Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts.
[ 87.103562][ T44] cfg80211: failed to load regulatory.db
2026/04/18 19:03:09 parsed 1 programs
[ 92.101494][ T5835] cgroup: Unknown subsys name 'net'
[ 92.334054][ T5835] cgroup: Unknown subsys name 'cpuset'
[ 92.398461][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 94.407475][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 97.780795][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.780819][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.837939][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.837960][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.613559][ T5870] chnl_net:caif_netlink_parms(): no params data found
[ 100.740099][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.742009][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.742187][ T5870] bridge_slave_0: entered allmulticast mode
[ 100.744173][ T5870] bridge_slave_0: entered promiscuous mode
[ 100.753712][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.754093][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.754339][ T5870] bridge_slave_1: entered allmulticast mode
[ 100.758227][ T5870] bridge_slave_1: entered promiscuous mode
[ 100.818977][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 100.825028][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.880956][ T5870] team0: Port device team_slave_0 added
[ 100.991241][ T5870] team0: Port device team_slave_1 added
[ 101.043806][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.043819][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.043836][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.046818][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.046830][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 101.046846][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.194838][ T5870] hsr_slave_0: entered promiscuous mode
[ 101.196449][ T5870] hsr_slave_1: entered promiscuous mode
[ 101.792049][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.835713][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 101.836524][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.853278][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 101.854235][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.891947][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 101.892854][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.934974][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 102.068864][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.104623][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.125681][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.126616][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.180855][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.182779][ T3585] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.619746][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.816140][ T5870] veth0_vlan: entered promiscuous mode
[ 102.869587][ T5870] veth1_vlan: entered promiscuous mode
[ 103.001043][ T5870] veth0_macvtap: entered promiscuous mode
[ 103.007232][ T5870] veth1_macvtap: entered promiscuous mode
[ 103.046170][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.063774][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.081589][ T3554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.085579][ T3554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.087242][ T3554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.096944][ T3554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.760464][ T3554] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.610613][ T3554] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.283931][ T3554] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.626590][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 105.655884][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 105.664294][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 105.667199][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 105.669550][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 105.830825][ T3554] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.578201][ T3554] bridge_slave_1: left allmulticast mode
