no interfaces have a carrier
[ 50.408296][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0
[ 50.439752][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts.
2025/07/31 13:29:32 ignoring optional flag "sandboxArg"="0"
2025/07/31 13:29:33 parsed 1 programs
syzkaller login: [ 80.358639][ T4273] cgroup: Unknown subsys name 'net'
[ 80.489978][ T4273] cgroup: Unknown subsys name 'rlimit'
[ 81.991262][ T4273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 85.015763][ T4321] chnl_net:caif_netlink_parms(): no params data found
[ 85.076523][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.084721][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.092924][ T4321] device bridge_slave_0 entered promiscuous mode
[ 85.101993][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.109277][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.117257][ T4321] device bridge_slave_1 entered promiscuous mode
[ 85.145319][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.157163][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.190083][ T4321] team0: Port device team_slave_0 added
[ 85.199258][ T4321] team0: Port device team_slave_1 added
[ 85.219101][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.226153][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.252115][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.265628][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.272695][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.298815][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.341408][ T4321] device hsr_slave_0 entered promiscuous mode
[ 85.348764][ T4321] device hsr_slave_1 entered promiscuous mode
[ 85.483447][ T4321] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 85.494480][ T4321] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 85.505510][ T4321] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 85.517604][ T4321] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.583035][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.590344][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.598723][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.605890][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.651557][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.669170][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 85.681276][ T29] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.690710][ T29] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.700056][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 85.714664][ T4321] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.734142][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 85.743715][ T29] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.750831][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.766096][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 85.774877][ T29] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.782067][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.810546][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 85.819736][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 85.840236][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.852369][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 85.864509][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.876102][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 86.074396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 86.081948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 86.095940][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 86.121006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 86.130529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 86.153701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 86.163574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 86.172171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 86.181215][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 86.192084][ T4321] device veth0_vlan entered promiscuous mode
[ 86.212039][ T4321] device veth1_vlan entered promiscuous mode
[ 86.232323][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 86.240765][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 86.249958][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 86.258675][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 86.269184][ T4321] device veth0_macvtap entered promiscuous mode
[ 86.287379][ T4321] device veth1_macvtap entered promiscuous mode
[ 86.304590][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 86.312191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 86.320584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 86.329977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 86.339649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 86.351312][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 86.359973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 86.369086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 86.385183][ T4321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.394599][ T4321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.404062][ T4321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.413247][ T4321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 86.565061][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.587917][ T4343] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.596204][ T4343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.604666][ T4343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.613876][ T4343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.621390][ T4343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 86.629727][ T4343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.825180][ T126] cfg80211: failed to load regulatory.db
[ 87.077045][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.100157][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.125280][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 87.151517][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.160313][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.171560][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2025/07/31 13:29:43 executed programs: 0
