Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts.
2026/05/02 21:42:51 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 130.621825][ T6016] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 132.165360][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.172709][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[ 134.854267][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state
[ 134.861499][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state
[ 134.868797][ T6042] bridge_slave_0: entered allmulticast mode
[ 134.876361][ T6042] bridge_slave_0: entered promiscuous mode
[ 134.884686][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state
[ 134.891869][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state
[ 134.899390][ T6042] bridge_slave_1: entered allmulticast mode
[ 134.906868][ T6042] bridge_slave_1: entered promiscuous mode
[ 134.938322][ T6042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 134.950247][ T6042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 134.984764][ T6042] team0: Port device team_slave_0 added
[ 134.992964][ T6042] team0: Port device team_slave_1 added
[ 135.020988][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 135.028481][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 135.054539][ T6042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 135.066754][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 135.073762][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 135.099855][ T6042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 135.146370][ T6042] hsr_slave_0: entered promiscuous mode
[ 135.153100][ T6042] hsr_slave_1: entered promiscuous mode
[ 135.674018][ T6042] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 135.686938][ T6042] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 135.695331][ T6042] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 135.707181][ T6042] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 135.716010][ T6042] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 135.729584][ T6042] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 135.737746][ T6042] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 135.751424][ T6042] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 135.869175][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0
[ 135.895943][ T6042] 8021q: adding VLAN 0 to HW filter on device team0
[ 135.911306][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state
[ 135.918474][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 135.944345][ T145] bridge0: port 2(bridge_slave_1) entered blocking state
[ 135.951532][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 136.494883][ T6042] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 136.554599][ T6042] veth0_vlan: entered promiscuous mode
[ 136.570702][ T6042] veth1_vlan: entered promiscuous mode
[ 136.614025][ T6042] veth0_macvtap: entered promiscuous mode
[ 136.626327][ T6042] veth1_macvtap: entered promiscuous mode
[ 136.651319][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 136.671086][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 136.688877][ T1037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.707840][ T1037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.731944][ T1037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.757088][ T1037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.970255][ T1037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 137.065809][ T1037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 137.879471][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 137.895901][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 137.937629][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 137.949642][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 138.135787][ T1037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 138.922649][ T1037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 139.554931][ T1037] bridge_slave_1: left allmulticast mode
[ 139.572669][ T1037] bridge_slave_1: left promiscuous mode
[ 139.578560][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state
[ 139.599402][ T1037] bridge_slave_0: left allmulticast mode
[ 139.612738][ T1037] bridge_slave_0: left promiscuous mode
[ 139.624660][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state
[ 139.792164][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 139.803330][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 139.813442][ T1037] bond0 (unregistering): Released all slaves
[ 139.929768][ T1037] hsr_slave_0: left promiscuous mode
[ 139.936143][ T1037] hsr_slave_1: left promiscuous mode
[ 139.944405][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 139.951900][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 139.960968][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 139.969888][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 139.985001][ T1037] veth1_macvtap: left promiscuous mode
