2017/08/20 04:50:59 parsed 1 programs 2017/08/20 04:50:59 executed programs: 0 syzkaller login: [ 35.382246] ================================================================== [ 35.384022] BUG: KASAN: use-after-free in free_ldt_struct.part.2+0x10a/0x150 [ 35.385403] Read of size 4 at addr ffff88006ce6ad48 by task init/1 [ 35.386742] [ 35.387052] CPU: 2 PID: 1 Comm: init Not tainted 4.13.0-rc5-next-20170817+ #5 [ 35.388560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 35.390257] Call Trace: [ 35.390767] dump_stack+0x194/0x257 [ 35.391501] ? arch_local_irq_restore+0x53/0x53 [ 35.392519] ? show_regs_print_info+0x65/0x65 [ 35.393365] ? __perf_event_task_sched_out+0x268/0x1360 [ 35.394511] ? free_ldt_struct.part.2+0x10a/0x150 [ 35.395432] print_address_description+0x73/0x250 [ 35.399662] ? free_ldt_struct.part.2+0x10a/0x150 [ 35.400363] kasan_report+0x24e/0x340 [ 35.400923] __asan_report_load4_noabort+0x14/0x20 [ 35.401791] free_ldt_struct.part.2+0x10a/0x150 [ 35.402470] destroy_context_ldt+0x60/0x80 [ 35.403096] __mmdrop+0xe9/0x530 [ 35.403749] ? sighand_ctor+0x50/0x50 [ 35.404317] ? finish_task_switch+0x1d3/0x740 [ 35.404983] ? lock_downgrade+0x990/0x990 [ 35.405725] ? do_raw_spin_trylock+0x190/0x190 [ 35.406402] ? lock_release+0xa40/0xa40 [ 35.407023] ? compat_start_thread+0x80/0x80 [ 35.407923] ? __schedule+0x8b7/0x2070 [ 35.408590] finish_task_switch+0x456/0x740 [ 35.409262] ? preempt_notifier_dec+0x20/0x20 [ 35.409979] ? sched_clock_cpu+0x1b/0x170 [ 35.410666] __schedule+0x8f0/0x2070 [ 35.411328] ? __sched_text_start+0x8/0x8 [ 35.411913] ? hrtimer_start_range_ns+0x687/0xeb0 [ 35.412466] ? lock_downgrade+0x990/0x990 [ 35.412906] ? do_raw_spin_trylock+0x190/0x190 [ 35.413326] ? __remove_hrtimer+0x190/0x190 [ 35.413740] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 35.414248] ? lock_hrtimer_base.isra.21+0x75/0x130 [ 35.414736] ? trace_hardirqs_on+0xd/0x10 [ 35.415148] schedule+0x108/0x440 [ 35.415487] ? __schedule+0x2070/0x2070 [ 35.415898] ? lock_acquire+0x1d5/0x580 [ 35.416275] ? select_estimate_accuracy+0xc6/0x450 [ 35.416747] ? lock_downgrade+0x990/0x990 [ 35.417153] ? memset+0x31/0x40 [ 35.417794] ? __hrtimer_init+0x4e/0x140 [ 35.418115] schedule_hrtimeout_range_clock+0x23e/0x810 [ 35.418532] ? hrtimer_nanosleep_restart+0x4f0/0x4f0 [ 35.418918] ? kvm_clock_get_cycles+0x20/0x30 [ 35.419420] ? ktime_get_ts64+0x328/0x4d0 [ 35.419919] ? get_monotonic_coarse64+0x470/0x470 [ 35.420808] ? __hrtimer_init+0x140/0x140 [ 35.421495] ? add_wait_queue+0x1bb/0x2d0 [ 35.422184] schedule_hrtimeout_range+0x2a/0x40 [ 35.422660] poll_schedule_timeout+0x10f/0x1f0 [ 35.423259] ? poll_freewait+0x250/0x250 [ 35.423655] ? check_same_owner+0x320/0x320 [ 35.424078] ? poll_initwait+0x180/0x180 [ 35.424607] do_select+0x11ea/0x1710 [ 35.425279] ? select_estimate_accuracy+0x450/0x450 [ 