Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts.
2026/05/02 21:56:16 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 128.368045][ T6018] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 131.135975][ T4937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 131.145337][ T4937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 131.157083][ T4937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 131.167777][ T4937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 131.176074][ T4937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 132.041916][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.049940][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.389350][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 133.398798][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 133.433970][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 133.443178][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 134.834734][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state
[ 134.842058][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state
[ 134.849247][ T6089] bridge_slave_0: entered allmulticast mode
[ 134.856900][ T6089] bridge_slave_0: entered promiscuous mode
[ 134.865005][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state
[ 134.872312][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state
[ 134.879525][ T6089] bridge_slave_1: entered allmulticast mode
[ 134.887081][ T6089] bridge_slave_1: entered promiscuous mode
[ 134.918392][ T6089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 134.930608][ T6089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 134.964028][ T6089] team0: Port device team_slave_0 added
[ 134.972910][ T6089] team0: Port device team_slave_1 added
[ 135.000783][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 135.007757][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 135.033798][ T6089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 135.046045][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 135.053062][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 135.079298][ T6089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 135.126712][ T6089] hsr_slave_0: entered promiscuous mode
[ 135.133904][ T6089] hsr_slave_1: entered promiscuous mode
[ 135.647350][ T6089] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 135.660547][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 135.668779][ T6089] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 135.688099][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 135.696155][ T6089] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 135.707386][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 135.715939][ T6089] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 135.726858][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 135.823497][ T6089] 8021q: adding VLAN 0 to HW filter on device bond0
[ 135.849791][ T6089] 8021q: adding VLAN 0 to HW filter on device team0
[ 135.865501][ T161] bridge0: port 1(bridge_slave_0) entered blocking state
[ 135.872688][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 135.893404][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state
[ 135.900588][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 135.962108][ T6089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 136.460769][ T6089] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 136.517507][ T6089] veth0_vlan: entered promiscuous mode
[ 136.537848][ T6089] veth1_vlan: entered promiscuous mode
[ 136.578315][ T6089] veth0_macvtap: entered promiscuous mode
[ 136.589777][ T6089] veth1_macvtap: entered promiscuous mode
[ 136.620374][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 136.638020][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 136.656088][ T1010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.677958][ T1010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.698250][ T1010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.725770][ T1010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.881412][ T1099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 136.954052][ T1099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 137.009137][ T1099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 137.075435][ T1099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/05/02 21:56:32 executed programs: 0
[ 137.527951][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 137.536928][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 137.544574][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 137.552836][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 137.563746][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 138.338370][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state
