Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts.
2025/10/05 17:23:42 parsed 1 programs
[ 76.086101][ T5848] cgroup: Unknown subsys name 'net'
[ 76.220218][ T5848] cgroup: Unknown subsys name 'cpuset'
[ 76.229005][ T5848] cgroup: Unknown subsys name 'rlimit'
[ 77.670591][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 80.238547][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 81.314494][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.325314][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.333395][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 81.341530][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 81.349372][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.692772][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.705188][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.752355][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.765930][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 82.641589][ T5911] chnl_net:caif_netlink_parms(): no params data found
[ 82.713346][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.721129][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.728410][ T5911] bridge_slave_0: entered allmulticast mode
[ 82.735495][ T5911] bridge_slave_0: entered promiscuous mode
[ 82.744521][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.751839][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.759443][ T5911] bridge_slave_1: entered allmulticast mode
[ 82.766430][ T5911] bridge_slave_1: entered promiscuous mode
[ 82.794784][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.806309][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.837689][ T5911] team0: Port device team_slave_0 added
[ 82.845436][ T5911] team0: Port device team_slave_1 added
[ 82.870553][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.878472][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 82.904403][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.917795][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.924749][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 82.951344][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.993433][ T5911] hsr_slave_0: entered promiscuous mode
[ 83.000554][ T5911] hsr_slave_1: entered promiscuous mode
[ 83.138808][ T5911] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.151080][ T5911] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.161282][ T5911] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.172573][ T5911] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.202173][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.209398][ T5911] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.217376][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.224527][ T5911] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.240266][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.249092][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.303350][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.325848][ T5911] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.339511][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.346785][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.362257][ T61] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.369471][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.532633][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.576044][ T5911] veth0_vlan: entered promiscuous mode
[ 83.592486][ T5911] veth1_vlan: entered promiscuous mode
[ 83.618985][ T5911] veth0_macvtap: entered promiscuous mode
[ 83.628645][ T5911] veth1_macvtap: entered promiscuous mode
[ 83.646750][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.661908][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.676789][ T3525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.692373][ T3525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.701396][ T3525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.721169][ T3525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.822426][ T3475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.922537][ T3475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.990268][ T3475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.078482][ T3475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/10/05 17:23:53 executed programs: 0
