Extracting prog: 3m49.741852392s
Minimizing prog: 11m20.899815868s
Simplifying prog options: 0s
Extracting C: 28.664340443s
Simplifying C: 12m35.069683497s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f00000012c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000001700)={[{@norecovery}, {}, {@nodiscard}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_continue}, {@nouid32}, {@nodiscard}, {@abort}, {@usrjquota}, {@lazytime}]}, 0x1, 0x56a, &(0x7f0000000780)="$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")

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script-syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f00000012c0)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000001700)={[{@norecovery}, {}, {@nodiscard}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_continue}, {@nouid32}, {@nodiscard}, {@abort}, {@usrjquota}, {@lazytime}]}, 0x1, 0x56a, &(0x7f0000000780)="$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")

program crashed: KASAN: null-ptr-deref Write in do_page_cache_ra
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=4m24.548414088s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat$cgroup_ro-write$binfmt_script
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f00000012c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)

program did not crash
testing program (duration=4m24.548414088s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-openat$cgroup_ro-syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f00000012c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000001700)={[{@norecovery}, {}, {@nodiscard}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_continue}, {@nouid32}, {@nodiscard}, {@abort}, {@usrjquota}, {@lazytime}]}, 0x1, 0x56a, &(0x7f0000000780)="$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")

program crashed: KASAN: null-ptr-deref Write in do_page_cache_ra
testing program (duration=4m24.548414088s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f00000012c0)="$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")
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000001700)={[{@norecovery}, {}, {@nodiscard}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_continue}, {@nouid32}, {@nodiscard}, {@abort}, {@usrjquota}, {@lazytime}]}, 0x1, 0x56a, &(0x7f0000000780)="$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")

program crashed: KASAN: null-ptr-deref Write in do_page_cache_ra
testing program (duration=4m24.548414088s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000001700)={[{@norecovery}, {}, {@nodiscard}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_continue}, {@nouid32}, {@nodiscard}, {@abort}, {@usrjquota}, {@lazytime}]}, 0x1, 0x56a, &(0x7f0000000780)="$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")

program did not crash
extracting C reproducer
testing compiled C program (duration=4m24.548414088s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4
program crashed: KASAN: null-ptr-deref Write in do_page_cache_ra
simplifying C reproducer
testing compiled C program (duration=4m24.548414088s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4
program crashed: KASAN: null-ptr-deref Write in do_page_cache_ra
testing compiled C program (duration=4m24.548414088s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4
program did not crash
testing compiled C program (duration=4m24.548414088s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4
program crashed: KASAN: null-ptr-deref Write in do_page_cache_ra
testing compiled C program (duration=4m24.548414088s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4
program did not crash
testing compiled C program (duration=4m24.548414088s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4
program crashed: KASAN: null-ptr-deref Write in do_page_cache_ra
testing compiled C program (duration=4m24.548414088s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4
program crashed: KASAN: null-ptr-deref Write in do_page_cache_ra
testing program (duration=4m24.548414088s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f00000012c0)="$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")
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000001700)={[{@norecovery}, {}, {@nodiscard}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_continue}, {@nouid32}, {@nodiscard}, {@abort}, {@usrjquota}, {@lazytime}]}, 0x1, 0x56a, &(0x7f0000000780)="$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")

program crashed: KASAN: null-ptr-deref Write in do_page_cache_ra
validation run: crashed=true
testing program (duration=4m24.548414088s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f00000012c0)="$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")
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000001700)={[{@norecovery}, {}, {@nodiscard}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_continue}, {@nouid32}, {@nodiscard}, {@abort}, {@usrjquota}, {@lazytime}]}, 0x1, 0x56a, &(0x7f0000000780)="$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")

program crashed: KASAN: null-ptr-deref Write in do_page_cache_ra
validation run: crashed=true
testing program (duration=4m24.548414088s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_mount_image$ext4
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f00000012c0)="$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")
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000001700)={[{@norecovery}, {}, {@nodiscard}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_continue}, {@nouid32}, {@nodiscard}, {@abort}, {@usrjquota}, {@lazytime}]}, 0x1, 0x56a, &(0x7f0000000780)="$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")

program crashed: KASAN: null-ptr-deref Write in do_page_cache_ra
validation run: crashed=true
reproducing took 31m8.37676407s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_write include/linux/instrumented.h:87 [inline]
BUG: KASAN: null-ptr-deref in set_bit include/asm-generic/bitops/instrumented-atomic.h:28 [inline]
BUG: KASAN: null-ptr-deref in do_page_cache_ra+0x18f/0x230 mm/readahead.c:324
Write of size 8 at addr 0000000000000000 by task udevd/407

