Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts.
2026/04/12 23:44:28 parsed 1 programs
[ 88.313978][ T5826] cgroup: Unknown subsys name 'net'
[ 88.429655][ T5826] cgroup: Unknown subsys name 'cpuset'
[ 88.439075][ T5826] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 90.161871][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 92.346299][ T797] cfg80211: failed to load regulatory.db
[ 93.144759][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 93.302187][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 93.311127][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 93.318937][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 93.328066][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 93.336151][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 93.641714][ T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.650254][ T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.693994][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.703127][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.267959][ T5866] chnl_net:caif_netlink_parms(): no params data found
[ 94.351087][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.358399][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.367392][ T5866] bridge_slave_0: entered allmulticast mode
[ 94.374700][ T5866] bridge_slave_0: entered promiscuous mode
[ 94.384217][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.391693][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.399040][ T5866] bridge_slave_1: entered allmulticast mode
[ 94.406460][ T5866] bridge_slave_1: entered promiscuous mode
[ 94.494229][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.506498][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.555313][ T5866] team0: Port device team_slave_0 added
[ 94.564681][ T5866] team0: Port device team_slave_1 added
[ 94.608009][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.615005][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.641183][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.656588][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.664033][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.690336][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.742519][ T5866] hsr_slave_0: entered promiscuous mode
[ 94.749093][ T5866] hsr_slave_1: entered promiscuous mode
[ 94.900634][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.912653][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.924301][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.935525][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.012912][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.033888][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.047905][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.055254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.074130][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.081868][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.251976][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.298742][ T5866] veth0_vlan: entered promiscuous mode
[ 95.310789][ T5866] veth1_vlan: entered promiscuous mode
[ 95.342228][ T5866] veth0_macvtap: entered promiscuous mode
[ 95.351479][ T5866] veth1_macvtap: entered promiscuous mode
[ 95.370666][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.383843][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.403193][ T106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.412852][ T106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.425138][ T106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.436473][ T106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.580988][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.660072][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.731756][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.802415][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/04/12 23:44:40 executed programs: 0
[ 98.074749][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 98.084217][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 98.092857][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 98.102879][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 98.111442][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.256518][ T5936] chnl_net:caif_netlink_parms(): no params data found
[ 98.330683][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.338360][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.346193][ T5936] bridge_slave_0: entered allmulticast mode
[ 98.353832][ T5936] bridge_slave_0: entered promiscuous mode
[ 98.361978][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.369432][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.377528][ T5936] bridge_slave_1: entered allmulticast mode
[ 98.384641][ T5936] bridge_slave_1: entered promiscuous mode
[ 98.412882][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.426353][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.458404][ T5936] team0: Port device team_slave_0 added
[ 98.466935][ T5936] team0: Port device team_slave_1 added
[ 98.491642][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.499097][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.525601][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.537908][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.544911][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.572490][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.628898][ T5936] hsr_slave_0: entered promiscuous mode
[ 98.635373][ T5936] hsr_slave_1: entered promiscuous mode
[ 98.641940][ T5936] debugfs: 'hsr0' already exists in 'hsr'
[ 98.648059][ T5936] Cannot create hsr debugfs directory
[ 98.772537][ T63] bridge_slave_1: left allmulticast mode
[ 98.778420][ T63] bridge_slave_1: left promiscuous mode
[ 98.784865][ T63] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.796918][ T63] bridge_slave_0: left allmulticast mode
[ 98.802738][ T63] bridge_slave_0: left promiscuous mode
[ 98.810150][ T63] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.950540][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 98.962296][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 98.972738][ T63] bond0 (unregistering): Released all slaves
[ 99.091803][ T63] hsr_slave_0: left promiscuous mode
[ 99.100814][ T63] hsr_slave_1: left promiscuous mode
[ 99.109228][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 99.117301][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 99.127924][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 99.136903][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 99.154256][ T63] veth1_macvtap: left promiscuous mode
[ 99.161491][ T63] veth0_macvtap: left promiscuous mode
[ 99.167463][ T63] veth1_vlan: left promiscuous mode
[ 99.173341][ T63] veth0_vlan: left promiscuous mode
[ 99.533320][ T63] team0 (unregistering): Port device team_slave_1 removed
[ 99.556418][ T63] team0 (unregistering): Port device team_slave_0 removed
[ 100.133333][ T5936] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.157444][ T5936] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.168691][ T5936] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.176665][ T5849] Bluetooth: hci0: command tx timeout
[ 100.504284][ T5936] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.679401][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.713436][ T5936] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.740770][ T189] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.747988][ T189] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.893099][ T189] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.900362][ T189] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.280479][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.353919][ T5936] veth0_vlan: entered promiscuous mode
[ 101.371305][ T5936] veth1_vlan: entered promiscuous mode
[ 101.420351][ T5936] veth0_macvtap: entered promiscuous mode
[ 101.431439][ T5936] veth1_macvtap: entered promiscuous mode
[ 101.460652][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.483645][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.502673][ T106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.512263][ T106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.538790][ T106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.559640][ T106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.680122][ T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.701860][ T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.741681][ T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.751475][ T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.840551][ T6011] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size.
