Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts.
2026/04/18 16:47:13 parsed 1 programs
[ 81.514664][ T5823] cgroup: Unknown subsys name 'net'
[ 81.649997][ T5823] cgroup: Unknown subsys name 'cpuset'
[ 81.659260][ T5823] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 83.133815][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.047628][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 86.101453][ T29] cfg80211: failed to load regulatory.db
[ 86.916365][ T5854] chnl_net:caif_netlink_parms(): no params data found
[ 87.012551][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.020214][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.027766][ T5854] bridge_slave_0: entered allmulticast mode
[ 87.035344][ T5854] bridge_slave_0: entered promiscuous mode
[ 87.045625][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.052787][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.060465][ T5854] bridge_slave_1: entered allmulticast mode
[ 87.068315][ T5854] bridge_slave_1: entered promiscuous mode
[ 87.147540][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.168262][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.203912][ T5854] team0: Port device team_slave_0 added
[ 87.211805][ T5854] team0: Port device team_slave_1 added
[ 87.246484][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.253461][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 87.279820][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.292758][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.299743][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 87.325761][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.376450][ T5854] hsr_slave_0: entered promiscuous mode
[ 87.383063][ T5854] hsr_slave_1: entered promiscuous mode
[ 87.553421][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.567390][ T5854] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 87.575208][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 87.585364][ T5854] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 87.593160][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 87.603815][ T5854] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 87.611609][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 87.622711][ T5854] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 87.652386][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.659894][ T5854] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.667878][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.675011][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.734826][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.755883][ T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.765919][ T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.782867][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.797402][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.804551][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.818562][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.825729][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.028553][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.073875][ T5854] veth0_vlan: entered promiscuous mode
[ 88.087929][ T5854] veth1_vlan: entered promiscuous mode
[ 88.118789][ T5854] veth0_macvtap: entered promiscuous mode
[ 88.128290][ T5854] veth1_macvtap: entered promiscuous mode
[ 88.146538][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.162512][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.178400][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.188653][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.203496][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.212619][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.363071][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.467843][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.522590][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.614448][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.076246][ T5916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.084060][ T5916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.091965][ T5916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.100837][ T5916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.110809][ T5916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.383817][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.392345][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.429498][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.437720][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/04/18 16:47:26 executed programs: 0
