Warning: Permanently added '[localhost]:48336' (ED25519) to the list of known hosts.
2026/09/20 13:49:44 parsed 1 programs
2026/09/20 13:49:44 serving rpc on tcp://42397
syzkaller login: [ 90.180489][ T5284] cgroup: Unknown subsys name 'net'
[ 90.229635][ T5284] cgroup: Unknown subsys name 'cpuset'
[ 90.233894][ T5284] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 91.849988][ T1370] cfg80211: failed to load regulatory.db
[ 91.893391][ T5284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 97.844361][ T5303] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 98.289001][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.291315][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.291712][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.292406][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.292823][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.928546][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.929640][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.929944][ T5320] bridge_slave_0: entered allmulticast mode
[ 99.931403][ T5320] bridge_slave_0: entered promiscuous mode
[ 99.952041][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.952120][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.952441][ T5320] bridge_slave_1: entered allmulticast mode
[ 99.964971][ T5320] bridge_slave_1: entered promiscuous mode
[ 100.011188][ T5320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 100.014144][ T5320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.096217][ T5320] team0: Port device team_slave_0 added
[ 100.098654][ T5320] team0: Port device team_slave_1 added
[ 100.159205][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 100.159220][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 100.159244][ T5320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 100.162991][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 100.163012][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 100.163026][ T5320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 100.306282][ T5320] hsr_slave_0: entered promiscuous mode
[ 100.307330][ T5320] hsr_slave_1: entered promiscuous mode
[ 100.739360][ T5320] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.775105][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 100.779606][ T5320] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.805521][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 100.811910][ T5320] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.826582][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 100.831557][ T5320] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.852721][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 101.119582][ T5320] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.172879][ T5320] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.196782][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.197342][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.229567][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.230351][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.033946][ T5320] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.148334][ T5320] veth0_vlan: entered promiscuous mode
[ 102.166194][ T5320] veth1_vlan: entered promiscuous mode
[ 102.238609][ T5320] veth0_macvtap: entered promiscuous mode
[ 102.258431][ T5320] veth1_macvtap: entered promiscuous mode
[ 102.305455][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.323847][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.387142][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.476816][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.477267][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.477290][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.682722][ T71] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.539672][ T71] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.974523][ T71] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.269139][ T71] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.773303][ T71] bridge_slave_1: left allmulticast mode
[ 104.773357][ T71] bridge_slave_1: left promiscuous mode
[ 104.774730][ T71] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.808085][ T71] bridge_slave_0: left allmulticast mode
[ 104.808110][ T71] bridge_slave_0: left promiscuous mode
[ 104.808265][ T71] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.404312][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 105.413580][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 105.424424][ T71] bond0 (unregistering): Released all slaves
[ 105.601050][ T71] hsr_slave_0: left promiscuous mode
[ 105.603439][ T71] hsr_slave_1: left promiscuous mode
[ 105.604263][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 105.604292][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 105.626103][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 105.626124][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 105.678799][ T71] veth1_macvtap: left promiscuous mode
[ 105.678886][ T71] veth0_macvtap: left promiscuous mode
[ 105.679011][ T71] veth1_vlan: left promiscuous mode
