Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts.
2026/04/17 12:38:49 parsed 1 programs
[ 88.269295][ T5828] cgroup: Unknown subsys name 'net'
[ 88.402914][ T5828] cgroup: Unknown subsys name 'cpuset'
[ 88.412378][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 89.909188][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.240127][ T9] cfg80211: failed to load regulatory.db
[ 92.746105][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.754912][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.789531][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.799513][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.844527][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 94.751151][ T5875] chnl_net:caif_netlink_parms(): no params data found
[ 94.916819][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.924443][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.932490][ T5875] bridge_slave_0: entered allmulticast mode
[ 94.942492][ T5875] bridge_slave_0: entered promiscuous mode
[ 94.953868][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.961360][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.968675][ T5875] bridge_slave_1: entered allmulticast mode
[ 94.976311][ T5875] bridge_slave_1: entered promiscuous mode
[ 95.014950][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.027308][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.062399][ T5875] team0: Port device team_slave_0 added
[ 95.071291][ T5875] team0: Port device team_slave_1 added
[ 95.103432][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.111077][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.137132][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.150321][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.157297][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.183356][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.234639][ T5875] hsr_slave_0: entered promiscuous mode
[ 95.242990][ T5875] hsr_slave_1: entered promiscuous mode
[ 95.424119][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.436422][ T5875] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 95.445201][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.455598][ T5875] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 95.463763][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.474893][ T5875] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 95.483036][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.493177][ T5875] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 95.525465][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.533948][ T5875] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.542427][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.549853][ T5875] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.624482][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.645747][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.654890][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.672855][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.687046][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.694685][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.711627][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.718835][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.940778][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.985425][ T5875] veth0_vlan: entered promiscuous mode
[ 96.000390][ T5875] veth1_vlan: entered promiscuous mode
[ 96.032845][ T5875] veth0_macvtap: entered promiscuous mode
[ 96.043214][ T5875] veth1_macvtap: entered promiscuous mode
[ 96.063213][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.080867][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.096894][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.106898][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.121498][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.130708][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.307670][ T1090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.366067][ T1090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.434526][ T1090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.525451][ T1090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.531946][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.543451][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.551689][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.562001][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.570366][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/04/17 12:39:03 executed programs: 0