[ 102.256077][ T5849] Bluetooth: hci0: command tx timeout
2026/04/12 23:44:45 executed programs: 22
[ 104.336509][ T5849] Bluetooth: hci0: command tx timeout
[ 106.416095][ T5849] Bluetooth: hci0: command tx timeout
2026/04/12 23:44:50 executed programs: 196
[ 110.068782][ T6819] ==================================================================
[ 110.077398][ T6819] BUG: KASAN: slab-use-after-free in drm_gem_object_release_handle+0x4b/0x1e0
[ 110.086451][ T6819] Read of size 8 at addr ffff88802a81e288 by task syz.0.286/6819
[ 110.094186][ T6819]
[ 110.096534][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(full)
[ 110.096551][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 110.096558][ T6819] Call Trace:
[ 110.096566][ T6819]
[ 110.096571][ T6819] dump_stack_lvl+0xe8/0x150
[ 110.096592][ T6819] print_report+0xba/0x230
[ 110.096605][ T6819] ? drm_gem_object_release_handle+0x4b/0x1e0
[ 110.096623][ T6819] kasan_report+0x117/0x150
[ 110.096637][ T6819] ? drm_gem_object_release_handle+0x4b/0x1e0
[ 110.096656][ T6819] drm_gem_object_release_handle+0x4b/0x1e0
[ 110.096673][ T6819] idr_for_each+0x1c6/0x2a0
[ 110.096687][ T6819] ? __pfx_drm_fb_release+0x10/0x10
[ 110.096702][ T6819] ? __pfx_drm_gem_object_release_handle+0x10/0x10
[ 110.096718][ T6819] ? __pfx_idr_for_each+0x10/0x10
[ 110.096734][ T6819] drm_gem_release+0x28/0x40
[ 110.096745][ T6819] drm_file_free+0x729/0xa00
[ 110.096760][ T6819] drm_release+0x2de/0x3f0
[ 110.096773][ T6819] ? __pfx_drm_release+0x10/0x10
[ 110.096785][ T6819] __fput+0x44f/0xa70
[ 110.096803][ T6819] task_work_run+0x1d9/0x270
[ 110.096816][ T6819] ? __pfx_task_work_run+0x10/0x10
[ 110.096830][ T6819] exit_to_user_mode_loop+0xed/0x480
[ 110.096843][ T6819] ? rcu_is_watching+0x15/0xb0
[ 110.096858][ T6819] do_syscall_64+0x32d/0xf80
[ 110.096874][ T6819] ? trace_irq_disable+0x3b/0x150
[ 110.096884][ T6819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.096894][ T6819] ? clear_bhb_loop+0x40/0x90
[ 110.096906][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.096918][ T6819] RIP: 0033:0x7faf6659c819
[ 110.096930][ T6819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 110.096939][ T6819] RSP: 002b:00007ffe7976e968 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 110.096953][ T6819] RAX: 0000000000000000 RBX: 00007ffe7976ea50 RCX: 00007faf6659c819
[ 110.096961][ T6819] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 110.096986][ T6819] RBP: 000000000001adae R08: 0000000000000001 R09: 0000000000000000
[ 110.096993][ T6819] R10: 0000001b2ef20000 R11: 0000000000000246 R12: 00007ffe7976ea90
[ 110.097000][ T6819] R13: 00007faf6681609c R14: 000000000001ade4 R15: 00007faf66816090
[ 110.097012][ T6819]
[ 110.097016][ T6819]
[ 110.323702][ T6819] Allocated by task 6820:
[ 110.328031][ T6819] kasan_save_track+0x3e/0x80
[ 110.332760][ T6819] __kasan_kmalloc+0x93/0xb0
[ 110.337459][ T6819] __kmalloc_cache_noprof+0x31c/0x660
[ 110.342842][ T6819] __drm_gem_shmem_create+0xc4/0x2e0
[ 110.348918][ T6819] drm_gem_shmem_dumb_create+0x72/0x120
[ 110.354486][ T6819] drm_mode_create_dumb_ioctl+0x2bd/0x340
[ 110.360332][ T6819] drm_ioctl_kernel+0x2df/0x3b0
[ 110.365637][ T6819] drm_ioctl+0x6ba/0xb80
[ 110.369990][ T6819] __se_sys_ioctl+0xfc/0x170