[ 90.993976][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.003646][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.012589][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.020999][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.029747][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.210708][ T5931] chnl_net:caif_netlink_parms(): no params data found
[ 91.301918][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.309371][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.317062][ T5931] bridge_slave_0: entered allmulticast mode
[ 91.324468][ T5931] bridge_slave_0: entered promiscuous mode
[ 91.334850][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.342067][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.349412][ T5931] bridge_slave_1: entered allmulticast mode
[ 91.357343][ T5931] bridge_slave_1: entered promiscuous mode
[ 91.394293][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 91.407055][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.459730][ T5931] team0: Port device team_slave_0 added
[ 91.470406][ T5931] team0: Port device team_slave_1 added
[ 91.515364][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 91.522656][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.549192][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 91.563551][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 91.570594][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 91.597218][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 91.662484][ T13] bridge_slave_1: left allmulticast mode
[ 91.668983][ T13] bridge_slave_1: left promiscuous mode
[ 91.675794][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.688927][ T13] bridge_slave_0: left allmulticast mode
[ 91.694558][ T13] bridge_slave_0: left promiscuous mode
[ 91.701896][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.851324][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 91.863078][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 91.873443][ T13] bond0 (unregistering): Released all slaves
[ 91.921196][ T5931] hsr_slave_0: entered promiscuous mode
[ 91.928123][ T5931] hsr_slave_1: entered promiscuous mode
[ 91.934353][ T5931] debugfs: 'hsr0' already exists in 'hsr'
[ 91.941028][ T5931] Cannot create hsr debugfs directory
[ 91.957753][ T13] hsr_slave_0: left promiscuous mode
[ 91.963712][ T13] hsr_slave_1: left promiscuous mode
[ 91.970309][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 91.977738][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 91.986154][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 91.993528][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 92.007750][ T13] veth1_macvtap: left promiscuous mode
[ 92.013264][ T13] veth0_macvtap: left promiscuous mode
[ 92.019544][ T13] veth1_vlan: left promiscuous mode
[ 92.024811][ T13] veth0_vlan: left promiscuous mode
[ 92.241221][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 92.267994][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 93.056682][ T5140] Bluetooth: hci0: command tx timeout
[ 93.458607][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.472041][ T5931] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 93.486783][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.500730][ T5931] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 93.510020][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.528600][ T5931] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 93.536748][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.553888][ T5931] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 93.830735][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.882830][ T5931] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.904810][ T642] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.912042][ T642] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.943455][ T642] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.950683][ T642] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.383918][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.444213][ T5931] veth0_vlan: entered promiscuous mode
[ 94.458180][ T5931] veth1_vlan: entered promiscuous mode
[ 94.492286][ T5931] veth0_macvtap: entered promiscuous mode
[ 94.501808][ T5931] veth1_macvtap: entered promiscuous mode
[ 94.536277][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.553762][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.584385][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.644359][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.654389][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.668181][ T642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.754344][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.762307][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.793901][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.803309][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.145767][ T5140] Bluetooth: hci0: command tx timeout