[ 106.578380][ T3554] bridge_slave_1: left promiscuous mode
[ 106.585449][ T3554] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.708916][ T3554] bridge_slave_0: left allmulticast mode
[ 106.708941][ T3554] bridge_slave_0: left promiscuous mode
[ 106.709129][ T3554] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.398505][ T3554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 107.478561][ T3554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 107.500336][ T3554] bond0 (unregistering): Released all slaves
[ 107.540350][ T5494] 8021q: adding VLAN 0 to HW filter on device eth1
[ 107.837846][ T3554] hsr_slave_0: left promiscuous mode
[ 107.877763][ T3554] hsr_slave_1: left promiscuous mode
[ 107.884343][ T3554] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 107.884419][ T3554] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 107.919874][ T3554] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 107.919904][ T3554] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 108.019715][ T3554] veth1_macvtap: left promiscuous mode
[ 108.020001][ T3554] veth0_macvtap: left promiscuous mode
[ 108.020363][ T3554] veth1_vlan: left promiscuous mode
[ 108.020707][ T3554] veth0_vlan: left promiscuous mode
[ 108.778665][ T3554] team0 (unregistering): Port device team_slave_1 removed
[ 108.818216][ T3554] team0 (unregistering): Port device team_slave_0 removed
[ 109.020278][ T5494] 8021q: adding VLAN 0 to HW filter on device eth2
[ 109.910597][ T5494] 8021q: adding VLAN 0 to HW filter on device eth3
[ 111.310721][ T5494] 8021q: adding VLAN 0 to HW filter on device eth4
2026/04/18 19:03:32 executed programs: 0
[ 112.382808][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 112.411026][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 112.411816][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 112.412924][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 112.413698][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 113.056943][ T6010] chnl_net:caif_netlink_parms(): no params data found
[ 113.163909][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.164162][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 113.164357][ T6010] bridge_slave_0: entered allmulticast mode
[ 113.166412][ T6010] bridge_slave_0: entered promiscuous mode
[ 113.170306][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.170691][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.170937][ T6010] bridge_slave_1: entered allmulticast mode
[ 113.174237][ T6010] bridge_slave_1: entered promiscuous mode
[ 113.232530][ T6010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 113.236555][ T6010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 113.304212][ T6010] team0: Port device team_slave_0 added
[ 113.307406][ T6010] team0: Port device team_slave_1 added
[ 113.352315][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.352328][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.352343][ T6010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.354384][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.354393][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.354410][ T6010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.480615][ T6010] hsr_slave_0: entered promiscuous mode
[ 113.482049][ T6010] hsr_slave_1: entered promiscuous mode
[ 114.439737][ T5149] Bluetooth: hci0: command tx timeout
