Warning: Permanently added '10.128.1.207' (ED25519) to the list of known hosts.
2025/09/03 10:53:59 parsed 1 programs
[ 91.837376][ T10] cfg80211: failed to load regulatory.db
[ 92.745056][ T5870] cgroup: Unknown subsys name 'net'
[ 92.918389][ T5870] cgroup: Unknown subsys name 'cpuset'
[ 92.927726][ T5870] cgroup: Unknown subsys name 'rlimit'
[ 94.677698][ T5870] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 97.769128][ T5883] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 97.942244][ T5890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.954882][ T5890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.963255][ T5890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.974592][ T5890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.995612][ T5890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.395541][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.405412][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.439725][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.448336][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.383768][ T5948] chnl_net:caif_netlink_parms(): no params data found
[ 101.488194][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.495842][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.503806][ T5948] bridge_slave_0: entered allmulticast mode
[ 101.511329][ T5948] bridge_slave_0: entered promiscuous mode
[ 101.521036][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.528807][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.536139][ T5948] bridge_slave_1: entered allmulticast mode
[ 101.543410][ T5948] bridge_slave_1: entered promiscuous mode
[ 101.578756][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.590872][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.626275][ T5948] team0: Port device team_slave_0 added
[ 101.634255][ T5948] team0: Port device team_slave_1 added
[ 101.664893][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.671882][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.698957][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.712314][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.719346][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.746296][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.793105][ T5948] hsr_slave_0: entered promiscuous mode
[ 101.799744][ T5948] hsr_slave_1: entered promiscuous mode
[ 101.959664][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.973638][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.986538][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.997624][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 102.083693][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.112656][ T5948] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.129059][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.136620][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.154427][ T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.161637][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.361971][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.408710][ T5948] veth0_vlan: entered promiscuous mode
[ 102.422333][ T5948] veth1_vlan: entered promiscuous mode
[ 102.453036][ T5948] veth0_macvtap: entered promiscuous mode
[ 102.465803][ T5948] veth1_macvtap: entered promiscuous mode
[ 102.491813][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.509273][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.525538][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.535912][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.550128][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.559607][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.680556][ T1336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.748204][ T1336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.819684][ T1336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.896764][ T1336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/09/03 10:54:13 executed programs: 0
[ 103.268122][ T5890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.277371][ T5890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.285977][ T5890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.297327][ T5890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.306301][ T5890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 103.586332][ T5978] chnl_net:caif_netlink_parms(): no params data found
