Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. 2025/10/17 05:27:30 parsed 1 programs [ 66.489744][ T30] audit: type=1400 audit(1760678850.313:62): avc: denied { write } for pid=5803 comm="syz-execprog" path="pipe:[4848]" dev="pipefs" ino=4848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 66.513802][ T30] audit: type=1400 audit(1760678850.313:63): avc: denied { node_bind } for pid=5803 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 68.411589][ T30] audit: type=1400 audit(1760678852.233:64): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 68.435094][ T30] audit: type=1400 audit(1760678852.263:65): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.437441][ T5811] cgroup: Unknown subsys name 'net' [ 68.465443][ T30] audit: type=1400 audit(1760678852.293:66): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.617120][ T5811] cgroup: Unknown subsys name 'cpuset' [ 68.625092][ T5811] cgroup: Unknown subsys name 'rlimit' [ 68.749638][ T30] audit: type=1400 audit(1760678852.573:67): avc: denied { setattr } for pid=5811 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.773416][ T30] audit: type=1400 audit(1760678852.573:68): avc: denied { create } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.801941][ T30] audit: type=1400 audit(1760678852.573:69): avc: denied { write } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.832381][ T30] audit: type=1400 audit(1760678852.573:70): avc: denied { read } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.851989][ T5813] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 68.861349][ T30] audit: type=1400 audit(1760678852.593:71): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 69.817306][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.916675][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.923038][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.531800][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 71.531814][ T30] audit: type=1400 audit(1760678855.353:78): avc: denied { execmem } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.668371][ T30] audit: type=1400 audit(1760678855.493:79): avc: denied { read } for pid=5823 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.689565][ T30] audit: type=1400 audit(1760678855.493:80): avc: denied { open } for pid=5823 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.713002][ T30] audit: type=1400 audit(1760678855.493:81): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.743715][ T30] audit: type=1400 audit(1760678855.563:82): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.RWJ3QB/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.768045][ T30] audit: type=1400 audit(1760678855.563:83): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.790008][ T30] audit: type=1400 audit(1760678855.563:84): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.RWJ3QB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.815354][ T30] audit: type=1400 audit(1760678855.563:85): avc: denied { mount } for pid=5823 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.837118][ T30] audit: type=1400 audit(1760678855.563:86): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.RWJ3QB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.863638][ T30] audit: type=1400 audit(1760678855.563:87): avc: denied { mounton } for pid=5823 comm="syz-executor" path="/root/syzkaller.RWJ3QB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.894347][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.544231][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.555996][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.587941][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.596699][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.328534][ T5887] chnl_net:caif_netlink_parms(): no params data found [ 74.384725][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.392305][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.399623][ T5887] bridge_slave_0: entered allmulticast mode [ 74.407053][ T5887] bridge_slave_0: entered promiscuous mode [ 74.416520][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.423662][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.430845][ T5887] bridge_slave_1: entered allmulticast mode [ 74.437520][ T5887] bridge_slave_1: entered promiscuous mode [ 74.464952][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.476021][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.516634][ T5887] team0: Port device team_slave_0 added [ 74.523495][ T5887] team0: Port device team_slave_1 added [ 74.542963][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.550751][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.577314][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.591561][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.598881][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.624793][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.660395][ T5887] hsr_slave_0: entered promiscuous mode [ 74.666500][ T5887] hsr_slave_1: entered promiscuous mode [ 74.764820][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.774409][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.783208][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.792259][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.840619][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.858892][ T5887] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.869699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.876856][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.889118][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.896169][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.007062][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.041009][ T5887] veth0_vlan: entered promiscuous mode [ 75.050798][ T5887] veth1_vlan: entered promiscuous mode [ 75.068073][ T5887] veth0_macvtap: entered promiscuous mode [ 75.078749][ T5887] veth1_macvtap: entered promiscuous mode [ 75.092471][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.103485][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.117615][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.127031][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.136834][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.145854][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.239936][ T5910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.250067][ T5910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.258789][ T5910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.268843][ T5910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.269873][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.276350][ T5910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.335826][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.420773][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.474408][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/10/17 05:27:39 executed programs: 0 [ 75.681564][ T5910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.689585][ T5910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.697220][ T5910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.706216][ T5910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.713679][ T5910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.814421][ T5920] chnl_net:caif_netlink_parms(): no params data found [ 75.861125][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.868802][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.876327][ T5920] bridge_slave_0: entered allmulticast mode [ 75.884263][ T5920] bridge_slave_0: entered promiscuous mode [ 75.891825][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.898987][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.906100][ T5920] bridge_slave_1: entered allmulticast mode [ 75.912686][ T5920] bridge_slave_1: entered promiscuous mode [ 75.935656][ T5920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.947682][ T5920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.973812][ T5920] team0: Port device team_slave_0 added [ 75.981553][ T5920] team0: Port device team_slave_1 added [ 76.000476][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.007491][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.033559][ T5920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.047325][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.054255][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.080602][ T5920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.129272][ T5920] hsr_slave_0: entered promiscuous mode [ 76.135935][ T5920] hsr_slave_1: entered promiscuous mode [ 76.142026][ T5920] debugfs: 'hsr0' already exists in 'hsr' [ 76.148228][ T5920] Cannot create hsr debugfs directory [ 77.795595][ T5133] Bluetooth: hci0: command tx timeout [ 78.478892][ T13] bridge_slave_1: left allmulticast mode [ 78.485002][ T13] bridge_slave_1: left promiscuous mode [ 78.491040][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.501058][ T13] bridge_slave_0: left allmulticast mode [ 78.507482][ T13] bridge_slave_0: left promiscuous mode [ 78.513123][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.661719][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.671634][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.681960][ T13] bond0 (unregistering): Released all slaves [ 78.704475][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 78.704488][ T30] audit: type=1400 audit(1760678862.523:109): avc: denied { search } for pid=5477 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.732133][ T30] audit: type=1400 audit(1760678862.523:110): avc: denied { search } for pid=5477 