CPU: 1 PID: 407 Comm: udevd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 print_report+0x3d/0x60 mm/kasan/report.c:423
 kasan_report+0x122/0x150 mm/kasan/report.c:524
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189
 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37
 instrument_atomic_write include/linux/instrumented.h:87 [inline]
 set_bit include/asm-generic/bitops/instrumented-atomic.h:28 [inline]
 do_page_cache_ra+0x18f/0x230 mm/readahead.c:324
 force_page_cache_ra mm/readahead.c:360 [inline]
 page_cache_sync_ra+0x32b/0x3d0 mm/readahead.c:751
 page_cache_sync_readahead include/linux/pagemap.h:1259 [inline]
 filemap_get_pages mm/filemap.c:2706 [inline]
 filemap_read+0x6b6/0x23c0 mm/filemap.c:2801
 blkdev_read_iter+0x439/0x580 block/fops.c:668
 call_read_iter include/linux/fs.h:2276 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x46e/0x930 fs/read_write.c:470
 ksys_read+0x14a/0x260 fs/read_write.c:613
 __do_sys_read fs/read_write.c:623 [inline]
 __se_sys_read fs/read_write.c:621 [inline]
 __x64_sys_read+0x7b/0x90 fs/read_write.c:621
 x64_sys_call+0x2f/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fa92d0a7407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007fff1f21dab0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fa92d89a880 RCX: 00007fa92d0a7407
RDX: 0000000000000200 RSI: 00007fa92d88e000 RDI: 0000000000000009
RBP: 000055d2f182d750 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000020000 R14: 000055d2f1820638 R15: 00007fa92d9c139c
 </TASK>
==================================================================
BUG: kernel NULL pointer dereference, address: 0000000000000003
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 0 P4D 0 
Oops: 0002 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 407 Comm: udevd Tainted: G    B              syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
RIP: 0010:arch_set_bit include/linux/instrumented.h:87 [inline]
RIP: 0010:set_bit include/asm-generic/bitops/instrumented-atomic.h:29 [inline]
RIP: 0010:do_page_cache_ra+0x18f/0x230 mm/readahead.c:324
Code: fd ff 48 3d 01 f0 ff ff 72 10 e8 dc 1c d2 ff 49 83 ee 01 73 78 e9 87 00 00 00 49 89 c4 48 89 c7 be 08 00 00 00 e8 d1 ba 17 00 <f0> 41 80 4c 24 03 10 4c 89 e7 48 83 c7 34 be 04 00 00 00 e8 b9 ba
RSP: 0018:ffffc90000b77878 EFLAGS: 00010246
RAX: ffff88812cdc9400 RBX: 0000000000000020 RCX: ffff88812cdc9440
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000b778c8 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc
R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: 0000000000000000
R13: 000000000000001f R14: 0000000000000000 R15: ffff88810b6f6750
FS:  00007fa92d89a880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000003 CR3: 000000010effb000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 force_page_cache_ra mm/readahead.c:360 [inline]
 page_cache_sync_ra+0x32b/0x3d0 mm/readahead.c:751
 page_cache_sync_readahead include/linux/pagemap.h:1259 [inline]
 filemap_get_pages mm/filemap.c:2706 [inline]
 filemap_read+0x6b6/0x23c0 mm/filemap.c:2801
 blkdev_read_iter+0x439/0x580 block/fops.c:668
 call_read_iter include/linux/fs.h:2276 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x46e/0x930 fs/read_write.c:470
 ksys_read+0x14a/0x260 fs/read_write.c:613
 __do_sys_read fs/read_write.c:623 [inline]
 __se_sys_read fs/read_write.c:621 [inline]
 __x64_sys_read+0x7b/0x90 fs/read_write.c:621
 x64_sys_call+0x2f/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fa92d0a7407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007fff1f21dab0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fa92d89a880 RCX: 00007fa92d0a7407
RDX: 0000000000000200 RSI: 00007fa92d88e000 RDI: 0000000000000009
RBP: 000055d2f182d750 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000020000 R14: 000055d2f1820638 R15: 00007fa92d9c139c
 </TASK>
Modules linked in:
CR2: 0000000000000003
---[ end trace 0000000000000000 ]---
RIP: 0010:arch_set_bit include/linux/instrumented.h:87 [inline]
RIP: 0010:set_bit include/asm-generic/bitops/instrumented-atomic.h:29 [inline]
RIP: 0010:do_page_cache_ra+0x18f/0x230 mm/readahead.c:324
Code: fd ff 48 3d 01 f0 ff ff 72 10 e8 dc 1c d2 ff 49 83 ee 01 73 78 e9 87 00 00 00 49 89 c4 48 89 c7 be 08 00 00 00 e8 d1 ba 17 00 <f0> 41 80 4c 24 03 10 4c 89 e7 48 83 c7 34 be 04 00 00 00 e8 b9 ba
RSP: 0018:ffffc90000b77878 EFLAGS: 00010246
RAX: ffff88812cdc9400 RBX: 0000000000000020 RCX: ffff88812cdc9440
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000b778c8 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc
R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: 0000000000000000
R13: 000000000000001f R14: 0000000000000000 R15: ffff88810b6f6750
FS:  00007fa92d89a880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000003 CR3: 000000010effb000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess), 2 bytes skipped:
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	72 10                	jb     0x18
   8:	e8 dc 1c d2 ff       	call   0xffd21ce9
   d:	49 83 ee 01          	sub    $0x1,%r14
  11:	73 78                	jae    0x8b
  13:	e9 87 00 00 00       	jmp    0x9f
  18:	49 89 c4             	mov    %rax,%r12
  1b:	48 89 c7             	mov    %rax,%rdi
  1e:	be 08 00 00 00       	mov    $0x8,%esi
  23:	e8 d1 ba 17 00       	call   0x17baf9
* 28:	f0 41 80 4c 24 03 10 	lock orb $0x10,0x3(%r12) <-- trapping instruction
  2f:	4c 89 e7             	mov    %r12,%rdi
  32:	48 83 c7 34          	add    $0x34,%rdi
  36:	be 04 00 00 00       	mov    $0x4,%esi
  3b:	e8                   	.byte 0xe8
  3c:	b9                   	.byte 0xb9
  3d:	ba                   	.byte 0xba