[ 103.679412][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.686844][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.694075][ T5978] bridge_slave_0: entered allmulticast mode
[ 103.702328][ T5978] bridge_slave_0: entered promiscuous mode
[ 103.711696][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.719200][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.726854][ T5978] bridge_slave_1: entered allmulticast mode
[ 103.734873][ T5978] bridge_slave_1: entered promiscuous mode
[ 103.770189][ T5978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 103.782574][ T5978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.821581][ T5978] team0: Port device team_slave_0 added
[ 103.829944][ T5978] team0: Port device team_slave_1 added
[ 103.867068][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.874065][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.900956][ T5978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.913296][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.920513][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 103.946580][ T5978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.001042][ T5978] hsr_slave_0: entered promiscuous mode
[ 104.007516][ T5978] hsr_slave_1: entered promiscuous mode
[ 104.013772][ T5978] debugfs: 'hsr0' already exists in 'hsr'
[ 104.020811][ T5978] Cannot create hsr debugfs directory
[ 104.953324][ T1336] bridge_slave_1: left allmulticast mode
[ 104.961353][ T1336] bridge_slave_1: left promiscuous mode
[ 104.969081][ T1336] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.980835][ T1336] bridge_slave_0: left allmulticast mode
[ 104.986858][ T1336] bridge_slave_0: left promiscuous mode
[ 104.992672][ T1336] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.200102][ T1336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 105.211158][ T1336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 105.221550][ T1336] bond0 (unregistering): Released all slaves
[ 105.336214][ T1336] hsr_slave_0: left promiscuous mode
[ 105.342502][ T1336] hsr_slave_1: left promiscuous mode
[ 105.349941][ T1336] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 105.361254][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 105.370734][ T5184] Bluetooth: hci0: command tx timeout
[ 105.379332][ T1336] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 105.388013][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 105.411055][ T1336] veth1_macvtap: left promiscuous mode
[ 105.417703][ T1336] veth0_macvtap: left promiscuous mode
[ 105.423439][ T1336] veth1_vlan: left promiscuous mode
[ 105.430043][ T1336] veth0_vlan: left promiscuous mode
[ 105.877259][ T1336] team0 (unregistering): Port device team_slave_1 removed
[ 105.906754][ T1336] team0 (unregistering): Port device team_slave_0 removed
[ 106.429295][ T5978] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 106.441618][ T5978] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 106.464734][ T5978] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 106.483717][ T5978] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 106.767830][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.790925][ T5978] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.812959][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.820158][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.844876][ T60] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.852065][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.155745][ T5978] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.223911][ T5978] veth0_vlan: entered promiscuous mode
[ 107.242903][ T5978] veth1_vlan: entered promiscuous mode
[ 107.290008][ T5978] veth0_macvtap: entered promiscuous mode
[ 107.302793][ T5978] veth1_macvtap: entered promiscuous mode
[ 107.327250][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.339476][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.362654][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.374694][ T1336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.383486][ T1336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.407296][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.437317][ T5184] Bluetooth: hci0: command tx timeout