[ 105.679132][ T71] veth0_vlan: left promiscuous mode
[ 106.171302][ T71] team0 (unregistering): Port device team_slave_1 removed
[ 106.186035][ T71] team0 (unregistering): Port device team_slave_0 removed
[ 106.320905][ T4991] 8021q: adding VLAN 0 to HW filter on device eth2
[ 107.129376][ T4991] 8021q: adding VLAN 0 to HW filter on device eth3
[ 107.802393][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.802413][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.919647][ T4991] 8021q: adding VLAN 0 to HW filter on device eth4
[ 107.936899][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.936916][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.982714][ T4991] 8021q: adding VLAN 0 to HW filter on device eth5
2026/09/20 13:50:08 executed programs: 0
[ 111.674957][ T4645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 111.681616][ T4645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 111.682179][ T4645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 111.682753][ T4645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 111.683641][ T4645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 112.289537][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.289676][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.289769][ T5447] bridge_slave_0: entered allmulticast mode
[ 112.291320][ T5447] bridge_slave_0: entered promiscuous mode
[ 112.311208][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.311362][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.311453][ T5447] bridge_slave_1: entered allmulticast mode
[ 112.312888][ T5447] bridge_slave_1: entered promiscuous mode
[ 112.352058][ T5447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.362153][ T5447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.388617][ T5447] team0: Port device team_slave_0 added
[ 112.390539][ T5447] team0: Port device team_slave_1 added
[ 112.414339][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.414349][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 112.414360][ T5447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 112.434511][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 112.434525][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 112.434540][ T5447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 112.479712][ T5447] hsr_slave_0: entered promiscuous mode
[ 112.480336][ T5447] hsr_slave_1: entered promiscuous mode
[ 113.376691][ T5447] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.380911][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 113.381964][ T5447] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.400808][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 113.402566][ T5447] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.422146][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 113.423143][ T5447] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.451646][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 113.712728][ T5447] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.762969][ T5447] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.770644][ T4645] Bluetooth: hci0: command tx timeout
[ 113.784222][ T91] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.784322][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.806475][ T37] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.806520][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.738149][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.834517][ T5447] veth0_vlan: entered promiscuous mode
[ 114.856859][ T5447] veth1_vlan: entered promiscuous mode
[ 114.942669][ T5447] veth0_macvtap: entered promiscuous mode
[ 114.957473][ T5447] veth1_macvtap: entered promiscuous mode
[ 115.004181][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 115.032397][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 115.170436][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.170471][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.170489][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.170504][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.309920][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.309941][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.480153][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.480172][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.717046][ T5512] loop0: detected capacity change from 0 to 128
[ 115.845721][ T4645] Bluetooth: hci0: command tx timeout
[ 115.911516][ T5512] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 115.929071][ T5512] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 116.023520][ T5512] ==================================================================
[ 116.023559][ T5512] BUG: KASAN: slab-out-of-bounds in ecryptfs_write_tag_70_packet+0x1241/0x12e0
[ 116.023651][ T5512] Read of size 4 at addr ffff88801225e298 by task syz.0.17/5512
[ 116.023660][ T5512]
[ 116.023667][ T5512] CPU: 0 UID: 0 PID: 5512 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 116.023679][ T5512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 116.023686][ T5512] Call Trace:
[ 116.023691][ T5512]
[ 116.023696][ T5512] dump_stack_lvl+0xe8/0x150