[ 85.327436][ T5163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.335272][ T5163] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.347864][ T5163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.355832][ T5163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.363670][ T5163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.510373][ T5959] chnl_net:caif_netlink_parms(): no params data found
[ 85.582847][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.590839][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.598231][ T5959] bridge_slave_0: entered allmulticast mode
[ 85.605237][ T5959] bridge_slave_0: entered promiscuous mode
[ 85.614092][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.621375][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.629242][ T5959] bridge_slave_1: entered allmulticast mode
[ 85.636279][ T5959] bridge_slave_1: entered promiscuous mode
[ 85.664894][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.676654][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.709071][ T5959] team0: Port device team_slave_0 added
[ 85.716875][ T5959] team0: Port device team_slave_1 added
[ 85.743628][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.750749][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.777051][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.790125][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.797294][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 85.823313][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.864499][ T5959] hsr_slave_0: entered promiscuous mode
[ 85.871213][ T5959] hsr_slave_1: entered promiscuous mode
[ 85.877931][ T5959] debugfs: 'hsr0' already exists in 'hsr'
[ 85.883734][ T5959] Cannot create hsr debugfs directory
[ 86.338048][ T3475] bridge_slave_1: left allmulticast mode
[ 86.343825][ T3475] bridge_slave_1: left promiscuous mode
[ 86.354334][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.368782][ T3475] bridge_slave_0: left allmulticast mode
[ 86.374469][ T3475] bridge_slave_0: left promiscuous mode
[ 86.380694][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.754289][ T3475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 86.767115][ T3475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 86.779582][ T3475] bond0 (unregistering): Released all slaves
[ 86.829288][ T43] cfg80211: failed to load regulatory.db
[ 86.901267][ T3475] hsr_slave_0: left promiscuous mode
[ 86.910173][ T3475] hsr_slave_1: left promiscuous mode
[ 86.916600][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 86.925822][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 86.934583][ T3475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 86.942514][ T3475] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 86.965572][ T3475] veth1_macvtap: left promiscuous mode
[ 86.971502][ T3475] veth0_macvtap: left promiscuous mode
[ 86.977934][ T3475] veth1_vlan: left promiscuous mode
[ 86.983619][ T3475] veth0_vlan: left promiscuous mode
[ 87.400921][ T5163] Bluetooth: hci0: command tx timeout
[ 87.442195][ T3475] team0 (unregistering): Port device team_slave_1 removed
[ 87.469156][ T3475] team0 (unregistering): Port device team_slave_0 removed
[ 88.020011][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 88.047001][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 88.065277][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 88.087871][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 88.442066][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.511373][ T5959] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.554939][ T61] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.562183][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.645228][ T61] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.652490][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.759132][ T5959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 88.774420][ T5959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 89.035687][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 89.091226][ T5959] veth0_vlan: entered promiscuous mode
[ 89.111723][ T5959] veth1_vlan: entered promiscuous mode
[ 89.153353][ T5959] veth0_macvtap: entered promiscuous mode
[ 89.169738][ T5959] veth1_macvtap: entered promiscuous mode
