./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2491121362
<...>
Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts.
execve("./syz-executor2491121362", ["./syz-executor2491121362"], 0x7ffc27272210 /* 10 vars */) = 0
brk(NULL) = 0x55558f9bf000
brk(0x55558f9bfd00) = 0x55558f9bfd00
arch_prctl(ARCH_SET_FS, 0x55558f9bf380) = 0
set_tid_address(0x55558f9bf650) = 5838
set_robust_list(0x55558f9bf660, 24) = 0
rseq(0x55558f9bfca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2491121362", 4096) = 28
getrandom("\x21\xaf\xb0\x09\xa7\xcb\x16\x9c", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55558f9bfd00
brk(0x55558f9e0d00) = 0x55558f9e0d00
brk(0x55558f9e1000) = 0x55558f9e1000
mprotect(0x7fe58acb5000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
write(1, "executing program\n", 18executing program
) = 18
openat(AT_FDCWD, "/dev/dri/card0", O_RDONLY) = 3
openat(AT_FDCWD, "/dev/dri/card1", O_RDONLY) = 4
ioctl(4, DRM_IOCTL_MODE_GETRESOURCES, 0x2000000001c0) = 0
ioctl(4, DRM_IOCTL_MODE_GETCRTC, 0x2000000003c0) = 0
ioctl(4, DRM_IOCTL_MODE_GETFB2, 0x200000000440) = 0
ioctl(3, DRM_IOCTL_MODE_CREATE_DUMB, 0x200000000140) = 0
ioctl(3, DRM_IOCTL_PRIME_HANDLE_TO_FD, 0x200000000080) = 0
ioctl(3, DRM_IOCTL_PRIME_HANDLE_TO_FD, 0x200000000080) = 0
exit_group(0) = ?
[ 89.756683][ T5838] ------------[ cut here ]------------
[ 89.762243][ T5838] WARNING: CPU: 0 PID: 5838 at drivers/gpu/drm/drm_prime.c:193 drm_prime_destroy_file_private+0x4b/0x60
[ 89.773528][ T5838] Modules linked in:
[ 89.777529][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor249 Not tainted 6.16.0-rc1-next-20250613-syzkaller #0 PREEMPT(full)
[ 89.789478][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 89.799619][ T5838] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60
[ 89.806363][ T5838] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 bd 72 bd fc 48 83 3b 00 75 0c e8 72 af 59 fc 5b e9 7c f6 04 06 cc e8 66 af 59 fc 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90
[ 89.826117][ T5838] RSP: 0018:ffffc900041bfae0 EFLAGS: 00010293
[ 89.832280][ T5838] RAX: ffffffff8566b82a RBX: ffff8881432ae410 RCX: ffff888079f2da00
[ 89.840403][ T5838] RDX: 0000000000000000 RSI: ffffffff8d98c1c0 RDI: ffff8881432ae380
[ 89.848432][ T5838] RBP: 0000000000000000 R08: ffffffff8fa15ef7 R09: 1ffffffff1f42bde
[ 89.856461][ T5838] R10: dffffc0000000000 R11: fffffbfff1f42bdf R12: ffff888024b2e000
[ 89.864522][ T5838] R13: ffff8881432ae2d8 R14: ffffffff85f0c0a0 R15: dffffc0000000000
[ 89.872579][ T5838] FS: 0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000
[ 89.881587][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 89.888221][ T5838] CR2: 00007fe58ac1ffa0 CR3: 000000000df38000 CR4: 00000000003526f0
[ 89.896214][ T5838] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 89.904269][ T5838] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 89.912309][ T5838] Call Trace:
[ 89.915603][ T5838]
[ 89.918588][ T5838] drm_file_free+0x79a/0x960
[ 89.923238][ T5838] drm_release+0x2de/0x3f0
[ 89.927721][ T5838] ? __pfx_drm_release+0x10/0x10
[ 89.932680][ T5838] __fput+0x44c/0xa70
[ 89.936774][ T5838] task_work_run+0x1d4/0x260
[ 89.941414][ T5838] ? __pfx_task_work_run+0x10/0x10
[ 89.946538][ T5838] do_exit+0x6b5/0x22e0
[ 89.950846][ T5838] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 89.956268][ T5838] ? __pfx_do_exit+0x10/0x10
[ 89.960954][ T5838] ? _raw_spin_unlock_irq+0x23/0x50
[ 89.966192][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.971465][ T5838] do_group_exit+0x21c/0x2d0
[ 89.976123][ T5838] __x64_sys_exit_group+0x3f/0x40
[ 89.981251][ T5838] x64_sys_call+0x21ba/0x21c0
[ 89.985963][ T5838] do_syscall_64+0xfa/0x3b0
[ 89.990556][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 89.995786][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.001938][ T5838] ? clear_bhb_loop+0x60/0xb0
[ 90.006711][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.012618][ T5838] RIP: 0033:0x7fe58ac41039
[ 90.017104][ T5838] Code: Unable to access opcode bytes at 0x7fe58ac4100f.
