Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts.
2026/05/12 21:40:50 parsed 1 programs
[ 107.089977][ T30] kauditd_printk_skb: 5 callbacks suppressed
[ 107.089993][ T30] audit: type=1400 audit(1778622049.995:215): avc: denied { node_bind } for pid=6080 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 109.434466][ T30] audit: type=1400 audit(1778622052.345:216): avc: denied { mounton } for pid=6090 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 109.474732][ T30] audit: type=1400 audit(1778622052.385:217): avc: denied { unlink } for pid=6090 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 110.787414][ T6090] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 112.866538][ T30] audit: type=1400 audit(1778622055.775:218): avc: denied { unmount } for pid=6100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 113.388069][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.406509][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.434336][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.442247][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.870970][ T4929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 114.890765][ T4929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 114.898645][ T4929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 114.907114][ T4929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 114.915230][ T4929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 115.901648][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.909689][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.917899][ T6167] bridge_slave_0: entered allmulticast mode
[ 115.924846][ T6167] bridge_slave_0: entered promiscuous mode
[ 115.932484][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.940059][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.947416][ T6167] bridge_slave_1: entered allmulticast mode
[ 115.955168][ T6167] bridge_slave_1: entered promiscuous mode
[ 115.977608][ T6167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 115.989643][ T6167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 116.016111][ T6167] team0: Port device team_slave_0 added
[ 116.023615][ T6167] team0: Port device team_slave_1 added
[ 116.042913][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.049871][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.075821][ T6167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 116.087616][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 116.094596][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 116.120574][ T6167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 116.153859][ T6167] hsr_slave_0: entered promiscuous mode
[ 116.159974][ T6167] hsr_slave_1: entered promiscuous mode
[ 116.419489][ T30] audit: type=1400 audit(1778622059.325:219): avc: denied { write } for pid=6183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 116.496320][ T30] audit: type=1400 audit(1778622059.405:220): avc: denied { write } for pid=6194 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 116.639633][ T6167] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 116.650337][ T6167] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 116.658844][ T6167] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 116.674083][ T6167] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 116.682648][ T6167] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 116.694752][ T6167] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 116.703399][ T6167] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 116.714511][ T6167] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 116.741780][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.748960][ T6167] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.756425][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.763599][ T6167] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.804365][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.819812][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.838939][ T30] audit: type=1400 audit(1778622059.745:221): avc: denied { write } for pid=6196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 116.857203][ T6167] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.886273][ T6167] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.900427][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.907609][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.921581][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.928751][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.968891][ T30] audit: type=1400 audit(1778622059.875:222): avc: denied { write } for pid=6213 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 116.977084][ T6167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 117.316317][ T30] audit: type=1400 audit(1778622060.225:223): avc: denied { write } for pid=6217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 117.360225][ T6167] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.415516][ T30] audit: type=1400 audit(1778622060.325:224): avc: denied { write } for pid=6236 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 117.424216][ T6167] veth0_vlan: entered promiscuous mode