[ 89.196423][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.213673][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.242378][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.252642][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.267701][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.276595][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.346325][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.354718][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.405109][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.413777][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.468880][ T5163] Bluetooth: hci0: command tx timeout
[ 89.491613][ T6045] ==================================================================
[ 89.499723][ T6045] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0
[ 89.508176][ T6045] Read of size 8 at addr ffff8880777ebc88 by task syz.0.17/6045
[ 89.515813][ T6045]
[ 89.518167][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 89.518189][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 89.518206][ T6045] Call Trace:
[ 89.518217][ T6045]
[ 89.518223][ T6045] dump_stack_lvl+0x189/0x250
[ 89.518244][ T6045] ? __kasan_check_byte+0x12/0x40
[ 89.518264][ T6045] ? __pfx_dump_stack_lvl+0x10/0x10
[ 89.518280][ T6045] ? lock_release+0x4b/0x3e0
[ 89.518303][ T6045] ? __virt_addr_valid+0x4a5/0x5c0
[ 89.518322][ T6045] print_report+0xca/0x240
[ 89.518339][ T6045] ? change_page_attr_set_clr+0x625/0xfc0
[ 89.518357][ T6045] kasan_report+0x118/0x150
[ 89.518376][ T6045] ? change_page_attr_set_clr+0x625/0xfc0
[ 89.518398][ T6045] change_page_attr_set_clr+0x625/0xfc0
[ 89.518421][ T6045] ? __pfx_change_page_attr_set_clr+0x10/0x10
[ 89.518440][ T6045] ? __pfx_pagerange_is_ram_callback+0x10/0x10
[ 89.518458][ T6045] ? memtype_reserve+0x874/0xb30
[ 89.518488][ T6045] ? __pfx___ww_mutex_lock+0x10/0x10
[ 89.518511][ T6045] _set_pages_array+0x145/0x270
[ 89.518535][ T6045] drm_gem_shmem_get_pages_locked+0x2d0/0x440
[ 89.518557][ T6045] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10
[ 89.518579][ T6045] ? ww_mutex_lock+0x3f/0x1c0
[ 89.518606][ T6045] drm_gem_shmem_mmap+0x193/0x460
[ 89.518628][ T6045] drm_gem_mmap_obj+0x18a/0x4e0
[ 89.518645][ T6045] drm_gem_mmap+0x384/0x640
[ 89.518661][ T6045] ? __pfx_drm_gem_mmap+0x10/0x10
[ 89.518677][ T6045] ? __mas_set_range+0x12f/0x3c0
[ 89.518701][ T6045] mmap_region+0x18b4/0x2110
[ 89.518728][ T6045] ? __pfx_mmap_region+0x10/0x10
[ 89.518749][ T6045] ? kasan_save_track+0x4f/0x80
[ 89.518763][ T6045] ? kasan_save_track+0x3e/0x80
[ 89.518778][ T6045] ? __kasan_kmalloc+0x93/0xb0
[ 89.518793][ T6045] ? __kmalloc_cache_noprof+0x3d5/0x6f0
[ 89.518809][ T6045] ? vma_node_allow+0x5a/0x240
[ 89.518824][ T6045] ? drm_gem_handle_create_tail+0x20d/0x490
[ 89.518845][ T6045] ? drm_gem_shmem_dumb_create+0x24d/0x3c0
[ 89.518864][ T6045] ? drm_ioctl_kernel+0x2cf/0x390
[ 89.518885][ T6045] ? lockdep_unlock+0x89/0x120
[ 89.518921][ T6045] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 89.518949][ T6045] ? bpf_lsm_mmap_addr+0x9/0x20
[ 89.518969][ T6045] ? security_mmap_addr+0x71/0x270
[ 89.518993][ T6045] ? shmem_mapping+0xd/0x50
[ 89.519012][ T6045] ? memfd_check_seals_mmap+0xc5/0x200
[ 89.519036][ T6045] do_mmap+0xc45/0x10d0
[ 89.519061][ T6045] ? __pfx_do_mmap+0x10/0x10
[ 89.519082][ T6045] ? down_write_killable+0x178/0x230
[ 89.519104][ T6045] ? __pfx_down_write_killable+0x10/0x10
[ 89.519124][ T6045] ? common_file_perm+0x1b5/0x230
[ 89.519146][ T6045] vm_mmap_pgoff+0x2a6/0x4d0
[ 89.519169][ T6045] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 89.519190][ T6045] ? __fget_files+0x2a/0x420
[ 89.519212][ T6045] ? __fget_files+0x2a/0x420
[ 89.519231][ T6045] ? __fget_files+0x2a/0x420
[ 89.519252][ T6045] ksys_mmap_pgoff+0x51f/0x760
[ 89.519277][ T6045] do_syscall_64+0xfa/0xfa0
[ 89.519295][ T6045] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.519312][ T6045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.519329][ T6045] ? clear_bhb_loop+0x60/0xb0
[ 89.519348][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.519365][ T6045] RIP: 0033:0x7fe5e058eec9
[ 89.519387][ T6045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 89.519400][ T6045] RSP: 002b:00007fffd5226e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 89.519420][ T6045] RAX: ffffffffffffffda RBX: 00007fe5e07e5fa0 RCX: 00007fe5e058eec9