[ 138.346092][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state
[ 138.353875][ T6185] bridge_slave_0: entered allmulticast mode
[ 138.361997][ T6185] bridge_slave_0: entered promiscuous mode
[ 138.372972][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state
[ 138.380622][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state
[ 138.387953][ T6185] bridge_slave_1: entered allmulticast mode
[ 138.396446][ T6185] bridge_slave_1: entered promiscuous mode
[ 138.475939][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 138.490293][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 138.558284][ T6185] team0: Port device team_slave_0 added
[ 138.570825][ T6185] team0: Port device team_slave_1 added
[ 138.656183][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 138.665189][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 138.695030][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 138.732594][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 138.739785][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 138.767150][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 138.785350][ T1099] bridge_slave_1: left allmulticast mode
[ 138.791081][ T1099] bridge_slave_1: left promiscuous mode
[ 138.796872][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state
[ 138.815137][ T1099] bridge_slave_0: left allmulticast mode
[ 138.820864][ T1099] bridge_slave_0: left promiscuous mode
[ 138.826670][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state
[ 139.055948][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 139.067029][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 139.077022][ T1099] bond0 (unregistering): Released all slaves
[ 139.152397][ T6185] hsr_slave_0: entered promiscuous mode
[ 139.169140][ T6185] hsr_slave_1: entered promiscuous mode
[ 139.177711][ T6185] debugfs: 'hsr0' already exists in 'hsr'
[ 139.183738][ T6185] Cannot create hsr debugfs directory
[ 139.195394][ T1099] hsr_slave_0: left promiscuous mode
[ 139.202515][ T1099] hsr_slave_1: left promiscuous mode
[ 139.209364][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 139.217840][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 139.226277][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 139.243539][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 139.258051][ T1099] veth1_macvtap: left promiscuous mode
[ 139.264021][ T1099] veth0_macvtap: left promiscuous mode
[ 139.269718][ T1099] veth1_vlan: left promiscuous mode
[ 139.275480][ T1099] veth0_vlan: left promiscuous mode
[ 139.639988][ T50] Bluetooth: hci0: command tx timeout
[ 139.783371][ T1099] team0 (unregistering): Port device team_slave_1 removed
[ 139.816131][ T1099] team0 (unregistering): Port device team_slave_0 removed
[ 140.618831][ T6185] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 140.637224][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 140.645497][ T6185] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 140.657035][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 140.669576][ T6185] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 140.680438][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 140.688420][ T6185] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 140.702087][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 140.798351][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0
[ 140.823189][ T6185] 8021q: adding VLAN 0 to HW filter on device team0
[ 140.837069][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[ 140.844234][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 140.864006][ T161] bridge0: port 2(bridge_slave_1) entered blocking state
[ 140.871137][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 141.415028][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 141.474734][ T6185] veth0_vlan: entered promiscuous mode
[ 141.491712][ T6185] veth1_vlan: entered promiscuous mode
[ 141.532742][ T6185] veth0_macvtap: entered promiscuous mode
[ 141.543823][ T6185] veth1_macvtap: entered promiscuous mode
[ 141.568176][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 141.586565][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 141.605081][ T1099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.624733][ T1099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.646531][ T1099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.664232][ T1099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 141.724506][ T50] Bluetooth: hci0: command tx timeout