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.753950][ T30] audit: type=1400 audit(1760678862.533:111): avc: denied { search } for pid=5477 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.778614][ T30] audit: type=1400 audit(1760678862.583:112): avc: denied { read open } for pid=5931 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.814848][ T30] audit: type=1400 audit(1760678862.583:113): avc: denied { getattr } for pid=5931 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.874049][ T13] hsr_slave_0: left promiscuous mode [ 78.880153][ T13] hsr_slave_1: left promiscuous mode [ 78.894089][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.904329][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.912463][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.922433][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.941524][ T13] veth1_macvtap: left promiscuous mode [ 78.952505][ T13] veth0_macvtap: left promiscuous mode [ 78.958237][ T13] veth1_vlan: left promiscuous mode [ 78.958433][ T30] audit: type=1400 audit(1760678862.783:114): avc: denied { add_name } for pid=5930 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.963655][ T13] veth0_vlan: left promiscuous mode [ 79.056754][ T30] audit: type=1400 audit(1760678862.883:115): avc: denied { remove_name } for pid=5941 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2040 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.221373][ T13] team0 (unregistering): Port device team_slave_1 removed [ 79.240233][ T13] team0 (unregistering): Port device team_slave_0 removed [ 79.568555][ T5920] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.580453][ T5920] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.600178][ T5920] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.622682][ T5920] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.764115][ T5920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.792237][ T5920] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.805976][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.813052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.828990][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.836100][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.885430][ T5133] Bluetooth: hci0: command tx timeout [ 79.974370][ T5920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.005227][ T5920] veth0_vlan: entered promiscuous mode [ 80.014615][ T5920] veth1_vlan: entered promiscuous mode [ 80.036017][ T5920] veth0_macvtap: entered promiscuous mode [ 80.044146][ T5920] veth1_macvtap: entered promiscuous mode [ 80.058712][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.070104][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.081295][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.090293][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.099577][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.108535][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.150428][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.161492][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.184115][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.191977][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.227544][ T30] audit: type=1400 audit(1760678864.053:116): avc: denied { read write } for pid=5966 comm="syz.0.17" name="system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.239180][ T5966] ------------[ cut here ]------------ [ 80.251606][ T30] audit: type=1400 audit(1760678864.053:117): avc: denied { open } for pid=5966 comm="syz.0.17" path="/dev/dma_heap/system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.256463][ T5966] WARNING: CPU: 1 PID: 5966 at drivers/gpu/drm/drm_prime.c:223 drm_prime_destroy_file_private+0x43/0x60 [ 80.281441][ T30] audit: type=1400 audit(1760678864.053:118): avc: denied { ioctl } for pid=5966 comm="syz.0.17" path="/dev/dma_heap/system" dev="devtmpfs" ino=700 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.291574][ T5966] Modules linked in: [ 80.320520][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 80.329675][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.339773][ T5966] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 80.346620][ T5966] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 13 ed 6c fc e8 0e ed 6c fc 90 <0f> 0b 90 5b e9 04 ed 6c fc e8 3f 74 d5 fc eb d8 66 66 2e 0f 1f 84 [ 80.366500][ T5966] RSP: 0018:ffffc90003307cc8 EFLAGS: 00010293 [ 80.372564][ T5966] RAX: 0000000000000000 RBX: ffff88807d24a380 RCX: ffffffff8b67db01 [ 80.380537][ T5966] RDX: ffff888033d9c900 RSI: ffffffff85504ba2 RDI: ffff88807d24a410 [ 80.388539][ T5966] RBP: ffff88807d24a000 R08: 0000000000000001 R09: fffff52000660f79 [ 80.396555][ T5966] R10: ffffc90003307bcf R11: 0000000000000000 R12: ffff888141b84000 [ 80.404562][ T5966] R13: ffff88807d24a2b0 R14: 0000000000000000 R15: ffff88807d24a2d8 [ 80.412522][ T5966] FS: 000055556a4e6500(0000) GS:ffff888124ad6000(0000) knlGS:0000000000000000 [ 80.421507][ T5966] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.428167][ T5966] CR2: 00007ffcdc50bd38 CR3: 0000000073214000 CR4: 00000000003526f0 [ 80.436240][ T5966] Call Trace: [ 80.439507][ T5966] [ 80.442418][ T5966] drm_file_free.part.0+0x7ee/0xcd0 [ 80.447803][ T5966] drm_close_helper.isra.0+0x186/0x1f0 [ 80.453262][ T5966] drm_release+0x1ab/0x360 [ 80.457897][ T5966] ? __pfx_drm_release+0x10/0x10 [ 80.462830][ T5966] __fput+0x402/0xb70 [ 80.466894][ T5966] task_work_run+0x150/0x240 [ 80.471476][ T5966] ? __pfx_task_work_run+0x10/0x10 [ 80.476592][ T5966] ? __pfx___do_sys_close_range+0x10/0x10 [ 80.482310][ T5966] exit_to_user_mode_loop+0xec/0x130 [ 80.487615][ T5966] do_syscall_64+0x426/0xfa0 [ 80.492202][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.498092][ T5966] RIP: 0033:0x7fdf6d58eec9 [ 80.502491][ T5966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.522262][ T5966] RSP: 002b:00007ffddbd22698 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 80.530682][ T5966] RAX: 0000000000000000 RBX: 0000000000013947 RCX: 00007fdf6d58eec9 [ 80.538664][ T5966] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 80.546634][ T5966] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000006dbd2298f [ 80.554779][ T5966] R10: 0000001b2df20000 R11: 0000000000000246 R12: 00007fdf6d7e5fac [ 80.562724][ T5966] R13: 00007fdf6d7e5fa0 R14: ffffffffffffffff R15: 0000000000000003 [ 80.570840][ T5966] [ 80.573856][ T5966] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.581110][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 80.590197][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.600232][ T5966] Call Trace: [ 80.603491][ T5966] [ 80.606401][ T5966] dump_stack_lvl+0x3d/0x1f0 [ 80.610980][ T5966] vpanic+0x640/0x6f0 [ 80.614946][ T5966] ? drm_prime_destroy_file_private+0x43/0x60 [ 80.620994][ T5966] panic+0xca/0xd0 [ 80.624722][ T5966] ? __pfx_panic+0x10/0x10 [ 80.629127][ T5966] ? check_panic_on_warn+0x1f/0xb0 [ 80.634220][ T5966] check_panic_on_warn+0xab/0xb0 [ 80.639140][ T5966] __warn+0xf6/0x3c0 [ 80.643016][ T5966] ? drm_prime_destroy_file_private+0x43/0x60 [ 80.649066][ T5966] report_bug+0x3c3/0x580 [ 80.653375][ T5966] ? drm_prime_destroy_file_private+0x43/0x60 [ 80.659427][ T5966] handle_bug+0x184/0x210 [ 80.663743][ T5966] exc_invalid_op+0x17/0x50 [ 80.668231][ T5966] asm_exc_invalid_op+0x1a/0x20 [ 80.673059][ T5966] RIP: 0010:drm_prime_destroy_file_private+0x43/0x60 [ 80.679715][ T5966] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 21 48 8b 83 90 00 00 00 48 85 c0 75 06 5b e9 13 ed 6c fc e8 0e ed 6c fc 90 <0f> 0b 90 5b e9 04 ed 6c fc e8 3f 74 d5 fc eb d8 66 66 2e 0f 1f 84 [ 80.699300][ T5966] RSP: 0018:ffffc90003307cc8 EFLAGS: 00010293 [ 80.705345][ T5966] RAX: 0000000000000000 RBX: ffff88807d24a380 RCX: ffffffff8b67db01 [ 80.713292][ T5966] RDX: ffff888033d9c900 RSI: ffffffff85504ba2 RDI: ffff88807d24a410 [ 80.721239][ T5966] RBP: ffff88807d24a000 R08: 0000000000000001 R09: fffff52000660f79 [ 80.729186][ T5966] R10: ffffc90003307bcf R11: 0000000000000000 R12: ffff888141b84000 [ 80.737135][ T5966] R13: ffff88807d24a2b0 R14: 0000000000000000 R15: ffff88807d24a2d8 [ 80.745089][ T5966] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 80.750707][ T5966] ? drm_prime_destroy_file_private+0x42/0x60 [ 80.756758][ T5966] ? drm_prime_destroy_file_private+0x42/0x60 [ 80.762808][ T5966] drm_file_free.part.0+0x7ee/0xcd0 [ 80.767993][ T5966] drm_close_helper.isra.0+0x186/0x1f0 [ 80.773434][ T5966] drm_release+0x1ab/0x360 [ 80.777833][ T5966] ? __pfx_drm_release+0x10/0x10 [ 80.782754][ T5966] __fput+0x402/0xb70 [ 80.786718][ T5966] task_work_run+0x150/0x240 [ 80.791295][ T5966] ? __pfx_task_work_run+0x10/0x10 [ 80.796392][ T5966] ? __pfx___do_sys_close_range+0x10/0x10 [ 80.802102][ T5966] exit_to_user_mode_loop+0xec/0x130 [ 80.807374][ T5966] do_syscall_64+0x426/0xfa0 [ 80.812382][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.818254][ T5966] RIP: 0033:0x7fdf6d58eec9 [ 80.822645][ T5966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.842228][ T5966] RSP: 002b:00007ffddbd22698 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 80.850617][ T5966] RAX: 0000000000000000 RBX: 0000000000013947 RCX: 00007fdf6d58eec9 [ 80.858565][ T5966] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 80.866512][ T5966] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000006dbd2298f [ 80.874461][ T5966] R10: 0000001b2df20000 R11: 0000000000000246 R12: 00007fdf6d7e5fac [ 80.882407][ T5966] R13: 00007fdf6d7e5fa0 R14: ffffffffffffffff R15: 0000000000000003 [ 80.890368][ T5966] [ 80.893557][ T5966] Kernel Offset: disabled [ 80.897870][ T5966] Rebooting in 86400 seconds..