[ 115.721251][ T6010] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 115.763635][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 115.764662][ T6010] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 115.805317][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 115.806261][ T6010] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 115.862680][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 115.864589][ T6010] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 115.914388][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 116.152588][ T6010] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.207105][ T6010] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.233393][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.233681][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.270108][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.270365][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.519093][ T5149] Bluetooth: hci0: command tx timeout
[ 116.764543][ T6010] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 116.875480][ T6010] veth0_vlan: entered promiscuous mode
[ 116.906179][ T6010] veth1_vlan: entered promiscuous mode
[ 117.004001][ T6010] veth0_macvtap: entered promiscuous mode
[ 117.023774][ T6010] veth1_macvtap: entered promiscuous mode
[ 117.074458][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 117.103616][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 117.147193][ T1168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.157278][ T1168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.157325][ T1168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.157356][ T1168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.835430][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.835453][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.952004][ T3336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 117.952027][ T3336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/18 19:03:38 executed programs: 2
[ 118.602499][ T5149] Bluetooth: hci0: command tx timeout
[ 118.983377][ T6125] ==================================================================
[ 118.983396][ T6125] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x31/0x190
[ 118.983430][ T6125] Read of size 8 at addr ffff888044c88420 by task syz.0.17/6125
[ 118.983448][ T6125]
[ 118.983461][ T6125] CPU: 1 UID: 0 PID: 6125 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 118.983486][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 118.983499][ T6125] Call Trace:
[ 118.983507][ T6125]
[ 118.983517][ T6125] dump_stack_lvl+0xe8/0x150
[ 118.983543][ T6125] print_address_description+0x55/0x1e0
[ 118.983566][ T6125] ? __list_del_entry_valid_or_report+0x31/0x190
[ 118.983588][ T6125] print_report+0x58/0x70
[ 118.983607][ T6125] kasan_report+0x117/0x150
[ 118.983640][ T6125] ? __list_del_entry_valid_or_report+0x31/0x190
[ 118.983674][ T6125] __list_del_entry_valid_or_report+0x31/0x190
[ 118.983696][ T6125] fuse_read_interrupt+0xdb/0x410
[ 118.983730][ T6125] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 118.983756][ T6125] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 118.983780][ T6125] ? preempt_count_add+0x91/0x190
[ 118.983803][ T6125] ? aa_file_perm+0x192/0x15f0
[ 118.983838][ T6125] fuse_dev_do_read+0xa65/0x1280
[ 118.983869][ T6125] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 118.983894][ T6125] ? __pfx_aa_file_perm+0x10/0x10
[ 118.983924][ T6125] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 118.983951][ T6125] fuse_dev_read+0x16a/0x200
[ 118.983972][ T6125] ? __pfx_fuse_dev_read+0x10/0x10
[ 118.984000][ T6125] ? rw_verify_area+0x2ac/0x4e0
[ 118.984028][ T6125] ? fuse_dev_poll+0x1a7/0x1e0
[ 118.984051][ T6125] ? __pfx_fuse_dev_read+0x10/0x10
[ 118.984073][ T6125] __io_read+0x72f/0x1500
[ 118.984105][ T6125] ? do_raw_spin_lock+0x12b/0x2f0
[ 118.984132][ T6125] ? __pfx___io_read+0x10/0x10
[ 118.984159][ T6125] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 118.984186][ T6125] io_read+0x4a/0x1c0
[ 118.984222][ T6125] ? rt_spin_lock+0x1e0/0x400
[ 118.984255][ T6125] __io_issue_sqe+0x180/0x4b0
[ 118.984283][ T6125] io_issue_sqe+0x165/0xf60
