syzkaller login: [ 92.085626][ T50] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:18003' (ED25519) to the list of known hosts.
2025/07/04 15:47:48 ignoring optional flag "sandboxArg"="0"
2025/07/04 15:47:50 parsed 1 programs
[ 97.864407][ T5337] cgroup: Unknown subsys name 'net'
[ 97.939550][ T5337] cgroup: Unknown subsys name 'cpuset'
[ 97.946258][ T5337] cgroup: Unknown subsys name 'rlimit'
[ 99.810507][ T5337] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 104.326243][ T5346] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 105.698678][ T5361] chnl_net:caif_netlink_parms(): no params data found
[ 105.784035][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.788602][ T5361] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.792020][ T5361] bridge_slave_0: entered allmulticast mode
[ 105.796840][ T5361] bridge_slave_0: entered promiscuous mode
[ 105.803366][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.807591][ T5361] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.811083][ T5361] bridge_slave_1: entered allmulticast mode
[ 105.816223][ T5361] bridge_slave_1: entered promiscuous mode
[ 105.842050][ T5361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 105.851029][ T5361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 105.899476][ T5361] team0: Port device team_slave_0 added
[ 105.916197][ T5361] team0: Port device team_slave_1 added
[ 105.959047][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 105.962661][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 105.986728][ T5361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 106.008277][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 106.011184][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 106.036331][ T5361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 106.114206][ T5361] hsr_slave_0: entered promiscuous mode
[ 106.126447][ T5361] hsr_slave_1: entered promiscuous mode
[ 106.457814][ T5361] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 106.478297][ T5361] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 106.488302][ T5361] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 106.510525][ T5361] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 106.581820][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.585539][ T5361] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.589316][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.592701][ T5361] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.639133][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.654994][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.794975][ T5361] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.838710][ T5361] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.863077][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.867087][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.902296][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.905841][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.306929][ T5361] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.377016][ T5361] veth0_vlan: entered promiscuous mode
[ 107.396596][ T5361] veth1_vlan: entered promiscuous mode
[ 107.449016][ T5361] veth0_macvtap: entered promiscuous mode
[ 107.470256][ T5361] veth1_macvtap: entered promiscuous mode
[ 107.494586][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.518861][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.538180][ T5361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.542268][ T5361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.556012][ T5361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.560206][ T5361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.776089][ T5361] syz-executor (5361) used greatest stack depth: 20792 bytes left
[ 107.814689][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.869925][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.897510][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 109.532092][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.549511][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.580491][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.583886][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.792879][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 110.477114][ T13] bridge_slave_1: left allmulticast mode
[ 110.480687][ T13] bridge_slave_1: left promiscuous mode
[ 110.483956][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.560317][ T13] bridge_slave_0: left allmulticast mode
[ 110.563113][ T13] bridge_slave_0: left promiscuous mode
[ 110.580966][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 111.231536][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 111.238445][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 111.244237][ T13] bond0 (unregistering): Released all slaves
[ 111.422627][ T13] hsr_slave_0: left promiscuous mode
[ 111.432174][ T13] hsr_slave_1: left promiscuous mode
[ 111.436921][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 111.440994][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 111.446560][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 111.449701][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 111.464607][ T13] veth1_macvtap: left promiscuous mode
[ 111.472733][ T13] veth0_macvtap: left promiscuous mode
[ 111.476320][ T13] veth1_vlan: left promiscuous mode
[ 111.479040][ T13] veth0_vlan: left promiscuous mode
[ 111.829966][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 111.852564][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 113.929572][ T5445] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 113.934535][ T5445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 113.939201][ T5445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 113.943287][ T5445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 113.946876][ T5445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/07/04 15:48:10 executed programs: 0
[ 115.680825][ T4686] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 115.688715][ T4686] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 115.692838][ T4686] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 115.698784][ T4686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 115.706551][ T4686] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 116.118173][ T5472] chnl_net:caif_netlink_parms(): no params data found
[ 116.267296][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.270251][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.273763][ T5472] bridge_slave_0: entered allmulticast mode
[ 116.287121][ T5472] bridge_slave_0: entered promiscuous mode
[ 116.298421][ T5472] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.302397][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.315924][ T5472] bridge_slave_1: entered allmulticast mode
[ 116.320781][ T5472] bridge_slave_1: entered promiscuous mode
[ 116.384614][ T5472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 116.398515][ T5472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 116.466974][ T5472] team0: Port device team_slave_0 added
[ 116.472354][ T5472] team0: Port device team_slave_1 added
[ 116.528120][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.532106][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 116.566561][ T5472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 116.584945][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 116.596075][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 116.625414][ T5472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 116.713641][ T5472] hsr_slave_0: entered promiscuous mode
[ 116.721092][ T5472] hsr_slave_1: entered promiscuous mode
[ 117.471867][ T5472] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 117.493338][ T5472] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 117.512640][ T5472] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 117.529755][ T5472] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 117.700548][ T5472] 8021q: adding VLAN 0 to HW filter on device bond0
[ 117.740231][ T5472] 8021q: adding VLAN 0 to HW filter on device team0
[ 117.757527][ T4686] Bluetooth: hci0: command tx timeout
[ 117.765145][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.768683][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 117.818735][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.821784][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 117.902771][ T5472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 118.183373][ T5472] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 118.254168][ T5472] veth0_vlan: entered promiscuous mode
[ 118.277452][ T5472] veth1_vlan: entered promiscuous mode
[ 118.343309][ T5472] veth0_macvtap: entered promiscuous mode
[ 118.361532][ T5472] veth1_macvtap: entered promiscuous mode
[ 118.397854][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 118.422413][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 118.456967][ T5472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.460667][ T5472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.464656][ T5472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.481842][ T5472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.619835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.623040][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.689373][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.693758][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.820589][ T5530] FAULT_INJECTION: forcing a failure.