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_write include/linux/instrumented.h:87 [inline]
BUG: KASAN: null-ptr-deref in set_bit include/asm-generic/bitops/instrumented-atomic.h:28 [inline]
BUG: KASAN: null-ptr-deref in do_page_cache_ra+0x18f/0x230 mm/readahead.c:324
Write of size 8 at addr 0000000000000000 by task udevd/407

CPU: 1 PID: 407 Comm: udevd Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x24 lib/dump_stack.c:88
 dump_stack_lvl+0x110/0x170 lib/dump_stack.c:106
 print_report+0x3d/0x60 mm/kasan/report.c:423
 kasan_report+0x122/0x150 mm/kasan/report.c:524
 check_region_inline mm/kasan/generic.c:-1 [inline]
 kasan_check_range+0x249/0x2a0 mm/kasan/generic.c:189
 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37
 instrument_atomic_write include/linux/instrumented.h:87 [inline]
 set_bit include/asm-generic/bitops/instrumented-atomic.h:28 [inline]
 do_page_cache_ra+0x18f/0x230 mm/readahead.c:324
 force_page_cache_ra mm/readahead.c:360 [inline]
 page_cache_sync_ra+0x32b/0x3d0 mm/readahead.c:751
 page_cache_sync_readahead include/linux/pagemap.h:1259 [inline]
 filemap_get_pages mm/filemap.c:2706 [inline]
 filemap_read+0x6b6/0x23c0 mm/filemap.c:2801
 blkdev_read_iter+0x439/0x580 block/fops.c:668
 call_read_iter include/linux/fs.h:2276 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x46e/0x930 fs/read_write.c:470
 ksys_read+0x14a/0x260 fs/read_write.c:613
 __do_sys_read fs/read_write.c:623 [inline]
 __se_sys_read fs/read_write.c:621 [inline]
 __x64_sys_read+0x7b/0x90 fs/read_write.c:621
 x64_sys_call+0x2f/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fa92d0a7407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007fff1f21dab0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fa92d89a880 RCX: 00007fa92d0a7407
RDX: 0000000000000200 RSI: 00007fa92d88e000 RDI: 0000000000000009
RBP: 000055d2f182d750 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000020000 R14: 000055d2f1820638 R15: 00007fa92d9c139c
 </TASK>
==================================================================
BUG: kernel NULL pointer dereference, address: 0000000000000003
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 0 P4D 0 
Oops: 0002 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 407 Comm: udevd Tainted: G    B              syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
RIP: 0010:arch_set_bit include/linux/instrumented.h:87 [inline]
RIP: 0010:set_bit include/asm-generic/bitops/instrumented-atomic.h:29 [inline]
RIP: 0010:do_page_cache_ra+0x18f/0x230 mm/readahead.c:324
Code: fd ff 48 3d 01 f0 ff ff 72 10 e8 dc 1c d2 ff 49 83 ee 01 73 78 e9 87 00 00 00 49 89 c4 48 89 c7 be 08 00 00 00 e8 d1 ba 17 00 <f0> 41 80 4c 24 03 10 4c 89 e7 48 83 c7 34 be 04 00 00 00 e8 b9 ba
RSP: 0018:ffffc90000b77878 EFLAGS: 00010246
RAX: ffff88812cdc9400 RBX: 0000000000000020 RCX: ffff88812cdc9440
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000b778c8 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc
R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: 0000000000000000
R13: 000000000000001f R14: 0000000000000000 R15: ffff88810b6f6750
