last executing test programs: 10m58.813600901s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 10m46.376600707s ago: executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000025c0), 0x24, 0x0) umount2(&(0x7f00000006c0)='./file0\x00', 0x1) 10m43.53434037s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$eJzs3c9rHFUcAPDvbJKmTauJIGg9BQQNlG5Mja2Ch4oHESwU9GxdNttQs8mW7KY0IaAighdBxYOgl579UW/exB9X/S88SEvVtFjxIJHZzKbbZrfJpkmWup8PTPt9M7N5892Zee/tzrATQM8aTf/JRRyOiA+TiOFsfhIRA/WoP+Lk2no3V5aL6ZTE6uqrfyT1dW6sLBej6TWpg1nh0Yj48b2II7mN9VYXl2YK5XJpPiuP12bPj1cXl46emy1Ml6ZLc8cnJiePnXjmxPGdy/WvX5YOXf3opSe/PvnPu49c/uCnJE7GoWxZcx47ZTRGs/dkIH0Lb/PiTlfWZUm3N4BtSU/NvrWzPA7HcPTVIwDg/+ytiFgFAHpMov8HgB7T+B7gxspysTF19xuJvXXthYjYv5Z/4/rm2pL+7Jrd/vp10KEbyW1XRpKIGNmB+kcj4vNvX/8ynWKXrkMCtPL2d1mwof1PNtyz0KmntrDO6B1l7R/sne/T8c+zrcZ/ufXxT7QY/wy2OHe3Y/PzP3dlB6ppKx3/Pd90b9vNpvwzI31Z6YH6mG8gOXuuXErbtgcjYiwGBtPyxF3qGLv+7/V2y5rHf39+/OYXaf3p/7fWyF3pH7z9NVOFWuFecm527Z2Ix/pb5Z+s7/+kzfj39BbrePm59z9rtyzNP823MW3Mf3etXop4ouX+v3VHW3LX+xPH64fDeOOgaOGbXz8dald/8/5Pp7T+xmeBvZDu/6G75z+SNN+vWe28jp8vDf/Qbtnm+bc+/vclr9Xjfdm8i4VabX4iYl/yysb5x269tlFurJ/mP/Z4Pf8D2Sob2r9Wx3/6mfCNzRLPNqL/6u9fbT//3ZXmP9XR/u88uHxzpq9d/Vvb/5P1aCybs5X2b6sbeC/vHQAAAAAAAAAAAAAAAAAAAAAAAABsVS4iDkWSy6/HuVw+v/YM74djKFeuVGtHzlYW5qai/qzskRjINX7qcrjp91Anst/Db5SP3VF+OiIeiohPBg/Uy/lipTzV7eQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHOwzfP/U78NdnvrAIBds7/bGwAA7Dn9PwD0nk77f+MFALj/6c8BoPfo/wGg9+j/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2GWnT51Kp9W/V5aLaXnqwuLCTOXC0alSdSY/u1DMFyvz5/PTlcp0uZQvVmY3+3vlSuX8ZMwtXByvlaq18eri0pnZysJc7cy52cJ06UxpYE+yAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDOVBeXZgrlcmleIBAI1oNut0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA94f/AgAA///tuiN0") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 10m35.975813382s ago: executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x1267, 0x0) 23.085605457s ago: executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8904, &(0x7f0000000140)) 20.208593963s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x5c}}, 0x0) 14.903647745s ago: executing program 0: r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000000c0)="41ff6a2b8f99457afb0d09ca824dfa4aecf77de1096ca1282de9800fba3a508cbb61", 0x22}, {&(0x7f0000000100)="29bdfbdf9f23d3efa1dd529c14dc2a4c1838b8549a7522edbdc4c4771835421c10ab3598906049ef130d06fb63ad36fe4d9f2761e49748ed31fb68e987dcc27f75b90b84483ebbdcc0198349bdfc77ec8f886ba5d1fe2f0c7f289920ede85d327e19fc", 0xfffffead}, {&(0x7f0000000180)="a7910ec3b446e1bdba5847849af70d06091994c08eb7b4b49a43354947928bfde398f35a2187cbe20e3723684817002ad550b51d88d0c0523c3a4f7679f27c027c7185cc1cd37c18b896879ba72c808eb4214e1f728de167ddc78541c6f4f6cf538a6f14a36389ec7e32051c1cab922da24d0e9e7724bd285f61f6740e4f1e", 0x7f}, {&(0x7f00000002c0)="d7680db0626d93389a569b7f945633ef608a75191c2852edd79fdb4bd9546379e028883bca05c08f0bdff99f6b1f50f52b90c7f96b5d9bc6086741a3f3f33543886b65b5d737b58c354eda07741436e34e12b9f804a059e1bfc2df202811466a1651efc034920209552e883d0b6d178e4b6565fa3bd201b86dd937c2bfb6d16fd2b3b857ed795a532fbc38cb48f7a81c6467c8c2188e73064dbabd9932f7", 0x9e}, {&(0x7f0000000380)="62e92faa6941b9f57e9840f65621b2710dfe3eb65de60a8075f8d59a31d3639467d5d7fceb369d65d024cf2c8969150238a0d980b3b6fa20c37d04942bf19a15f4e00702ca671d7581c68c72a234c4f50985a7a367dc41b3e4a969557679bc605a16", 0x62}, {&(0x7f0000000400)="2030f36c5df9ac62ce2a98d9393ec2f2e87c55e4aec6b72986dd7b6bda3eafcba4a013e0796db3b67d2997cfd86a30a02aa3dce7ee4a1b3fdb43b1c7c3e92443f1af5f60b51e838193d99aaaad651f02c74e", 0x52}], 0x6, 0x0, 0x0, 0x4000015}}], 0x1, 0x8000) 11.829904978s ago: executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1, 0x800, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a628860aa6e365024153d004358b73a753e5074b25f3328e39d4d32b16f5a128e0d00da5935de9dc2df4937ddab7e2249ad356a0c06acbae37a90abbcee54219"}}, 0x80}}, 0x0) 8.21016794s ago: executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/181, 0xb5}], 0x1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) 0s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:19329' (ED25519) to the list of known hosts. 