[ 95.691430][ T5979] ==================================================================
[ 95.699552][ T5979] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x31/0x190
[ 95.708667][ T5979] Read of size 8 at addr ffff888024945d38 by task syz.0.17/5979
[ 95.716292][ T5979]
[ 95.718695][ T5979] CPU: 1 UID: 0 PID: 5979 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 95.718720][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 95.718733][ T5979] Call Trace:
[ 95.718742][ T5979]
[ 95.718751][ T5979] dump_stack_lvl+0xe8/0x150
[ 95.718789][ T5979] print_address_description+0x55/0x1e0
[ 95.718823][ T5979] ? __list_del_entry_valid_or_report+0x31/0x190
[ 95.718853][ T5979] print_report+0x58/0x70
[ 95.718883][ T5979] kasan_report+0x117/0x150
[ 95.718913][ T5979] ? __list_del_entry_valid_or_report+0x31/0x190
[ 95.718947][ T5979] __list_del_entry_valid_or_report+0x31/0x190
[ 95.718979][ T5979] fuse_read_interrupt+0xdb/0x410
[ 95.719012][ T5979] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 95.719052][ T5979] fuse_dev_do_read+0xa62/0x1280
[ 95.719080][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.719114][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.719143][ T5979] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 95.719171][ T5979] ? __pfx_aa_file_perm+0x10/0x10
[ 95.719206][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.719239][ T5979] fuse_dev_read+0x16a/0x200
[ 95.719264][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.719297][ T5979] ? __pfx_fuse_dev_read+0x10/0x10
[ 95.719327][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.719353][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.719379][ T5979] ? security_file_permission+0x75/0x260
[ 95.719405][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.719431][ T5979] ? rw_verify_area+0x2a6/0x4d0
[ 95.719454][ T5979] ? fuse_dev_poll+0x1a7/0x1e0
[ 95.719480][ T5979] ? __pfx_fuse_dev_read+0x10/0x10
[ 95.719505][ T5979] __io_read+0x724/0x14f0
[ 95.719544][ T5979] ? __lock_acquire+0x146e/0x2cf0
[ 95.719585][ T5979] ? __pfx___io_read+0x10/0x10
[ 95.719623][ T5979] io_read+0x4a/0x1c0
[ 95.719659][ T5979] __io_issue_sqe+0x180/0x4b0
[ 95.719691][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.719720][ T5979] io_issue_sqe+0x165/0xf60
[ 95.719751][ T5979] ? io_poll_remove_entries+0x63/0x610
[ 95.719788][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.719817][ T5979] io_req_task_submit+0xe6/0x180
[ 95.719848][ T5979] io_poll_task_func+0x99d/0xc30
[ 95.719889][ T5979] ? __pfx_io_poll_task_func+0x10/0x10
[ 95.719925][ T5979] ? percpu_ref_get+0x1c/0x1d0
[ 95.719946][ T5979] ? percpu_ref_get+0x1c/0x1d0
[ 95.719968][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.719995][ T5979] ? __pfx_io_poll_task_func+0x10/0x10
[ 95.720031][ T5979] io_handle_tw_list+0x258/0x540
[ 95.720054][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.720083][ T5979] tctx_task_work_run+0x55/0x300
[ 95.720108][ T5979] tctx_task_work+0x3f/0x90
[ 95.720131][ T5979] task_work_run+0x1d9/0x270
[ 95.720160][ T5979] ? __pfx_task_work_run+0x10/0x10
[ 95.720194][ T5979] get_signal+0x11eb/0x1330
[ 95.720231][ T5979] ? kasan_quarantine_put+0xbb/0x1f0
[ 95.720254][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.720330][ T5979] ? lockdep_hardirqs_on+0x7a/0x110
[ 95.720360][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 95.720391][ T5979] arch_do_signal_or_restart+0xbc/0x830
[ 95.720424][ T5979] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 95.720453][ T5979] ? do_sys_openat2+0x14c/0x200
[ 95.720491][ T5979] ? ksys_write+0x242/0x270
[ 95.720518][ T5979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.720542][ T5979] exit_to_user_mode_loop+0x86/0x480
[ 95.720575][ T5979] ? rcu_is_watching+0x15/0xb0
[ 95.720598][ T5979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.720621][ T5979] do_syscall_64+0x33e/0xf80
[ 95.720651][ T5979] ? trace_irq_disable+0x3b/0x140
[ 95.720683][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.720706][ T5979] RIP: 0033:0x7f456399c819
[ 95.720725][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.720742][ T5979] RSP: 002b:00007f45647a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 95.720765][ T5979] RAX: fffffffffffffffc RBX: 00007f4563c16090 RCX: 00007f456399c819
[ 95.720781][ T5979] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 95.720797][ T5979] RBP: 00007f4563a32c91 R08: 0000000000000000 R09: 0000000000000000
[ 95.720811][ T5979] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 95.720824][ T5979] R13: 00007f4563c16128 R14: 00007f4563c16090 R15: 00007ffcff750608
[ 95.720850][ T5979]
[ 95.720858][ T5979]
[ 96.151218][ T5979] Allocated by task 5979:
[ 96.155533][ T5979] kasan_save_track+0x3e/0x80