[ 107.495808][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.503668][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.539084][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.547506][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.590812][ T6038] ==================================================================
[ 107.598930][ T6038] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0
[ 107.607380][ T6038] Read of size 8 at addr ffff888078a1f248 by task syz.0.17/6038
[ 107.615017][ T6038]
[ 107.617351][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 107.617371][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 107.617387][ T6038] Call Trace:
[ 107.617413][ T6038]
[ 107.617420][ T6038] dump_stack_lvl+0x189/0x250
[ 107.617444][ T6038] ? __kasan_check_byte+0x12/0x40
[ 107.617463][ T6038] ? __pfx_dump_stack_lvl+0x10/0x10
[ 107.617485][ T6038] ? lock_release+0x4b/0x3e0
[ 107.617503][ T6038] ? __virt_addr_valid+0x4a5/0x5c0
[ 107.617526][ T6038] print_report+0xca/0x240
[ 107.617541][ T6038] ? change_page_attr_set_clr+0x625/0xfc0
[ 107.617556][ T6038] kasan_report+0x118/0x150
[ 107.617574][ T6038] ? change_page_attr_set_clr+0x625/0xfc0
[ 107.617593][ T6038] change_page_attr_set_clr+0x625/0xfc0
[ 107.617612][ T6038] ? __pfx_change_page_attr_set_clr+0x10/0x10
[ 107.617628][ T6038] ? __pfx_pagerange_is_ram_callback+0x10/0x10
[ 107.617651][ T6038] ? memtype_reserve+0x874/0xb30
[ 107.617678][ T6038] ? __pfx___ww_mutex_lock+0x10/0x10
[ 107.617695][ T6038] _set_pages_array+0x145/0x270
[ 107.617714][ T6038] drm_gem_shmem_get_pages_locked+0x2d0/0x440
[ 107.617738][ T6038] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10
[ 107.617761][ T6038] ? ww_mutex_lock+0x3f/0x1c0
[ 107.617776][ T6038] drm_gem_shmem_mmap+0x193/0x460
[ 107.617798][ T6038] drm_gem_mmap_obj+0x18a/0x4e0
[ 107.617816][ T6038] drm_gem_mmap+0x384/0x640
[ 107.617832][ T6038] ? __pfx_drm_gem_mmap+0x10/0x10
[ 107.617848][ T6038] ? __mas_set_range+0x12f/0x3c0
[ 107.617871][ T6038] mmap_region+0x18ab/0x20c0
[ 107.617899][ T6038] ? __pfx_mmap_region+0x10/0x10
[ 107.617918][ T6038] ? kasan_save_track+0x4f/0x80
[ 107.617931][ T6038] ? kasan_save_track+0x3e/0x80
[ 107.617944][ T6038] ? __kasan_kmalloc+0x93/0xb0
[ 107.617958][ T6038] ? __kmalloc_cache_noprof+0x3d5/0x6f0
[ 107.617972][ T6038] ? vma_node_allow+0x5a/0x240
[ 107.617987][ T6038] ? drm_gem_handle_create_tail+0x20d/0x490
[ 107.618001][ T6038] ? drm_gem_shmem_dumb_create+0x24d/0x3c0
[ 107.618021][ T6038] ? drm_ioctl_kernel+0x2cf/0x390
[ 107.618041][ T6038] ? lockdep_unlock+0x89/0x120
[ 107.618054][ T6038] ? validate_chain+0x897/0x2140
[ 107.618087][ T6038] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 107.618120][ T6038] ? bpf_lsm_mmap_addr+0x9/0x20
[ 107.618132][ T6038] ? security_mmap_addr+0x71/0x270
[ 107.618154][ T6038] ? shmem_mapping+0xd/0x50
[ 107.618173][ T6038] ? memfd_check_seals_mmap+0xc5/0x200
[ 107.618190][ T6038] do_mmap+0xc45/0x10d0
[ 107.618208][ T6038] ? __pfx_do_mmap+0x10/0x10
[ 107.618219][ T6038] ? down_write_killable+0x178/0x230
[ 107.618237][ T6038] ? __pfx_down_write_killable+0x10/0x10
[ 107.618253][ T6038] ? common_file_perm+0x1b5/0x230
[ 107.618269][ T6038] vm_mmap_pgoff+0x2a6/0x4d0
[ 107.618294][ T6038] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 107.618316][ T6038] ? __fget_files+0x2a/0x420
[ 107.618338][ T6038] ? __fget_files+0x2a/0x420
[ 107.618359][ T6038] ? __fget_files+0x2a/0x420
[ 107.618381][ T6038] ksys_mmap_pgoff+0x51f/0x760
[ 107.618397][ T6038] do_syscall_64+0xfa/0xfa0
[ 107.618410][ T6038] ? lockdep_hardirqs_on+0x9c/0x150
[ 107.618423][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.618437][ T6038] ? clear_bhb_loop+0x60/0xb0
[ 107.618453][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.618467][ T6038] RIP: 0033:0x7fde3d78ebe9
[ 107.618484][ T6038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 107.618496][ T6038] RSP: 002b:00007ffc289e4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 107.618511][ T6038] RAX: ffffffffffffffda RBX: 00007fde3d9c5fa0 RCX: 00007fde3d78ebe9
[ 107.618521][ T6038] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000
[ 107.618531][ T6038] RBP: 00007fde3d811e19 R08: 0000000000000003 R09: 0000000100000000
[ 107.618540][ T6038] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[ 107.618549][ T6038] R13: 00007fde3d9c5fa0 R14: 00007fde3d9c5fa0 R15: 0000000000000006
[ 107.618565][ T6038]
[ 107.618570][ T6038]
[ 108.007201][ T6038] Allocated by task 6038:
[ 108.011539][ T6038] kasan_save_track+0x3e/0x80
