Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts.
2026/05/02 21:21:17 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 131.848183][ T6138] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 132.869998][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.871672][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[ 136.387839][ T1565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 136.387857][ T1565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 136.607419][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 136.607437][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 137.932492][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 137.963944][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 137.965467][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 137.966429][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 138.013317][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 139.987069][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state
[ 139.987280][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state
[ 139.987420][ T6202] bridge_slave_0: entered allmulticast mode
[ 139.989157][ T6202] bridge_slave_0: entered promiscuous mode
[ 139.997450][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state
[ 139.997778][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state
[ 139.997995][ T6202] bridge_slave_1: entered allmulticast mode
[ 140.000924][ T6202] bridge_slave_1: entered promiscuous mode
[ 140.054810][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 140.060122][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 140.179909][ T6202] team0: Port device team_slave_0 added
[ 140.182680][ T6202] team0: Port device team_slave_1 added
[ 140.216065][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 140.216081][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 140.216104][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 140.219782][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 140.219797][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 140.219818][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 140.299073][ T6202] hsr_slave_0: entered promiscuous mode
[ 140.300869][ T6202] hsr_slave_1: entered promiscuous mode
[ 142.132752][ T6202] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 142.173485][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 142.174822][ T6202] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 142.216387][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 142.225625][ T6202] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 142.252335][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 142.253674][ T6202] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 142.303579][ T6202] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 142.493239][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0
[ 142.535135][ T6202] 8021q: adding VLAN 0 to HW filter on device team0
[ 142.567037][ T155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 142.582227][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 142.605833][ T155] bridge0: port 2(bridge_slave_1) entered blocking state
[ 142.606064][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 143.485839][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 143.623568][ T6202] veth0_vlan: entered promiscuous mode
[ 143.642457][ T6202] veth1_vlan: entered promiscuous mode
[ 143.710053][ T6202] veth0_macvtap: entered promiscuous mode
[ 143.735180][ T6202] veth1_macvtap: entered promiscuous mode
[ 143.779057][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 143.807617][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 143.843328][ T155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 143.849784][ T155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 143.849827][ T155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 143.849858][ T155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 144.642631][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 145.444306][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 145.918784][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 146.173710][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 147.238013][ T155] bridge_slave_1: left allmulticast mode