35.426190] ? unwind_get_return_address+0x61/0xa0 [ 35.427064] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 35.427978] ? depot_save_stack+0x12c/0x490 [ 35.428733] ? putname+0xee/0x130 [ 35.429327] ? save_stack+0xa3/0xd0 [ 35.429966] ? set_fd_set.part.0+0x70/0x70 [ 35.430690] ? lock_acquire+0x1d5/0x580 [ 35.431389] ? avc_has_perm+0x35e/0x680 [ 35.432016] ? lock_downgrade+0x990/0x990 [ 35.432632] ? lock_release+0xa40/0xa40 [ 35.433092] ? terminate_walk+0x1c8/0x550 [ 35.433538] ? lock_acquire+0x1d5/0x580 [ 35.433943] ? lock_acquire+0x1d5/0x580 [ 35.434342] ? __might_fault+0x110/0x1d0 [ 35.434757] ? lock_downgrade+0x990/0x990 [ 35.435478] ? lock_release+0xa40/0xa40 [ 35.436042] ? check_same_owner+0x320/0x320 [ 35.436474] ? __check_object_size+0x25d/0x4f0 [ 35.436876] ? __might_sleep+0x95/0x190 [ 35.437207] ? kasan_check_write+0x14/0x20 [ 35.437566] core_sys_select+0x480/0x960 [ 35.437870] ? core_sys_select+0x480/0x960 [ 35.438189] ? poll_select_set_timeout+0x210/0x210 [ 35.438581] ? kvm_clock_get_cycles+0x25/0x30 [ 35.440221] ? timespec64_add_safe+0x1bb/0x2c0 [ 35.440805] ? poll_select_set_timeout+0x12f/0x210 [ 35.441318] ? do_restart_poll+0x2a0/0x2a0 [ 35.441841] ? kasan_check_write+0x14/0x20 [ 35.442285] SyS_select+0x194/0x230 [ 35.442739] ? core_sys_select+0x960/0x960 [ 35.443198] ? debug_locks_off+0x86/0xa0 [ 35.443677] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 35.444162] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 35.444725] RIP: 0033:0x7fea0b20ddd3 [ 35.445092] RSP: 002b:00007ffcd7ebb0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 35.445935] RAX: ffffffffffffffda RBX: 00007ffcd7ebb2a0 RCX: 00007fea0b20ddd3 [ 35.446730] RDX: 0000000000000000 RSI: 00007ffcd7ebb450 RDI: 000000000000000b [ 35.447471] RBP: 00007ffcd7ebb450 R08: 00007ffcd7ebb4d0 R09: 0000000000000001 [ 35.448272] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 35.449096] R13: 00007ffcd7ebb830 R14: 0000000000000000 R15: 0000000000000000 [ 35.449937] [ 35.450104] Allocated by task 5485: [ 35.450465] save_stack_trace+0x16/0x20 [ 35.450939] save_stack+0x43/0xd0 [ 35.451294] kasan_kmalloc+0xad/0xe0 [ 35.451696] kmem_cache_alloc_trace+0x136/0x750 [ 35.452199] alloc_ldt_struct+0x52/0x140 [ 35.452604] write_ldt+0x3ea/0xab0 [ 35.453023] sys_modify_ldt+0x1ef/0x240 [ 35.453421] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 35.453912] [ 35.454039] Freed by task 5522: [ 35.454286] save_stack_trace+0x16/0x20 [ 35.454561] save_stack+0x43/0xd0 [ 35.454837] kasan_slab_free+0x71/0xc0 [ 35.455158] kfree+0xca/0x250 [ 35.455379] free_ldt_struct.part.2+0xdd/0x150 [ 35.455717] destroy_context_ldt+0x60/0x80 [ 35.456035] __mmdrop+0xe9/0x530 [ 35.456290] mmput+0x541/0x6e0 [ 35.456513] copy_process.part.36+0x22e1/0x4af0 [ 35.456869] _do_fork+0x1ef/0xfb0 [ 35.457156] SyS_clone+0x37/0x50 [ 