[ 139.990659][ T1037] veth0_macvtap: left promiscuous mode
[ 139.998770][ T1037] veth1_vlan: left promiscuous mode
[ 140.011421][ T1037] veth0_vlan: left promiscuous mode
[ 140.333993][ T1037] team0 (unregistering): Port device team_slave_1 removed
[ 140.361477][ T1037] team0 (unregistering): Port device team_slave_0 removed
[ 140.916297][ T4937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 140.926580][ T4937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 140.934385][ T4937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 140.942880][ T4937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 140.950955][ T4937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/05/02 21:43:10 executed programs: 0
[ 143.557756][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 143.568303][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 143.586118][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 143.594360][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 143.603711][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 144.268196][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[ 144.452045][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.459400][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state
[ 144.466945][ T6298] bridge_slave_0: entered allmulticast mode
[ 144.475342][ T6298] bridge_slave_0: entered promiscuous mode
[ 144.484462][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.491706][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state
[ 144.499555][ T6298] bridge_slave_1: entered allmulticast mode
[ 144.507812][ T6298] bridge_slave_1: entered promiscuous mode
[ 144.551763][ T6298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 144.567041][ T6298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 144.608281][ T6298] team0: Port device team_slave_0 added
[ 144.617017][ T6298] team0: Port device team_slave_1 added
[ 144.654741][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 144.661758][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 144.688505][ T6298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 144.701619][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 144.708942][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 144.735427][ T6298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 144.801627][ T6298] hsr_slave_0: entered promiscuous mode
[ 144.808507][ T6298] hsr_slave_1: entered promiscuous mode
[ 144.879641][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[ 145.391954][ T6298] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 145.409747][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 145.418662][ T6298] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 145.429588][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 145.438294][ T6298] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 145.470296][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 145.478473][ T6298] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 145.490675][ T6298] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 145.586217][ T6298] 8021q: adding VLAN 0 to HW filter on device bond0
[ 145.629486][ T6298] 8021q: adding VLAN 0 to HW filter on device team0
[ 145.646898][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state
[ 145.654122][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 145.683428][ T4937] Bluetooth: hci0: command tx timeout
[ 145.704667][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state
[ 145.711873][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 146.351388][ T6298] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 146.425924][ T6298] veth0_vlan: entered promiscuous mode
[ 146.443322][ T6298] veth1_vlan: entered promiscuous mode
[ 146.490701][ T6298] veth0_macvtap: entered promiscuous mode
[ 146.505895][ T6298] veth1_macvtap: entered promiscuous mode
[ 146.531919][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 146.550556][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 146.574366][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 146.591231][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 146.612003][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 146.643754][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 146.704321][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 146.717497][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 146.759146][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 146.771561][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 147.683245][ T6408] ==================================================================
[ 147.691377][ T6408] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x31/0x190
