T2962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2991.860234][ T2962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3003.978042][ T2962] veth0_vlan: entered promiscuous mode [ 3004.076502][ T2962] veth1_vlan: entered promiscuous mode [ 3004.531115][ T2962] veth0_macvtap: entered promiscuous mode [ 3004.601335][ T2962] veth1_macvtap: entered promiscuous mode [ 3005.109938][ T2962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3005.111861][ T2962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3005.112913][ T2962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3005.118478][ T2962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3006.369946][ T3308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3006.377286][ T3308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3006.635048][ T3270] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 3006.905370][ T3270] usb 1-1: Using ep0 maxpacket: 16 [ 3007.066475][ T3270] usb 1-1: config 1 has too many interfaces: 163, using maximum allowed: 32 [ 3007.068598][ T3270] usb 1-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 3007.070135][ T3270] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 163 [ 3007.072759][ T3270] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 3007.075311][ T3270] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3007.077488][ T3270] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 128, using maximum allowed: 30 [ 3007.079229][ T3270] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 3007.081195][ T3270] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 62, changing to 7 [ 3007.085043][ T3270] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 41992, setting to 1024 [ 3007.267101][ T3270] usb 1-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=80.f3 [ 3007.269061][ T3270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3007.270552][ T3270] usb 1-1: Product: syz [ 3007.271639][ T3270] usb 1-1: Manufacturer: syz [ 3007.272749][ T3270] usb 1-1: SerialNumber: syz [ 3007.421041][ T3270] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 3007.434978][ T3270] imon 1-1:1.0: unable to initialize intf0, err -19 [ 3007.436552][ T3270] imon:imon_probe: failed to initialize context! [ 3007.437962][ T3270] imon 1-1:1.0: unable to register, err -19 [ 3007.721448][ T3270] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3007.868175][ T3270] ================================================================== [ 3007.870337][ T3270] BUG: KASAN: slab-out-of-bounds in imon_probe+0x132/0x1ab2 [ 3007.871954][ T3270] Read of size 1 at addr ff60000021962bd1 by task kworker/1:3/3270 [ 3007.875172][ T3270] [ 3007.876077][ T3270] CPU: 1 PID: 3270 Comm: kworker/1:3 Not tainted 6.5.0-syzkaller-ge0152e7481c6 #0 [ 3007.878185][ T3270] Hardware name: riscv-virtio,qemu (DT) [ 3007.879483][ T3270] Workqueue: usb_hub_wq hub_event [ 3007.881100][ T3270] Call Trace: [ 3007.881955][ T3270] [] dump_backtrace+0x2e/0x3c [ 3007.883388][ T3270] [] show_stack+0x34/0x40 [ 3007.884817][ T3270] [] dump_stack_lvl+0xe8/0x154 [ 3007.886909][ T3270] [] print_report+0x1e4/0x4f4 [ 3007.888486][ T3270] [] kasan_report+0xf0/0x1ba [ 3007.890115][ T3270] [] __asan_load1+0x68/0x80 [ 3007.892497][ T3270] [] imon_probe+0x132/0x1ab2 [ 3007.894376][ T3270] [] usb_probe_interface+0x208/0x552 [ 3007.895982][ T3270] [] really_probe+0x1c8/0x7c6 [ 3007.897471][ T3270] [] __driver_probe_device+0x13e/0x2ae [ 3007.899676][ T3270] [] driver_probe_device+0x60/0x1a6 [ 3007.901175][ T3270] [] __device_attach_driver+0x168/0x218 [ 3007.902716][ T3270] [] bus_for_each_drv+0x12c/0x1ae [ 3007.905219][ T3270] [] __device_attach+0x184/0x390 [ 3007.906638][ T3270] [] device_initial_probe+0x1c/0x26 [ 3007.908124][ T3270] [] bus_probe_device+0x120/0x122 [ 3007.910235][ T3270] [] device_add+0xd3a/0x10b0 [ 3007.911535][ T3270] [] usb_set_configuration+0xb48/0xfb6 [ 3007.913159][ T3270] [] usb_generic_driver_probe+0xb2/0x124 [ 3007.915575][ T3270] [] usb_probe_device+0x9e/0x1fc [ 3007.917764][ T3270] [] really_probe+0x1c8/0x7c6 [ 3007.919778][ T3270] [] __driver_probe_device+0x13e/0x2ae [ 3007.921348][ T3270] [] driver_probe_device+0x60/0x1a6 [ 3007.922856][ T3270] [] __device_attach_driver+0x168/0x218 [ 3007.925383][ T3270] [] bus_for_each_drv+0x12c/0x1ae [ 3007.926782][ T3270] [] __device_attach+0x184/0x390 [ 3007.928382][ T3270] [] device_initial_probe+0x1c/0x26 [ 3007.929945][ T3270] [] bus_probe_device+0x120/0x122 [ 3007.931281][ T3270] [] device_add+0xd3a/0x10b0 [ 3007.933387][ T3270] [] usb_new_device+0x5c8/0xd38 [ 3007.934981][ T3270] [] hub_event+0x219a/0x3248 [ 3007.936504][ T3270] [] process_one_work+0x6e6/0xe0a [ 3007.938780][ T3270] [] worker_thread+0xba/0x898 [ 3007.940115][ T3270] [] kthread+0x1bc/0x22c [ 3007.941438][ T3270] [] ret_from_fork+0xa/0x1c [ 3007.943359][ T3270] [ 3007.944442][ T3270] Allocated by task 3270: [ 3007.945530][ T3270] stack_trace_save+0xa0/0xd2 [ 3007.946813][ T3270] kasan_save_stack+0x3e/0x6a [ 3007.948140][ T3270] kasan_set_track+0x1a/0x26 [ 3007.949351][ T3270] kasan_save_alloc_info+0x1a/0x24 [ 3007.951355][ T3270] __kasan_kmalloc+0xa2/0xa8 [ 3007.952552][ T3270] __kmalloc+0x42/0xe6 [ 3007.954412][ T3270] snd_card_new+0x62/0xd2 [ 3007.955684][ T3270] usb_audio_probe+0xf44/0x1d1c [ 3007.956983][ T3270] usb_probe_interface+0x208/0x552 [ 3007.958759][ T3270] really_probe+0x1c8/0x7c6 [ 3007.960032][ T3270] __driver_probe_device+0x13e/0x2ae [ 3007.962008][ T3270] driver_probe_device+0x60/0x1a6 [ 3007.963237][ T3270] __device_attach_driver+0x168/0x218 [ 3007.964603][ T3270] bus_for_each_drv+0x12c/0x1ae [ 3007.965947][ T3270] __device_attach+0x184/0x390 [ 3007.967190][ T3270] device_initial_probe+0x1c/0x26 [ 3007.969112][ T3270] bus_probe_device+0x120/0x122 [ 3007.970396][ T3270] device_add+0xd3a/0x10b0 [ 3007.972166][ T3270] usb_set_configuration+0xb48/0xfb6 [ 3007.973852][ T3270] usb_generic_driver_probe+0xb2/0x124 [ 3007.975116][ T3270] usb_probe_device+0x9e/0x1fc [ 3007.976588][ T3270] really_probe+0x1c8/0x7c6 [ 3007.978489][ T3270] __driver_probe_device+0x13e/0x2ae [ 3007.979935][ T3270] driver_probe_device+0x60/0x1a6 [ 3007.981194][ T3270] __device_attach_driver+0x168/0x218 [ 3007.982620][ T3270] bus_for_each_drv+0x12c/0x1ae [ 3007.984397][ T3270] __device_attach+0x184/0x390 [ 3007.985655][ T3270] device_initial_probe+0x1c/0x26 [ 3007.987591][ T3270] bus_probe_device+0x120/0x122 [ 3007.988935][ T3270] device_add+0xd3a/0x10b0 [ 3007.990639][ T3270] usb_new_device+0x5c8/0xd38 [ 3007.991939][ T3270] hub_event+0x219a/0x3248 [ 3007.993319][ T3270] process_one_work+0x6e6/0xe0a [ 3007.995089][ T3270] worker_thread+0xba/0x898 [ 3007.996452][ T3270] kthread+0x1bc/0x22c [ 3007.997611][ T3270] ret_from_fork+0xa/0x1c [ 3007.999051][ T3270] [ 3008.000007][ T3270] The buggy address belongs to the object at ff60000021962000 [ 3008.000007][ T3270] which belongs to the cache kmalloc-4k of size 4096 [ 3008.003941][ T3270] The buggy address is located 1 bytes to the right of [ 3008.003941][ T3270] allocated 3024-byte region [ff60000021962000, ff60000021962bd0) [ 3008.006859][ T3270] [ 3008.007778][ T3270] The buggy address belongs to the physical page: [ 3008.009842][ T3270] page:ff1c000002865800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa1960 [ 3008.012784][ T3270] head:ff1c000002865800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3008.015567][ T3270] flags: 0xffe000000000840(slab|head|node=0|zone=0|lastcpupid=0x7ff) [ 3008.017357][ T3270] page_type: 0xffffffff() [ 3008.019265][ T3270] raw: 0ffe000000000840 ff60000008402140 0000000000000122 0000000000000000 [ 3008.020971][ T3270] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 3008.022390][ T3270] page dumped because: kasan: bad access detected [ 3008.024613][ T3270] page_owner tracks the page as allocated [ 3008.025765][ T3270] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3270, tgid 3270 (kworker/1:3), ts 3007394877400, free_ts 0 [ 3008.029766][ T3270] __set_page_owner+0x32/0x18a [ 3008.031240][ T3270] post_alloc_hook+0x8c/0xe2 [ 3008.032529][ T3270] get_page_from_freelist+0x912/0x122c [ 3008.034692][ T3270] __alloc_pages+0x19c/0x142c [ 3008.036010][ T3270] alloc_pages+0x126/0x252 [ 3008.037454][ T3270] new_slab+0x272/0x382 [ 3008.038790][ T3270] ___slab_alloc+0x5b6/0xa92 [ 3008.040608][ T3270] __slab_alloc.constprop.0+0x58/0x94 [ 3008.041831][ T3270] __kmem_cache_alloc_node+0xf0/0x2e0 [ 3008.043105][ T3270] kmalloc_trace+0x24/0x56 [ 3008.044967][ T3270] kobject_uevent_env+0x1c8/0xddc [ 3008.046344][ T3270] kobject_uevent+0x22/0x2e [ 3008.047742][ T3270] device_add+0xcfa/0x10b0 [ 3008.049343][ T3270] usb_set_configuration+0xb48/0xfb6 [ 3008.050624][ T3270] usb_generic_driver_probe+0xb2/0x124 [ 3008.052382][ T3270] usb_probe_device+0x9e/0x1fc [ 3008.054178][ T3270] page_owner free stack trace missing [ 3008.055441][ T3270] [ 3008.056231][ T3270] Memory state around the buggy address: [ 3008.058401][ T3270] ff60000021962a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3008.059593][ T3270] ff60000021962b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3008.060865][ T3270] >ff60000021962b80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 3008.063058][ T3270] ^ [ 3008.065372][ T3270] ff60000021962c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3008.066979][ T3270] ff60000021962c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3008.069388][ T3270] ================================================================== [ 3008.073281][ T3270] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3008.075028][ T3270] CPU: 1 PID: 3270 Comm: kworker/1:3 Not tainted 6.5.0-syzkaller-ge0152e7481c6 #0 [ 3008.077492][ T3270] Hardware name: riscv-virtio,qemu (DT) [ 3008.079387][ T3270] Workqueue: usb_hub_wq hub_event [ 3008.080993][ T3270] Call Trace: [ 3008.081868][ T3270] [] dump_backtrace+0x2e/0x3c [ 3008.083410][ T3270] [] show_stack+0x34/0x40 [ 3008.084797][ T3270] [] dump_stack_lvl+0xe8/0x154 [ 3008.086647][ T3270] [] dump_stack+0x1c/0x24 [ 3008.088023][ T3270] [] panic+0x27c/0x646 [ 3008.090201][ T3270] [] check_panic_on_warn+0xc0/0xe4 [ 3008.091857][ T3270] [] end_report.part.0+0x4a/0xaa [ 3008.093502][ T3270] [] kasan_report+0x13a/0x1ba [ 3008.095192][ T3270] [] __asan_load1+0x68/0x80 [ 3008.097603][ T3270] [] imon_probe+0x132/0x1ab2 [ 3008.099098][ T3270] [] usb_probe_interface+0x208/0x552 [ 3008.100867][ T3270] [] really_probe+0x1c8/0x7c6 [ 3008.102430][ T3270] [] __driver_probe_device+0x13e/0x2ae [ 3008.104949][ T3270] [] driver_probe_device+0x60/0x1a6 [ 3008.106538][ T3270] [] __device_attach_driver+0x168/0x218 [ 3008.108322][ T3270] [] bus_for_each_drv+0x12c/0x1ae [ 3008.110531][ T3270] [] __device_attach+0x184/0x390 [ 3008.111946][ T3270] [] device_initial_probe+0x1c/0x26 [ 3008.113431][ T3270] [] bus_probe_device+0x120/0x122 [ 3008.114796][ T3270] [] device_add+0xd3a/0x10b0 [ 3008.116077][ T3270] [] usb_set_configuration+0xb48/0xfb6 [ 3008.117555][ T3270] [] usb_generic_driver_probe+0xb2/0x124 [ 3008.119023][ T3270] [] usb_probe_device+0x9e/0x1fc [ 3008.120637][ T3270] [] really_probe+0x1c8/0x7c6 [ 3008.121971][ T3270] [] __driver_probe_device+0x13e/0x2ae [ 3008.124272][ T3270] [] driver_probe_device+0x60/0x1a6 [ 3008.125709][ T3270] [] __device_attach_driver+0x168/0x218 [ 3008.127173][ T3270] [] bus_for_each_drv+0x12c/0x1ae [ 3008.128714][ T3270] [] __device_attach+0x184/0x390 [ 3008.131171][ T3270] [] device_initial_probe+0x1c/0x26 [ 3008.132550][ T3270] [] bus_probe_device+0x120/0x122 [ 3008.134922][ T3270] [] device_add+0xd3a/0x10b0 [ 3008.136220][ T3270] [] usb_new_device+0x5c8/0xd38 [ 3008.137761][ T3270] [] hub_event+0x219a/0x3248 [ 3008.139172][ T3270] [] process_one_work+0x6e6/0xe0a [ 3008.140505][ T3270] [] worker_thread+0xba/0x898 [ 3008.141898][ T3270] [] kthread+0x1bc/0x22c [ 3008.143110][ T3270] [] ret_from_fork+0xa/0x1c [ 3008.144798][ T3270] SMP: stopping secondary CPUs [ 3008.147550][ T3270] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:05:22 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff80087836 mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000408 stvec ffffffff800057b4 vstvec 0000000000000000 mepc ffffffff80575a82 sepc ffffffff8011e70e vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080049000 sscratch 0000000000000000 satp a017400000094723 x0/zero 0000000000000000 x1/ra ffffffff80087836 x2/sp ff20000000007fc0 x3/gp ffffffff861a1860 x4/tp ffffffff85243f80 x5/t0 0000000000046600 x6/t1 00000000000f0000 x7/t2 ffffffff83c05570 x8/s0 ff20000000007fe0 x9/s1 ffffffff85207bd0 x10/a0 ffffffff85243fa0 x11/a1 0000000000000003 x12/a2 1ffffffff0a487f4 x13/a3 ffffffff80087836 x14/a4 0000000000000000 x15/a5 ffffffff85243fa0 x16/a6 0000000000000003 x17/a7 0000000000000000 x18/s2 ffffffff85243f80 x19/s3 ffffffff83a46068 x20/s4 8000000000000005 x21/s5 ffffffff85243f80 x22/s6 ffffffff85207da0 x23/s7 1ffffffff0a40fa8 x24/s8 0000000000000000 x25/s9 0000000000000000 x26/s10 ffffffff85243f80 x27/s11 0000000000000000 x28/t3 ffffffff801536fe x29/t4 ffebffff0f9ae29b x30/t5 ffebffff0f9ae29c x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff80575a82 mhartid 0000000000000001 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000408 stvec ffffffff800057b4 vstvec 0000000000000000 mepc ffffffff800108f8 sepc ffffffff8026ae90 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080047000 sscratch 0000000000000000 satp a017400000094723 x0/zero 0000000000000000 x1/ra ffffffff80fc20a6 x2/sp ff200000015e65e0 x3/gp ffffffff861a1860 x4/tp ff60000013beb300 x5/t0 20666f2064616552 x6/t1 00000000000f0000 x7/t2 7320666f20646165 x8/s0 ff200000015e6610 x9/s1 ffffffff880760a0 x10/a0 ff60000013beb320 x11/a1 0000000000000007 x12/a2 1ffffffff100ec1d x13/a3 ffffffff80fc2090 x14/a4 0000000000000000 x15/a5 ff20000000069000 x16/a6 0000000000000003 x17/a7 0000000000000000 x18/s2 ff60000013beb300 x19/s3 0000000000000020 x20/s4 ffffffff880760a0 x21/s5 ffffffff80fc2050 x22/s6 0000000000000000 x23/s7 ffffffff87e827d8 x24/s8 ffffffff880760f8 x25/s9 0000000000000010 x26/s10 0000000000000010 x27/s11 0000000000000001 x28/t3 ffffffff801536fe x29/t4 fffffffef100ec14 x30/t5 fffffffef100ec15 x31/t6 ffffffff87e82797 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000