[ 147.238047][ T155] bridge_slave_1: left promiscuous mode
[ 147.238331][ T155] bridge0: port 2(bridge_slave_1) entered disabled state
2026/05/02 21:21:37 executed programs: 0
[ 147.351431][ T155] bridge_slave_0: left allmulticast mode
[ 147.351463][ T155] bridge_slave_0: left promiscuous mode
[ 147.351717][ T155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.464879][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 147.477539][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 147.486410][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 147.503774][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 147.505515][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 148.087377][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 148.167479][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 148.188513][ T155] bond0 (unregistering): Released all slaves
[ 148.566862][ T155] hsr_slave_0: left promiscuous mode
[ 148.606764][ T155] hsr_slave_1: left promiscuous mode
[ 148.607902][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 148.607925][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 148.648808][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 148.648833][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 148.727901][ T155] veth1_macvtap: left promiscuous mode
[ 148.727961][ T155] veth0_macvtap: left promiscuous mode
[ 148.728118][ T155] veth1_vlan: left promiscuous mode
[ 148.728219][ T155] veth0_vlan: left promiscuous mode
[ 149.377272][ T155] team0 (unregistering): Port device team_slave_1 removed
[ 149.427327][ T155] team0 (unregistering): Port device team_slave_0 removed
[ 149.576855][ T4928] Bluetooth: hci0: command tx timeout
[ 149.609637][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1
[ 150.266288][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2
[ 150.305685][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state
[ 150.305927][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state
[ 150.306070][ T6420] bridge_slave_0: entered allmulticast mode
[ 150.320211][ T6420] bridge_slave_0: entered promiscuous mode
[ 150.331632][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state
[ 150.331903][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state
[ 150.332129][ T6420] bridge_slave_1: entered allmulticast mode
[ 150.336161][ T6420] bridge_slave_1: entered promiscuous mode
[ 150.458460][ T6420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 150.463982][ T6420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 150.524514][ T6420] team0: Port device team_slave_0 added
[ 150.529445][ T6420] team0: Port device team_slave_1 added
[ 150.593681][ T6420] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 150.593695][ T6420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 150.593716][ T6420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 150.597347][ T6420] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 150.597360][ T6420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 150.597381][ T6420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 150.912123][ T6420] hsr_slave_0: entered promiscuous mode
[ 150.914086][ T6420] hsr_slave_1: entered promiscuous mode
[ 150.984989][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3
[ 151.656813][ T4928] Bluetooth: hci0: command tx timeout
[ 152.866123][ T6420] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 152.912810][ T6420] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 152.914635][ T6420] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 152.965853][ T6420] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 152.967510][ T6420] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 153.008552][ T6420] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 153.009896][ T6420] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 153.053859][ T6420] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 153.246368][ T6420] 8021q: adding VLAN 0 to HW filter on device bond0
