Warning: Permanently added '[localhost]:40384' (ED25519) to the list of known hosts. 2026/09/16 02:53:43 parsed 1 programs 2026/09/16 02:53:43 serving rpc on tcp://38609 syzkaller login: [ 89.546355][ T5282] cgroup: Unknown subsys name 'net' [ 89.615893][ T5282] cgroup: Unknown subsys name 'cpuset' [ 89.622438][ T5282] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.207529][ T5282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.893390][ T1371] cfg80211: failed to load regulatory.db [ 97.263659][ T5298] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.327451][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.327469][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.378590][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.378611][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.006586][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.008361][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.008785][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.019082][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.022842][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.175713][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.176984][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.177064][ T5368] bridge_slave_0: entered allmulticast mode [ 105.188927][ T5368] bridge_slave_0: entered promiscuous mode [ 105.204312][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.204447][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.204541][ T5368] bridge_slave_1: entered allmulticast mode [ 105.206874][ T5368] bridge_slave_1: entered promiscuous mode [ 105.281662][ T5368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.286402][ T5368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.342106][ T5368] team0: Port device team_slave_0 added [ 105.344510][ T5368] team0: Port device team_slave_1 added [ 105.384762][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.384778][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.384792][ T5368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.387074][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.387082][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.387091][ T5368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.463787][ T5368] hsr_slave_0: entered promiscuous mode [ 105.464578][ T5368] hsr_slave_1: entered promiscuous mode [ 105.654669][ T5368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.667553][ T5368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.669128][ T5368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.681930][ T5368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.683118][ T5368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.687323][ T5368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.688196][ T5368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.714368][ T5368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.750202][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.750290][ T5368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.750711][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.750776][ T5368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.830586][ T5368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.849337][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.856680][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.873568][ T5368] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.884396][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.884561][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.901667][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.901736][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.328352][ T5368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.393186][ T5368] veth0_vlan: entered promiscuous mode [ 106.406471][ T5368] veth1_vlan: entered promiscuous mode [ 106.441047][ T5368] veth0_macvtap: entered promiscuous mode [ 106.445214][ T5368] veth1_macvtap: entered promiscuous mode [ 106.466341][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.484826][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.523896][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.524257][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.550274][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.580274][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.853031][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.937989][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.033892][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.104745][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/09/16 02:54:04 executed programs: 0 [ 107.835828][ T4640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.837489][ T4640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.838208][ T4640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.857123][ T4640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.857443][ T4640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.686742][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.686862][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.686969][ T5410] bridge_slave_0: entered allmulticast mode [ 108.701647][ T5410] bridge_slave_0: entered promiscuous mode [ 108.734618][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.734713][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.734859][ T5410] bridge_slave_1: entered allmulticast mode [ 108.751275][ T5410] bridge_slave_1: entered promiscuous mode [ 108.849889][ T5410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.908735][ T5410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.930893][ T12] bridge_slave_1: left allmulticast mode [ 108.930932][ T12] bridge_slave_1: left promiscuous mode [ 108.932688][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.961374][ T12] bridge_slave_0: left allmulticast mode [ 108.961395][ T12] bridge_slave_0: left promiscuous mode [ 108.961541][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.227230][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.236029][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.237326][ T12] bond0 (unregistering): Released all slaves [ 109.364774][ T12] hsr_slave_0: left promiscuous mode [ 109.367009][ T12] hsr_slave_1: left promiscuous mode [ 109.368439][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.368460][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.393117][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.393136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.439331][ T12] veth1_macvtap: left promiscuous mode [ 109.439397][ T12] veth0_macvtap: left promiscuous mode [ 109.439495][ T12] veth1_vlan: left promiscuous mode [ 109.447224][ T12] veth0_vlan: left promiscuous mode [ 109.853911][ T12] team0 (unregistering): Port device team_slave_1 removed [ 109.868010][ T12] team0 (unregistering): Port device team_slave_0 removed [ 109.921509][ T4640] Bluetooth: hci0: command tx timeout [ 109.986014][ T5410] team0: Port device team_slave_0 added [ 109.988792][ T4986] 8021q: adding VLAN 0 to HW filter on device eth2 [ 109.997786][ T5410] team0: Port device team_slave_1 added [ 110.052105][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.052118][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.052134][ T5410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.059078][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.059092][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.059105][ T5410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.214548][ T5410] hsr_slave_0: entered promiscuous mode [ 110.216876][ T5410] hsr_slave_1: entered promiscuous mode [ 110.701251][ T4986] 8021q: adding VLAN 0 to HW filter on device eth3 [ 111.114012][ T5410] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.132991][ T5410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.139090][ T5410] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.149381][ T5410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.156119][ T5410] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.159399][ T5410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.169089][ T5410] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.178907][ T5410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.373472][ T5410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.404148][ T5410] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.414559][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.414635][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.427921][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.427993][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.003369][ T4640] Bluetooth: hci0: command tx timeout [ 112.194177][ T5410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.273536][ T5410] veth0_vlan: entered promiscuous mode [ 112.293805][ T5410] veth1_vlan: entered promiscuous mode [ 112.360831][ T5410] veth0_macvtap: entered promiscuous mode [ 112.374814][ T5410] veth1_macvtap: entered promiscuous mode [ 112.406037][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.429100][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.462456][ T1057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.462706][ T1057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.462829][ T1057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.462849][ T1057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.707269][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.707289][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.842924][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.842942][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/16 02:54:10 executed programs: 2 [ 113.389024][ T5484] loop0: detected capacity change from 0 to 32768 [ 113.488016][ T5484] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.562619][ T5484] XFS (loop0): Ending clean mount [ 113.581479][ T5484] XFS (loop0): Quotacheck needed: Please wait. [ 113.625693][ T5484] XFS (loop0): Quotacheck: Done. [ 113.637812][ T5484] ================================================================== [ 113.637824][ T5484] BUG: KASAN: slab-out-of-bounds in ecryptfs_verify_auth_tok_from_key+0x38f/0x3a0 [ 113.638003][ T5484] Read of size 2 at addr ffff88803ae2a71b by task syz.0.17/5484 [ 113.638012][ T5484] [ 113.638048][ T5484] CPU: 0 UID: 0 PID: 5484 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 113.638061][ T5484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.638069][ T5484] Call Trace: [ 113.638096][ T5484] [ 113.638101][ T5484] dump_stack_lvl+0xe8/0x150 [ 113.638127][ T5484] print_address_description+0x55/0x1e0 [ 113.638143][ T5484] ? ecryptfs_verify_auth_tok_from_key+0x38f/0x3a0 [ 113.638155][ T5484] print_report+0x58/0x70 [ 113.638167][ T5484] kasan_report+0x117/0x150 [ 113.638190][ T5484] ? ecryptfs_verify_auth_tok_from_key+0x38f/0x3a0 [ 113.638204][ T5484] ecryptfs_verify_auth_tok_from_key+0x38f/0x3a0 [ 113.638218][ T5484] ecryptfs_keyring_auth_tok_for_sig+0xec/0x250 [ 113.638232][ T5484] ecryptfs_get_tree+0x563/0x1370 [ 113.638250][ T5484] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 113.638267][ T5484] vfs_get_tree+0x92/0x2a0 [ 113.638283][ T5484] do_new_mount+0x319/0xdc0 [ 113.638297][ T5484] ? __pfx_do_new_mount+0x10/0x10 [ 113.638310][ T5484] ? ns_capable+0x89/0xe0 [ 113.638325][ T5484] ? path_mount+0x647/0x1050 [ 113.638337][ T5484] ? user_path_at+0xd4/0x160 [ 113.638351][ T5484] __se_sys_mount+0x31d/0x420 [ 113.638364][ T5484] ? __pfx___se_sys_mount+0x10/0x10 [ 113.638377][ T5484] ? __x64_sys_mount+0x20/0xc0 [ 113.638390][ T5484] do_syscall_64+0x166/0x520 [ 113.638456][ T5484] ? trace_irq_disable+0x3b/0x140 [ 113.638476][ T5484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.638486][ T5484] ? clear_bhb_loop+0x70/0xc0 [ 113.638499][ T5484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.638510][ T5484] RIP: 0033:0x7f355439e159 [ 113.638520][ T5484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.638530][ T5484] RSP: 002b:00007f35552a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.638544][ T5484] RAX: ffffffffffffffda RBX: 00007f3554625fa0 RCX: 00007f355439e159 [ 113.638552][ T5484] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000200000000400 [ 113.638559][ T5484] RBP: 00007f355443506b R08: 0000200000000500 R09: 0000000000000000 [ 113.638565][ T5484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.638572][ T5484] R13: 00007f3554626038 R14: 00007f3554625fa0 R15: 00007ffd4f4b3c68 [ 113.638584][ T5484] [ 113.638588][ T5484] [ 113.638591][ T5484] Allocated by task 5484: [ 113.638605][ T5484] kasan_save_track+0x3e/0x80 [ 113.638621][ T5484] __kasan_kmalloc+0x93/0xb0 [ 113.638629][ T5484] __kmalloc_noprof+0x36b/0x720 [ 113.638642][ T5484] user_preparse+0x9e/0x160 [ 113.638668][ T5484] __key_create_or_update+0x3a9/0xa80 [ 113.638677][ T5484] key_create_or_update+0x42/0x60 [ 113.638686][ T5484] __se_sys_add_key+0x349/0x420 [ 113.638698][ T5484] do_syscall_64+0x166/0x520 [ 113.638707][ T5484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.638715][ T5484] [ 113.638717][ T5484] The buggy address belongs to the object at ffff88803ae2a700 [ 113.638717][ T5484] which belongs to the cache kmalloc-32 of size 32 [ 113.638739][ T5484] The buggy address is located 0 bytes to the right of [ 113.638739][ T5484] allocated 27-byte region [ffff88803ae2a700, ffff88803ae2a71b) [ 113.638750][ T5484] [ 113.638753][ T5484] The buggy address belongs to the physical page: [ 113.638758][ T5484] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ae2a [ 113.638768][ T5484] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 113.638778][ T5484] page_type: f5(slab) [ 113.638788][ T5484] raw: 04fff00000000000 ffff88801b041780 dead000000000100 dead000000000122 [ 113.638797][ T5484] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000 [ 113.638802][ T5484] page dumped because: kasan: bad access detected [ 113.638807][ T5484] page_owner tracks the page as allocated [ 113.638816][ T5484] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5056, tgid 5056 (rm), ts 60539039982 [ 113.638832][ T5484] post_alloc_hook+0x1f9/0x250 [ 113.638846][ T5484] get_page_from_freelist+0x2209/0x2280 [ 113.638861][ T5484] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 113.638875][ T5484] allocate_slab+0x7d/0x620 [ 113.638885][ T5484] refill_objects+0x2d5/0x350 [ 113.638895][ T5484] __pcs_replace_empty_main+0x2c8/0x6c0 [ 113.638905][ T5484] __kmalloc_cache_noprof+0x39b/0x600 [ 113.638918][ T5484] kmem_cache_free+0x156/0x650 [ 113.638931][ T5484] tear_down_vmas+0x31f/0x530 [ 113.638943][ T5484] exit_mmap+0x4ca/0x9f0 [ 113.638954][ T5484] __mmput+0x118/0x420 [ 113.638965][ T5484] setup_new_exec+0x30d/0x360 [ 113.638976][ T5484] load_elf_binary+0xbc0/0x28d0 [ 113.638987][ T5484] bprm_execve+0x930/0x1590 [ 113.638999][ T5484] do_execveat_common+0x4f4/0x670 [ 113.639012][ T5484] __x64_sys_execve+0x97/0xc0 [ 113.639024][ T5484] page last free pid 5056 tgid 5056 ts 60538565273 stack trace: [ 113.639032][ T5484] __free_frozen_pages+0xc93/0xd90 [ 113.639044][ T5484] tlb_finish_mmu+0x13e/0x220 [ 113.639057][ T5484] exit_mmap+0x4b2/0x9f0 [ 113.639068][ T5484] __mmput+0x118/0x420 [ 113.639078][ T5484] setup_new_exec+0x30d/0x360 [ 113.639090][ T5484] load_elf_binary+0xbc0/0x28d0 [ 113.639099][ T5484] bprm_execve+0x930/0x1590 [ 113.639110][ T5484] do_execveat_common+0x4f4/0x670 [ 113.639124][ T5484] __x64_sys_execve+0x97/0xc0 [ 113.639135][ T5484] do_syscall_64+0x166/0x520 [ 113.639145][ T5484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.639154][ T5484] [ 113.639157][ T5484] Memory state around the buggy address: [ 113.639162][ T5484] ffff88803ae2a600: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 113.639169][ T5484] ffff88803ae2a680: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 113.639176][ T5484] >ffff88803ae2a700: 00 00 00 03 fc fc fc fc fa fb fb fb fc fc fc fc [ 113.639181][ T5484] ^ [ 113.639186][ T5484] ffff88803ae2a780: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 113.639193][ T5484] ffff88803ae2a800: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 113.639198][ T5484] ================================================================== [ 113.639307][ T5484] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.897421][ T5484] CPU: 0 UID: 0 PID: 5484 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 113.901181][ T5484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.905460][ T5484] Call Trace: [ 113.906993][ T5484] [ 113.908322][ T5484] vpanic+0x56d/0xa60 [ 113.910128][ T5484] ? rcu_is_watching+0x16/0xb0 [ 113.912223][ T5484] ? __pfx_vpanic+0x10/0x10 [ 113.914168][ T5484] ? __pfx___schedule+0x10/0x10 [ 113.916283][ T5484] panic+0xc5/0xd0 [ 113.917972][ T5484] ? __pfx_panic+0x10/0x10 [ 113.919885][ T5484] ? preempt_schedule_thunk+0x16/0x40 [ 113.922129][ T5484] ? ecryptfs_verify_auth_tok_from_key+0x38f/0x3a0 [ 113.925007][ T5484] check_panic_on_warn+0x89/0xb0 [ 113.927187][ T5484] ? ecryptfs_verify_auth_tok_from_key+0x38f/0x3a0 [ 113.929889][ T5484] end_report+0x73/0x170 [ 113.931760][ T5484] ? ecryptfs_verify_auth_tok_from_key+0x38f/0x3a0 [ 113.934511][ T5484] kasan_report+0x128/0x150 [ 113.936537][ T5484] ? ecryptfs_verify_auth_tok_from_key+0x38f/0x3a0 [ 113.939374][ T5484] ecryptfs_verify_auth_tok_from_key+0x38f/0x3a0 [ 113.942115][ T5484] ecryptfs_keyring_auth_tok_for_sig+0xec/0x250 [ 113.944830][ T5484] ecryptfs_get_tree+0x563/0x1370 [ 113.947069][ T5484] ? __pfx_ecryptfs_get_tree+0x10/0x10 [ 113.949302][ T5484] vfs_get_tree+0x92/0x2a0 [ 113.951162][ T5484] do_new_mount+0x319/0xdc0 [ 113.953105][ T5484] ? __pfx_do_new_mount+0x10/0x10 [ 113.955292][ T5484] ? ns_capable+0x89/0xe0 [ 113.957154][ T5484] ? path_mount+0x647/0x1050 [ 113.959207][ T5484] ? user_path_at+0xd4/0x160 [ 113.961140][ T5484] __se_sys_mount+0x31d/0x420 [ 113.963085][ T5484] ? __pfx___se_sys_mount+0x10/0x10 [ 113.965235][ T5484] ? __x64_sys_mount+0x20/0xc0 [ 113.967317][ T5484] do_syscall_64+0x166/0x520 [ 113.969285][ T5484] ? trace_irq_disable+0x3b/0x140 [ 113.971413][ T5484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.974070][ T5484] ? clear_bhb_loop+0x70/0xc0 [ 113.976054][ T5484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.978603][ T5484] RIP: 0033:0x7f355439e159 [ 113.980545][ T5484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.988788][ T5484] RSP: 002b:00007f35552a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.992349][ T5484] RAX: ffffffffffffffda RBX: 00007f3554625fa0 RCX: 00007f355439e159 [ 113.995548][ T5484] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000200000000400 [ 113.998964][ T5484] RBP: 00007f355443506b R08: 0000200000000500 R09: 0000000000000000 [ 114.002414][ T5484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.005842][ T5484] R13: 00007f3554626038 R14: 00007f3554625fa0 R15: 00007ffd4f4b3c68 [ 114.009274][ T5484] [ 114.010998][ T5484] Kernel Offset: disabled [ 114.012892][ T5484] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:54:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003e27100 R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff8574a3d0 R12=dffffc0000000000 R13=0000000000000020 R14=ffffffff9ad45500 R15=0000000000000000 RIP=ffffffff8574a44c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f35552a46c0 ffffffff 00c00000 GS =0000 ffff88808c2c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000001000 CR3=000000003fdbb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4f4b4156 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4f4b4156 00007ffd4f4b415c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355443564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f355443568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35544357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3554435680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000