[ 98.177943][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.187273][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.196889][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.206581][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.214627][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.401396][ T5933] chnl_net:caif_netlink_parms(): no params data found
[ 98.487419][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.495151][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.502504][ T5933] bridge_slave_0: entered allmulticast mode
[ 98.510007][ T5933] bridge_slave_0: entered promiscuous mode
[ 98.519554][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.526838][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.534350][ T5933] bridge_slave_1: entered allmulticast mode
[ 98.541976][ T5933] bridge_slave_1: entered promiscuous mode
[ 98.576841][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.589432][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.626719][ T5933] team0: Port device team_slave_0 added
[ 98.635349][ T5933] team0: Port device team_slave_1 added
[ 98.665692][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.672774][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.698881][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.711754][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.719794][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.746124][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.797137][ T5933] hsr_slave_0: entered promiscuous mode
[ 98.803939][ T5933] hsr_slave_1: entered promiscuous mode
[ 98.810957][ T5933] debugfs: 'hsr0' already exists in 'hsr'
[ 98.816754][ T5933] Cannot create hsr debugfs directory
[ 99.433479][ T1090] bridge_slave_1: left allmulticast mode
[ 99.439689][ T1090] bridge_slave_1: left promiscuous mode
[ 99.447841][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.461018][ T1090] bridge_slave_0: left allmulticast mode
[ 99.466678][ T1090] bridge_slave_0: left promiscuous mode
[ 99.472546][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.674969][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 99.688014][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 99.698573][ T1090] bond0 (unregistering): Released all slaves
[ 99.824986][ T1090] hsr_slave_0: left promiscuous mode
[ 99.841578][ T1090] hsr_slave_1: left promiscuous mode
[ 99.848726][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 99.856203][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 99.865176][ T1090] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 99.872759][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 99.891442][ T1090] veth1_macvtap: left promiscuous mode
[ 99.899303][ T1090] veth0_macvtap: left promiscuous mode
[ 99.904958][ T1090] veth1_vlan: left promiscuous mode
[ 99.911007][ T1090] veth0_vlan: left promiscuous mode
[ 100.262200][ T1090] team0 (unregistering): Port device team_slave_1 removed
[ 100.279102][ T5146] Bluetooth: hci0: command tx timeout
[ 100.304097][ T1090] team0 (unregistering): Port device team_slave_0 removed
[ 100.463028][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1
[ 100.765098][ T5933] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.785180][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 100.801715][ T5933] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.816085][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 100.828152][ T5933] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.866085][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 100.888878][ T5933] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.905929][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 101.760268][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.799557][ T5933] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.833471][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.840873][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.881554][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.888805][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.194417][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.251630][ T5933] veth0_vlan: entered promiscuous mode
[ 102.263959][ T5933] veth1_vlan: entered promiscuous mode
[ 102.295231][ T5933] veth0_macvtap: entered promiscuous mode
[ 102.308869][ T5933] veth1_macvtap: entered promiscuous mode
[ 102.329029][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.346425][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.363987][ T140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.373757][ T5146] Bluetooth: hci0: command tx timeout
[ 102.380350][ T140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.392389][ T140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.401391][ T140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.495973][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.504432][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.538838][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.546726][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.431130][ T5996] ==================================================================