[ 153.275198][ T6420] 8021q: adding VLAN 0 to HW filter on device team0
[ 153.285503][ T155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 153.289028][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 153.308941][ T155] bridge0: port 2(bridge_slave_1) entered blocking state
[ 153.309082][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 153.650802][ T6420] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 153.710421][ T6420] veth0_vlan: entered promiscuous mode
[ 153.724448][ T6420] veth1_vlan: entered promiscuous mode
[ 153.737294][ T4928] Bluetooth: hci0: command tx timeout
[ 153.759552][ T6420] veth0_macvtap: entered promiscuous mode
[ 153.768072][ T6420] veth1_macvtap: entered promiscuous mode
[ 153.793412][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 153.804397][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 153.817548][ T250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 153.817788][ T250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 153.818011][ T250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 153.818234][ T250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 154.132295][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 154.132312][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 154.187199][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 154.187217][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/05/02 21:21:44 executed programs: 2
[ 155.131090][ T6563] ==================================================================
[ 155.131101][ T6563] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x31/0x190
[ 155.131119][ T6563] Read of size 8 at addr ffff888041438c30 by task syz.0.17/6563
[ 155.131128][ T6563]
[ 155.131145][ T6563] CPU: 0 UID: 0 PID: 6563 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 155.131160][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 155.131172][ T6563] Call Trace:
[ 155.131176][ T6563]
[ 155.131181][ T6563] dump_stack_lvl+0xe8/0x150
[ 155.131195][ T6563] print_address_description+0x55/0x1e0
[ 155.131208][ T6563] ? __list_del_entry_valid_or_report+0x31/0x190
[ 155.131217][ T6563] print_report+0x58/0x70
[ 155.131227][ T6563] kasan_report+0x117/0x150
[ 155.131240][ T6563] ? __list_del_entry_valid_or_report+0x31/0x190
[ 155.131251][ T6563] __list_del_entry_valid_or_report+0x31/0x190
[ 155.131261][ T6563] fuse_read_interrupt+0xdb/0x410
[ 155.131272][ T6563] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 155.131287][ T6563] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 155.131296][ T6563] ? preempt_count_add+0x91/0x190
[ 155.131308][ T6563] ? aa_file_perm+0x192/0x15f0
[ 155.131325][ T6563] fuse_dev_do_read+0xa65/0x1280
[ 155.131335][ T6563] ? call_rcu+0xee/0x890
[ 155.131347][ T6563] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 155.131357][ T6563] ? __pfx_aa_file_perm+0x10/0x10
[ 155.131369][ T6563] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 155.131384][ T6563] fuse_dev_read+0x16a/0x200
[ 155.131393][ T6563] ? __pfx_fuse_dev_read+0x10/0x10
[ 155.131404][ T6563] ? rw_verify_area+0x2ac/0x4e0
[ 155.131415][ T6563] ? fuse_dev_poll+0x1a7/0x1e0
[ 155.131424][ T6563] ? __pfx_fuse_dev_read+0x10/0x10
[ 155.131432][ T6563] __io_read+0x72f/0x1500
[ 155.131447][ T6563] ? do_raw_spin_lock+0x12b/0x2f0
[ 155.131468][ T6563] ? __pfx___io_read+0x10/0x10
[ 155.131480][ T6563] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 155.131494][ T6563] io_read+0x4a/0x1c0
[ 155.131506][ T6563] ? rt_spin_lock+0x1e0/0x400
[ 155.131517][ T6563] __io_issue_sqe+0x180/0x4b0
[ 155.131531][ T6563] io_issue_sqe+0x165/0xf60
[ 155.131543][ T6563] ? io_poll_remove_entries+0x63/0x610
[ 155.131558][ T6563] io_req_task_submit+0xe6/0x180