[ 89.519433][ T6045] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000
[ 89.519445][ T6045] RBP: 00007fe5e0611f91 R08: 0000000000000003 R09: 0000000100000000
[ 89.519455][ T6045] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[ 89.519466][ T6045] R13: 00007fe5e07e5fa0 R14: 00007fe5e07e5fa0 R15: 0000000000000006
[ 89.519484][ T6045]
[ 89.519490][ T6045]
[ 89.902830][ T6045] Allocated by task 6045:
[ 89.907239][ T6045] kasan_save_track+0x3e/0x80
[ 89.911920][ T6045] __kasan_kmalloc+0x93/0xb0
[ 89.916514][ T6045] __kvmalloc_node_noprof+0x5cd/0x910
[ 89.921993][ T6045] drm_gem_get_pages+0x166/0xa20
[ 89.926942][ T6045] drm_gem_shmem_get_pages_locked+0x201/0x440
[ 89.933016][ T6045] drm_gem_shmem_mmap+0x193/0x460
[ 89.938049][ T6045] drm_gem_mmap_obj+0x18a/0x4e0
[ 89.942902][ T6045] drm_gem_mmap+0x384/0x640
[ 89.947413][ T6045] mmap_region+0x18b4/0x2110
[ 89.952011][ T6045] do_mmap+0xc45/0x10d0
[ 89.956179][ T6045] vm_mmap_pgoff+0x2a6/0x4d0
[ 89.960777][ T6045] ksys_mmap_pgoff+0x51f/0x760
[ 89.965561][ T6045] do_syscall_64+0xfa/0xfa0
[ 89.970080][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.975994][ T6045]
[ 89.978326][ T6045] The buggy address belongs to the object at ffff8880777ebc00
[ 89.978326][ T6045] which belongs to the cache kmalloc-192 of size 192
[ 89.992393][ T6045] The buggy address is located 0 bytes to the right of
[ 89.992393][ T6045] allocated 136-byte region [ffff8880777ebc00, ffff8880777ebc88)
[ 90.006891][ T6045]
[ 90.009223][ T6045] The buggy address belongs to the physical page:
[ 90.015658][ T6045] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x777eb
[ 90.024423][ T6045] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 90.031557][ T6045] page_type: f5(slab)
[ 90.035552][ T6045] raw: 00fff00000000000 ffff88813fe263c0 dead000000000122 0000000000000000
[ 90.044229][ T6045] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 90.052815][ T6045] page dumped because: kasan: bad access detected
[ 90.059328][ T6045] page_owner tracks the page as allocated
[ 90.065045][ T6045] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 61, tgid 61 (kworker/u8:4), ts 89433447310, free_ts 89415430255
[ 90.084263][ T6045] post_alloc_hook+0x240/0x2a0
[ 90.089126][ T6045] get_page_from_freelist+0x2365/0x2440
[ 90.094690][ T6045] __alloc_frozen_pages_noprof+0x181/0x370
[ 90.100514][ T6045] allocate_slab+0x71/0x3a0
[ 90.105039][ T6045] ___slab_alloc+0xe94/0x18a0
[ 90.109726][ T6045] __slab_alloc+0x65/0x100
[ 90.114147][ T6045] __kmalloc_node_noprof+0x5cc/0x800
[ 90.119449][ T6045] allocate_slab+0x179/0x3a0
[ 90.124046][ T6045] ___slab_alloc+0xe94/0x18a0
[ 90.128755][ T6045] __slab_alloc+0x65/0x100
[ 90.133177][ T6045] kmem_cache_alloc_lru_noprof+0x3ef/0x6d0
[ 90.138998][ T6045] __d_alloc+0x36/0x7a0
[ 90.143169][ T6045] d_alloc_parallel+0xe5/0x15e0
[ 90.148025][ T6045] __lookup_slow+0x116/0x3d0
[ 90.152630][ T6045] simple_start_creating+0xfd/0x1e0
[ 90.157851][ T6045] debugfs_start_creating+0x10f/0x180
[ 90.163231][ T6045] page last free pid 6033 tgid 6033 stack trace:
[ 90.169557][ T6045] __free_frozen_pages+0xbc4/0xd30
[ 90.174685][ T6045] __slab_free+0x2e7/0x390
[ 90.179119][ T6045] qlist_free_all+0x97/0x140
[ 90.183723][ T6045] kasan_quarantine_reduce+0x148/0x160
[ 90.189192][ T6045] __kasan_slab_alloc+0x22/0x80
[ 90.194045][ T6045] kmem_cache_alloc_noprof+0x367/0x6e0
[ 90.199516][ T6045] getname_flags+0xb8/0x540
[ 90.204033][ T6045] vfs_fstatat+0x43/0x170
[ 90.208372][ T6045] __x64_sys_newfstatat+0x116/0x190
[ 90.213590][ T6045] do_syscall_64+0xfa/0xfa0
[ 90.218097][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.224001][ T6045]
[ 90.226325][ T6045] Memory state around the buggy address:
[ 90.231953][ T6045] ffff8880777ebb80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[ 90.240018][ T6045] ffff8880777ebc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 90.248083][ T6045] >ffff8880777ebc80: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 90.256132][ T6045] ^
[ 90.260442][ T6045] ffff8880777ebd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 90.268489][ T6045] ffff8880777ebd80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 90.276533][ T6045] ==================================================================