[ 116.023712][ T5512] print_address_description+0x55/0x1e0
[ 116.023727][ T5512] ? ecryptfs_write_tag_70_packet+0x1241/0x12e0
[ 116.023740][ T5512] print_report+0x58/0x70
[ 116.023751][ T5512] kasan_report+0x117/0x150
[ 116.023762][ T5512] ? ecryptfs_write_tag_70_packet+0x1241/0x12e0
[ 116.023776][ T5512] ecryptfs_write_tag_70_packet+0x1241/0x12e0
[ 116.023794][ T5512] ecryptfs_encrypt_and_encode_filename+0x576/0x1580
[ 116.023809][ T5512] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10
[ 116.023821][ T5512] ? d_alloc_parallel+0x1535/0x16b0
[ 116.023839][ T5512] ecryptfs_lookup+0x20e/0x780
[ 116.023853][ T5512] ? __pfx_ecryptfs_lookup+0x10/0x10
[ 116.023866][ T5512] ? d_lookup+0x1f/0xa0
[ 116.023880][ T5512] ? seqcount_lockdep_reader_access+0xa9/0x100
[ 116.023894][ T5512] lookup_open+0x9e1/0x1a40
[ 116.023915][ T5512] path_openat+0x677/0x1d60
[ 116.023934][ T5512] do_file_open+0x23e/0x4a0
[ 116.023950][ T5512] ? __pfx_do_file_open+0x10/0x10
[ 116.023968][ T5512] ? _raw_spin_unlock+0x28/0x50
[ 116.024013][ T5512] ? alloc_fd+0x651/0x6c0
[ 116.024027][ T5512] do_sys_openat2+0x115/0x200
[ 116.024039][ T5512] ? __se_sys_futex+0x3a8/0x450
[ 116.024060][ T5512] ? __pfx_do_sys_openat2+0x10/0x10
[ 116.024072][ T5512] ? exc_page_fault+0x6a/0xc0
[ 116.024084][ T5512] ? __pfx___se_sys_futex+0x10/0x10
[ 116.024098][ T5512] __x64_sys_openat+0x138/0x170
[ 116.024109][ T5512] do_syscall_64+0x166/0x520
[ 116.024122][ T5512] ? trace_irq_disable+0x3b/0x140
[ 116.024133][ T5512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.024145][ T5512] ? clear_bhb_loop+0x70/0xc0
[ 116.024157][ T5512] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.024168][ T5512] RIP: 0033:0x7fa04199e159
[ 116.024179][ T5512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 116.024187][ T5512] RSP: 002b:00007fff0259f088 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 116.024201][ T5512] RAX: ffffffffffffffda RBX: 00007fa041c25fa0 RCX: 00007fa04199e159
[ 116.024210][ T5512] RDX: 0000000000000800 RSI: 0000200000000680 RDI: ffffffffffffff9c
[ 116.024218][ T5512] RBP: 00007fa041a3506b R08: 0000000000000000 R09: 0000000000000000
[ 116.024225][ T5512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 116.024232][ T5512] R13: 00007fa041c25fac R14: 00007fa041c25fa0 R15: 00007fa041c25fa0
[ 116.024244][ T5512]
[ 116.024247][ T5512]
[ 116.024250][ T5512] Allocated by task 5512:
[ 116.024255][ T5512] kasan_save_track+0x3e/0x80
[ 116.024271][ T5512] __kasan_kmalloc+0x93/0xb0
[ 116.024279][ T5512] __kmalloc_noprof+0x36b/0x720
[ 116.024293][ T5512] user_preparse+0x9e/0x160
[ 116.024304][ T5512] __key_create_or_update+0x3a9/0xa80
[ 116.024315][ T5512] key_create_or_update+0x42/0x60
[ 116.024325][ T5512] __se_sys_add_key+0x349/0x420
[ 116.024337][ T5512] do_syscall_64+0x166/0x520
[ 116.024347][ T5512] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.024356][ T5512]
[ 116.024358][ T5512] The buggy address belongs to the object at ffff88801225e000
[ 116.024358][ T5512] which belongs to the cache kmalloc-512 of size 512
[ 116.024366][ T5512] The buggy address is located 270 bytes to the right of
[ 116.024366][ T5512] allocated 394-byte region [ffff88801225e000, ffff88801225e18a)
[ 116.024378][ T5512]
[ 116.024380][ T5512] The buggy address belongs to the physical page:
[ 116.024387][ T5512] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1225e
[ 116.024397][ T5512] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 116.024406][ T5512] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 116.024416][ T5512] page_type: f5(slab)
[ 116.024426][ T5512] raw: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122
[ 116.024435][ T5512] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 116.024445][ T5512] head: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122
[ 116.024454][ T5512] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 116.024462][ T5512] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 116.024470][ T5512] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 116.024475][ T5512] page dumped because: kasan: bad access detected
[ 116.024480][ T5512] page_owner tracks the page as allocated
[ 116.024485][ T5512] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5447, tgid 5447 (syz-executor), ts 113774270032
[ 116.024503][ T5512] post_alloc_hook+0x1f9/0x250
[ 116.024517][ T5512] get_page_from_freelist+0x2209/0x2280
[ 116.024531][ T5512] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 116.024546][ T5512] allocate_slab+0x7d/0x620
[ 116.024556][ T5512] refill_objects+0x2d5/0x350
[ 116.024566][ T5512] __pcs_replace_empty_main+0x2c8/0x6c0
[ 116.024576][ T5512] __kmalloc_noprof+0x47b/0x720
[ 116.024588][ T5512] fib6_info_alloc+0x30/0xf0
[ 116.024599][ T5512] ip6_route_info_create+0x149/0x890
[ 116.024610][ T5512] ip6_route_add+0x49/0x1b0
[ 116.024621][ T5512] addrconf_prefix_route+0x3a2/0x480
[ 116.024635][ T5512] inet6_addr_add+0x504/0xb50
[ 116.024647][ T5512] inet6_rtm_newaddr+0x9fc/0xe00
[ 116.024658][ T5512] rtnetlink_rcv_msg+0x802/0xc00
[ 116.024671][ T5512] netlink_rcv_skb+0x226/0x4a0
[ 116.024684][ T5512] netlink_unicast+0x7bd/0x940