[ 155.131569][ T6563] io_poll_task_func+0x8d4/0xb20
[ 155.131584][ T6563] ? __pfx_io_poll_task_func+0x10/0x10
[ 155.131598][ T6563] ? percpu_ref_get+0x1c/0x1d0
[ 155.131606][ T6563] ? percpu_ref_get+0x1c/0x1d0
[ 155.131614][ T6563] ? __pfx_io_poll_task_func+0x10/0x10
[ 155.131633][ T6563] io_handle_tw_list+0x258/0x540
[ 155.131643][ T6563] tctx_task_work_run+0x55/0x300
[ 155.131657][ T6563] tctx_task_work+0x3f/0x90
[ 155.131665][ T6563] task_work_run+0x1d9/0x270
[ 155.131676][ T6563] ? __pfx_task_work_run+0x10/0x10
[ 155.131687][ T6563] get_signal+0x11eb/0x1330
[ 155.131699][ T6563] ? kasan_quarantine_put+0xbb/0x1f0
[ 155.131713][ T6563] ? lockdep_hardirqs_on+0x7a/0x110
[ 155.131728][ T6563] arch_do_signal_or_restart+0xbc/0x830
[ 155.131740][ T6563] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 155.131749][ T6563] ? do_sys_openat2+0x14c/0x200
[ 155.131760][ T6563] ? ksys_write+0x248/0x270
[ 155.131772][ T6563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.131781][ T6563] exit_to_user_mode_loop+0x86/0x480
[ 155.131795][ T6563] ? rcu_is_watching+0x15/0xb0
[ 155.131804][ T6563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.131813][ T6563] do_syscall_64+0x33e/0xf80
[ 155.131826][ T6563] ? trace_irq_disable+0x3b/0x140
[ 155.131838][ T6563] ? clear_bhb_loop+0x40/0x90
[ 155.131849][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.131858][ T6563] RIP: 0033:0x7f8224bdc819
[ 155.131873][ T6563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 155.131881][ T6563] RSP: 002b:00007f8224215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 155.131897][ T6563] RAX: fffffffffffffffc RBX: 00007f8224e56090 RCX: 00007f8224bdc819
[ 155.131905][ T6563] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 155.131911][ T6563] RBP: 00007f8224c72c91 R08: 0000000000000000 R09: 0000000000000000
[ 155.131923][ T6563] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 155.131929][ T6563] R13: 00007f8224e56128 R14: 00007f8224e56090 R15: 00007fff7755ce28
[ 155.131938][ T6563]
[ 155.131942][ T6563]
[ 155.131944][ T6563] Allocated by task 6563:
[ 155.131952][ T6563] kasan_save_track+0x3e/0x80
[ 155.131962][ T6563] __kasan_slab_alloc+0x6c/0x80
[ 155.131971][ T6563] kmem_cache_alloc_noprof+0x33b/0x680
[ 155.131982][ T6563] fuse_get_req+0x6c3/0xac0
[ 155.131995][ T6563] fuse_chan_send+0x2d6/0x1aa0
[ 155.132007][ T6563] fuse_lookup_name+0x360/0x8d0
[ 155.132016][ T6563] fuse_lookup+0x204/0x500
[ 155.132026][ T6563] fuse_atomic_open+0x196/0x440
[ 155.132036][ T6563] atomic_open+0x14f/0x370
[ 155.132047][ T6563] path_openat+0x1108/0x38a0
[ 155.132057][ T6563] do_file_open+0x23e/0x4a0
[ 155.132067][ T6563] do_sys_openat2+0x113/0x200
[ 155.132074][ T6563] __x64_sys_openat+0x138/0x170
[ 155.132082][ T6563] do_syscall_64+0x15f/0xf80
[ 155.132093][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.132101][ T6563]
[ 155.132103][ T6563] Freed by task 6563:
[ 155.132107][ T6563] kasan_save_track+0x3e/0x80
[ 155.132116][ T6563] kasan_save_free_info+0x46/0x50
[ 155.132129][ T6563] __kasan_slab_free+0x5c/0x80
[ 155.132138][ T6563] kmem_cache_free+0x187/0x6c0
[ 155.132148][ T6563] fuse_chan_send+0x150a/0x1aa0
[ 155.132160][ T6563] fuse_lookup_name+0x360/0x8d0
[ 155.132170][ T6563] fuse_lookup+0x204/0x500
[ 155.132179][ T6563] fuse_atomic_open+0x196/0x440
[ 155.132190][ T6563] atomic_open+0x14f/0x370
[ 155.132200][ T6563] path_openat+0x1108/0x38a0
[ 155.132209][ T6563] do_file_open+0x23e/0x4a0
[ 155.132219][ T6563] do_sys_openat2+0x113/0x200
[ 155.132227][ T6563] __x64_sys_openat+0x138/0x170
[ 155.132234][ T6563] do_syscall_64+0x15f/0xf80
[ 155.132246][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.132254][ T6563]
[ 155.132256][ T6563] The buggy address belongs to the object at ffff888041438c18
[ 155.132256][ T6563] which belongs to the cache fuse_request of size 280
[ 155.132264][ T6563] The buggy address is located 24 bytes inside of
[ 155.132264][ T6563] freed 280-byte region [ffff888041438c18, ffff888041438d30)