[ 90.298896][ T6045] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 90.306146][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 90.315262][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 90.325328][ T6045] Call Trace:
[ 90.328609][ T6045]
[ 90.331527][ T6045] dump_stack_lvl+0x99/0x250
[ 90.336098][ T6045] ? __asan_memcpy+0x40/0x70
[ 90.340672][ T6045] ? __pfx_dump_stack_lvl+0x10/0x10
[ 90.345863][ T6045] ? __pfx__printk+0x10/0x10
[ 90.350432][ T6045] vpanic+0x237/0x6d0
[ 90.354400][ T6045] ? __pfx_vpanic+0x10/0x10
[ 90.358888][ T6045] ? preempt_schedule+0xae/0xc0
[ 90.363723][ T6045] ? __pfx_preempt_schedule+0x10/0x10
[ 90.369080][ T6045] panic+0xb9/0xc0
[ 90.372783][ T6045] ? __pfx_panic+0x10/0x10
[ 90.377181][ T6045] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 90.383055][ T6045] ? change_page_attr_set_clr+0x625/0xfc0
[ 90.388762][ T6045] check_panic_on_warn+0x89/0xb0
[ 90.393746][ T6045] ? change_page_attr_set_clr+0x625/0xfc0
[ 90.399455][ T6045] end_report+0x78/0x160
[ 90.403709][ T6045] kasan_report+0x129/0x150
[ 90.408200][ T6045] ? change_page_attr_set_clr+0x625/0xfc0
[ 90.413910][ T6045] change_page_attr_set_clr+0x625/0xfc0
[ 90.419441][ T6045] ? __pfx_change_page_attr_set_clr+0x10/0x10
[ 90.425488][ T6045] ? __pfx_pagerange_is_ram_callback+0x10/0x10
[ 90.431623][ T6045] ? memtype_reserve+0x874/0xb30
[ 90.436557][ T6045] ? __pfx___ww_mutex_lock+0x10/0x10
[ 90.441826][ T6045] _set_pages_array+0x145/0x270
[ 90.446661][ T6045] drm_gem_shmem_get_pages_locked+0x2d0/0x440
[ 90.452713][ T6045] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10
[ 90.459292][ T6045] ? ww_mutex_lock+0x3f/0x1c0
[ 90.463975][ T6045] drm_gem_shmem_mmap+0x193/0x460
[ 90.468988][ T6045] drm_gem_mmap_obj+0x18a/0x4e0
[ 90.473825][ T6045] drm_gem_mmap+0x384/0x640
[ 90.478337][ T6045] ? __pfx_drm_gem_mmap+0x10/0x10
[ 90.483359][ T6045] ? __mas_set_range+0x12f/0x3c0
[ 90.488282][ T6045] mmap_region+0x18b4/0x2110
[ 90.492861][ T6045] ? __pfx_mmap_region+0x10/0x10
[ 90.497779][ T6045] ? kasan_save_track+0x4f/0x80
[ 90.502606][ T6045] ? kasan_save_track+0x3e/0x80
[ 90.507440][ T6045] ? __kasan_kmalloc+0x93/0xb0
[ 90.512206][ T6045] ? __kmalloc_cache_noprof+0x3d5/0x6f0
[ 90.517737][ T6045] ? vma_node_allow+0x5a/0x240
[ 90.522489][ T6045] ? drm_gem_handle_create_tail+0x20d/0x490
[ 90.528365][ T6045] ? drm_gem_shmem_dumb_create+0x24d/0x3c0
[ 90.534160][ T6045] ? drm_ioctl_kernel+0x2cf/0x390
[ 90.539174][ T6045] ? lockdep_unlock+0x89/0x120
[ 90.543925][ T6045] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 90.550497][ T6045] ? bpf_lsm_mmap_addr+0x9/0x20
[ 90.555329][ T6045] ? security_mmap_addr+0x71/0x270
[ 90.560429][ T6045] ? shmem_mapping+0xd/0x50
[ 90.564921][ T6045] ? memfd_check_seals_mmap+0xc5/0x200
[ 90.570363][ T6045] do_mmap+0xc45/0x10d0
[ 90.574538][ T6045] ? __pfx_do_mmap+0x10/0x10
[ 90.579116][ T6045] ? down_write_killable+0x178/0x230
[ 90.584390][ T6045] ? __pfx_down_write_killable+0x10/0x10
[ 90.590024][ T6045] ? common_file_perm+0x1b5/0x230
[ 90.595036][ T6045] vm_mmap_pgoff+0x2a6/0x4d0
[ 90.599614][ T6045] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 90.604708][ T6045] ? __fget_files+0x2a/0x420
[ 90.609290][ T6045] ? __fget_files+0x2a/0x420
[ 90.613886][ T6045] ? __fget_files+0x2a/0x420
[ 90.618486][ T6045] ksys_mmap_pgoff+0x51f/0x760
[ 90.623235][ T6045] do_syscall_64+0xfa/0xfa0
[ 90.627727][ T6045] ? lockdep_hardirqs_on+0x9c/0x150
[ 90.632927][ T6045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.638986][ T6045] ? clear_bhb_loop+0x60/0xb0
[ 90.643672][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.649581][ T6045] RIP: 0033:0x7fe5e058eec9
[ 90.653988][ T6045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 90.673584][ T6045] RSP: 002b:00007fffd5226e48 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 90.682007][ T6045] RAX: ffffffffffffffda RBX: 00007fe5e07e5fa0 RCX: 00007fe5e058eec9
[ 90.689998][ T6045] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000
[ 90.697954][ T6045] RBP: 00007fe5e0611f91 R08: 0000000000000003 R09: 0000000100000000
[ 90.705935][ T6045] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[ 90.713894][ T6045] R13: 00007fe5e07e5fa0 R14: 00007fe5e07e5fa0 R15: 0000000000000006
[ 90.721859][ T6045]
[ 90.725046][ T6045] Kernel Offset: disabled
[ 90.729352][ T6045] Rebooting in 86400 seconds..