[ 147.700490][ T6408] Read of size 8 at addr ffff888034038d38 by task syz.0.17/6408
[ 147.708106][ T6408]
[ 147.710416][ T6408] CPU: 0 UID: 0 PID: 6408 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 147.710437][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 147.710448][ T6408] Call Trace:
[ 147.710455][ T6408]
[ 147.710463][ T6408] dump_stack_lvl+0xe8/0x150
[ 147.710487][ T6408] print_address_description+0x55/0x1e0
[ 147.710507][ T6408] ? __list_del_entry_valid_or_report+0x31/0x190
[ 147.710529][ T6408] print_report+0x58/0x70
[ 147.710546][ T6408] kasan_report+0x117/0x150
[ 147.710575][ T6408] ? __list_del_entry_valid_or_report+0x31/0x190
[ 147.710602][ T6408] __list_del_entry_valid_or_report+0x31/0x190
[ 147.710626][ T6408] fuse_read_interrupt+0xdb/0x410
[ 147.710649][ T6408] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 147.710678][ T6408] fuse_dev_do_read+0xa62/0x1280
[ 147.710696][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.710724][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.710747][ T6408] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 147.710766][ T6408] ? __pfx_aa_file_perm+0x10/0x10
[ 147.710792][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.710818][ T6408] fuse_dev_read+0x16a/0x200
[ 147.710840][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.710862][ T6408] ? __pfx_fuse_dev_read+0x10/0x10
[ 147.710883][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.710903][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.710924][ T6408] ? security_file_permission+0x75/0x260
[ 147.710944][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.710964][ T6408] ? rw_verify_area+0x2a6/0x4d0
[ 147.710989][ T6408] ? fuse_dev_poll+0x1a7/0x1e0
[ 147.711007][ T6408] ? __pfx_fuse_dev_read+0x10/0x10
[ 147.711023][ T6408] __io_read+0x724/0x14f0
[ 147.711052][ T6408] ? __lock_acquire+0x146e/0x2cf0
[ 147.711077][ T6408] ? __pfx___io_read+0x10/0x10
[ 147.711108][ T6408] io_read+0x4a/0x1c0
[ 147.711135][ T6408] __io_issue_sqe+0x180/0x4b0
[ 147.711163][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.711186][ T6408] io_issue_sqe+0x165/0xf60
[ 147.711209][ T6408] ? io_poll_remove_entries+0x63/0x610
[ 147.711237][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.711260][ T6408] io_req_task_submit+0xe6/0x180
[ 147.711284][ T6408] io_poll_task_func+0x99d/0xc30
[ 147.711316][ T6408] ? __pfx_io_poll_task_func+0x10/0x10
[ 147.711343][ T6408] ? percpu_ref_get+0x1c/0x1d0
[ 147.711370][ T6408] ? percpu_ref_get+0x1c/0x1d0
[ 147.711398][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.711420][ T6408] ? __pfx_io_poll_task_func+0x10/0x10
[ 147.711447][ T6408] io_handle_tw_list+0x258/0x540
[ 147.711464][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.711488][ T6408] tctx_task_work_run+0x55/0x300
[ 147.711506][ T6408] tctx_task_work+0x3f/0x90
[ 147.711524][ T6408] task_work_run+0x1d9/0x270
[ 147.711551][ T6408] ? __pfx_task_work_run+0x10/0x10
[ 147.711582][ T6408] get_signal+0x11eb/0x1330
[ 147.711604][ T6408] ? kasan_quarantine_put+0xbb/0x1f0
[ 147.711628][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.711649][ T6408] ? lockdep_hardirqs_on+0x7a/0x110
[ 147.711672][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 147.711700][ T6408] arch_do_signal_or_restart+0xbc/0x830
[ 147.711730][ T6408] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 147.711761][ T6408] ? do_sys_openat2+0x14c/0x200
[ 147.711789][ T6408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 147.711808][ T6408] exit_to_user_mode_loop+0x86/0x480
[ 147.711831][ T6408] ? rcu_is_watching+0x15/0xb0
[ 147.711853][ T6408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 147.711872][ T6408] do_syscall_64+0x33e/0xf80
[ 147.711896][ T6408] ? trace_irq_disable+0x3b/0x140
[ 147.711926][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 147.711944][ T6408] RIP: 0033:0x7fed8a39c819
[ 147.711960][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 147.711975][ T6408] RSP: 002b:00007fed8b2d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 147.711993][ T6408] RAX: fffffffffffffffc RBX: 00007fed8a616090 RCX: 00007fed8a39c819
[ 147.712007][ T6408] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 147.712020][ T6408] RBP: 00007fed8a432c91 R08: 0000000000000000 R09: 0000000000000000
[ 147.712031][ T6408] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 147.712042][ T6408] R13: 00007fed8a616128 R14: 00007fed8a616090 R15: 00007fff48598688
[ 147.712063][ T6408]
[ 147.712070][ T6408]
[ 148.136371][ T6408] Allocated by task 6408:
[ 148.140688][ T6408] kasan_save_track+0x3e/0x80
[ 148.145372][ T6408] __kasan_slab_alloc+0x6c/0x80
[ 148.150227][ T6408] kmem_cache_alloc_noprof+0x2bc/0x650
[ 148.155687][ T6408] fuse_get_req+0x7da/0x10d0
[ 148.160282][ T6408] __fuse_simple_request+0x2cf/0x1db0