[ 103.439279][ T5996] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x31/0x190
[ 103.448854][ T5996] Read of size 8 at addr ffff8880330cce50 by task syz.0.17/5996
[ 103.456495][ T5996]
[ 103.458820][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 103.458842][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 103.458853][ T5996] Call Trace:
[ 103.458863][ T5996]
[ 103.458871][ T5996] dump_stack_lvl+0xe8/0x150
[ 103.458947][ T5996] print_address_description+0x55/0x1e0
[ 103.458977][ T5996] ? __list_del_entry_valid_or_report+0x31/0x190
[ 103.458997][ T5996] print_report+0x58/0x70
[ 103.459020][ T5996] kasan_report+0x117/0x150
[ 103.459042][ T5996] ? __list_del_entry_valid_or_report+0x31/0x190
[ 103.459065][ T5996] __list_del_entry_valid_or_report+0x31/0x190
[ 103.459085][ T5996] fuse_read_interrupt+0xdb/0x410
[ 103.459108][ T5996] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 103.459136][ T5996] fuse_dev_do_read+0xa62/0x1280
[ 103.459154][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.459189][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.459212][ T5996] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 103.459230][ T5996] ? __pfx_aa_file_perm+0x10/0x10
[ 103.459253][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.459279][ T5996] fuse_dev_read+0x16a/0x200
[ 103.459306][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.459329][ T5996] ? __pfx_fuse_dev_read+0x10/0x10
[ 103.459359][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.459380][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.459401][ T5996] ? security_file_permission+0x75/0x260
[ 103.459429][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.459450][ T5996] ? rw_verify_area+0x2a6/0x4d0
[ 103.459466][ T5996] ? fuse_dev_poll+0x1a7/0x1e0
[ 103.459494][ T5996] ? __pfx_fuse_dev_read+0x10/0x10
[ 103.459521][ T5996] __io_read+0x724/0x14f0
[ 103.459547][ T5996] ? __lock_acquire+0x146e/0x2cf0
[ 103.459581][ T5996] ? __pfx___io_read+0x10/0x10
[ 103.459607][ T5996] io_read+0x4a/0x1c0
[ 103.459632][ T5996] __io_issue_sqe+0x180/0x4b0
[ 103.459654][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.459677][ T5996] io_issue_sqe+0x165/0xf60
[ 103.459697][ T5996] ? io_poll_remove_entries+0x63/0x610
[ 103.459722][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.459746][ T5996] io_req_task_submit+0xe6/0x180
[ 103.459767][ T5996] io_poll_task_func+0x99d/0xc30
[ 103.459796][ T5996] ? __pfx_io_poll_task_func+0x10/0x10
[ 103.459820][ T5996] ? percpu_ref_get+0x1c/0x1d0
[ 103.459845][ T5996] ? percpu_ref_get+0x1c/0x1d0
[ 103.459889][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.459917][ T5996] ? __pfx_io_poll_task_func+0x10/0x10
[ 103.459941][ T5996] io_handle_tw_list+0x258/0x540
[ 103.459973][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.459997][ T5996] tctx_task_work_run+0x55/0x300
[ 103.460025][ T5996] tctx_task_work+0x3f/0x90
[ 103.460052][ T5996] task_work_run+0x1d9/0x270
[ 103.460074][ T5996] ? __pfx_task_work_run+0x10/0x10
[ 103.460101][ T5996] get_signal+0x11eb/0x1330
[ 103.460130][ T5996] ? kasan_quarantine_put+0xbb/0x1f0
[ 103.460160][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.460181][ T5996] ? lockdep_hardirqs_on+0x7a/0x110
[ 103.460207][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 103.460232][ T5996] arch_do_signal_or_restart+0xbc/0x830
[ 103.460259][ T5996] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 103.460282][ T5996] ? do_sys_openat2+0x14c/0x200
[ 103.460310][ T5996] ? ksys_write+0x242/0x270
[ 103.460330][ T5996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.460350][ T5996] exit_to_user_mode_loop+0x86/0x480
[ 103.460375][ T5996] ? rcu_is_watching+0x15/0xb0
[ 103.460407][ T5996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.460426][ T5996] do_syscall_64+0x33e/0xf80
[ 103.460455][ T5996] ? trace_irq_disable+0x3b/0x140
[ 103.460480][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.460499][ T5996] RIP: 0033:0x7f0d3519c819
[ 103.460516][ T5996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.460532][ T5996] RSP: 002b:00007f0d35fbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 103.460551][ T5996] RAX: fffffffffffffffc RBX: 00007f0d35416090 RCX: 00007f0d3519c819
[ 103.460564][ T5996] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 103.460578][ T5996] RBP: 00007f0d35232c91 R08: 0000000000000000 R09: 0000000000000000
[ 103.460589][ T5996] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 103.460600][ T5996] R13: 00007f0d35416128 R14: 00007f0d35416090 R15: 00007ffd19784778
[ 103.460623][ T5996]