[ 116.024696][ T5512] page last free pid 5421 tgid 5421 ts 110085182085 stack trace:
[ 116.024703][ T5512] __free_frozen_pages+0xc93/0xd90
[ 116.024743][ T5512] tlb_remove_table_rcu+0x85/0x100
[ 116.024756][ T5512] rcu_core+0x926/0x1260
[ 116.024765][ T5512] handle_softirqs+0x226/0x860
[ 116.024777][ T5512] __irq_exit_rcu+0xcb/0x220
[ 116.024788][ T5512] irq_exit_rcu+0x9/0x30
[ 116.024799][ T5512] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 116.024809][ T5512] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 116.024820][ T5512]
[ 116.024823][ T5512] Memory state around the buggy address:
[ 116.024828][ T5512] ffff88801225e180: 00 02 fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.024835][ T5512] ffff88801225e200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.024841][ T5512] >ffff88801225e280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.024846][ T5512] ^
[ 116.024851][ T5512] ffff88801225e300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.024858][ T5512] ffff88801225e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 116.024864][ T5512] ==================================================================
[ 116.200051][ T5512] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 116.343047][ T5512] CPU: 0 UID: 0 PID: 5512 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 116.346544][ T5512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 116.350918][ T5512] Call Trace:
[ 116.352412][ T5512]
[ 116.353675][ T5512] vpanic+0x56d/0xa60
[ 116.355366][ T5512] ? __pfx_vpanic+0x10/0x10
[ 116.357306][ T5512] panic+0xc5/0xd0
[ 116.359061][ T5512] ? __pfx_panic+0x10/0x10
[ 116.361098][ T5512] ? preempt_schedule_thunk+0x16/0x40
[ 116.363476][ T5512] ? preempt_schedule_thunk+0x16/0x40
[ 116.365830][ T5512] ? ecryptfs_write_tag_70_packet+0x1241/0x12e0
[ 116.368510][ T5512] check_panic_on_warn+0x89/0xb0
[ 116.370518][ T5512] ? ecryptfs_write_tag_70_packet+0x1241/0x12e0
[ 116.373162][ T5512] end_report+0x73/0x170
[ 116.374899][ T5512] ? ecryptfs_write_tag_70_packet+0x1241/0x12e0
[ 116.377532][ T5512] kasan_report+0x128/0x150
[ 116.379546][ T5512] ? ecryptfs_write_tag_70_packet+0x1241/0x12e0
[ 116.382248][ T5512] ecryptfs_write_tag_70_packet+0x1241/0x12e0
[ 116.384896][ T5512] ecryptfs_encrypt_and_encode_filename+0x576/0x1580
[ 116.387764][ T5512] ? __pfx_ecryptfs_encrypt_and_encode_filename+0x10/0x10
[ 116.390869][ T5512] ? d_alloc_parallel+0x1535/0x16b0
[ 116.392991][ T5512] ecryptfs_lookup+0x20e/0x780
[ 116.394837][ T5512] ? __pfx_ecryptfs_lookup+0x10/0x10
[ 116.397136][ T5512] ? d_lookup+0x1f/0xa0
[ 116.398915][ T5512] ? seqcount_lockdep_reader_access+0xa9/0x100
[ 116.401445][ T5512] lookup_open+0x9e1/0x1a40
[ 116.403416][ T5512] path_openat+0x677/0x1d60
[ 116.405373][ T5512] do_file_open+0x23e/0x4a0
[ 116.407082][ T5512] ? __pfx_do_file_open+0x10/0x10
[ 116.409340][ T5512] ? _raw_spin_unlock+0x28/0x50
[ 116.411561][ T5512] ? alloc_fd+0x651/0x6c0
[ 116.413593][ T5512] do_sys_openat2+0x115/0x200
[ 116.415744][ T5512] ? __se_sys_futex+0x3a8/0x450
[ 116.417948][ T5512] ? __pfx_do_sys_openat2+0x10/0x10
[ 116.420257][ T5512] ? exc_page_fault+0x6a/0xc0
[ 116.422243][ T5512] ? __pfx___se_sys_futex+0x10/0x10
[ 116.424055][ T5512] __x64_sys_openat+0x138/0x170
[ 116.425888][ T5512] do_syscall_64+0x166/0x520
[ 116.427768][ T5512] ? trace_irq_disable+0x3b/0x140
[ 116.429682][ T5512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.432045][ T5512] ? clear_bhb_loop+0x70/0xc0
[ 116.434056][ T5512] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 116.436275][ T5512] RIP: 0033:0x7fa04199e159
[ 116.438244][ T5512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 116.447083][ T5512] RSP: 002b:00007fff0259f088 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 116.450756][ T5512] RAX: ffffffffffffffda RBX: 00007fa041c25fa0 RCX: 00007fa04199e159
[ 116.454144][ T5512] RDX: 0000000000000800 RSI: 0000200000000680 RDI: ffffffffffffff9c
[ 116.457645][ T5512] RBP: 00007fa041a3506b R08: 0000000000000000 R09: 0000000000000000
[ 116.461144][ T5512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 116.464623][ T5512] R13: 00007fa041c25fac R14: 00007fa041c25fa0 R15: 00007fa041c25fa0
[ 116.468109][ T5512]
[ 116.469971][ T5512] Kernel Offset: disabled
[ 116.471966][ T5512] Rebooting in 86400 seconds..
VM DIAGNOSIS:
13:50:13 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000029f900
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff8574ccd0
R12=dffffc0000000000 R13=0000000000000020 R14=ffffffff9ad496c0 R15=0000000000000000
RIP=ffffffff8574cd4c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808c2c2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4c16c04a90 CR3=0000000043474000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c16b0fea0 00007f4c16d9b5f0
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c16b0fea0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 362e322e325f4342 494c4700352e322e
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000002e322e
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a8
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c16d9bb20 00007f4c16d9c050
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000