[ 141.746266][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 141.769187][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 141.807437][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 141.817092][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 142.709746][ T6320] ==================================================================
[ 142.717845][ T6320] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x31/0x190
[ 142.726976][ T6320] Read of size 8 at addr ffff888055b36e50 by task syz.0.17/6320
[ 142.734587][ T6320]
[ 142.736916][ T6320] CPU: 1 UID: 0 PID: 6320 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 142.736936][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 142.736947][ T6320] Call Trace:
[ 142.736956][ T6320]
[ 142.736964][ T6320] dump_stack_lvl+0xe8/0x150
[ 142.736987][ T6320] print_address_description+0x55/0x1e0
[ 142.737007][ T6320] ? __list_del_entry_valid_or_report+0x31/0x190
[ 142.737030][ T6320] print_report+0x58/0x70
[ 142.737046][ T6320] kasan_report+0x117/0x150
[ 142.737075][ T6320] ? __list_del_entry_valid_or_report+0x31/0x190
[ 142.737102][ T6320] __list_del_entry_valid_or_report+0x31/0x190
[ 142.737126][ T6320] fuse_read_interrupt+0xdb/0x410
[ 142.737149][ T6320] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 142.737178][ T6320] fuse_dev_do_read+0xa62/0x1280
[ 142.737196][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.737224][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.737248][ T6320] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 142.737267][ T6320] ? __pfx_aa_file_perm+0x10/0x10
[ 142.737293][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.737319][ T6320] fuse_dev_read+0x16a/0x200
[ 142.737336][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.737358][ T6320] ? __pfx_fuse_dev_read+0x10/0x10
[ 142.737379][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.737400][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.737421][ T6320] ? security_file_permission+0x75/0x260
[ 142.737440][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.737461][ T6320] ? rw_verify_area+0x2a6/0x4d0
[ 142.737486][ T6320] ? fuse_dev_poll+0x1a7/0x1e0
[ 142.737503][ T6320] ? __pfx_fuse_dev_read+0x10/0x10
[ 142.737520][ T6320] __io_read+0x724/0x14f0
[ 142.737549][ T6320] ? __lock_acquire+0x146e/0x2cf0
[ 142.737574][ T6320] ? __pfx___io_read+0x10/0x10
[ 142.737603][ T6320] io_read+0x4a/0x1c0
[ 142.737635][ T6320] __io_issue_sqe+0x180/0x4b0
[ 142.737659][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.737683][ T6320] io_issue_sqe+0x165/0xf60
[ 142.737706][ T6320] ? io_poll_remove_entries+0x63/0x610
[ 142.737734][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.737758][ T6320] io_req_task_submit+0xe6/0x180
[ 142.737781][ T6320] io_poll_task_func+0x99d/0xc30
[ 142.737812][ T6320] ? __pfx_io_poll_task_func+0x10/0x10
[ 142.737839][ T6320] ? percpu_ref_get+0x1c/0x1d0
[ 142.737867][ T6320] ? percpu_ref_get+0x1c/0x1d0
[ 142.737895][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.737917][ T6320] ? __pfx_io_poll_task_func+0x10/0x10
[ 142.737944][ T6320] io_handle_tw_list+0x258/0x540
[ 142.737961][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.737985][ T6320] tctx_task_work_run+0x55/0x300
[ 142.738003][ T6320] tctx_task_work+0x3f/0x90
[ 142.738020][ T6320] task_work_run+0x1d9/0x270
[ 142.738048][ T6320] ? __pfx_task_work_run+0x10/0x10
[ 142.738079][ T6320] get_signal+0x11eb/0x1330
[ 142.738101][ T6320] ? kasan_quarantine_put+0xbb/0x1f0
[ 142.738125][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.738146][ T6320] ? lockdep_hardirqs_on+0x7a/0x110
[ 142.738169][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 142.738194][ T6320] arch_do_signal_or_restart+0xbc/0x830
[ 142.738224][ T6320] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 142.738251][ T6320] ? do_sys_openat2+0x14c/0x200
[ 142.738280][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.738299][ T6320] exit_to_user_mode_loop+0x86/0x480
[ 142.738316][ T6320] ? rcu_is_watching+0x15/0xb0
[ 142.738339][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.738358][ T6320] do_syscall_64+0x33e/0xf80
[ 142.738381][ T6320] ? trace_irq_disable+0x3b/0x140
[ 142.738411][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.738429][ T6320] RIP: 0033:0x7efd5e99c819
[ 142.738445][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 142.738460][ T6320] RSP: 002b:00007efd5f91a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 142.738478][ T6320] RAX: fffffffffffffffc RBX: 00007efd5ec16090 RCX: 00007efd5e99c819
[ 142.738492][ T6320] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 142.738505][ T6320] RBP: 00007efd5ea32c91 R08: 0000000000000000 R09: 0000000000000000
[ 142.738516][ T6320] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 142.738527][ T6320] R13: 00007efd5ec16128 R14: 00007efd5ec16090 R15: 00007fff4424a9d8