[ 117.457013][ T6167] veth1_vlan: entered promiscuous mode
[ 117.487580][ T6167] veth0_macvtap: entered promiscuous mode
[ 117.510265][ T6167] veth1_macvtap: entered promiscuous mode
[ 117.531003][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 117.547484][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 117.564427][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.575569][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.601504][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.610798][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.791761][ T30] audit: type=1400 audit(1778622060.695:225): avc: denied { write } for pid=6238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 117.823882][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.868436][ T30] audit: type=1400 audit(1778622060.775:226): avc: denied { write } for pid=6252 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 117.944551][ T30] audit: type=1401 audit(1778622060.845:227): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 117.955585][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.041451][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.140797][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.234230][ T30] audit: type=1400 audit(1778622061.145:228): avc: denied { write } for pid=6256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 118.327336][ T30] audit: type=1400 audit(1778622061.235:229): avc: denied { write } for pid=6270 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
2026/05/12 21:41:01 executed programs: 0
[ 118.624716][ T30] audit: type=1400 audit(1778622061.535:230): avc: denied { create } for pid=6282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 118.639678][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 118.656311][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 118.667935][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 118.675399][ T30] audit: type=1400 audit(1778622061.565:231): avc: denied { ioctl } for pid=6282 comm="syz-executor" path="socket:[9657]" dev="sockfs" ino=9657 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 118.701434][ T30] audit: type=1400 audit(1778622061.565:232): avc: denied { write } for pid=6272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 118.726072][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 118.736141][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 118.773361][ T30] audit: type=1400 audit(1778622061.675:233): avc: denied { write } for pid=6286 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 119.114702][ T30] audit: type=1400 audit(1778622062.025:234): avc: denied { write } for pid=6290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 119.218284][ T30] audit: type=1400 audit(1778622062.125:235): avc: denied { write } for pid=6309 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 119.358848][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.367091][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.374668][ T6282] bridge_slave_0: entered allmulticast mode
[ 119.382408][ T6282] bridge_slave_0: entered promiscuous mode
[ 119.392490][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.399768][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.407440][ T6282] bridge_slave_1: entered allmulticast mode
[ 119.415462][ T6282] bridge_slave_1: entered promiscuous mode
[ 119.447269][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 119.459724][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 119.496788][ T6282] team0: Port device team_slave_0 added
[ 119.505195][ T6282] team0: Port device team_slave_1 added
[ 119.536279][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 119.543302][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.569583][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 119.582456][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 119.589449][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.615914][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 119.646062][ T30] audit: type=1400 audit(1778622062.545:236): avc: denied { write } for pid=6315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 119.684928][ T6282] hsr_slave_0: entered promiscuous mode
[ 119.695131][ T6282] hsr_slave_1: entered promiscuous mode
[ 119.701467][ T6282] debugfs: 'hsr0' already exists in 'hsr'
[ 119.707820][ T6282] Cannot create hsr debugfs directory
[ 119.940244][ T36] bridge_slave_1: left allmulticast mode
[ 119.948254][ T36] bridge_slave_1: left promiscuous mode
[ 119.954489][ T36] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.965542][ T36] bridge_slave_0: left allmulticast mode
[ 119.971216][ T36] bridge_slave_0: left promiscuous mode