1970/01/01 00:07:28 fuzzer started 1970/01/01 00:07:35 dialing manager at localhost:30008 syzkaller login: [ 463.204179][ T3068] cgroup: Unknown subsys name 'net' [ 464.406678][ T3068] cgroup: Unknown subsys name 'rlimit' [ 516.045908][ T3069] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:08:35 starting 2 executor processes [ 548.089641][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.175609][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.693264][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.757060][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.359628][ T3085] hsr_slave_0: entered promiscuous mode [ 559.387873][ T3085] hsr_slave_1: entered promiscuous mode [ 564.319055][ T3086] hsr_slave_0: entered promiscuous mode [ 564.375353][ T3086] hsr_slave_1: entered promiscuous mode [ 564.402087][ T3086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.407035][ T3086] Cannot create hsr debugfs directory [ 567.219813][ T3085] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 567.393910][ T3085] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 567.586223][ T3085] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 567.719913][ T3085] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 570.410077][ T3086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 570.503369][ T3086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 570.624724][ T3086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 570.818072][ T3086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 579.417344][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.013207][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.727761][ T3085] veth0_vlan: entered promiscuous mode [ 615.929063][ T3085] veth1_vlan: entered promiscuous mode [ 617.286216][ T3085] veth0_macvtap: entered promiscuous mode [ 617.649872][ T3085] veth1_macvtap: entered promiscuous mode [ 619.023772][ T3086] veth0_vlan: entered promiscuous mode [ 619.669882][ T3085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.704161][ T3085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.706624][ T3085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.708575][ T3085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.245158][ T3086] veth1_vlan: entered promiscuous mode [ 623.058574][ T3086] veth0_macvtap: entered promiscuous mode [ 623.565726][ T3086] veth1_macvtap: entered promiscuous mode [ 624.307440][ T3086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.309152][ T3086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.310598][ T3086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.324015][ T3086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.179704][ T3771] loop1: detected capacity change from 0 to 2048 [ 632.169410][ T3771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.359663][ T3085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.149167][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.729713][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.495923][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.556314][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.227915][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.588726][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.825161][ T12] bond0 (unregistering): Released all slaves [ 656.478234][ T12] hsr_slave_0: left promiscuous mode [ 656.609684][ T12] hsr_slave_1: left promiscuous mode [ 657.115338][ T12] veth1_macvtap: left promiscuous mode [ 657.118832][ T12] veth0_macvtap: left promiscuous mode [ 657.128787][ T12] veth1_vlan: left promiscuous mode [ 657.153757][ T12] veth0_vlan: left promiscuous mode [ 659.077677][ T35] audit: type=1326 audit(658.460:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3804 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x3ae36 code=0x7ffc0000 [ 659.086318][ T35] audit: type=1326 