[ 88.348764][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 88.356813][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 88.365323][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 88.373836][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 88.381425][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 88.389876][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 88.527249][ T4368] chnl_net:caif_netlink_parms(): no params data found
[ 88.577847][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.585293][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.593938][ T4368] device bridge_slave_0 entered promiscuous mode
[ 88.602152][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.609569][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.617759][ T4368] device bridge_slave_1 entered promiscuous mode
[ 88.643163][ T4368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 88.654855][ T4368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.684029][ T4368] team0: Port device team_slave_0 added
[ 88.699912][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.714364][ T4368] team0: Port device team_slave_1 added
[ 88.735830][ T4368] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.743358][ T4368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.769325][ T4368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.782072][ T4368] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.789302][ T4368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.816670][ T4368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.849930][ T4368] device hsr_slave_0 entered promiscuous mode
[ 88.857106][ T4368] device hsr_slave_1 entered promiscuous mode
[ 88.864327][ T4368] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 88.872113][ T4368] Cannot create hsr debugfs directory
[ 90.423411][ T4343] Bluetooth: hci0: command 0x0409 tx timeout
[ 91.224117][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.274421][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.141329][ T4368] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.157767][ T9] device hsr_slave_0 left promiscuous mode
[ 92.165469][ T9] device hsr_slave_1 left promiscuous mode
[ 92.172295][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 92.183984][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 92.196075][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 92.203755][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 92.211691][ T9] device bridge_slave_1 left promiscuous mode
[ 92.221496][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.236807][ T9] device bridge_slave_0 left promiscuous mode
[ 92.243445][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.271021][ T9] device veth1_macvtap left promiscuous mode
[ 92.278030][ T9] device veth0_macvtap left promiscuous mode
[ 92.284737][ T9] device veth1_vlan left promiscuous mode
[ 92.290778][ T9] device veth0_vlan left promiscuous mode
[ 92.503013][ T4344] Bluetooth: hci0: command 0x041b tx timeout
[ 92.668622][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 92.698620][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 92.727581][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 92.758249][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 93.027545][ T9] bond0 (unregistering): Released all slaves
[ 93.126361][ T4368] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.135741][ T4368] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.145887][ T4368] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.220909][ T4368] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.237416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 93.245973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 93.275111][ T4368] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.286479][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 93.295330][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 93.305981][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.313166][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.321934][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 93.340414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 93.350408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 93.359415][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.366607][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.378811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 93.392187][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 93.405261][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 93.416254][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 93.429251][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 93.438639][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 93.447738][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 93.459343][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 93.473342][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 93.487965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 93.496789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 93.507642][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 93.745557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 93.755040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 93.770783][ T4368] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.788906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 93.797969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 93.819548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 93.828213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 93.837181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 93.846161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 93.856573][ T4368] device veth0_vlan entered promiscuous mode
[ 93.867712][ T4368] device veth1_vlan entered promiscuous mode