[ 155.132273][ T6563]
[ 155.132276][ T6563] The buggy address belongs to the physical page:
[ 155.132284][ T6563] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888041438d70 pfn:0x41438
[ 155.132299][ T6563] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 155.132307][ T6563] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[ 155.132320][ T6563] page_type: f5(slab)
[ 155.132330][ T6563] raw: 0080000000000240 ffff888140e8b140 ffff88801e7ef588 ffff88801e7ef588
[ 155.132338][ T6563] raw: ffff888041438d70 000000080017000a 00000000f5000000 0000000000000000
[ 155.132346][ T6563] head: 0080000000000240 ffff888140e8b140 ffff88801e7ef588 ffff88801e7ef588
[ 155.132353][ T6563] head: ffff888041438d70 000000080017000a 00000000f5000000 0000000000000000
[ 155.132361][ T6563] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 155.132368][ T6563] head: ffff888041439a80 0000000000000000 00000000ffffffff 0000000000000002
[ 155.132375][ T6563] page dumped because: kasan: bad access detected
[ 155.132386][ T6563] page_owner tracks the page as allocated
[ 155.132389][ T6563] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6563, tgid 6561 (syz.0.17), ts 154371198329, free_ts 154308032836
[ 155.132406][ T6563] post_alloc_hook+0x1f9/0x250
[ 155.132416][ T6563] get_page_from_freelist+0x27d6/0x2850
[ 155.132428][ T6563] __alloc_frozen_pages_noprof+0x18d/0x380
[ 155.132440][ T6563] allocate_slab+0x74/0x5e0
[ 155.132447][ T6563] refill_objects+0x33c/0x3d0
[ 155.132465][ T6563] __pcs_replace_empty_main+0x373/0x720
[ 155.132473][ T6563] kmem_cache_alloc_noprof+0x433/0x680
[ 155.132482][ T6563] fuse_get_req+0x6c3/0xac0
[ 155.132494][ T6563] fuse_chan_send+0x2d6/0x1aa0
[ 155.132506][ T6563] fuse_lookup_name+0x360/0x8d0
[ 155.132516][ T6563] fuse_lookup+0x204/0x500
[ 155.132525][ T6563] fuse_atomic_open+0x196/0x440
[ 155.132536][ T6563] atomic_open+0x14f/0x370
[ 155.132546][ T6563] path_openat+0x1108/0x38a0
[ 155.132556][ T6563] do_file_open+0x23e/0x4a0
[ 155.132565][ T6563] do_sys_openat2+0x113/0x200
[ 155.132573][ T6563] page last free pid 4978 tgid 4978 stack trace:
[ 155.132578][ T6563] __free_frozen_pages+0x1075/0x11b0
[ 155.132588][ T6563] __slab_free+0x252/0x2a0
[ 155.132598][ T6563] qlist_free_all+0x99/0x100
[ 155.132606][ T6563] kasan_quarantine_reduce+0x148/0x160
[ 155.132615][ T6563] __kasan_slab_alloc+0x22/0x80
[ 155.132624][ T6563] kmem_cache_alloc_node_noprof+0x22a/0x6e0
[ 155.132634][ T6563] __alloc_skb+0x27d/0x7d0
[ 155.132645][ T6563] netlink_sendmsg+0x5d4/0xb40
[ 155.132657][ T6563] sock_sendmsg_nosec+0x112/0x150
[ 155.132666][ T6563] ____sys_sendmsg+0x55c/0x870
[ 155.132679][ T6563] ___sys_sendmsg+0x2a5/0x360
[ 155.132689][ T6563] __x64_sys_sendmsg+0x1c3/0x2a0
[ 155.132701][ T6563] do_syscall_64+0x15f/0xf80
[ 155.132712][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.132720][ T6563]
[ 155.132722][ T6563] Memory state around the buggy address:
[ 155.132727][ T6563] ffff888041438b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 155.132733][ T6563] ffff888041438b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 155.132739][ T6563] >ffff888041438c00: fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb
[ 155.132743][ T6563] ^
[ 155.132748][ T6563] ffff888041438c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 155.132754][ T6563] ffff888041438d00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc
[ 155.132758][ T6563] ==================================================================
[ 155.132792][ T6563] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 155.132803][ T6563] CPU: 0 UID: 0 PID: 6563 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 155.132813][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 155.132818][ T6563] Call Trace:
[ 155.132822][ T6563]
[ 155.132825][ T6563] vpanic+0x56c/0xa60
[ 155.132839][ T6563] ? __pfx_vpanic+0x10/0x10
[ 155.132852][ T6563] ? __pfx___schedule+0x10/0x10
[ 155.132865][ T6563] panic+0xc5/0xd0
[ 155.132877][ T6563] ? __pfx_panic+0x10/0x10