[ 118.984309][ T6125] ? io_poll_remove_entries+0x63/0x610
[ 118.984340][ T6125] io_req_task_submit+0xe6/0x180
[ 118.984365][ T6125] io_poll_task_func+0x8d4/0xb20
[ 118.984407][ T6125] ? __pfx_io_poll_task_func+0x10/0x10
[ 118.984437][ T6125] ? percpu_ref_get+0x1c/0x1d0
[ 118.984457][ T6125] ? percpu_ref_get+0x1c/0x1d0
[ 118.984475][ T6125] ? __pfx_io_poll_task_func+0x10/0x10
[ 118.984504][ T6125] io_handle_tw_list+0x258/0x540
[ 118.984526][ T6125] tctx_task_work_run+0x55/0x300
[ 118.984548][ T6125] tctx_task_work+0x3f/0x90
[ 118.984568][ T6125] task_work_run+0x1d9/0x270
[ 118.984600][ T6125] ? __pfx_task_work_run+0x10/0x10
[ 118.984635][ T6125] get_signal+0x11eb/0x1330
[ 118.984659][ T6125] ? kasan_quarantine_put+0xbb/0x1f0
[ 118.984687][ T6125] ? lockdep_hardirqs_on+0x7a/0x110
[ 118.984714][ T6125] arch_do_signal_or_restart+0xbc/0x830
[ 118.984748][ T6125] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 118.984781][ T6125] ? do_sys_openat2+0x14c/0x200
[ 118.984812][ T6125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.984835][ T6125] exit_to_user_mode_loop+0x86/0x480
[ 118.984869][ T6125] ? rcu_is_watching+0x15/0xb0
[ 118.984895][ T6125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.984913][ T6125] do_syscall_64+0x33e/0xf80
[ 118.984932][ T6125] ? trace_irq_disable+0x3b/0x140
[ 118.984953][ T6125] ? clear_bhb_loop+0x40/0x90
[ 118.984974][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.984992][ T6125] RIP: 0033:0x7fb7372bc819
[ 118.985009][ T6125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 118.985024][ T6125] RSP: 002b:00007fb7368fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 118.985045][ T6125] RAX: fffffffffffffffc RBX: 00007fb737536090 RCX: 00007fb7372bc819
[ 118.985058][ T6125] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 118.985071][ T6125] RBP: 00007fb737352c91 R08: 0000000000000000 R09: 0000000000000000
[ 118.985083][ T6125] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 118.985094][ T6125] R13: 00007fb737536128 R14: 00007fb737536090 R15: 00007ffe4e193e38
[ 118.985114][ T6125]
[ 118.985120][ T6125]
[ 118.985125][ T6125] Allocated by task 6125:
[ 118.985133][ T6125] kasan_save_track+0x3e/0x80
[ 118.985160][ T6125] __kasan_slab_alloc+0x6c/0x80
[ 118.985186][ T6125] kmem_cache_alloc_noprof+0x33b/0x680
[ 118.985221][ T6125] fuse_get_req+0x6c3/0xac0
[ 118.985238][ T6125] fuse_chan_send+0x2d6/0x1aa0
[ 118.985255][ T6125] fuse_lookup_name+0x360/0x8d0
[ 118.985279][ T6125] fuse_lookup+0x204/0x500
[ 118.985303][ T6125] fuse_atomic_open+0x196/0x440
[ 118.985328][ T6125] atomic_open+0x14f/0x370
[ 118.985355][ T6125] path_openat+0x1108/0x38a0
[ 118.985380][ T6125] do_file_open+0x23e/0x4a0
[ 118.985405][ T6125] do_sys_openat2+0x113/0x200
[ 118.985427][ T6125] __x64_sys_openat+0x138/0x170
[ 118.985447][ T6125] do_syscall_64+0x15f/0xf80
[ 118.985467][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.985485][ T6125]
[ 118.985490][ T6125] Freed by task 6125:
[ 118.985500][ T6125] kasan_save_track+0x3e/0x80
[ 118.985524][ T6125] kasan_save_free_info+0x46/0x50
[ 118.985545][ T6125] __kasan_slab_free+0x5c/0x80
[ 118.985569][ T6125] kmem_cache_free+0x187/0x6c0
[ 118.985596][ T6125] fuse_chan_send+0x150a/0x1aa0
[ 118.985613][ T6125] fuse_lookup_name+0x360/0x8d0
[ 118.985637][ T6125] fuse_lookup+0x204/0x500
[ 118.985661][ T6125] fuse_atomic_open+0x196/0x440
[ 118.985686][ T6125] atomic_open+0x14f/0x370
[ 118.985713][ T6125] path_openat+0x1108/0x38a0
[ 118.985740][ T6125] do_file_open+0x23e/0x4a0
[ 118.985766][ T6125] do_sys_openat2+0x113/0x200
[ 118.985787][ T6125] __x64_sys_openat+0x138/0x170
[ 118.985809][ T6125] do_syscall_64+0x15f/0xf80
[ 118.985828][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.985847][ T6125]
[ 118.985852][ T6125] The buggy address belongs to the object at ffff888044c88408
[ 118.985852][ T6125] which belongs to the cache fuse_request of size 280
[ 118.985871][ T6125] The buggy address is located 24 bytes inside of