[ 93.888158][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 93.896498][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 93.904656][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 93.913960][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 93.925256][ T4368] device veth0_macvtap entered promiscuous mode
[ 93.934967][ T4368] device veth1_macvtap entered promiscuous mode
[ 93.949971][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.957817][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 93.966625][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 93.975056][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 93.984013][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 94.007256][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.014761][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 94.024705][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 94.036952][ T4368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.045837][ T4368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.055776][ T4368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.064828][ T4368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.126531][ T4406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.136159][ T4406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.169493][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 94.179267][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.187781][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.212255][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 94.254139][ T4427] ================================================================================
[ 94.264676][ T4427] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46
[ 94.274021][ T4427] shift exponent 268435461 is too large for 32-bit type 'int'
[ 94.281807][ T4427] CPU: 1 PID: 4427 Comm: syz.0.16 Not tainted 6.1.147-syzkaller #0
[ 94.289733][ T4427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 94.299803][ T4427] Call Trace:
[ 94.303088][ T4427]
[ 94.306019][ T4427] dump_stack_lvl+0x168/0x22e
[ 94.310726][ T4427] ? show_regs_print_info+0x12/0x12
[ 94.315928][ T4427] ? load_image+0x3b0/0x3b0
[ 94.320451][ T4427] ubsan_epilogue+0xa/0x30
[ 94.324904][ T4427] __ubsan_handle_shift_out_of_bounds+0x37c/0x400
[ 94.331346][ T4427] pcl726_attach+0xab5/0xd40
[ 94.335965][ T4427] comedi_device_attach+0x515/0x650
[ 94.341212][ T4427] comedi_unlocked_ioctl+0x5ec/0xf20
[ 94.346516][ T4427] ? tomoyo_path_number_perm+0x4ae/0x600
[ 94.352159][ T4427] ? comedi_poll+0x8b0/0x8b0
[ 94.356783][ T4427] ? do_futex+0x2e2/0x320
[ 94.361144][ T4427] ? __se_sys_futex+0x14a/0x440
[ 94.366018][ T4427] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 94.372021][ T4427] ? lock_chain_count+0x20/0x20
[ 94.376890][ T4427] ? bpf_lsm_file_ioctl+0x5/0x10
[ 94.381848][ T4427] ? security_file_ioctl+0x7c/0xa0
[ 94.386973][ T4427] ? comedi_poll+0x8b0/0x8b0
[ 94.391579][ T4427] __se_sys_ioctl+0xfa/0x170
[ 94.396192][ T4427] do_syscall_64+0x4c/0xa0
[ 94.400626][ T4427] ? clear_bhb_loop+0x60/0xb0
[ 94.405317][ T4427] ? clear_bhb_loop+0x60/0xb0
[ 94.410006][ T4427] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 94.416032][ T4427] RIP: 0033:0x7fe653d8e9a9
[ 94.420474][ T4427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 94.440108][ T4427] RSP: 002b:00007fff6cbe5bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 94.448557][ T4427] RAX: ffffffffffffffda RBX: 00007fe653fb5fa0 RCX: 00007fe653d8e9a9
[ 94.456543][ T4427] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[ 94.464523][ T4427] RBP: 00007fe653e10d69 R08: 0000000000000000 R09: 0000000000000000
[ 94.472525][ T4427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.480527][ T4427] R13: 00007fe653fb5fa0 R14: 00007fe653fb5fa0 R15: 0000000000000003
[ 94.488526][ T4427]
[ 94.497025][ T4427] ================================================================================
[ 94.507832][ T4427] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 94.515077][ T4427] CPU: 1 PID: 4427 Comm: syz.0.16 Not tainted 6.1.147-syzkaller #0
[ 94.523001][ T4427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 94.533078][ T4427] Call Trace:
[ 94.536369][ T4427]
[ 94.539315][ T4427] dump_stack_lvl+0x168/0x22e
[ 94.544011][ T4427] ? memcpy+0x3c/0x60
[ 94.548104][ T4427] ? show_regs_print_info+0x12/0x12
[ 94.553320][ T4427] ? load_image+0x3b0/0x3b0
[ 94.557853][ T4427] panic+0x2c9/0x710
[ 94.561766][ T4427] ? bpf_jit_dump+0xd0/0xd0
[ 94.566304][ T4427] check_panic_on_warn+0x80/0xa0
[ 94.571263][ T4427] __ubsan_handle_shift_out_of_bounds+0x37c/0x400
[ 94.577716][ T4427] pcl726_attach+0xab5/0xd40
[ 94.582324][ T4427] comedi_device_attach+0x515/0x650
[ 94.587545][ T4427] comedi_unlocked_ioctl+0x5ec/0xf20
[ 94.592849][ T4427] ? tomoyo_path_number_perm+0x4ae/0x600
[ 94.598500][ T4427] ? comedi_poll+0x8b0/0x8b0
[ 94.603120][ T4427] ? do_futex+0x2e2/0x320
[ 94.607476][ T4427] ? __se_sys_futex+0x14a/0x440
[ 94.612346][ T4427] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 94.618349][ T4427] ? lock_chain_count+0x20/0x20
[ 94.623216][ T4427] ? bpf_lsm_file_ioctl+0x5/0x10
[ 94.628178][ T4427] ? security_file_ioctl+0x7c/0xa0
[ 94.633313][ T4427] ? comedi_poll+0x8b0/0x8b0
[ 94.637922][ T4427] __se_sys_ioctl+0xfa/0x170
[ 94.642548][ T4427] do_syscall_64+0x4c/0xa0
[ 94.647019][ T4427] ? clear_bhb_loop+0x60/0xb0
[ 94.651735][ T4427] ? clear_bhb_loop+0x60/0xb0
[ 94.656421][ T4427] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 94.662343][ T4427] RIP: 0033:0x7fe653d8e9a9
[ 94.666766][ T4427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 94.686384][ T4427] RSP: 002b:00007fff6cbe5bd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 94.694808][ T4427] RAX: ffffffffffffffda RBX: 00007fe653fb5fa0 RCX: 00007fe653d8e9a9
[ 94.702806][ T4427] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003
[ 94.710788][ T4427] RBP: 00007fe653e10d69 R08: 0000000000000000 R09: 0000000000000000
[ 94.718770][ T4427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.726759][ T4427] R13: 00007fe653fb5fa0 R14: 00007fe653fb5fa0 R15: 0000000000000003
[ 94.734757][ T4427]
[ 94.738135][ T4427] Kernel Offset: disabled
[ 94.742510][ T4427] Rebooting in 86400 seconds..