[ 110.374953][ T6819] do_syscall_64+0x14d/0xf80
[ 110.380522][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.386523][ T6819]
[ 110.388895][ T6819] Freed by task 6821:
[ 110.392887][ T6819] kasan_save_track+0x3e/0x80
[ 110.397579][ T6819] kasan_save_free_info+0x46/0x50
[ 110.402636][ T6819] __kasan_slab_free+0x5c/0x80
[ 110.407424][ T6819] kfree+0x1c1/0x630
[ 110.411515][ T6819] drm_gem_object_release_handle+0xc2/0x1e0
[ 110.417429][ T6819] drm_gem_handle_delete+0x7b/0xb0
[ 110.422647][ T6819] drm_ioctl_kernel+0x2df/0x3b0
[ 110.427505][ T6819] drm_ioctl+0x6ba/0xb80
[ 110.431769][ T6819] __se_sys_ioctl+0xfc/0x170
[ 110.436397][ T6819] do_syscall_64+0x14d/0xf80
[ 110.441098][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.447146][ T6819]
[ 110.449488][ T6819] The buggy address belongs to the object at ffff88802a81e000
[ 110.449488][ T6819] which belongs to the cache kmalloc-1k of size 1024
[ 110.463558][ T6819] The buggy address is located 648 bytes inside of
[ 110.463558][ T6819] freed 1024-byte region [ffff88802a81e000, ffff88802a81e400)
[ 110.477628][ T6819]
[ 110.480310][ T6819] The buggy address belongs to the physical page:
[ 110.486810][ T6819] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a818
[ 110.495767][ T6819] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 110.504278][ T6819] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 110.512000][ T6819] page_type: f5(slab)
[ 110.516010][ T6819] raw: 00fff00000000040 ffff88813fea6dc0 dead000000000100 dead000000000122
[ 110.524615][ T6819] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 110.533217][ T6819] head: 00fff00000000040 ffff88813fea6dc0 dead000000000100 dead000000000122
[ 110.541901][ T6819] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 110.550599][ T6819] head: 00fff00000000003 ffffea0000aa0601 00000000ffffffff 00000000ffffffff
[ 110.559305][ T6819] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 110.568087][ T6819] page dumped because: kasan: bad access detected
[ 110.578828][ T6819] page_owner tracks the page as allocated
[ 110.585861][ T6819] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/u8:2), ts 12597772264, free_ts 0
[ 110.604800][ T6819] post_alloc_hook+0x231/0x280
[ 110.609594][ T6819] get_page_from_freelist+0x24dc/0x2580
[ 110.615167][ T6819] __alloc_frozen_pages_noprof+0x18d/0x380
[ 110.621345][ T6819] allocate_slab+0x77/0x660
[ 110.625878][ T6819] refill_objects+0x331/0x3c0
[ 110.630606][ T6819] __pcs_replace_empty_main+0x2e6/0x730
[ 110.636227][ T6819] __kmalloc_node_noprof+0x577/0x7c0
[ 110.641565][ T6819] blk_alloc_flush_queue+0xe2/0x230
[ 110.646879][ T6819] blk_mq_alloc_and_init_hctx+0x79e/0xc50
[ 110.652628][ T6819] __blk_mq_realloc_hw_ctxs+0x2bd/0x670
[ 110.658288][ T6819] blk_mq_init_allocated_queue+0x365/0x13e0
[ 110.664460][ T6819] blk_mq_alloc_queue+0x1ba/0x2e0
[ 110.669497][ T6819] scsi_alloc_sdev+0x7c0/0xc80
[ 110.674305][ T6819] scsi_probe_and_add_lun+0x200/0x4830
[ 110.679797][ T6819] __scsi_scan_target+0x1f0/0xe10
[ 110.684844][ T6819] scsi_scan_host_selected+0x372/0x690
[ 110.690329][ T6819] page_owner free stack trace missing
[ 110.695712][ T6819]
[ 110.698050][ T6819] Memory state around the buggy address:
[ 110.703859][ T6819] ffff88802a81e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.712098][ T6819] ffff88802a81e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.720177][ T6819] >ffff88802a81e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.728529][ T6819] ^
[ 110.732946][ T6819] ffff88802a81e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.741502][ T6819] ffff88802a81e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 110.749745][ T6819] ==================================================================
[ 110.760679][ T6819] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 110.767932][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(full)
[ 110.777239][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 110.787416][ T6819] Call Trace:
[ 110.790734][ T6819]
[ 110.793690][ T6819] vpanic+0x56c/0xa60
[ 110.797705][ T6819] ? __pfx_vpanic+0x10/0x10
[ 110.802283][ T6819] ? __pfx___schedule+0x10/0x10
[ 110.807327][ T6819] panic+0xc5/0xd0
[ 110.811090][ T6819] ? __pfx_panic+0x10/0x10
[ 110.815588][ T6819] ? preempt_schedule_common+0x82/0xd0
[ 110.821137][ T6819] ? drm_gem_object_release_handle+0x4b/0x1e0
[ 110.827479][ T6819] check_panic_on_warn+0x89/0xb0
[ 110.832633][ T6819] ? drm_gem_object_release_handle+0x4b/0x1e0
[ 110.838867][ T6819] end_report+0x73/0x180
[ 110.843147][ T6819] ? drm_gem_object_release_handle+0x4b/0x1e0
[ 110.849340][ T6819] kasan_report+0x128/0x150
[ 110.853994][ T6819] ? drm_gem_object_release_handle+0x4b/0x1e0
[ 110.860143][ T6819] drm_gem_object_release_handle+0x4b/0x1e0
[ 110.866061][ T6819] idr_for_each+0x1c6/0x2a0
[ 110.870679][ T6819] ? __pfx_drm_fb_release+0x10/0x10
[ 110.875894][ T6819] ? __pfx_drm_gem_object_release_handle+0x10/0x10
[ 110.882409][ T6819] ? __pfx_idr_for_each+0x10/0x10
[ 110.887453][ T6819] drm_gem_release+0x28/0x40
[ 110.892094][ T6819] drm_file_free+0x729/0xa00
[ 110.896726][ T6819] drm_release+0x2de/0x3f0
[ 110.901168][ T6819] ? __pfx_drm_release+0x10/0x10
[ 110.906146][ T6819] __fput+0x44f/0xa70
[ 110.910171][ T6819] task_work_run+0x1d9/0x270
[ 110.914809][ T6819] ? __pfx_task_work_run+0x10/0x10
[ 110.919966][ T6819] exit_to_user_mode_loop+0xed/0x480
[ 110.925307][ T6819] ? rcu_is_watching+0x15/0xb0
[ 110.930101][ T6819] do_syscall_64+0x32d/0xf80
[ 110.934738][ T6819] ? trace_irq_disable+0x3b/0x150
[ 110.939775][ T6819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.945853][ T6819] ? clear_bhb_loop+0x40/0x90
[ 110.950561][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.956565][ T6819] RIP: 0033:0x7faf6659c819
[ 110.960985][ T6819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 110.980733][ T6819] RSP: 002b:00007ffe7976e968 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 110.989373][ T6819] RAX: 0000000000000000 RBX: 00007ffe7976ea50 RCX: 00007faf6659c819
[ 110.997476][ T6819] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 111.005470][ T6819] RBP: 000000000001adae R08: 0000000000000001 R09: 0000000000000000
[ 111.013474][ T6819] R10: 0000001b2ef20000 R11: 0000000000000246 R12: 00007ffe7976ea90
[ 111.021477][ T6819] R13: 00007faf6681609c R14: 000000000001ade4 R15: 00007faf66816090
[ 111.029600][ T6819]
[ 111.032825][ T6819] Kernel Offset: disabled
[ 111.037185][ T6819] Rebooting in 86400 seconds..