[ 118.985871][ T6125] freed 280-byte region [ffff888044c88408, ffff888044c88520)
[ 118.985892][ T6125]
[ 118.985897][ T6125] The buggy address belongs to the physical page:
[ 118.985907][ T6125] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888044c886b8 pfn:0x44c88
[ 118.985928][ T6125] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 118.985947][ T6125] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[ 118.985964][ T6125] page_type: f5(slab)
[ 118.985983][ T6125] raw: 0080000000000240 ffff88801d366500 ffff88801d365588 ffff88801d365588
[ 118.986002][ T6125] raw: ffff888044c886b8 0000000800170005 00000000f5000000 0000000000000000
[ 118.986021][ T6125] head: 0080000000000240 ffff88801d366500 ffff88801d365588 ffff88801d365588
[ 118.986039][ T6125] head: ffff888044c886b8 0000000800170005 00000000f5000000 0000000000000000
[ 118.986057][ T6125] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 118.986074][ T6125] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 118.986083][ T6125] page dumped because: kasan: bad access detected
[ 118.986092][ T6125] page_owner tracks the page as allocated
[ 118.986099][ T6125] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6123, tgid 6122 (syz.0.17), ts 118251005412, free_ts 117175879017
[ 118.986137][ T6125] post_alloc_hook+0x231/0x280
[ 118.986161][ T6125] get_page_from_freelist+0x27d6/0x2850
[ 118.986180][ T6125] __alloc_frozen_pages_noprof+0x18d/0x380
[ 118.986198][ T6125] allocate_slab+0x77/0x660
[ 118.986226][ T6125] refill_objects+0x33c/0x3d0
[ 118.986244][ T6125] __pcs_replace_empty_main+0x373/0x720
[ 118.986265][ T6125] kmem_cache_alloc_noprof+0x433/0x680
[ 118.986289][ T6125] fuse_chan_send_bg+0x7e/0x1130
[ 118.986305][ T6125] fuse_send_init+0x40f/0x760
[ 118.986327][ T6125] get_tree_nodev+0xbb/0x150
[ 118.986354][ T6125] fuse_get_tree+0x2a0/0x3a0
[ 118.986378][ T6125] vfs_get_tree+0x92/0x2a0
[ 118.986404][ T6125] do_new_mount+0x341/0xd30
[ 118.986425][ T6125] __se_sys_mount+0x31d/0x420
[ 118.986447][ T6125] do_syscall_64+0x15f/0xf80
[ 118.986467][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.986486][ T6125] page last free pid 6098 tgid 6098 stack trace:
[ 118.986497][ T6125] __free_frozen_pages+0xf9b/0x10f0
[ 118.986525][ T6125] __slab_free+0x252/0x2a0
[ 118.986551][ T6125] qlist_free_all+0x99/0x100
[ 118.986574][ T6125] kasan_quarantine_reduce+0x148/0x160
[ 118.986598][ T6125] __kasan_slab_alloc+0x22/0x80
[ 118.986624][ T6125] __kmalloc_noprof+0x399/0x7b0
[ 118.986651][ T6125] tomoyo_realpath_from_path+0xe3/0x5d0
[ 118.986679][ T6125] tomoyo_path_perm+0x283/0x560
[ 118.986699][ T6125] security_inode_getattr+0x12b/0x310
[ 118.986729][ T6125] __x64_sys_newfstat+0x13b/0x270
[ 118.986750][ T6125] do_syscall_64+0x15f/0xf80
[ 118.986770][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.986790][ T6125]
[ 118.986795][ T6125] Memory state around the buggy address:
[ 118.986806][ T6125] ffff888044c88300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 118.986820][ T6125] ffff888044c88380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 118.986833][ T6125] >ffff888044c88400: fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 118.986843][ T6125] ^
[ 118.986854][ T6125] ffff888044c88480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 118.986867][ T6125] ffff888044c88500: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb
[ 118.986877][ T6125] ==================================================================
[ 118.987248][ T6125] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 118.987267][ T6125] CPU: 1 UID: 0 PID: 6125 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 118.987291][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 118.987303][ T6125] Call Trace:
[ 118.987312][ T6125]
[ 118.987320][ T6125] vpanic+0x56c/0xa60
[ 118.987346][ T6125] ? __pfx_vpanic+0x10/0x10
[ 118.987371][ T6125] ? __pfx___schedule+0x10/0x10
[ 118.987396][ T6125] panic+0xc5/0xd0