[ 108.016214][ T6038] __kasan_kmalloc+0x93/0xb0
[ 108.020807][ T6038] __kvmalloc_node_noprof+0x5cd/0x910
[ 108.026264][ T6038] drm_gem_get_pages+0x166/0xa20
[ 108.031200][ T6038] drm_gem_shmem_get_pages_locked+0x201/0x440
[ 108.037292][ T6038] drm_gem_shmem_mmap+0x193/0x460
[ 108.042358][ T6038] drm_gem_mmap_obj+0x18a/0x4e0
[ 108.047230][ T6038] drm_gem_mmap+0x384/0x640
[ 108.051732][ T6038] mmap_region+0x18ab/0x20c0
[ 108.056330][ T6038] do_mmap+0xc45/0x10d0
[ 108.060484][ T6038] vm_mmap_pgoff+0x2a6/0x4d0
[ 108.065085][ T6038] ksys_mmap_pgoff+0x51f/0x760
[ 108.069841][ T6038] do_syscall_64+0xfa/0xfa0
[ 108.074337][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.080224][ T6038]
[ 108.082545][ T6038] The buggy address belongs to the object at ffff888078a1f000
[ 108.082545][ T6038] which belongs to the cache kmalloc-1k of size 1024
[ 108.096681][ T6038] The buggy address is located 0 bytes to the right of
[ 108.096681][ T6038] allocated 584-byte region [ffff888078a1f000, ffff888078a1f248)
[ 108.111175][ T6038]
[ 108.113519][ T6038] The buggy address belongs to the physical page:
[ 108.119937][ T6038] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78a18
[ 108.128693][ T6038] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 108.137201][ T6038] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 108.144773][ T6038] page_type: f5(slab)
[ 108.149298][ T6038] raw: 00fff00000000040 ffff88801a841dc0 dead000000000122 0000000000000000
[ 108.157877][ T6038] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 108.166461][ T6038] head: 00fff00000000040 ffff88801a841dc0 dead000000000122 0000000000000000
[ 108.175157][ T6038] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 108.183829][ T6038] head: 00fff00000000003 ffffea0001e28601 00000000ffffffff 00000000ffffffff
[ 108.192506][ T6038] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 108.201170][ T6038] page dumped because: kasan: bad access detected
[ 108.207585][ T6038] page_owner tracks the page as allocated
[ 108.213294][ T6038] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12, tgid 12 (kworker/u8:0), ts 107430042868, free_ts 107379785224
[ 108.232516][ T6038] post_alloc_hook+0x240/0x2a0
[ 108.237291][ T6038] get_page_from_freelist+0x21e4/0x22c0
[ 108.242853][ T6038] __alloc_frozen_pages_noprof+0x181/0x370
[ 108.248661][ T6038] alloc_pages_mpol+0x232/0x4a0
[ 108.253510][ T6038] allocate_slab+0x8a/0x330
[ 108.258058][ T6038] ___slab_alloc+0xbd1/0x13f0
[ 108.262754][ T6038] __slab_alloc+0x55/0xa0
[ 108.267095][ T6038] __kmalloc_noprof+0x471/0x7f0
[ 108.271955][ T6038] ___neigh_create+0x6d5/0x2260
[ 108.276806][ T6038] ip6_finish_output2+0x1175/0x1480
[ 108.282025][ T6038] ip6_output+0x340/0x550
[ 108.286373][ T6038] ndisc_send_skb+0xbce/0x1510
[ 108.291154][ T6038] ndisc_send_ns+0xcb/0x150
[ 108.295662][ T6038] addrconf_dad_work+0xaae/0x14b0
[ 108.300686][ T6038] process_scheduled_works+0xade/0x17b0
[ 108.306233][ T6038] worker_thread+0x8a0/0xda0
[ 108.310824][ T6038] page last free pid 6036 tgid 6036 stack trace:
[ 108.317140][ T6038] __free_frozen_pages+0xbc4/0xd30
[ 108.322264][ T6038] __put_partials+0x146/0x170
[ 108.326962][ T6038] put_cpu_partial+0x17c/0x250
[ 108.331741][ T6038] __slab_free+0x2b9/0x390
[ 108.336158][ T6038] qlist_free_all+0x97/0x140
[ 108.340773][ T6038] kasan_quarantine_reduce+0x148/0x160
[ 108.346232][ T6038] __kasan_slab_alloc+0x22/0x80
[ 108.351089][ T6038] kmem_cache_alloc_noprof+0x367/0x6e0
[ 108.356541][ T6038] getname_flags+0xb8/0x540
[ 108.361064][ T6038] __x64_sys_unlink+0x3a/0x50
[ 108.365762][ T6038] do_syscall_64+0xfa/0xfa0
[ 108.370270][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.376162][ T6038]
[ 108.378484][ T6038] Memory state around the buggy address:
[ 108.384113][ T6038] ffff888078a1f100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 108.392186][ T6038] ffff888078a1f180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 108.400245][ T6038] >ffff888078a1f200: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 108.408304][ T6038] ^
[ 108.414715][ T6038] ffff888078a1f280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 108.422772][ T6038] ffff888078a1f300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 108.430895][ T6038] ==================================================================