audit(658.570:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3804 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x3ae36 code=0x7ffc0000 [ 659.484697][ T35] audit: type=1326 audit(658.960:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3804 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000f3 syscall=445 compat=0 ip=0x3ae36 code=0x7ffc0000 [ 659.489314][ T35] audit: type=1326 audit(658.960:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3804 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x3ae36 code=0x7ffc0000 [ 659.538932][ T35] audit: type=1326 audit(659.030:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3804 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x3ae36 code=0x7ffc0000 [ 682.937286][ T3818] loop0: detected capacity change from 0 to 2048 [ 683.749344][ T3818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.578047][ T3086] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.549313][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.769842][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.544303][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.753517][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.877660][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.142510][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.374877][ T12] bond0 (unregistering): Released all slaves [ 707.472295][ T12] hsr_slave_0: left promiscuous mode [ 707.548357][ T12] hsr_slave_1: left promiscuous mode [ 707.888021][ T12] veth1_macvtap: left promiscuous mode [ 707.891969][ T12] veth0_macvtap: left promiscuous mode [ 707.899664][ T12] veth1_vlan: left promiscuous mode [ 707.934553][ T12] veth0_vlan: left promiscuous mode [ 731.520718][ T3805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.745794][ T3805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.298413][ T3805] hsr_slave_0: entered promiscuous mode [ 750.350654][ T3805] hsr_slave_1: entered promiscuous mode [ 756.160719][ T3911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.486051][ T3911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.686492][ T3805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 766.796147][ T3805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 766.904045][ T3805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 767.027843][ T3805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 774.835312][ T3911] hsr_slave_0: entered promiscuous mode [ 774.917771][ T3911] hsr_slave_1: entered promiscuous mode [ 774.997003][ T3911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.999392][ T3911] Cannot create hsr debugfs directory [ 787.047498][ T3805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.077889][ T3911] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 787.229903][ T3911] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 787.316588][ T3911] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 787.418263][ T3911] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 808.423582][ T3911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.707970][ T3911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 850.405132][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.548119][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.755699][ T2971] bond0 (unregistering): Released all slaves [ 852.016137][ T2971] hsr_slave_0: left promiscuous mode [ 852.084769][ T2971] hsr_slave_1: left promiscuous mode [ 902.444571][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.575253][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.686202][ T2971] bond0 (unregistering): Released all slaves [ 904.064796][ T2971] hsr_slave_0: left promiscuous mode [ 904.153578][ T2971] hsr_slave_1: left promiscuous mode [ 917.055320][ T4595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.315471][ T4595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.615006][ T4595] hsr_slave_0: entered promiscuous mode [ 935.684774][ T4595] hsr_slave_1: entered promiscuous mode [ 947.458324][ T4595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 947.694928][ T4595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 947.927742][ T4595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 948.077757][ T4595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 950.298010][ T4741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.609493][ T4741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.434959][ T4595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.286652][ T4741] hsr_slave_0: entered promiscuous mode [ 968.329299][ T4741] hsr_slave_1: entered promiscuous mode [ 968.373550][ T4741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.376984][ T4741] Cannot create hsr debugfs directory [ 980.228403][ T4741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 980.495307][ T4741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 980.689008][ T4741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 980.937259][ T4741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 994.134650][ T4741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.767759][ T4595] veth0_vlan: entered promiscuous mode [ 1013.077139][ T4595] veth1_vlan: entered promiscuous mode [ 1014.309600][ T4595] veth0_macvtap: entered promiscuous mode [ 1014.528706][ T4595] veth1_macvtap: entered promiscuous mode [ 1015.913805][ T4595] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.916982][ T4595] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.919068][ T4595] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.922797][ T4595] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.340540][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.244946][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.394198][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.177967][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.828121][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.925305][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.998820][ T12] bond0 (unregistering): Released all slaves [ 1034.747441][ T12] hsr_slave_0: left promiscuous mode [ 1034.827781][ T12] hsr_slave_1: left promiscuous mode [ 1035.120557][ T12] veth1_macvtap: left promiscuous mode [ 1035.133986][ T12] veth0_macvtap: left promiscuous mode [ 1035.138669][ T12] veth1_vlan: left promiscuous mode [ 1035.160579][ T12] veth0_vlan: left promiscuous mode [ 1054.300817][ T4741] veth0_vlan: entered promiscuous mode [ 1054.819405][ T4741] veth1_vlan: entered promiscuous mode [ 1056.337464][ T4741] veth0_macvtap: entered promiscuous mode [ 1056.953857][ T4741] veth1_macvtap: entered promiscuous mode [ 1059.525555][ T4741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.528172][ T4741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.530325][ T4741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.582356][ T4741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.057676][ T5497] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1086.177446][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.476085][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.053089][ T5403] hsr_slave_0: entered promiscuous mode [ 1106.078639][ T5403] hsr_slave_1: entered promiscuous mode [ 1120.515851][ T5776] sctp: failed to load transform for md5: -4 [ 1124.338094][ T5403] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1124.467593][ T5403] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1124.609345][ T5403] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1124.880729][ T5403] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1141.607016][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.816398][ T5873] loop0: detected capacity change from 0 to 512 [ 1180.016874][ T5873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1182.340797][ T5873] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 1182.489399][ T5873] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor.0: mark_inode_dirty error [ 1182.649914][ T5873] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 