FS:  00007fa92d89a880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000003 CR3: 000000010effb000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 force_page_cache_ra mm/readahead.c:360 [inline]
 page_cache_sync_ra+0x32b/0x3d0 mm/readahead.c:751
 page_cache_sync_readahead include/linux/pagemap.h:1259 [inline]
 filemap_get_pages mm/filemap.c:2706 [inline]
 filemap_read+0x6b6/0x23c0 mm/filemap.c:2801
 blkdev_read_iter+0x439/0x580 block/fops.c:668
 call_read_iter include/linux/fs.h:2276 [inline]
 new_sync_read fs/read_write.c:389 [inline]
 vfs_read+0x46e/0x930 fs/read_write.c:470
 ksys_read+0x14a/0x260 fs/read_write.c:613
 __do_sys_read fs/read_write.c:623 [inline]
 __se_sys_read fs/read_write.c:621 [inline]
 __x64_sys_read+0x7b/0x90 fs/read_write.c:621
 x64_sys_call+0x2f/0x9a0 arch/x86/include/generated/asm/syscalls_64.h:1
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fa92d0a7407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007fff1f21dab0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fa92d89a880 RCX: 00007fa92d0a7407
RDX: 0000000000000200 RSI: 00007fa92d88e000 RDI: 0000000000000009
RBP: 000055d2f182d750 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
R13: 0000000000020000 R14: 000055d2f1820638 R15: 00007fa92d9c139c
 </TASK>
Modules linked in:
CR2: 0000000000000003
---[ end trace 0000000000000000 ]---
RIP: 0010:arch_set_bit include/linux/instrumented.h:87 [inline]
RIP: 0010:set_bit include/asm-generic/bitops/instrumented-atomic.h:29 [inline]
RIP: 0010:do_page_cache_ra+0x18f/0x230 mm/readahead.c:324
Code: fd ff 48 3d 01 f0 ff ff 72 10 e8 dc 1c d2 ff 49 83 ee 01 73 78 e9 87 00 00 00 49 89 c4 48 89 c7 be 08 00 00 00 e8 d1 ba 17 00 <f0> 41 80 4c 24 03 10 4c 89 e7 48 83 c7 34 be 04 00 00 00 e8 b9 ba
RSP: 0018:ffffc90000b77878 EFLAGS: 00010246
RAX: ffff88812cdc9400 RBX: 0000000000000020 RCX: ffff88812cdc9440
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000b778c8 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc
R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: 0000000000000000
R13: 000000000000001f R14: 0000000000000000 R15: ffff88810b6f6750
FS:  00007fa92d89a880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000003 CR3: 000000010effb000 CR4: 00000000003506a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess), 2 bytes skipped:
   0:	48 3d 01 f0 ff ff    	cmp    $0xfffffffffffff001,%rax
   6:	72 10                	jb     0x18
   8:	e8 dc 1c d2 ff       	call   0xffd21ce9
   d:	49 83 ee 01          	sub    $0x1,%r14
  11:	73 78                	jae    0x8b
  13:	e9 87 00 00 00       	jmp    0x9f
  18:	49 89 c4             	mov    %rax,%r12
  1b:	48 89 c7             	mov    %rax,%rdi
  1e:	be 08 00 00 00       	mov    $0x8,%esi
  23:	e8 d1 ba 17 00       	call   0x17baf9
* 28:	f0 41 80 4c 24 03 10 	lock orb $0x10,0x3(%r12) <-- trapping instruction
  2f:	4c 89 e7             	mov    %r12,%rdi
  32:	48 83 c7 34          	add    $0x34,%rdi
  36:	be 04 00 00 00       	mov    $0x4,%esi
  3b:	e8                   	.byte 0xe8
  3c:	b9                   	.byte 0xb9
  3d:	ba                   	.byte 0xba