[ 119.978745][ T36] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.171144][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 120.182403][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 120.200307][ T36] bond0 (unregistering): Released all slaves
[ 120.301969][ T36] hsr_slave_0: left promiscuous mode
[ 120.312583][ T36] hsr_slave_1: left promiscuous mode
[ 120.318644][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 120.327491][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 120.337330][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 120.345091][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 120.358266][ T36] veth1_macvtap: left promiscuous mode
[ 120.364121][ T36] veth0_macvtap: left promiscuous mode
[ 120.369798][ T36] veth1_vlan: left promiscuous mode
[ 120.375488][ T36] veth0_vlan: left promiscuous mode
[ 120.597572][ T36] team0 (unregistering): Port device team_slave_1 removed
[ 120.616154][ T36] team0 (unregistering): Port device team_slave_0 removed
[ 120.803919][ T51] Bluetooth: hci0: command tx timeout
[ 121.027572][ T6282] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 121.039919][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 121.048262][ T6282] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 121.057956][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 121.070367][ T6282] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 121.082761][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 121.090821][ T6282] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 121.101340][ T6282] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 121.301936][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0
[ 121.347825][ T6282] 8021q: adding VLAN 0 to HW filter on device team0
[ 121.361474][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[ 121.368661][ T3308] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 121.383063][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[ 121.390221][ T3308] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 121.831227][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 121.886526][ T6282] veth0_vlan: entered promiscuous mode
[ 121.900607][ T6282] veth1_vlan: entered promiscuous mode
[ 121.938493][ T6282] veth0_macvtap: entered promiscuous mode
[ 121.948514][ T6282] veth1_macvtap: entered promiscuous mode
[ 121.970849][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 121.985592][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 121.998651][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.009088][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.019634][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.028416][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.083565][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 122.091776][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 122.115306][ T3308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 122.123548][ T3308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 122.171156][ T6410] ------------[ cut here ]------------
[ 122.177144][ T6410] !RB_EMPTY_ROOT(&prime_fpriv->dmabufs)
[ 122.177157][ T6410] WARNING: drivers/gpu/drm/drm_prime.c:224 at drm_prime_destroy_file_private+0x48/0x60, CPU#0: syz.0.17/6410
[ 122.194379][ T6410] Modules linked in:
[ 122.198298][ T6410] CPU: 0 UID: 0 PID: 6410 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 122.207462][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 122.217568][ T6410] RIP: 0010:drm_prime_destroy_file_private+0x48/0x60
[ 122.224323][ T6410] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 75 2b 48 8b 83 88 00 00 00 48 85 c0 75 0b e8 14 d0 65 fc 5b e9 4e e4 ea 05 e8 09 d0 65 fc 90 <0f> 0b 90 e8 00 d0 65 fc 5b c3 cc cc cc cc e8 95 8e d3 fc eb ce 0f
[ 122.244351][ T6410] RSP: 0018:ffffc90002f77c90 EFLAGS: 00010293
[ 122.250727][ T6410] RAX: 0000000000000000 RBX: ffff88802ad7e328 RCX: ffffffff8b8be29d
[ 122.258943][ T6410] RDX: ffff888038710000 RSI: ffffffff85a2d6d7 RDI: ffff88802ad7e3b0
[ 122.266960][ T6410] RBP: ffff88802ad7e000 R08: 0000000000000001 R09: fffff520005eef72
[ 122.275014][ T6410] R10: ffffc90002f77b97 R11: ffffffff82763704 R12: ffff8880274f6000
[ 122.283024][ T6410] R13: ffff88802ad7e260 R14: 0000000000000000 R15: ffff88802ad7e288
[ 122.291154][ T6410] FS: 000055555a33f500(0000) GS:ffff888124372000(0000) knlGS:0000000000000000
[ 122.300142][ T6410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 122.306772][ T6410] CR2: 00007f33e59e9000 CR3: 000000005f403000 CR4: 00000000003526f0
[ 122.314779][ T6410] Call Trace:
[ 122.318056][ T6410]
[ 122.320969][ T6410] drm_file_free.part.0+0x7e6/0xcc0
[ 122.326271][ T6410] ? __pfx___fsnotify_parent+0x10/0x10
[ 122.331748][ T6410] drm_close_helper.isra.0+0x186/0x200
[ 122.337248][ T6410] drm_release+0x1ab/0x360
[ 122.341869][ T6410] ? __pfx_drm_release+0x10/0x10
[ 122.347097][ T6410] __fput+0x3ff/0xb50
[ 122.351150][ T6410] task_work_run+0x150/0x240