[ 96.160230][ T5979] __kasan_slab_alloc+0x6c/0x80
[ 96.165118][ T5979] kmem_cache_alloc_noprof+0x2bc/0x650
[ 96.170573][ T5979] fuse_get_req+0x7da/0x10d0
[ 96.175155][ T5979] __fuse_simple_request+0x2cf/0x1db0
[ 96.180525][ T5979] fuse_lookup_name+0x35e/0x8b0
[ 96.185380][ T5979] fuse_lookup+0x213/0x4e0
[ 96.189828][ T5979] fuse_atomic_open+0x196/0x430
[ 96.194735][ T5979] atomic_open+0x14f/0x370
[ 96.199247][ T5979] path_openat+0x10e9/0x3860
[ 96.203843][ T5979] do_file_open+0x23e/0x4a0
[ 96.208343][ T5979] do_sys_openat2+0x113/0x200
[ 96.213045][ T5979] __x64_sys_openat+0x138/0x170
[ 96.218008][ T5979] do_syscall_64+0x15f/0xf80
[ 96.222650][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.228538][ T5979]
[ 96.230848][ T5979] Freed by task 5979:
[ 96.234811][ T5979] kasan_save_track+0x3e/0x80
[ 96.239485][ T5979] kasan_save_free_info+0x46/0x50
[ 96.244516][ T5979] __kasan_slab_free+0x5c/0x80
[ 96.249284][ T5979] kmem_cache_free+0x182/0x650
[ 96.254058][ T5979] __fuse_simple_request+0x175a/0x1db0
[ 96.259537][ T5979] fuse_lookup_name+0x35e/0x8b0
[ 96.264504][ T5979] fuse_lookup+0x213/0x4e0
[ 96.268946][ T5979] fuse_atomic_open+0x196/0x430
[ 96.273810][ T5979] atomic_open+0x14f/0x370
[ 96.278223][ T5979] path_openat+0x10e9/0x3860
[ 96.282813][ T5979] do_file_open+0x23e/0x4a0
[ 96.287308][ T5979] do_sys_openat2+0x113/0x200
[ 96.292004][ T5979] __x64_sys_openat+0x138/0x170
[ 96.296862][ T5979] do_syscall_64+0x15f/0xf80
[ 96.301470][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.307383][ T5979]
[ 96.309693][ T5979] The buggy address belongs to the object at ffff888024945d20
[ 96.309693][ T5979] which belongs to the cache fuse_request of size 216
[ 96.323819][ T5979] The buggy address is located 24 bytes inside of
[ 96.323819][ T5979] freed 216-byte region [ffff888024945d20, ffff888024945df8)
[ 96.337520][ T5979]
[ 96.339837][ T5979] The buggy address belongs to the physical page:
[ 96.346232][ T5979] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24945
[ 96.354989][ T5979] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 96.362087][ T5979] page_type: f5(slab)
[ 96.366096][ T5979] raw: 00fff00000000000 ffff888140437c80 dead000000000122 0000000000000000
[ 96.374668][ T5979] raw: 0000000000000000 00000008000e000e 00000000f5000000 0000000000000000
[ 96.383230][ T5979] page dumped because: kasan: bad access detected
[ 96.389622][ T5979] page_owner tracks the page as allocated
[ 96.395318][ T5979] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5978, tgid 5977 (syz.0.17), ts 94864823496, free_ts 94855807982
[ 96.415895][ T5979] post_alloc_hook+0x231/0x280
[ 96.420746][ T5979] get_page_from_freelist+0x24ba/0x2540
[ 96.426290][ T5979] __alloc_frozen_pages_noprof+0x18d/0x380
[ 96.432094][ T5979] allocate_slab+0x77/0x660
[ 96.436593][ T5979] refill_objects+0x339/0x3d0
[ 96.441266][ T5979] __pcs_replace_empty_main+0x321/0x720
[ 96.446811][ T5979] kmem_cache_alloc_noprof+0x37d/0x650
[ 96.452260][ T5979] fuse_simple_background+0x9f/0x1040
[ 96.457658][ T5979] fuse_send_init+0x3ec/0x740
[ 96.462336][ T5979] get_tree_nodev+0xbb/0x150
[ 96.466917][ T5979] fuse_get_tree+0x295/0x3b0
[ 96.471511][ T5979] vfs_get_tree+0x92/0x2a0
[ 96.475918][ T5979] do_new_mount+0x341/0xd30
[ 96.480442][ T5979] __se_sys_mount+0x31d/0x420
[ 96.485117][ T5979] do_syscall_64+0x15f/0xf80
[ 96.489718][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.495607][ T5979] page last free pid 5977 tgid 5977 stack trace:
[ 96.501920][ T5979] __free_frozen_pages+0xbc7/0xd30
[ 96.507024][ T5979] __kasan_populate_vmalloc+0x137/0x1d0
[ 96.512670][ T5979] alloc_vmap_area+0xd47/0x1480
[ 96.517530][ T5979] __get_vm_area_node+0x1f8/0x300
[ 96.522594][ T5979] __vmalloc_node_range_noprof+0x36a/0x1750
[ 96.528505][ T5979] __vmalloc_node_noprof+0xc2/0x100
[ 96.533698][ T5979] dup_task_struct+0x298/0x840
[ 96.538471][ T5979] copy_process+0x89b/0x4450
[ 96.543065][ T5979] kernel_clone+0x284/0x8f0
[ 96.547554][ T5979] __se_sys_clone3+0x33c/0x360
[ 96.552316][ T5979] do_syscall_64+0x15f/0xf80
[ 96.556909][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.562799][ T5979]
[ 96.565107][ T5979] Memory state around the buggy address:
[ 96.570721][ T5979] ffff888024945c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 96.578770][ T5979] ffff888024945c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 96.586819][ T5979] >ffff888024945d00: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[ 96.594861][ T5979] ^
[ 96.600741][ T5979] ffff888024945d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc
[ 96.608791][ T5979] ffff888024945e00: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb
[ 96.616842][ T5979] ==================================================================