[ 142.738548][ T6320]
[ 142.738555][ T6320]
[ 143.162311][ T6320] Allocated by task 6320:
[ 143.166612][ T6320] kasan_save_track+0x3e/0x80
[ 143.171280][ T6320] __kasan_slab_alloc+0x6c/0x80
[ 143.176117][ T6320] kmem_cache_alloc_noprof+0x2bc/0x650
[ 143.181558][ T6320] fuse_get_req+0x7da/0x10d0
[ 143.186139][ T6320] __fuse_simple_request+0x2cf/0x1db0
[ 143.191496][ T6320] fuse_lookup_name+0x35e/0x8b0
[ 143.196329][ T6320] fuse_lookup+0x213/0x4e0
[ 143.200726][ T6320] fuse_atomic_open+0x196/0x430
[ 143.205559][ T6320] atomic_open+0x14f/0x370
[ 143.209966][ T6320] path_openat+0x10e9/0x3860
[ 143.214560][ T6320] do_file_open+0x23e/0x4a0
[ 143.219051][ T6320] do_sys_openat2+0x113/0x200
[ 143.223710][ T6320] __x64_sys_openat+0x138/0x170
[ 143.228552][ T6320] do_syscall_64+0x15f/0xf80
[ 143.233126][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.238998][ T6320]
[ 143.241296][ T6320] Freed by task 6320:
[ 143.245248][ T6320] kasan_save_track+0x3e/0x80
[ 143.249912][ T6320] kasan_save_free_info+0x46/0x50
[ 143.254923][ T6320] __kasan_slab_free+0x5c/0x80
[ 143.259672][ T6320] kmem_cache_free+0x182/0x650
[ 143.264425][ T6320] __fuse_simple_request+0x175a/0x1db0
[ 143.269880][ T6320] fuse_lookup_name+0x35e/0x8b0
[ 143.274713][ T6320] fuse_lookup+0x213/0x4e0
[ 143.279111][ T6320] fuse_atomic_open+0x196/0x430
[ 143.284033][ T6320] atomic_open+0x14f/0x370
[ 143.288435][ T6320] path_openat+0x10e9/0x3860
[ 143.293029][ T6320] do_file_open+0x23e/0x4a0
[ 143.297518][ T6320] do_sys_openat2+0x113/0x200
[ 143.302175][ T6320] __x64_sys_openat+0x138/0x170
[ 143.307006][ T6320] do_syscall_64+0x15f/0xf80
[ 143.311578][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.317454][ T6320]
[ 143.319754][ T6320] The buggy address belongs to the object at ffff888055b36e38
[ 143.319754][ T6320] which belongs to the cache fuse_request of size 216
[ 143.333871][ T6320] The buggy address is located 24 bytes inside of
[ 143.333871][ T6320] freed 216-byte region [ffff888055b36e38, ffff888055b36f10)
[ 143.347554][ T6320]
[ 143.349857][ T6320] The buggy address belongs to the physical page:
[ 143.356241][ T6320] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55b36
[ 143.364982][ T6320] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 143.372070][ T6320] page_type: f5(slab)
[ 143.376029][ T6320] raw: 00fff00000000000 ffff888140ea4c80 dead000000000122 0000000000000000
[ 143.384590][ T6320] raw: 0000000000000000 00000008000e000e 00000000f5000000 0000000000000000
[ 143.393159][ T6320] page dumped because: kasan: bad access detected
[ 143.399541][ T6320] page_owner tracks the page as allocated
[ 143.405239][ T6320] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6320, tgid 6316 (syz.0.17), ts 141955677723, free_ts 134210257303
[ 143.425797][ T6320] post_alloc_hook+0x231/0x280
[ 143.430550][ T6320] get_page_from_freelist+0x24ba/0x2540
[ 143.436084][ T6320] __alloc_frozen_pages_noprof+0x18d/0x380
[ 143.441879][ T6320] allocate_slab+0x77/0x660
[ 143.446379][ T6320] refill_objects+0x339/0x3d0
[ 143.451033][ T6320] __pcs_replace_empty_main+0x321/0x720
[ 143.456558][ T6320] kmem_cache_alloc_noprof+0x37d/0x650
[ 143.462006][ T6320] fuse_get_req+0x7da/0x10d0
[ 143.466639][ T6320] __fuse_simple_request+0x2cf/0x1db0
[ 143.472015][ T6320] fuse_lookup_name+0x35e/0x8b0
[ 143.476852][ T6320] fuse_lookup+0x213/0x4e0
[ 143.481258][ T6320] fuse_atomic_open+0x196/0x430
[ 143.486097][ T6320] atomic_open+0x14f/0x370
[ 143.490504][ T6320] path_openat+0x10e9/0x3860
[ 143.495081][ T6320] do_file_open+0x23e/0x4a0
[ 143.499573][ T6320] do_sys_openat2+0x113/0x200
[ 143.504238][ T6320] page last free pid 6084 tgid 6084 stack trace:
[ 143.510550][ T6320] register_dummy_stack+0x98/0x100
[ 143.515672][ T6320] init_page_owner+0x2e/0x5f0
[ 143.520331][ T6320] page_ext_init+0x500/0x540
[ 143.524905][ T6320] mm_core_init+0x97/0xb0
[ 143.529222][ T6320]
[ 143.531518][ T6320] Memory state around the buggy address:
[ 143.537123][ T6320] ffff888055b36d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 143.545160][ T6320] ffff888055b36d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 143.553217][ T6320] >ffff888055b36e00: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb
[ 143.561254][ T6320] ^
[ 143.567912][ T6320] ffff888055b36e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 143.575972][ T6320] ffff888055b36f00: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 143.584006][ T6320] ==================================================================
[ 143.593814][ T6320] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 143.601006][ T6320] CPU: 1 UID: 0 PID: 6320 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 143.610105][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 143.620141][ T6320] Call Trace:
[ 143.623403][ T6320]
[ 143.626321][ T6320] vpanic+0x56c/0xa60
[ 143.630305][ T6320] ? __pfx_vpanic+0x10/0x10
[ 143.634802][ T6320] ? irqentry_exit+0x218/0x730
[ 143.639562][ T6320] panic+0xc5/0xd0
[ 143.643272][ T6320] ? __pfx_panic+0x10/0x10
[ 143.647765][ T6320] ? __list_del_entry_valid_or_report+0x31/0x190
[ 143.654090][ T6320] ? __list_del_entry_valid_or_report+0x31/0x190
[ 143.660418][ T6320] check_panic_on_warn+0x89/0xb0
[ 143.665361][ T6320] ? __list_del_entry_valid_or_report+0x31/0x190
[ 143.671680][ T6320] end_report+0x73/0x170
[ 143.675925][ T6320] ? __list_del_entry_valid_or_report+0x31/0x190
[ 143.682245][ T6320] kasan_report+0x128/0x150
[ 143.686754][ T6320] ? __list_del_entry_valid_or_report+0x31/0x190
[ 143.693080][ T6320] __list_del_entry_valid_or_report+0x31/0x190
[ 143.699232][ T6320] fuse_read_interrupt+0xdb/0x410
[ 143.704339][ T6320] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 143.709975][ T6320] fuse_dev_do_read+0xa62/0x1280
[ 143.714905][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.720536][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.726167][ T6320] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 143.731532][ T6320] ? __pfx_aa_file_perm+0x10/0x10
[ 143.736556][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.742185][ T6320] fuse_dev_read+0x16a/0x200
[ 143.746766][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.752392][ T6320] ? __pfx_fuse_dev_read+0x10/0x10
[ 143.757494][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.763118][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.768744][ T6320] ? security_file_permission+0x75/0x260
[ 143.774370][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.779996][ T6320] ? rw_verify_area+0x2a6/0x4d0
[ 143.784842][ T6320] ? fuse_dev_poll+0x1a7/0x1e0
[ 143.789599][ T6320] ? __pfx_fuse_dev_read+0x10/0x10
[ 143.794798][ T6320] __io_read+0x724/0x14f0
[ 143.799133][ T6320] ? __lock_acquire+0x146e/0x2cf0
[ 143.804151][ T6320] ? __pfx___io_read+0x10/0x10
[ 143.808918][ T6320] io_read+0x4a/0x1c0
[ 143.812897][ T6320] __io_issue_sqe+0x180/0x4b0
[ 143.817575][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.823221][ T6320] io_issue_sqe+0x165/0xf60
[ 143.827722][ T6320] ? io_poll_remove_entries+0x63/0x610
[ 143.833179][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.838807][ T6320] io_req_task_submit+0xe6/0x180
[ 143.843738][ T6320] io_poll_task_func+0x99d/0xc30
[ 143.848684][ T6320] ? __pfx_io_poll_task_func+0x10/0x10
[ 143.854140][ T6320] ? percpu_ref_get+0x1c/0x1d0
[ 143.858904][ T6320] ? percpu_ref_get+0x1c/0x1d0
[ 143.863669][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.869294][ T6320] ? __pfx_io_poll_task_func+0x10/0x10
[ 143.874752][ T6320] io_handle_tw_list+0x258/0x540
[ 143.879675][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.885299][ T6320] tctx_task_work_run+0x55/0x300
[ 143.890226][ T6320] tctx_task_work+0x3f/0x90
[ 143.894715][ T6320] task_work_run+0x1d9/0x270
[ 143.899302][ T6320] ? __pfx_task_work_run+0x10/0x10
[ 143.904414][ T6320] get_signal+0x11eb/0x1330
[ 143.908906][ T6320] ? kasan_quarantine_put+0xbb/0x1f0
[ 143.914185][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.919812][ T6320] ? lockdep_hardirqs_on+0x7a/0x110
[ 143.925007][ T6320] ? srso_alias_return_thunk+0x5/0xfbef5
[ 143.930637][ T6320] arch_do_signal_or_restart+0xbc/0x830
[ 143.936184][ T6320] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 143.942333][ T6320] ? do_sys_openat2+0x14c/0x200
[ 143.947183][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.953238][ T6320] exit_to_user_mode_loop+0x86/0x480
[ 143.958511][ T6320] ? rcu_is_watching+0x15/0xb0
[ 143.963265][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.969317][ T6320] do_syscall_64+0x33e/0xf80
[ 143.973903][ T6320] ? trace_irq_disable+0x3b/0x140
[ 143.978931][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.984810][ T6320] RIP: 0033:0x7efd5e99c819
[ 143.989211][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 144.008803][ T6320] RSP: 002b:00007efd5f91a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 144.017212][ T6320] RAX: fffffffffffffffc RBX: 00007efd5ec16090 RCX: 00007efd5e99c819
[ 144.025172][ T6320] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 144.033128][ T6320] RBP: 00007efd5ea32c91 R08: 0000000000000000 R09: 0000000000000000
[ 144.041175][ T6320] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 144.049133][ T6320] R13: 00007efd5ec16128 R14: 00007efd5ec16090 R15: 00007fff4424a9d8
[ 144.057101][ T6320]
[ 144.060378][ T6320] Kernel Offset: disabled
[ 144.064685][ T6320] Rebooting in 86400 seconds..