35.457397] do_syscall_64+0x26c/0x8c0 [ 35.457672] return_from_SYSCALL_64+0x0/0x7a [ 35.458027] [ 35.458166] The buggy address belongs to the object at ffff88006ce6ad40 [ 35.458166] which belongs to the cache kmalloc-32 of size 32 [ 35.459309] The buggy address is located 8 bytes inside of [ 35.459309] 32-byte region [ffff88006ce6ad40, ffff88006ce6ad60) [ 35.461167] The buggy address belongs to the page: [ 35.461535] page:ffffea0001b39a80 count:1 mapcount:0 mapping:ffff88006ce6a000 index:0xffff88006ce6afc1 [ 35.462301] flags: 0x500000000000100(slab) [ 35.462610] raw: 0500000000000100 ffff88006ce6a000 ffff88006ce6afc1 000000010000003d [ 35.463441] raw: ffffea0001b39ee0 ffffea0001af9da0 ffff88003e8001c0 0000000000000000 [ 35.464219] page dumped because: kasan: bad access detected [ 35.464720] [ 35.464867] Memory state around the buggy address: [ 35.465396] ffff88006ce6ac00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 35.466027] ffff88006ce6ac80: fb fb fb fb fc fc fc fc 00 00 06 fc fc fc fc fc [ 35.466601] >ffff88006ce6ad00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 35.467237] ^ [ 35.467735] ffff88006ce6ad80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 35.468462] ffff88006ce6ae00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 35.468905] ================================================================== [ 35.469390] ================================================================== [ 35.469470] Kernel panic - not syncing: panic_on_warn set ... [ 35.469470] [ 35.469476] CPU: 2 PID: 1 Comm: init Tainted: G B 4.13.0-rc5-next-20170817+ #5 [ 35.469478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 35.469479] Call Trace: [ 35.469486] dump_stack+0x194/0x257 [ 35.469493] ? arch_local_irq_restore+0x53/0x53 [ 35.469499] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 35.469507] ? free_ldt_struct.part.2+0x60/0x150 [ 35.469513] panic+0x1e4/0x417 [ 35.469518] ? __warn+0x1d9/0x1d9 [ 35.469529] ? free_ldt_struct.part.2+0x10a/0x150 [ 35.469534] kasan_end_report+0x50/0x50 [ 35.469538] kasan_report+0x137/0x340 [ 35.469544] __asan_report_load4_noabort+0x14/0x20 [ 35.469547] free_ldt_struct.part.2+0x10a/0x150 [ 35.469552] destroy_context_ldt+0x60/0x80 [ 35.469556] __mmdrop+0xe9/0x530 [ 35.469561] ? sighand_ctor+0x50/0x50 [ 35.469567] ? finish_task_switch+0x1d3/0x740 [ 35.469573] ? lock_downgrade+0x990/0x990 [ 35.469578] ? do_raw_spin_trylock+0x190/0x190 [ 35.469583] ? lock_release+0xa40/0xa40 [ 35.469586] ? compat_start_thread+0x80/0x80 [ 35.469594] ? __schedule+0x8b7/0x2070 [ 35.469602] finish_task_switch+0x456/0x740 [ 35.469610] ? preempt_notifier_dec+0x20/0x20 [ 35.469613] ? sched_clock_cpu+0x1b/0x170 [ 35.469623] __schedule+0x8f0/0x2070 [ 35.469632] ? __sched_text_start+0x8/0x8 [ 35.469638] ? hrtimer_start_range_ns+0x687/0xeb0 [ 35.469643] ? lock_downgrade+0x990/0x990 [ 35.469650] ? do_raw_spin_trylock+0x190/0x190 [ 35.469655] ? __remove_hrtimer+0x190/0x190 [ 35.469661] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 35.469668] ? lock_hrtimer_base.isra.21+0x75/0x130 [ 35.469675] ? trace_hardirqs_on+0xd/0x10 [ 35.469683] schedule+0x108/0x440 [ 35.469690] ? __schedule+0x2070/0x2070 [ 35.469695] ? lock_acquire+0x1d5/0x580 [ 35.469700] ? select_estimate_accuracy+0xc6/0x450 [ 35.469706] ? lock_downgrade+0x990/0x990 [ 35.469714] ? memset+0x31/0x40 [ 35.469720] ? __hrtimer_init+0x4e/0x140 [ 35.469727] schedule_hrtimeout_range_clock+0x23e/0x810 [ 35.469734] ? hrtimer_nanosleep_restart+0x4f0/0x4f0 [ 35.469739] ? kvm_clock_get_cycles+0x20/0x30 [ 35.469743] ? ktime_get_ts64+0x328/0x4d0 [ 35.469751] ? get_monotonic_coarse64+0x470/0x470 [ 35.469758] ? __hrtimer_init+0x140/0x140 [ 35.469764] ? add_wait_queue+0x1bb/0x2d0 [ 35.469773] schedule_hrtimeout_range+0x2a/0x40 [ 35.469779] poll_schedule_timeout+0x10f/0x1f0 [ 35.469785] ? poll_freewait+0x250/0x250 [ 35.469789] ? check_same_owner+0x320/0x320 [ 35.469795] ? poll_initwait+0x180/0x180 [ 35.469802] do_select+0x11ea/0x1710 [ 35.469823] ? select_estimate_accuracy+0x450/0x450 [ 35.469828] ? unwind_get_return_address+0x61/0xa0 [ 35.469835] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 35.469841] ? depot_save_stack+0x12c/0x490 [ 35.469847] ? putname+0xee/0x130 [ 35.469852] ? save_stack+0xa3/0xd0 [ 35.469861] ? set_fd_set.part.0+0x70/0x70 [ 35.469867] ? lock_acquire+0x1d5/0x580 [ 35.469872] ? avc_has_perm+0x35e/0x680 [ 35.469877] ? lock_downgrade+0x990/0x990 [ 35.469884] ? lock_release+0xa40/0xa40 [ 35.469888] ? terminate_walk+0x1c8/0x550 [ 35.469896] ? lock_acquire+0x1d5/0x580 [ 35.469900] ? lock_acquire+0x1d5/0x580 [ 35.469905] ? __might_fault+0x110/0x1d0 [ 35.469910] ? lock_downgrade+0x990/0x990 [ 35.469917] ? lock_release+0xa40/0xa40 [ 35.469923] ? check_same_owner+0x320/0x320 [ 35.469926] ? __check_object_size+0x25d/0x4f0 [ 35.469932] ? __might_sleep+0x95/0x190 [ 35.469941] ? kasan_check_write+0x14/0x20 [ 35.469948] core_sys_select+0x480/0x960 [ 35.469952] ? core_sys_select+0x480/0x960 [ 35.469960] ? poll_select_set_timeout+0x210/0x210 [ 35.469968] ? kvm_clock_get_cycles+0x25/0x30 [ 35.469976] ? timespec64_add_safe+0x1bb/0x2c0 [ 35.469991] ? poll_select_set_timeout+0x12f/0x210 [ 35.469996] ? do_restart_poll+0x2a0/0x2a0 [ 35.470005] ? kasan_check_write+0x14/0x20 [ 35.470013] SyS_select+0x194/0x230 [ 35.470020] ? core_sys_select+0x960/0x960 [ 35.470027] ? debug_locks_off+0x86/0xa0 [ 35.470033] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 35.470041] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 35.470045] RIP: 0033:0x7fea0b20ddd3 [ 35.470048] RSP: 002b:00007ffcd7ebb0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 35.470053] RAX: ffffffffffffffda RBX: 00007ffcd7ebb2a0 