[ 148.165658][ T6408] fuse_lookup_name+0x35e/0x8b0
[ 148.170507][ T6408] fuse_lookup+0x213/0x4e0
[ 148.174923][ T6408] fuse_atomic_open+0x196/0x430
[ 148.179778][ T6408] atomic_open+0x14f/0x370
[ 148.184201][ T6408] path_openat+0x10e9/0x3860
[ 148.188797][ T6408] do_file_open+0x23e/0x4a0
[ 148.193304][ T6408] do_sys_openat2+0x113/0x200
[ 148.197976][ T6408] __x64_sys_openat+0x138/0x170
[ 148.202827][ T6408] do_syscall_64+0x15f/0xf80
[ 148.207415][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 148.213299][ T6408]
[ 148.215604][ T6408] Freed by task 6408:
[ 148.219566][ T6408] kasan_save_track+0x3e/0x80
[ 148.224251][ T6408] kasan_save_free_info+0x46/0x50
[ 148.229273][ T6408] __kasan_slab_free+0x5c/0x80
[ 148.234039][ T6408] kmem_cache_free+0x182/0x650
[ 148.238807][ T6408] __fuse_simple_request+0x175a/0x1db0
[ 148.244277][ T6408] fuse_lookup_name+0x35e/0x8b0
[ 148.249125][ T6408] fuse_lookup+0x213/0x4e0
[ 148.253539][ T6408] fuse_atomic_open+0x196/0x430
[ 148.258387][ T6408] atomic_open+0x14f/0x370
[ 148.262810][ T6408] path_openat+0x10e9/0x3860
[ 148.267409][ T6408] do_file_open+0x23e/0x4a0
[ 148.271917][ T6408] do_sys_openat2+0x113/0x200
[ 148.276589][ T6408] __x64_sys_openat+0x138/0x170
[ 148.281438][ T6408] do_syscall_64+0x15f/0xf80
[ 148.286028][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 148.291920][ T6408]
[ 148.294230][ T6408] The buggy address belongs to the object at ffff888034038d20
[ 148.294230][ T6408] which belongs to the cache fuse_request of size 216
[ 148.308363][ T6408] The buggy address is located 24 bytes inside of
[ 148.308363][ T6408] freed 216-byte region [ffff888034038d20, ffff888034038df8)
[ 148.322068][ T6408]
[ 148.324386][ T6408] The buggy address belongs to the physical page:
[ 148.330784][ T6408] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34038
[ 148.339542][ T6408] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 148.346643][ T6408] page_type: f5(slab)
[ 148.350617][ T6408] raw: 00fff00000000000 ffff888140ea9c80 dead000000000122 0000000000000000
[ 148.359192][ T6408] raw: 0000000000000000 00000008000e000e 00000000f5000000 0000000000000000
[ 148.367761][ T6408] page dumped because: kasan: bad access detected
[ 148.374162][ T6408] page_owner tracks the page as allocated
[ 148.379858][ T6408] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6404, tgid 6402 (syz.0.17), ts 146863634674, free_ts 146855454643
[ 148.400434][ T6408] post_alloc_hook+0x231/0x280
[ 148.405215][ T6408] get_page_from_freelist+0x24ba/0x2540
[ 148.410786][ T6408] __alloc_frozen_pages_noprof+0x18d/0x380
[ 148.416610][ T6408] allocate_slab+0x77/0x660
[ 148.421105][ T6408] refill_objects+0x339/0x3d0
[ 148.425770][ T6408] __pcs_replace_empty_main+0x321/0x720
[ 148.431314][ T6408] kmem_cache_alloc_noprof+0x37d/0x650
[ 148.436897][ T6408] fuse_simple_background+0x9f/0x1040
[ 148.442299][ T6408] fuse_send_init+0x3ec/0x740
[ 148.446980][ T6408] get_tree_nodev+0xbb/0x150
[ 148.451580][ T6408] fuse_get_tree+0x295/0x3b0
[ 148.456176][ T6408] vfs_get_tree+0x92/0x2a0
[ 148.460600][ T6408] do_new_mount+0x341/0xd30
[ 148.465110][ T6408] __se_sys_mount+0x31d/0x420
[ 148.469786][ T6408] do_syscall_64+0x15f/0xf80
[ 148.474381][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 148.480270][ T6408] page last free pid 9 tgid 9 stack trace:
[ 148.486067][ T6408] __free_frozen_pages+0xbc7/0xd30
[ 148.491186][ T6408] tlb_remove_table_rcu+0x85/0x100
[ 148.496304][ T6408] rcu_core+0x7cd/0x1070
[ 148.500544][ T6408] handle_softirqs+0x22a/0x840
[ 148.505303][ T6408] do_softirq+0x76/0xd0
[ 148.509449][ T6408] __local_bh_enable_ip+0xf8/0x130
[ 148.514551][ T6408] __alloc_skb+0x1aa/0x7d0
[ 148.518962][ T6408] mld_newpack+0x14c/0xc90
[ 148.523371][ T6408] add_grhead+0x5a/0x2a0
[ 148.527617][ T6408] add_grec+0x1452/0x1740
[ 148.531942][ T6408] mld_ifc_work+0x6e6/0xe70
[ 148.536440][ T6408] process_scheduled_works+0xb5d/0x1860
[ 148.541976][ T6408] worker_thread+0xa53/0xfc0
[ 148.546559][ T6408] kthread+0x388/0x470
[ 148.550629][ T6408] ret_from_fork+0x514/0xb70
[ 148.555225][ T6408] ret_from_fork_asm+0x1a/0x30
[ 148.560006][ T6408]
[ 148.562328][ T6408] Memory state around the buggy address:
[ 148.567951][ T6408] ffff888034038c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 148.576018][ T6408] ffff888034038c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 148.584093][ T6408] >ffff888034038d00: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[ 148.592147][ T6408] ^
[ 148.598031][ T6408] ffff888034038d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc
[ 148.606093][ T6408] ffff888034038e00: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb
[ 148.614144][ T6408] ==================================================================