[ 90.024184][ T5838] RSP: 002b:00007ffc0fd70e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 90.032660][ T5838] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe58ac41039
[ 90.040730][ T5838] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 90.048751][ T5838] RBP: 00007fe58acbb390 R08: ffffffffffffffb8 R09: 00000000000af5f8
[ 90.056867][ T5838] R10: 00000000000af5f8 R11: 0000000000000246 R12: 00007fe58acbb390
[ 90.064862][ T5838] R13: 0000000000000000 R14: 00007fe58acbbde0 R15: 00007fe58ac0fe30
[ 90.072913][ T5838]
[ 90.075958][ T5838] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 90.083237][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz-executor249 Not tainted 6.16.0-rc1-next-20250613-syzkaller #0 PREEMPT(full)
[ 90.095126][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 90.105194][ T5838] Call Trace:
[ 90.108494][ T5838]
[ 90.111430][ T5838] dump_stack_lvl+0x99/0x250
[ 90.116030][ T5838] ? __asan_memcpy+0x40/0x70
[ 90.120638][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10
[ 90.125840][ T5838] ? __pfx__printk+0x10/0x10
[ 90.130450][ T5838] panic+0x2db/0x790
[ 90.134367][ T5838] ? __pfx_panic+0x10/0x10
[ 90.138799][ T5838] ? show_trace_log_lvl+0x4fb/0x550
[ 90.144056][ T5838] __warn+0x31b/0x4b0
[ 90.148051][ T5838] ? drm_prime_destroy_file_private+0x4b/0x60
[ 90.154129][ T5838] ? drm_prime_destroy_file_private+0x4b/0x60
[ 90.160202][ T5838] report_bug+0x2be/0x4f0
[ 90.164543][ T5838] ? drm_prime_destroy_file_private+0x4b/0x60
[ 90.170620][ T5838] ? drm_prime_destroy_file_private+0x4b/0x60
[ 90.176722][ T5838] ? drm_prime_destroy_file_private+0x4d/0x60
[ 90.182803][ T5838] handle_bug+0x84/0x160
[ 90.187079][ T5838] exc_invalid_op+0x1a/0x50
[ 90.191589][ T5838] asm_exc_invalid_op+0x1a/0x20
[ 90.196446][ T5838] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60
[ 90.203132][ T5838] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 bd 72 bd fc 48 83 3b 00 75 0c e8 72 af 59 fc 5b e9 7c f6 04 06 cc e8 66 af 59 fc 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90
[ 90.222768][ T5838] RSP: 0018:ffffc900041bfae0 EFLAGS: 00010293
[ 90.228848][ T5838] RAX: ffffffff8566b82a RBX: ffff8881432ae410 RCX: ffff888079f2da00
[ 90.236832][ T5838] RDX: 0000000000000000 RSI: ffffffff8d98c1c0 RDI: ffff8881432ae380
[ 90.244826][ T5838] RBP: 0000000000000000 R08: ffffffff8fa15ef7 R09: 1ffffffff1f42bde
[ 90.252950][ T5838] R10: dffffc0000000000 R11: fffffbfff1f42bdf R12: ffff888024b2e000
[ 90.260938][ T5838] R13: ffff8881432ae2d8 R14: ffffffff85f0c0a0 R15: dffffc0000000000
[ 90.268924][ T5838] ? __pfx_vgem_postclose+0x10/0x10
[ 90.274140][ T5838] ? drm_prime_destroy_file_private+0x4a/0x60
[ 90.280225][ T5838] drm_file_free+0x79a/0x960
[ 90.284838][ T5838] drm_release+0x2de/0x3f0
[ 90.289268][ T5838] ? __pfx_drm_release+0x10/0x10
[ 90.294218][ T5838] __fput+0x44c/0xa70
[ 90.298224][ T5838] task_work_run+0x1d4/0x260
[ 90.302832][ T5838] ? __pfx_task_work_run+0x10/0x10
[ 90.307964][ T5838] do_exit+0x6b5/0x22e0
[ 90.312142][ T5838] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 90.317555][ T5838] ? __pfx_do_exit+0x10/0x10
[ 90.322163][ T5838] ? _raw_spin_unlock_irq+0x23/0x50
[ 90.327373][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 90.332586][ T5838] do_group_exit+0x21c/0x2d0
[ 90.337192][ T5838] __x64_sys_exit_group+0x3f/0x40
[ 90.342230][ T5838] x64_sys_call+0x21ba/0x21c0
[ 90.346923][ T5838] do_syscall_64+0xfa/0x3b0
[ 90.351440][ T5838] ? lockdep_hardirqs_on+0x9c/0x150
[ 90.356652][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.362727][ T5838] ? clear_bhb_loop+0x60/0xb0
[ 90.367413][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.373314][ T5838] RIP: 0033:0x7fe58ac41039
[ 90.377738][ T5838] Code: Unable to access opcode bytes at 0x7fe58ac4100f.
[ 90.384757][ T5838] RSP: 002b:00007ffc0fd70e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 90.393181][ T5838] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe58ac41039
[ 90.401159][ T5838] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
[ 90.409137][ T5838] RBP: 00007fe58acbb390 R08: ffffffffffffffb8 R09: 00000000000af5f8
[ 90.417115][ T5838] R10: 00000000000af5f8 R11: 0000000000000246 R12: 00007fe58acbb390
[ 90.425094][ T5838] R13: 0000000000000000 R14: 00007fe58acbbde0 R15: 00007fe58ac0fe30
[ 90.433107][ T5838]
[ 90.436441][ T5838] Kernel Offset: disabled
[ 90.440775][ T5838] Rebooting in 86400 seconds..