RCX: 00007fea0b20ddd3 [ 35.470055] RDX: 0000000000000000 RSI: 00007ffcd7ebb450 RDI: 000000000000000b [ 35.470058] RBP: 00007ffcd7ebb450 R08: 00007ffcd7ebb4d0 R09: 0000000000000001 [ 35.470061] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 35.470063] R13: 00007ffcd7ebb830 R14: 0000000000000000 R15: 0000000000000000 [ 35.508893] BUG: KASAN: double-free or invalid-free in free_ldt_struct.part.2+0xdd/0x150 [ 35.509600] [ 35.509773] CPU: 0 PID: 3084 Comm: syz-executor5 Tainted: G B 4.13.0-rc5-next-20170817+ #5 [ 35.510612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Bochs 01/01/2011 [ 35.511367] Call Trace: [ 35.511619] dump_stack+0x194/0x257 [ 35.511960] ? arch_local_irq_restore+0x53/0x53 [ 35.512388] ? show_regs_print_info+0x65/0x65 [ 35.512802] ? free_ldt_struct.part.2+0xdd/0x150 [ 35.513222] ? free_ldt_struct.part.2+0xdd/0x150 [ 35.513642] print_address_description+0x73/0x250 [ 35.514055] ? free_ldt_struct.part.2+0xdd/0x150 [ 35.514463] ? free_ldt_struct.part.2+0xdd/0x150 [ 35.514870] kasan_report_double_free+0x55/0x80 [ 35.515279] kasan_slab_free+0xa3/0xc0 [ 35.515616] kfree+0xca/0x250 [ 35.515884] free_ldt_struct.part.2+0xdd/0x150 [ 35.516283] destroy_context_ldt+0x60/0x80 [ 35.516648] __mmdrop+0xe9/0x530 [ 35.516940] ? sighand_ctor+0x50/0x50 [ 35.517261] ? finish_task_switch+0x1d3/0x740 [ 35.517648] ? lock_downgrade+0x990/0x990 [ 35.518010] ? do_raw_spin_trylock+0x190/0x190 [ 35.518413] ? lock_release+0xa40/0xa40 [ 35.518758] ? compat_start_thread+0x80/0x80 [ 35.519157] ? __schedule+0x8b7/0x2070 [ 35.519496] finish_task_switch+0x456/0x740 [ 35.519867] ? preempt_notifier_dec+0x20/0x20 [ 35.520255] ? sched_clock_cpu+0x1b/0x170 [ 35.520616] __schedule+0x8f0/0x2070 [ 35.520959] ? __sched_text_start+0x8/0x8 [ 35.521334] ? hrtimer_start_range_ns+0x687/0xeb0 [ 35.521753] ? lock_downgrade+0x990/0x990 [ 35.522116] ? do_raw_spin_trylock+0x190/0x190 [ 35.522456] ? __remove_hrtimer+0x190/0x190 [ 35.522747] ? lock_hrtimer_base.isra.21+0x75/0x130 [ 35.523104] ? trace_hardirqs_on+0xd/0x10 [ 35.523386] schedule+0x108/0x440 [ 35.523625] ? __schedule+0x2070/0x2070 [ 35.523956] ? do_wait+0x50a/0xa90 [ 35.524287] ? wait_consider_task+0x33c0/0x33c0 [ 35.524735] ? __might_sleep+0x95/0x190 [ 35.525649] do_nanosleep+0x215/0x6f0 [ 35.525923] ? schedule_timeout_idle+0x90/0x90 [ 35.526232] ? lock_acquire+0x1d5/0x580 [ 35.526554] ? __might_fault+0x110/0x1d0 [ 35.526907] ? memset+0x31/0x40 [ 35.527218] hrtimer_nanosleep+0x2b2/0x860 [ 35.527641] ? SyS_waitid+0x50/0x50 [ 35.527963] ? nanosleep_copyout+0x100/0x100 [ 35.528345] ? __might_sleep+0x95/0x190 [ 35.528730] ? kasan_check_write+0x14/0x20 [ 35.529100] ? _copy_from_user+0x99/0x110 [ 35.529491] ? __hrtimer_init+0x140/0x140 [ 35.529859] SyS_nanosleep+0x175/0x1f0 [ 35.530206] ? hrtimer_nanosleep+0x860/0x860 [ 