[ 118.987419][ T6125] ? __pfx_panic+0x10/0x10
[ 118.987442][ T6125] ? preempt_schedule_thunk+0x16/0x30
[ 118.987478][ T6125] ? __list_del_entry_valid_or_report+0x31/0x190
[ 118.987499][ T6125] check_panic_on_warn+0x89/0xb0
[ 118.987527][ T6125] ? __list_del_entry_valid_or_report+0x31/0x190
[ 118.987553][ T6125] end_report+0x73/0x170
[ 118.987582][ T6125] ? __list_del_entry_valid_or_report+0x31/0x190
[ 118.987601][ T6125] kasan_report+0x128/0x150
[ 118.987633][ T6125] ? __list_del_entry_valid_or_report+0x31/0x190
[ 118.987656][ T6125] __list_del_entry_valid_or_report+0x31/0x190
[ 118.987677][ T6125] fuse_read_interrupt+0xdb/0x410
[ 118.987704][ T6125] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 118.987729][ T6125] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 118.987752][ T6125] ? preempt_count_add+0x91/0x190
[ 118.987775][ T6125] ? aa_file_perm+0x192/0x15f0
[ 118.987811][ T6125] fuse_dev_do_read+0xa65/0x1280
[ 118.987844][ T6125] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 118.987868][ T6125] ? __pfx_aa_file_perm+0x10/0x10
[ 118.987897][ T6125] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 118.987923][ T6125] fuse_dev_read+0x16a/0x200
[ 118.987946][ T6125] ? __pfx_fuse_dev_read+0x10/0x10
[ 118.987971][ T6125] ? rw_verify_area+0x2ac/0x4e0
[ 118.988000][ T6125] ? fuse_dev_poll+0x1a7/0x1e0
[ 118.988022][ T6125] ? __pfx_fuse_dev_read+0x10/0x10
[ 118.988043][ T6125] __io_read+0x72f/0x1500
[ 118.988074][ T6125] ? do_raw_spin_lock+0x12b/0x2f0
[ 118.988100][ T6125] ? __pfx___io_read+0x10/0x10
[ 118.988128][ T6125] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 118.988155][ T6125] io_read+0x4a/0x1c0
[ 118.988180][ T6125] ? rt_spin_lock+0x1e0/0x400
[ 118.988221][ T6125] __io_issue_sqe+0x180/0x4b0
[ 118.988252][ T6125] io_issue_sqe+0x165/0xf60
[ 118.988277][ T6125] ? io_poll_remove_entries+0x63/0x610
[ 118.988311][ T6125] io_req_task_submit+0xe6/0x180
[ 118.988338][ T6125] io_poll_task_func+0x8d4/0xb20
[ 118.988373][ T6125] ? __pfx_io_poll_task_func+0x10/0x10
[ 118.988404][ T6125] ? percpu_ref_get+0x1c/0x1d0
[ 118.988422][ T6125] ? percpu_ref_get+0x1c/0x1d0
[ 118.988442][ T6125] ? __pfx_io_poll_task_func+0x10/0x10
[ 118.988471][ T6125] io_handle_tw_list+0x258/0x540
[ 118.988524][ T6125] tctx_task_work_run+0x55/0x300
[ 118.988547][ T6125] tctx_task_work+0x3f/0x90
[ 118.988567][ T6125] task_work_run+0x1d9/0x270
[ 118.988597][ T6125] ? __pfx_task_work_run+0x10/0x10
[ 118.988631][ T6125] get_signal+0x11eb/0x1330
[ 118.988655][ T6125] ? kasan_quarantine_put+0xbb/0x1f0
[ 118.988681][ T6125] ? lockdep_hardirqs_on+0x7a/0x110
[ 118.988707][ T6125] arch_do_signal_or_restart+0xbc/0x830
[ 118.988741][ T6125] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 118.988773][ T6125] ? do_sys_openat2+0x14c/0x200
[ 118.988804][ T6125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.988826][ T6125] exit_to_user_mode_loop+0x86/0x480
[ 118.988853][ T6125] ? rcu_is_watching+0x15/0xb0
[ 118.988882][ T6125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.988905][ T6125] do_syscall_64+0x33e/0xf80
[ 118.988927][ T6125] ? trace_irq_disable+0x3b/0x140
[ 118.988951][ T6125] ? clear_bhb_loop+0x40/0x90
[ 118.988974][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.988995][ T6125] RIP: 0033:0x7fb7372bc819
[ 118.989014][ T6125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 118.989032][ T6125] RSP: 002b:00007fb7368fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 118.989055][ T6125] RAX: fffffffffffffffc RBX: 00007fb737536090 RCX: 00007fb7372bc819
[ 118.989071][ T6125] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 118.989087][ T6125] RBP: 00007fb737352c91 R08: 0000000000000000 R09: 0000000000000000
[ 118.989101][ T6125] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 118.989114][ T6125] R13: 00007fb737536128 R14: 00007fb737536090 R15: 00007ffe4e193e38
[ 118.989137][ T6125]
[ 118.989909][ T6125] Kernel Offset: disabled