[ 108.446818][ T6038] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 108.454090][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 108.463230][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 108.473407][ T6038] Call Trace:
[ 108.476712][ T6038]
[ 108.479668][ T6038] dump_stack_lvl+0x99/0x250
[ 108.484310][ T6038] ? __asan_memcpy+0x40/0x70
[ 108.488940][ T6038] ? __pfx_dump_stack_lvl+0x10/0x10
[ 108.494202][ T6038] ? __pfx__printk+0x10/0x10
[ 108.498812][ T6038] vpanic+0x229/0x6d0
[ 108.502796][ T6038] ? __pfx_vpanic+0x10/0x10
[ 108.507312][ T6038] ? preempt_schedule+0xae/0xc0
[ 108.512232][ T6038] ? __pfx_preempt_schedule+0x10/0x10
[ 108.517640][ T6038] panic+0xb9/0xc0
[ 108.521370][ T6038] ? __pfx_panic+0x10/0x10
[ 108.525788][ T6038] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 108.531777][ T6038] ? change_page_attr_set_clr+0x625/0xfc0
[ 108.537496][ T6038] check_panic_on_warn+0x89/0xb0
[ 108.542450][ T6038] ? change_page_attr_set_clr+0x625/0xfc0
[ 108.548173][ T6038] end_report+0x78/0x160
[ 108.552417][ T6038] kasan_report+0x129/0x150
[ 108.556946][ T6038] ? change_page_attr_set_clr+0x625/0xfc0
[ 108.562686][ T6038] change_page_attr_set_clr+0x625/0xfc0
[ 108.568245][ T6038] ? __pfx_change_page_attr_set_clr+0x10/0x10
[ 108.574327][ T6038] ? __pfx_pagerange_is_ram_callback+0x10/0x10
[ 108.580512][ T6038] ? memtype_reserve+0x874/0xb30
[ 108.585467][ T6038] ? __pfx___ww_mutex_lock+0x10/0x10
[ 108.590755][ T6038] _set_pages_array+0x145/0x270
[ 108.595616][ T6038] drm_gem_shmem_get_pages_locked+0x2d0/0x440
[ 108.601697][ T6038] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10
[ 108.608299][ T6038] ? ww_mutex_lock+0x3f/0x1c0
[ 108.612983][ T6038] drm_gem_shmem_mmap+0x193/0x460
[ 108.618021][ T6038] drm_gem_mmap_obj+0x18a/0x4e0
[ 108.622887][ T6038] drm_gem_mmap+0x384/0x640
[ 108.627399][ T6038] ? __pfx_drm_gem_mmap+0x10/0x10
[ 108.632443][ T6038] ? __mas_set_range+0x12f/0x3c0
[ 108.637394][ T6038] mmap_region+0x18ab/0x20c0
[ 108.642004][ T6038] ? __pfx_mmap_region+0x10/0x10
[ 108.646970][ T6038] ? kasan_save_track+0x4f/0x80
[ 108.651842][ T6038] ? kasan_save_track+0x3e/0x80
[ 108.656736][ T6038] ? __kasan_kmalloc+0x93/0xb0
[ 108.661509][ T6038] ? __kmalloc_cache_noprof+0x3d5/0x6f0
[ 108.667064][ T6038] ? vma_node_allow+0x5a/0x240
[ 108.671851][ T6038] ? drm_gem_handle_create_tail+0x20d/0x490
[ 108.677776][ T6038] ? drm_gem_shmem_dumb_create+0x24d/0x3c0
[ 108.683633][ T6038] ? drm_ioctl_kernel+0x2cf/0x390
[ 108.688683][ T6038] ? lockdep_unlock+0x89/0x120
[ 108.693470][ T6038] ? validate_chain+0x897/0x2140
[ 108.698440][ T6038] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 108.705231][ T6038] ? bpf_lsm_mmap_addr+0x9/0x20
[ 108.710119][ T6038] ? security_mmap_addr+0x71/0x270
[ 108.715246][ T6038] ? shmem_mapping+0xd/0x50
[ 108.719763][ T6038] ? memfd_check_seals_mmap+0xc5/0x200
[ 108.725226][ T6038] do_mmap+0xc45/0x10d0
[ 108.729387][ T6038] ? __pfx_do_mmap+0x10/0x10
[ 108.733993][ T6038] ? down_write_killable+0x178/0x230
[ 108.739304][ T6038] ? __pfx_down_write_killable+0x10/0x10
[ 108.744940][ T6038] ? common_file_perm+0x1b5/0x230
[ 108.749968][ T6038] vm_mmap_pgoff+0x2a6/0x4d0
[ 108.754574][ T6038] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 108.759697][ T6038] ? __fget_files+0x2a/0x420
[ 108.764301][ T6038] ? __fget_files+0x2a/0x420
[ 108.768905][ T6038] ? __fget_files+0x2a/0x420
[ 108.773508][ T6038] ksys_mmap_pgoff+0x51f/0x760
[ 108.778306][ T6038] do_syscall_64+0xfa/0xfa0
[ 108.782813][ T6038] ? lockdep_hardirqs_on+0x9c/0x150
[ 108.788040][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.794200][ T6038] ? clear_bhb_loop+0x60/0xb0
[ 108.798890][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.804789][ T6038] RIP: 0033:0x7fde3d78ebe9
[ 108.809211][ T6038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 108.828818][ T6038] RSP: 002b:00007ffc289e4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 108.837237][ T6038] RAX: ffffffffffffffda RBX: 00007fde3d9c5fa0 RCX: 00007fde3d78ebe9
[ 108.845210][ T6038] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000
[ 108.853184][ T6038] RBP: 00007fde3d811e19 R08: 0000000000000003 R09: 0000000100000000
[ 108.861157][ T6038] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[ 108.869145][ T6038] R13: 00007fde3d9c5fa0 R14: 00007fde3d9c5fa0 R15: 0000000000000006
[ 108.877140][ T6038]
[ 108.880501][ T6038] Kernel Offset: disabled
[ 108.884832][ T6038] Rebooting in 86400 seconds..