35.530650] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 35.531072] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 35.531511] RIP: 0033:0x4704e0 [ 35.531789] RSP: 002b:00007ffc172fed08 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 35.532446] RAX: ffffffffffffffda RBX: 0000000000008a5c RCX: 00000000004704e0 [ 35.533091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffc172fed10 [ 35.533731] RBP: 00007ffc172fed20 R08: 0000000000000c0c R09: 0000000000000000 [ 35.534348] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc172fece0 [ 35.534965] R13: 00000000000015bd R14: 0000000000000016 R15: 0000000000008a24 [ 35.535615] [ 35.535758] Allocated by task 5567: [ 35.536071] save_stack_trace+0x16/0x20 [ 35.536410] save_stack+0x43/0xd0 [ 35.536739] kasan_kmalloc+0xad/0xe0 [ 35.537058] kmem_cache_alloc_trace+0x136/0x750 [ 35.537457] alloc_ldt_struct+0x52/0x140 [ 35.537831] write_ldt+0x3ea/0xab0 [ 35.538134] sys_modify_ldt+0x1ef/0x240 [ 35.538475] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 35.538907] [ 35.539053] Freed by task 5598: [ 35.539332] save_stack_trace+0x16/0x20 [ 35.539699] save_stack+0x43/0xd0 [ 35.539995] kasan_slab_free+0x71/0xc0 [ 35.540326] kfree+0xca/0x250 [ 35.540620] free_ldt_struct.part.2+0xdd/0x150 [ 35.541011] destroy_context_ldt+0x60/0x80 [ 35.541374] __mmdrop+0xe9/0x530 [ 35.541686] mmput+0x541/0x6e0 [ 35.541959] copy_process.part.36+0x22e1/0x4af0 [ 35.542356] _do_fork+0x1ef/0xfb0 [ 35.542677] SyS_clone+0x37/0x50 [ 35.542978] do_syscall_64+0x26c/0x8c0 [ 35.543224] return_from_SYSCALL_64+0x0/0x7a [ 35.543468] [ 35.543620] The buggy address belongs to the object at ffff88006d8901c0 [ 35.543620] which belongs to the cache kmalloc-32 of size 32 [ 35.544511] The buggy address is located 0 bytes inside of [ 35.544511] 32-byte region [ffff88006d8901c0, ffff88006d8901e0) [ 35.545211] The buggy address belongs to the page: [ 35.546308] page:ffffea0001b62400 count:1 mapcount:0 mapping:ffff88006d890000 index:0xffff88006d890fc1 [ 35.546855] flags: 0x500000000000100(slab) [ 35.547174] raw: 0500000000000100 ffff88006d890000 ffff88006d890fc1 000000010000003f [ 35.547839] raw: ffffea0001b62760 ffffea0001b626a0 ffff88003e8001c0 0000000000000000 [ 35.548505] page dumped because: kasan: bad access detected [ 35.548989] [ 35.549132] Memory state around the buggy address: [ 35.549556] ffff88006d890080: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 35.550187] ffff88006d890100: 00 00 00 fc fc fc fc fc fb fb fb fb fc fc fc fc [ 35.550814] >ffff88006d890180: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 35.551440] ^ [ 35.551905] ffff88006d890200: 00 00 fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 35.552514] ffff88006d890280: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 35.553128] ==================================================================