[ 148.623787][ T6408] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 148.631000][ T6408] CPU: 0 UID: 0 PID: 6408 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 148.640110][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 148.650161][ T6408] Call Trace:
[ 148.653437][ T6408]
[ 148.656359][ T6408] vpanic+0x56c/0xa60
[ 148.660344][ T6408] ? __pfx_vpanic+0x10/0x10
[ 148.664844][ T6408] ? irqentry_exit+0x218/0x730
[ 148.669616][ T6408] panic+0xc5/0xd0
[ 148.673335][ T6408] ? __pfx_panic+0x10/0x10
[ 148.677753][ T6408] ? __list_del_entry_valid_or_report+0x31/0x190
[ 148.684092][ T6408] ? __list_del_entry_valid_or_report+0x31/0x190
[ 148.690427][ T6408] check_panic_on_warn+0x89/0xb0
[ 148.695375][ T6408] ? __list_del_entry_valid_or_report+0x31/0x190
[ 148.701716][ T6408] end_report+0x73/0x170
[ 148.705979][ T6408] ? __list_del_entry_valid_or_report+0x31/0x190
[ 148.712314][ T6408] kasan_report+0x128/0x150
[ 148.716829][ T6408] ? __list_del_entry_valid_or_report+0x31/0x190
[ 148.723166][ T6408] __list_del_entry_valid_or_report+0x31/0x190
[ 148.729328][ T6408] fuse_read_interrupt+0xdb/0x410
[ 148.734360][ T6408] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 148.740017][ T6408] fuse_dev_do_read+0xa62/0x1280
[ 148.744960][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.750600][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.756237][ T6408] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 148.761612][ T6408] ? __pfx_aa_file_perm+0x10/0x10
[ 148.766646][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.772290][ T6408] fuse_dev_read+0x16a/0x200
[ 148.776882][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.782524][ T6408] ? __pfx_fuse_dev_read+0x10/0x10
[ 148.787647][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.793292][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.798936][ T6408] ? security_file_permission+0x75/0x260
[ 148.804582][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.810223][ T6408] ? rw_verify_area+0x2a6/0x4d0
[ 148.815087][ T6408] ? fuse_dev_poll+0x1a7/0x1e0
[ 148.819853][ T6408] ? __pfx_fuse_dev_read+0x10/0x10
[ 148.824962][ T6408] __io_read+0x724/0x14f0
[ 148.829304][ T6408] ? __lock_acquire+0x146e/0x2cf0
[ 148.834334][ T6408] ? __pfx___io_read+0x10/0x10
[ 148.839112][ T6408] io_read+0x4a/0x1c0
[ 148.843107][ T6408] __io_issue_sqe+0x180/0x4b0
[ 148.847840][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.853483][ T6408] io_issue_sqe+0x165/0xf60
[ 148.857988][ T6408] ? io_poll_remove_entries+0x63/0x610
[ 148.863456][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.869098][ T6408] io_req_task_submit+0xe6/0x180
[ 148.874044][ T6408] io_poll_task_func+0x99d/0xc30
[ 148.878998][ T6408] ? __pfx_io_poll_task_func+0x10/0x10
[ 148.884466][ T6408] ? percpu_ref_get+0x1c/0x1d0
[ 148.889241][ T6408] ? percpu_ref_get+0x1c/0x1d0
[ 148.894014][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.899655][ T6408] ? __pfx_io_poll_task_func+0x10/0x10
[ 148.905119][ T6408] io_handle_tw_list+0x258/0x540
[ 148.910069][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.915708][ T6408] tctx_task_work_run+0x55/0x300
[ 148.920649][ T6408] tctx_task_work+0x3f/0x90
[ 148.925153][ T6408] task_work_run+0x1d9/0x270
[ 148.929752][ T6408] ? __pfx_task_work_run+0x10/0x10
[ 148.934877][ T6408] get_signal+0x11eb/0x1330
[ 148.939379][ T6408] ? kasan_quarantine_put+0xbb/0x1f0
[ 148.944666][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.950301][ T6408] ? lockdep_hardirqs_on+0x7a/0x110
[ 148.955507][ T6408] ? srso_alias_return_thunk+0x5/0xfbef5
[ 148.961168][ T6408] arch_do_signal_or_restart+0xbc/0x830
[ 148.966745][ T6408] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 148.972983][ T6408] ? do_sys_openat2+0x14c/0x200
[ 148.977865][ T6408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 148.983955][ T6408] exit_to_user_mode_loop+0x86/0x480
[ 148.989261][ T6408] ? rcu_is_watching+0x15/0xb0
[ 148.994043][ T6408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 149.000128][ T6408] do_syscall_64+0x33e/0xf80
[ 149.004773][ T6408] ? trace_irq_disable+0x3b/0x140
[ 149.009824][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 149.015727][ T6408] RIP: 0033:0x7fed8a39c819
[ 149.020145][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 149.039752][ T6408] RSP: 002b:00007fed8b2d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 149.048181][ T6408] RAX: fffffffffffffffc RBX: 00007fed8a616090 RCX: 00007fed8a39c819
[ 149.056160][ T6408] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 149.064137][ T6408] RBP: 00007fed8a432c91 R08: 0000000000000000 R09: 0000000000000000
[ 149.072106][ T6408] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 149.080075][ T6408] R13: 00007fed8a616128 R14: 00007fed8a616090 R15: 00007fff48598688
[ 149.088068][ T6408]
[ 149.091436][ T6408] Kernel Offset: disabled
[ 149.095755][ T6408] Rebooting in 86400 seconds..