[ 103.460629][ T5996]
[ 103.895552][ T5996] Allocated by task 5996:
[ 103.900128][ T5996] kasan_save_track+0x3e/0x80
[ 103.904800][ T5996] __kasan_slab_alloc+0x6c/0x80
[ 103.909686][ T5996] kmem_cache_alloc_noprof+0x2bc/0x650
[ 103.915235][ T5996] fuse_get_req+0x7da/0x10d0
[ 103.920023][ T5996] __fuse_simple_request+0x2cf/0x1db0
[ 103.925440][ T5996] fuse_lookup_name+0x35e/0x8b0
[ 103.930299][ T5996] fuse_lookup+0x213/0x4e0
[ 103.934725][ T5996] fuse_atomic_open+0x196/0x430
[ 103.939597][ T5996] atomic_open+0x14f/0x370
[ 103.944031][ T5996] path_openat+0x10e9/0x3860
[ 103.948619][ T5996] do_file_open+0x23e/0x4a0
[ 103.953122][ T5996] do_sys_openat2+0x113/0x200
[ 103.957798][ T5996] __x64_sys_openat+0x138/0x170
[ 103.962650][ T5996] do_syscall_64+0x15f/0xf80
[ 103.967446][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 103.973444][ T5996]
[ 103.975753][ T5996] Freed by task 5996:
[ 103.979709][ T5996] kasan_save_track+0x3e/0x80
[ 103.984373][ T5996] kasan_save_free_info+0x46/0x50
[ 103.989402][ T5996] __kasan_slab_free+0x5c/0x80
[ 103.994234][ T5996] kmem_cache_free+0x182/0x650
[ 103.998992][ T5996] __fuse_simple_request+0x175a/0x1db0
[ 104.004445][ T5996] fuse_lookup_name+0x35e/0x8b0
[ 104.009285][ T5996] fuse_lookup+0x213/0x4e0
[ 104.013737][ T5996] fuse_atomic_open+0x196/0x430
[ 104.018586][ T5996] atomic_open+0x14f/0x370
[ 104.023011][ T5996] path_openat+0x10e9/0x3860
[ 104.027696][ T5996] do_file_open+0x23e/0x4a0
[ 104.032198][ T5996] do_sys_openat2+0x113/0x200
[ 104.036915][ T5996] __x64_sys_openat+0x138/0x170
[ 104.041900][ T5996] do_syscall_64+0x15f/0xf80
[ 104.046524][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.052426][ T5996]
[ 104.054738][ T5996] The buggy address belongs to the object at ffff8880330cce38
[ 104.054738][ T5996] which belongs to the cache fuse_request of size 216
[ 104.068888][ T5996] The buggy address is located 24 bytes inside of
[ 104.068888][ T5996] freed 216-byte region [ffff8880330cce38, ffff8880330ccf10)
[ 104.082701][ T5996]
[ 104.085145][ T5996] The buggy address belongs to the physical page:
[ 104.091550][ T5996] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x330cc
[ 104.100304][ T5996] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 104.107524][ T5996] page_type: f5(slab)
[ 104.111685][ T5996] raw: 00fff00000000000 ffff888140aeac80 dead000000000122 0000000000000000
[ 104.120562][ T5996] raw: 0000000000000000 00000008000e000e 00000000f5000000 0000000000000000
[ 104.129694][ T5996] page dumped because: kasan: bad access detected
[ 104.136122][ T5996] page_owner tracks the page as allocated
[ 104.142014][ T5996] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5996, tgid 5994 (syz.0.17), ts 102659484684, free_ts 102638691895
[ 104.162611][ T5996] post_alloc_hook+0x231/0x280
[ 104.167651][ T5996] get_page_from_freelist+0x24ba/0x2540
[ 104.173193][ T5996] __alloc_frozen_pages_noprof+0x18d/0x380
[ 104.179223][ T5996] allocate_slab+0x77/0x660
[ 104.183963][ T5996] refill_objects+0x339/0x3d0
[ 104.188743][ T5996] __pcs_replace_empty_main+0x321/0x720
[ 104.194415][ T5996] kmem_cache_alloc_noprof+0x37d/0x650
[ 104.199884][ T5996] fuse_get_req+0x7da/0x10d0
[ 104.204699][ T5996] __fuse_simple_request+0x2cf/0x1db0
[ 104.210112][ T5996] fuse_lookup_name+0x35e/0x8b0
[ 104.215168][ T5996] fuse_lookup+0x213/0x4e0
[ 104.219751][ T5996] fuse_atomic_open+0x196/0x430
[ 104.224882][ T5996] atomic_open+0x14f/0x370
[ 104.229387][ T5996] path_openat+0x10e9/0x3860
[ 104.234084][ T5996] do_file_open+0x23e/0x4a0
[ 104.238593][ T5996] do_sys_openat2+0x113/0x200
[ 104.243316][ T5996] page last free pid 15 tgid 15 stack trace:
[ 104.249345][ T5996] __free_frozen_pages+0xbc7/0xd30
[ 104.254473][ T5996] rcu_core+0x7cd/0x1070
[ 104.258720][ T5996] handle_softirqs+0x22a/0x840
[ 104.263524][ T5996] run_ksoftirqd+0x36/0x60
[ 104.267944][ T5996] smpboot_thread_fn+0x541/0xa50
[ 104.272978][ T5996] kthread+0x388/0x470
[ 104.277148][ T5996] ret_from_fork+0x514/0xb70
[ 104.281747][ T5996] ret_from_fork_asm+0x1a/0x30
[ 104.286561][ T5996]
[ 104.288873][ T5996] Memory state around the buggy address:
[ 104.294501][ T5996] ffff8880330ccd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.302845][ T5996] ffff8880330ccd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.310969][ T5996] >ffff8880330cce00: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb
[ 104.319049][ T5996] ^
[ 104.325868][ T5996] ffff8880330cce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 104.333969][ T5996] ffff8880330ccf00: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.342031][ T5996] ==================================================================
[ 104.351071][ T5996] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.358321][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 104.367436][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 104.377605][ T5996] Call Trace:
[ 104.380921][ T5996]
[ 104.383874][ T5996] vpanic+0x56c/0xa60
[ 104.387882][ T5996] ? __pfx_vpanic+0x10/0x10
[ 104.392505][ T5996] ? irqentry_exit+0x218/0x730
[ 104.397694][ T5996] panic+0xc5/0xd0
[ 104.401462][ T5996] ? __pfx_panic+0x10/0x10
[ 104.405891][ T5996] ? __list_del_entry_valid_or_report+0x31/0x190
[ 104.412460][ T5996] ? __list_del_entry_valid_or_report+0x31/0x190
[ 104.418796][ T5996] check_panic_on_warn+0x89/0xb0
[ 104.423852][ T5996] ? __list_del_entry_valid_or_report+0x31/0x190
[ 104.430325][ T5996] end_report+0x73/0x170
[ 104.434588][ T5996] ? __list_del_entry_valid_or_report+0x31/0x190
[ 104.440933][ T5996] kasan_report+0x128/0x150
[ 104.445459][ T5996] ? __list_del_entry_valid_or_report+0x31/0x190
[ 104.451817][ T5996] __list_del_entry_valid_or_report+0x31/0x190
[ 104.458262][ T5996] fuse_read_interrupt+0xdb/0x410
[ 104.463322][ T5996] ? __pfx_fuse_read_interrupt+0x10/0x10
[ 104.468981][ T5996] fuse_dev_do_read+0xa62/0x1280
[ 104.473933][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.479575][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.485207][ T5996] ? __pfx_fuse_dev_do_read+0x10/0x10
[ 104.490580][ T5996] ? __pfx_aa_file_perm+0x10/0x10
[ 104.495629][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.501276][ T5996] fuse_dev_read+0x16a/0x200
[ 104.505891][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.511538][ T5996] ? __pfx_fuse_dev_read+0x10/0x10
[ 104.516672][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.522322][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.527973][ T5996] ? security_file_permission+0x75/0x260
[ 104.533630][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.539273][ T5996] ? rw_verify_area+0x2a6/0x4d0
[ 104.544244][ T5996] ? fuse_dev_poll+0x1a7/0x1e0
[ 104.549138][ T5996] ? __pfx_fuse_dev_read+0x10/0x10
[ 104.554297][ T5996] __io_read+0x724/0x14f0
[ 104.558729][ T5996] ? __lock_acquire+0x146e/0x2cf0
[ 104.564139][ T5996] ? __pfx___io_read+0x10/0x10
[ 104.569008][ T5996] io_read+0x4a/0x1c0
[ 104.573032][ T5996] __io_issue_sqe+0x180/0x4b0
[ 104.577729][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.583389][ T5996] io_issue_sqe+0x165/0xf60
[ 104.588007][ T5996] ? io_poll_remove_entries+0x63/0x610
[ 104.593476][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.599295][ T5996] io_req_task_submit+0xe6/0x180
[ 104.604244][ T5996] io_poll_task_func+0x99d/0xc30
[ 104.609197][ T5996] ? __pfx_io_poll_task_func+0x10/0x10
[ 104.614678][ T5996] ? percpu_ref_get+0x1c/0x1d0
[ 104.619512][ T5996] ? percpu_ref_get+0x1c/0x1d0
[ 104.624296][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.630005][ T5996] ? __pfx_io_poll_task_func+0x10/0x10
[ 104.635675][ T5996] io_handle_tw_list+0x258/0x540
[ 104.640645][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.646296][ T5996] tctx_task_work_run+0x55/0x300
[ 104.651275][ T5996] tctx_task_work+0x3f/0x90
[ 104.655811][ T5996] task_work_run+0x1d9/0x270
[ 104.660631][ T5996] ? __pfx_task_work_run+0x10/0x10
[ 104.665753][ T5996] get_signal+0x11eb/0x1330
[ 104.670263][ T5996] ? kasan_quarantine_put+0xbb/0x1f0
[ 104.675568][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.681229][ T5996] ? lockdep_hardirqs_on+0x7a/0x110
[ 104.686432][ T5996] ? srso_alias_return_thunk+0x5/0xfbef5
[ 104.692147][ T5996] arch_do_signal_or_restart+0xbc/0x830
[ 104.697792][ T5996] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 104.703978][ T5996] ? do_sys_openat2+0x14c/0x200
[ 104.708864][ T5996] ? ksys_write+0x242/0x270
[ 104.713379][ T5996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.719535][ T5996] exit_to_user_mode_loop+0x86/0x480
[ 104.724856][ T5996] ? rcu_is_watching+0x15/0xb0
[ 104.729707][ T5996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.735838][ T5996] do_syscall_64+0x33e/0xf80
[ 104.740463][ T5996] ? trace_irq_disable+0x3b/0x140
[ 104.745518][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.751443][ T5996] RIP: 0033:0x7f0d3519c819
[ 104.755875][ T5996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.775797][ T5996] RSP: 002b:00007f0d35fbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 104.784248][ T5996] RAX: fffffffffffffffc RBX: 00007f0d35416090 RCX: 00007f0d3519c819
[ 104.792406][ T5996] RDX: 0000000000040000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 104.800836][ T5996] RBP: 00007f0d35232c91 R08: 0000000000000000 R09: 0000000000000000
[ 104.809034][ T5996] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000
[ 104.817045][ T5996] R13: 00007f0d35416128 R14: 00007f0d35416090 R15: 00007ffd19784778
[ 104.825206][ T5996]
[ 104.828711][ T5996] Kernel Offset: disabled
[ 104.833057][ T5996] Rebooting in 86400 seconds..