[ 122.355809][ T6410] ? __pfx_task_work_run+0x10/0x10
[ 122.360932][ T6410] ? rcu_is_watching+0x12/0xc0
[ 122.365787][ T6410] exit_to_user_mode_loop+0x107/0x4f0
[ 122.371166][ T6410] ? rcu_is_watching+0x12/0xc0
[ 122.375992][ T6410] do_syscall_64+0x706/0xf80
[ 122.380583][ T6410] ? clear_bhb_loop+0x40/0x90
[ 122.385324][ T6410] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.391577][ T6410] RIP: 0033:0x7f33e579cdd9
[ 122.396041][ T6410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 122.415735][ T6410] RSP: 002b:00007ffece825a08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 122.424304][ T6410] RAX: 0000000000000000 RBX: 00007ffece825af0 RCX: 00007f33e579cdd9
[ 122.432339][ T6410] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 122.440311][ T6410] RBP: 000000000001dd1e R08: 0000000000000001 R09: 0000000000000000
[ 122.448626][ T6410] R10: 0000001b2c920000 R11: 0000000000000246 R12: 00007ffece825b30
[ 122.456932][ T6410] R13: 00007f33e5a15fac R14: 000000000001dd56 R15: 00007f33e5a15fa0
[ 122.464994][ T6410]
[ 122.468010][ T6410] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 122.475286][ T6410] CPU: 0 UID: 0 PID: 6410 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 122.484369][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 122.494398][ T6410] Call Trace:
[ 122.497655][ T6410]
[ 122.500560][ T6410] dump_stack_lvl+0x100/0x190
[ 122.505222][ T6410] vpanic+0x552/0x970
[ 122.509180][ T6410] ? __pfx_vpanic+0x10/0x10
[ 122.513663][ T6410] panic+0xd1/0xe0
[ 122.517359][ T6410] ? __pfx_panic+0x10/0x10
[ 122.521752][ T6410] ? check_panic_on_warn+0x1f/0x90
[ 122.526847][ T6410] check_panic_on_warn.cold+0x19/0x34
[ 122.532208][ T6410] ? drm_prime_destroy_file_private+0x48/0x60
[ 122.538273][ T6410] __warn.cold+0x191/0x328
[ 122.542673][ T6410] __report_bug+0x296/0x3d0
[ 122.547182][ T6410] ? drm_prime_destroy_file_private+0x48/0x60
[ 122.553244][ T6410] ? __pfx___report_bug+0x10/0x10
[ 122.558270][ T6410] ? find_held_lock+0x2b/0x80
[ 122.562930][ T6410] ? drm_master_release+0x2aa/0x5f0
[ 122.568119][ T6410] ? drm_master_release+0x2aa/0x5f0
[ 122.573313][ T6410] ? __mutex_unlock_slowpath+0x15d/0x8a0
[ 122.578936][ T6410] ? drm_prime_destroy_file_private+0x48/0x60
[ 122.584994][ T6410] report_bug+0xb2/0x220
[ 122.589240][ T6410] ? drm_prime_destroy_file_private+0x48/0x60
[ 122.595297][ T6410] handle_bug+0x16a/0x2a0
[ 122.599617][ T6410] exc_invalid_op+0x17/0x50
[ 122.604111][ T6410] asm_exc_invalid_op+0x1a/0x20
[ 122.608942][ T6410] RIP: 0010:drm_prime_destroy_file_private+0x48/0x60
[ 122.615607][ T6410] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 75 2b 48 8b 83 88 00 00 00 48 85 c0 75 0b e8 14 d0 65 fc 5b e9 4e e4 ea 05 e8 09 d0 65 fc 90 <0f> 0b 90 e8 00 d0 65 fc 5b c3 cc cc cc cc e8 95 8e d3 fc eb ce 0f
[ 122.635207][ T6410] RSP: 0018:ffffc90002f77c90 EFLAGS: 00010293
[ 122.641261][ T6410] RAX: 0000000000000000 RBX: ffff88802ad7e328 RCX: ffffffff8b8be29d
[ 122.649212][ T6410] RDX: ffff888038710000 RSI: ffffffff85a2d6d7 RDI: ffff88802ad7e3b0
[ 122.657181][ T6410] RBP: ffff88802ad7e000 R08: 0000000000000001 R09: fffff520005eef72
[ 122.665131][ T6410] R10: ffffc90002f77b97 R11: ffffffff82763704 R12: ffff8880274f6000
[ 122.673084][ T6410] R13: ffff88802ad7e260 R14: 0000000000000000 R15: ffff88802ad7e288
[ 122.681039][ T6410] ? kasan_save_track+0x14/0x30
[ 122.685876][ T6410] ? __mutex_unlock_slowpath+0x15d/0x8a0
[ 122.691510][ T6410] ? drm_prime_destroy_file_private+0x47/0x60
[ 122.697576][ T6410] drm_file_free.part.0+0x7e6/0xcc0
[ 122.702774][ T6410] ? __pfx___fsnotify_parent+0x10/0x10
[ 122.708223][ T6410] drm_close_helper.isra.0+0x186/0x200
[ 122.713671][ T6410] drm_release+0x1ab/0x360
[ 122.718076][ T6410] ? __pfx_drm_release+0x10/0x10
[ 122.723018][ T6410] __fput+0x3ff/0xb50
[ 122.727010][ T6410] task_work_run+0x150/0x240
[ 122.731628][ T6410] ? __pfx_task_work_run+0x10/0x10
[ 122.736757][ T6410] ? rcu_is_watching+0x12/0xc0
[ 122.741521][ T6410] exit_to_user_mode_loop+0x107/0x4f0
[ 122.746894][ T6410] ? rcu_is_watching+0x12/0xc0
[ 122.751664][ T6410] do_syscall_64+0x706/0xf80
[ 122.756247][ T6410] ? clear_bhb_loop+0x40/0x90
[ 122.760913][ T6410] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.766794][ T6410] RIP: 0033:0x7f33e579cdd9
[ 122.771191][ T6410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 122.791045][ T6410] RSP: 002b:00007ffece825a08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 122.799450][ T6410] RAX: 0000000000000000 RBX: 00007ffece825af0 RCX: 00007f33e579cdd9
[ 122.807401][ T6410] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 122.815350][ T6410] RBP: 000000000001dd1e R08: 0000000000000001 R09: 0000000000000000
[ 122.823301][ T6410] R10: 0000001b2c920000 R11: 0000000000000246 R12: 00007ffece825b30
[ 122.831262][ T6410] R13: 00007f33e5a15fac R14: 000000000001dd56 R15: 00007f33e5a15fa0
[ 122.839226][ T6410]
[ 122.842681][ T6410] Kernel Offset: disabled
[ 122.846996][ T6410] Rebooting in 86400 seconds..