[ 96.625983][ T5979] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 96.633213][ T5979] CPU: 1 UID: 0 PID: 5979 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 96.642347][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 96.652401][ T5979] Call Trace:
[ 96.655679][ T5979]
[ 96.658609][ T5979] vpanic+0x56c/0xa60
[ 96.663165][ T5979] ? __pfx_vpanic+0x10/0x10
[ 96.667687][ T5979] ? irqentry_exit+0x218/0x730
[ 96.672474][ T5979] panic+0xc5/0xd0
[ 96.676213][ T5979] ? __pfx_panic+0x10/0x10
[ 96.680645][ T5979] ? __list_del_entry_valid_or_report+0x31/0x190
[ 96.687439][ T5979] ? __list_del_entry_valid_or_report+0x31/0x190
[ 96.693949][ T5979] check_panic_on_warn+0x89/0xb0
[ 96.698897][ T5979] ? __list_del_entry_valid_or_report+0x31/0x190
[ 96.705248][ T5979] end_report+0x73/0x170
[ 96.709498][ T5979] ? __list_del_entry_valid_or_report+0x31/0x190
[ 96.715822][ T5979] kasan_report+0x128/0x150
[ 96.720336][ T5979] ? __list_del_entry_valid_or_report+0x31/0x190
[ 96.726669][ T5979] __list_del_entry_valid_or_report+0x31/0x190
[ 96.732822][ T5979] fuse_read_interrupt+0xdb/0x410
[ 96.737877][ T5979] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 96.743517][ T5979] fuse_dev_do_read+0xa62/0x1280
[ 96.748539][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.754173][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.759889][ T5979] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 96.765256][ T5979] ? __pfx_aa_file_perm+0x10/0x10
[ 96.770318][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.775964][ T5979] fuse_dev_read+0x16a/0x200
[ 96.780551][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.786180][ T5979] ? __pfx_fuse_dev_read+0x10/0x10
[ 96.791291][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.796917][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.802655][ T5979] ? security_file_permission+0x75/0x260
[ 96.808287][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.813913][ T5979] ? rw_verify_area+0x2a6/0x4d0
[ 96.818755][ T5979] ? fuse_dev_poll+0x1a7/0x1e0
[ 96.823513][ T5979] ? __pfx_fuse_dev_read+0x10/0x10
[ 96.828702][ T5979] __io_read+0x724/0x14f0
[ 96.833039][ T5979] ? __lock_acquire+0x146e/0x2cf0
[ 96.838070][ T5979] ? __pfx___io_read+0x10/0x10
[ 96.842845][ T5979] io_read+0x4a/0x1c0
[ 96.846828][ T5979] __io_issue_sqe+0x180/0x4b0
[ 96.851502][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.857128][ T5979] io_issue_sqe+0x165/0xf60
[ 96.861628][ T5979] ? io_poll_remove_entries+0x63/0x610
[ 96.867091][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.872750][ T5979] io_req_task_submit+0xe6/0x180
[ 96.877692][ T5979] io_poll_task_func+0x99d/0xc30
[ 96.882638][ T5979] ? __pfx_io_poll_task_func+0x10/0x10
[ 96.888100][ T5979] ? percpu_ref_get+0x1c/0x1d0
[ 96.892855][ T5979] ? percpu_ref_get+0x1c/0x1d0
[ 96.897607][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.903234][ T5979] ? __pfx_io_poll_task_func+0x10/0x10
[ 96.908788][ T5979] io_handle_tw_list+0x258/0x540
[ 96.913717][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.919345][ T5979] tctx_task_work_run+0x55/0x300
[ 96.924281][ T5979] tctx_task_work+0x3f/0x90
[ 96.928781][ T5979] task_work_run+0x1d9/0x270
[ 96.933840][ T5979] ? __pfx_task_work_run+0x10/0x10
[ 96.938963][ T5979] get_signal+0x11eb/0x1330
[ 96.943477][ T5979] ? kasan_quarantine_put+0xbb/0x1f0
[ 96.948756][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.954386][ T5979] ? lockdep_hardirqs_on+0x7a/0x110
[ 96.959587][ T5979] ? srso_alias_return_thunk+0x5/0xfbef5
[ 96.965223][ T5979] arch_do_signal_or_restart+0xbc/0x830
[ 96.970784][ T5979] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 96.976947][ T5979] ? do_sys_openat2+0x14c/0x200
[ 96.981824][ T5979] ? ksys_write+0x242/0x270
[ 96.986324][ T5979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.992385][ T5979] exit_to_user_mode_loop+0x86/0x480
[ 96.997761][ T5979] ? rcu_is_watching+0x15/0xb0
[ 97.002518][ T5979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.008579][ T5979] do_syscall_64+0x33e/0xf80
[ 97.013171][ T5979] ? trace_irq_disable+0x3b/0x140
[ 97.018199][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.024171][ T5979] RIP: 0033:0x7f456399c819
[ 97.028578][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 97.048185][ T5979] RSP: 002b:00007f45647a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 97.056597][ T5979] RAX: fffffffffffffffc RBX: 00007f4563c16090 RCX: 00007f456399c819
[ 97.064821][ T5979] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 97.072780][ T5979] RBP: 00007f4563a32c91 R08: 0000000000000000 R09: 0000000000000000
[ 97.080738][ T5979] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 97.088783][ T5979] R13: 00007f4563c16128 R14: 00007f4563c16090 R15: 00007ffcff750608
[ 97.096755][ T5979]
[ 97.099843][ T5979] Kernel Offset: disabled
[ 97.104147][ T5979] Rebooting in 86400 seconds..