[ 155.132888][ T6563] ? preempt_schedule_thunk+0x16/0x30
[ 155.132899][ T6563] ? __list_del_entry_valid_or_report+0x31/0x190
[ 155.132908][ T6563] check_panic_on_warn+0x89/0xb0
[ 155.132923][ T6563] ? __list_del_entry_valid_or_report+0x31/0x190
[ 155.132932][ T6563] end_report+0x73/0x170
[ 155.132943][ T6563] ? __list_del_entry_valid_or_report+0x31/0x190
[ 155.132951][ T6563] kasan_report+0x128/0x150
[ 155.132963][ T6563] ? __list_del_entry_valid_or_report+0x31/0x190
[ 155.132974][ T6563] __list_del_entry_valid_or_report+0x31/0x190
[ 155.132983][ T6563] fuse_read_interrupt+0xdb/0x410
[ 155.132993][ T6563] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 155.133006][ T6563] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 155.133016][ T6563] ? preempt_count_add+0x91/0x190
[ 155.133027][ T6563] ? aa_file_perm+0x192/0x15f0
[ 155.133042][ T6563] fuse_dev_do_read+0xa65/0x1280
[ 155.133052][ T6563] ? call_rcu+0xee/0x890
[ 155.133063][ T6563] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 155.133072][ T6563] ? __pfx_aa_file_perm+0x10/0x10
[ 155.133085][ T6563] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 155.133099][ T6563] fuse_dev_read+0x16a/0x200
[ 155.133108][ T6563] ? __pfx_fuse_dev_read+0x10/0x10
[ 155.133119][ T6563] ? rw_verify_area+0x2ac/0x4e0
[ 155.133130][ T6563] ? fuse_dev_poll+0x1a7/0x1e0
[ 155.133138][ T6563] ? __pfx_fuse_dev_read+0x10/0x10
[ 155.133146][ T6563] __io_read+0x72f/0x1500
[ 155.133160][ T6563] ? do_raw_spin_lock+0x12b/0x2f0
[ 155.133173][ T6563] ? __pfx___io_read+0x10/0x10
[ 155.133185][ T6563] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 155.133199][ T6563] io_read+0x4a/0x1c0
[ 155.133210][ T6563] ? rt_spin_lock+0x1e0/0x400
[ 155.133221][ T6563] __io_issue_sqe+0x180/0x4b0
[ 155.133238][ T6563] io_issue_sqe+0x165/0xf60
[ 155.133250][ T6563] ? io_poll_remove_entries+0x63/0x610
[ 155.133264][ T6563] io_req_task_submit+0xe6/0x180
[ 155.133276][ T6563] io_poll_task_func+0x8d4/0xb20
[ 155.133296][ T6563] ? __pfx_io_poll_task_func+0x10/0x10
[ 155.133309][ T6563] ? percpu_ref_get+0x1c/0x1d0
[ 155.133317][ T6563] ? percpu_ref_get+0x1c/0x1d0
[ 155.133325][ T6563] ? __pfx_io_poll_task_func+0x10/0x10
[ 155.133339][ T6563] io_handle_tw_list+0x258/0x540
[ 155.133348][ T6563] tctx_task_work_run+0x55/0x300
[ 155.133357][ T6563] tctx_task_work+0x3f/0x90
[ 155.133366][ T6563] task_work_run+0x1d9/0x270
[ 155.133375][ T6563] ? __pfx_task_work_run+0x10/0x10
[ 155.133385][ T6563] get_signal+0x11eb/0x1330
[ 155.133397][ T6563] ? kasan_quarantine_put+0xbb/0x1f0
[ 155.133407][ T6563] ? lockdep_hardirqs_on+0x7a/0x110
[ 155.133421][ T6563] arch_do_signal_or_restart+0xbc/0x830
[ 155.133431][ T6563] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 155.133445][ T6563] ? do_sys_openat2+0x14c/0x200
[ 155.133455][ T6563] ? ksys_write+0x248/0x270
[ 155.133487][ T6563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.133496][ T6563] exit_to_user_mode_loop+0x86/0x480
[ 155.133509][ T6563] ? rcu_is_watching+0x15/0xb0
[ 155.133518][ T6563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.133527][ T6563] do_syscall_64+0x33e/0xf80
[ 155.133545][ T6563] ? trace_irq_disable+0x3b/0x140
[ 155.133557][ T6563] ? clear_bhb_loop+0x40/0x90
[ 155.133567][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 155.133576][ T6563] RIP: 0033:0x7f8224bdc819
[ 155.133584][ T6563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 155.133591][ T6563] RSP: 002b:00007f8224215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 155.133601][ T6563] RAX: fffffffffffffffc RBX: 00007f8224e56090 RCX: 00007f8224bdc819
[ 155.133608][ T6563] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 155.133615][ T6563] RBP: 00007f8224c72c91 R08: 0000000000000000 R09: 0000000000000000
[ 155.133621][ T6563] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 155.133626][ T6563] R13: 00007f8224e56128 R14: 00007f8224e56090 R15: 00007fff7755ce28
[ 155.133636][ T6563]
[ 155.134095][ T6563] Kernel Offset: disabled