1182.808677][ T5880] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 1182.893868][ T5880] EXT4-fs error (device loop0): ext4_setattr:5330: inode #2: comm syz-executor.0: mark_inode_dirty error [ 1185.434810][ T4741] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.771915][ T5893] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 1232.230202][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1232.596549][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1232.843780][ T12] bond0 (unregistering): Released all slaves [ 1234.164887][ T12] hsr_slave_0: left promiscuous mode [ 1234.247469][ T12] hsr_slave_1: left promiscuous mode [ 1288.239559][ T5639] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1288.287586][ C0] hrtimer: interrupt took 941700 ns [ 1288.813803][ T5639] usb 1-1: Using ep0 maxpacket: 16 [ 1289.078288][ T5639] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.105133][ T5639] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1289.135855][ T5639] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1289.139880][ T5639] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.463725][ T5639] usb 1-1: config 0 descriptor?? [ 1293.355400][ T5639] HID 045e:07da: Invalid code 65791 type 1 [ 1293.847421][ T5639] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input0 [ 1294.122789][ T5639] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 1294.128377][ T5639] CPU: 0 PID: 5639 Comm: kworker/0:5 Not tainted 6.10.0-rc1-syzkaller-g7932b172ac7e #0 [ 1294.131130][ T5639] Hardware name: riscv-virtio,qemu (DT) [ 1294.132902][ T5639] Workqueue: usb_hub_wq hub_event [ 1294.138923][ T5639] Call Trace: [ 1294.140122][ T5639] [] dump_backtrace+0x2e/0x3c [ 1294.142362][ T5639] [] show_stack+0x34/0x40 [ 1294.143916][ T5639] [] dump_stack_lvl+0x108/0x196 [ 1294.145406][ T5639] [] dump_stack+0x1c/0x24 [ 1294.146982][ T5639] [] panic+0x382/0x800 [ 1294.148519][ T5639] [] __schedule+0x342e/0x3486 [ 1294.150038][ T5639] [] preempt_schedule+0xd2/0x1e2 [ 1294.152264][ T5639] [] _raw_spin_unlock_irqrestore+0xb4/0xd6 [ 1294.153877][ T5639] [] stack_depot_save_flags+0x384/0x8be [ 1294.155501][ T5639] [] kasan_save_stack+0x52/0x6a [ 1294.156966][ T5639] [] kasan_save_track+0x16/0x28 [ 1294.158424][ T5639] [] kasan_save_free_info+0x40/0x5a [ 1294.160170][ T5639] [] poison_slab_object+0x16e/0x234 [ 1294.161787][ T5639] [] __kasan_slab_free+0x2a/0x46 [ 1294.163367][ T5639] [] kfree+0x124/0x40c [ 1294.164922][ T5639] [] dev_uevent+0x480/0x75c [ 1294.166391][ T5639] [] kobject_uevent_env+0x5f0/0x1490 [ 1294.167946][ T5639] [] kobject_uevent+0x22/0x2e [ 1294.169363][ T5639] [] device_add+0x107e/0x181a [ 1294.170935][ T5639] [] cdev_device_add+0x130/0x258 [ 1294.172386][ T5639] [] evdev_connect+0x36c/0x46e [ 1294.173918][ T5639] [] input_attach_handler.isra.0+0x16e/0x23a [ 1294.175478][ T5639] [] input_register_device+0xc92/0xea0 [ 1294.177049][ T5639] [] hidinput_connect+0x4e80/0x8ce0 [ 1294.178571][ T5639] [] hid_connect+0x126a/0x16be [ 1294.180095][ T5639] [] hid_hw_start+0xb6/0x13c [ 1294.182128][ T5639] [] ms_probe+0x15e/0x4f2 [ 1294.183766][ T5639] [] hid_device_probe+0x2a4/0x3f2 [ 1294.185258][ T5639] [] really_probe+0x232/0x9be [ 1294.186840][ T5639] [] __driver_probe_device+0x1d4/0x3f2 [ 1294.188432][ T5639] [] driver_probe_device+0x60/0x1ce [ 1294.190009][ T5639] [] __device_attach_driver+0x1e2/0x2fc [ 1294.192210][ T5639] [] bus_for_each_drv+0x142/0x1da [ 1294.193928][ T5639] [] __device_attach+0x1c4/0x462 [ 1294.195975][ T5639] [] device_initial_probe+0x1c/0x26 [ 1294.197684][ T5639] [] bus_probe_device+0x15c/0x192 [ 1294.199244][ T5639] [] device_add+0x10d8/0x181a [ 1294.200745][ T5639] [] hid_add_device+0x374/0x9d8 [ 1294.202361][ T5639] [] usbhid_probe+0xa52/0xf86 [ 1294.203987][ T5639] [] usb_probe_interface+0x2d8/0x8c6 [ 1294.205559][ T5639] [] really_probe+0x232/0x9be [ 1294.207147][ T5639] [] __driver_probe_device+0x1d4/0x3f2 [ 1294.208705][ T5639] [] driver_probe_device+0x60/0x1ce [ 1294.210283][ T5639] [] __device_attach_driver+0x1e2/0x2fc [ 1294.212124][ T5639] [] bus_for_each_drv+0x142/0x1da [ 1294.213696][ T5639] [] __device_attach+0x1c4/0x462 [ 1294.215280][ T5639] [] device_initial_probe+0x1c/0x26 [ 1294.216842][ T5639] [] bus_probe_device+0x15c/0x192 [ 1294.218397][ T5639] [] device_add+0x10d8/0x181a [ 1294.220319][ T5639] [] usb_set_configuration+0xf08/0x19dc [ 1294.221962][ T5639] [] usb_generic_driver_probe+0xae/0x128 [ 1294.223609][ T5639] [] usb_probe_device+0xd6/0x360 [ 1294.225177][ T5639] [] really_probe+0x232/0x9be [ 1294.226659][ T5639] [] __driver_probe_device+0x1d4/0x3f2 [ 1294.228277][ T5639] [] driver_probe_device+0x60/0x1ce [ 1294.229816][ T5639] [] __device_attach_driver+0x1e2/0x2fc [ 1294.231931][ T5639] [] bus_for_each_drv+0x142/0x1da [ 1294.233524][ T5639] [] __device_attach+0x1c4/0x462 [ 1294.235222][ T5639] [] device_initial_probe+0x1c/0x26 [ 1294.236992][ T5639] [] bus_probe_device+0x15c/0x192 [ 1294.238529][ T5639] [] device_add+0x10d8/0x181a [ 1294.240001][ T5639] [] usb_new_device+0x960/0x1750 [ 1294.241805][ T5639] [] hub_event+0x2a2a/0x4a5c [ 1294.243357][ T5639] [] process_one_work+0x938/0x1d5c [ 1294.244989][ T5639] [] worker_thread+0x5be/0xe24 [ 1294.246509][ T5639] [] kthread+0x28c/0x3a6 [ 1294.247952][ T5639] [] ret_from_fork+0xe/0x1c [ 1294.249728][ T5639] SMP: stopping secondary CPUs [ 1294.253812][ T5639] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:58:54 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff85c04ffe mhartid 0000000000000000 mstatus 0000000a000000a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000202 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000428 stvec ffffffff85ca8658 vstvec 0000000000000000 mepc ffffffff802547ae sepc ffffffff85ca7504 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080029000 sscratch 0000000000000000 satp a02e0000000a7ba7 x0/zero 0000000000000000 x1/ra ffffffff85c0af68 x2/sp ff20000007968b70 x3/gp ffffffff89241aa0 x4/tp ff60000012494ec0 x5/t0 0000000000000000 x6/t1 fffffffef1248978 x7/t2 ff600000124959e0 x8/s0 ff20000007968c60 x9/s1 dfffffff00000000 x10/a0 ff20000007968fe0 x11/a1 0000000000000000 x12/a2 ff20000007968fe8 x13/a3 ffff0a00ffffff04 x14/a4 ffe3ffff00f2d174 x15/a5 fffffffff3f3f300 x16/a6 0000000000000003 x17/a7 fffffffff2000000 x18/s2 ffffffff87046fdf x19/s3 1fe4000000f2d174 x20/s4 ff20000007968d40 x21/s5 ff20000007968fe8 x22/s6 ff20000007968c00 x23/s7 0000000000000000 x24/s8 dfffffff00000000 x25/s9 1fe4000000f2d190 x26/s10 0000000000000000 x27/s11 0000000000000007 x28/t3 1fe4000000f2d230 x29/t4 fffffffef1248978 x30/t5 fffffffef1248979 x31/t6 ffffffff8937050c f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff802212e8 mhartid 0000000000000001 mstatus 0000000a000000a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000000 medeleg 0000000000f0b509 hedeleg 0000000000000000 mtvec 0000000080000428 stvec ffffffff85ca8658 vstvec 0000000000000000 mepc ffffffff8001c7f2 sepc 00007fff9321ad8c vsepc 0000000000000000 mcause 0000000000000009 scause 000000000000000c vscause 0000000000000000 mtval 0000000000000000 stval 00007fff9321ad8c htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080027000 sscratch 0000000000000000 satp a049e000000a77d0 x0/zero 0000000000000000 x1/ra ffffffff80982a68 x2/sp ff200000081f3820 x3/gp ffffffff89241aa0 x4/tp ff600000137ecec0 x5/t0 0000000000000002 x6/t1 ff600000137edaa8 x7/t2 ff600000137ed9e0 x8/s0 ff200000081f3820 x9/s1 1fe400000103e6e4 x10/a0 ffffffff8623dbe0 x11/a1 ffffffff8623dbe0 x12/a2 0000000000000005 x13/a3 1fec0000026fdb3a x14/a4 0000000000000004 x15/a5 0000000000000001 x16/a6 0000000000000003 x17/a7 0000000000000002 x18/s2 0000000000000001 x19/s3 0000000000000001 x20/s4 ff600000137ecec0 x21/s5 0000000000000001 x22/s6 ff60000000000000 x23/s7 1fe400000103e70c x24/s8 000000002ff9385b x25/s9 ffffffff8933a100 x26/s10 0000000000000000 x27/s11 ff200000081f36a0 x28/t3 ff600000137ecec8 x29/t4 0000000000000000 x30/t5 1fe400000103e69c x31/t6 1fec0000026fdb59 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000