[ 118.820589][ T5530] name failslab, interval 1, probability 0, space 0, times 1
[ 118.836400][ T5530] CPU: 0 UID: 0 PID: 5530 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 118.836422][ T5530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 118.836429][ T5530] Call Trace:
[ 118.836434][ T5530]
[ 118.836439][ T5530] dump_stack_lvl+0x189/0x250
[ 118.838249][ T5530] ? __pfx____ratelimit+0x10/0x10
[ 118.838297][ T5530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 118.838310][ T5530] ? __pfx__printk+0x10/0x10
[ 118.838329][ T5530] ? __pfx___might_resched+0x10/0x10
[ 118.838340][ T5530] ? fs_reclaim_acquire+0x7d/0x100
[ 118.838391][ T5530] should_fail_ex+0x414/0x560
[ 118.838411][ T5530] should_failslab+0xa8/0x100
[ 118.838427][ T5530] __kmalloc_noprof+0xcb/0x4f0
[ 118.838438][ T5530] ? rcu_is_watching+0x15/0xb0
[ 118.838450][ T5530] ? comedi_alloc_subdevices+0x4a/0x240
[ 118.838501][ T5530] comedi_alloc_subdevices+0x4a/0x240
[ 118.838520][ T5530] waveform_common_attach+0x89/0x800
[ 118.838541][ T5530] comedi_device_attach+0x51d/0x670
[ 118.838558][ T5530] comedi_unlocked_ioctl+0x686/0xf40
[ 118.838579][ T5530] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 118.838607][ T5530] ? vfs_write+0x8d8/0xa90
[ 118.838642][ T5530] ? ksys_write+0x1e1/0x250
[ 118.838658][ T5530] ? bpf_lsm_file_ioctl+0x9/0x20
[ 118.838669][ T5530] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 118.838684][ T5530] __se_sys_ioctl+0xf9/0x170
[ 118.838698][ T5530] do_syscall_64+0xfa/0x3b0
[ 118.838708][ T5530] ? lockdep_hardirqs_on+0x9c/0x150
[ 118.838723][ T5530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.838734][ T5530] ? clear_bhb_loop+0x60/0xb0
[ 118.838747][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.838757][ T5530] RIP: 0033:0x7f4717f8e929
[ 118.838776][ T5530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 118.838785][ T5530] RSP: 002b:00007ffcc11026d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 118.838799][ T5530] RAX: ffffffffffffffda RBX: 00007f47181b5fa0 RCX: 00007f4717f8e929
[ 118.838806][ T5530] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 118.838813][ T5530] RBP: 00007ffcc1102730 R08: 0000000000000000 R09: 0000000000000000
[ 118.838820][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 118.838826][ T5530] R13: 00007f47181b5fa0 R14: 00007f47181b5fa0 R15: 0000000000000003
[ 118.838844][ T5530]
[ 118.838875][ T5530] INFO: trying to register non-static key.
[ 118.953723][ T5530] The code is fine but needs lockdep annotation, or maybe
[ 118.958455][ T5530] you didn't initialize this object before use?
[ 118.961854][ T5530] turning off the locking correctness validator.
[ 118.965440][ T5530] CPU: 0 UID: 0 PID: 5530 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 118.965457][ T5530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 118.965464][ T5530] Call Trace:
[ 118.965472][ T5530]
[ 118.965477][ T5530] dump_stack_lvl+0x189/0x250
[ 118.965494][ T5530] ? rcu_is_watching+0x15/0xb0
[ 118.965505][ T5530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 118.965518][ T5530] ? __pfx__printk+0x10/0x10
[ 118.965527][ T5530] ? __is_module_percpu_address+0x39b/0x3f0
[ 118.965537][ T5530] ? is_module_address+0x17/0xf0
[ 118.965546][ T5530] assign_lock_key+0x133/0x150
[ 118.965555][ T5530] register_lock_class+0x105/0x320
[ 118.965562][ T5530] __lock_acquire+0x99/0xd20
[ 118.965569][ T5530] ? __timer_delete_sync+0x106/0x2d0
[ 118.965579][ T5530] lock_acquire+0x120/0x360
[ 118.965586][ T5530] ? __timer_delete_sync+0x106/0x2d0
[ 118.965596][ T5530] ? __timer_delete_sync+0x106/0x2d0
[ 118.965604][ T5530] __timer_delete_sync+0x11f/0x2d0
[ 118.965614][ T5530] ? __timer_delete_sync+0x106/0x2d0
[ 118.965627][ T5530] ? __pfx___timer_delete_sync+0x10/0x10
[ 118.965638][ T5530] ? down_write+0x162/0x1f0
[ 118.965649][ T5530] ? __pfx_down_write+0x10/0x10
[ 118.965661][ T5530] waveform_detach+0x45/0x60
[ 118.965675][ T5530] comedi_device_detach+0x137/0x720
[ 118.965684][ T5530] ? waveform_common_attach+0x9d/0x800
[ 118.965697][ T5530] comedi_device_attach+0x568/0x670
[ 118.965707][ T5530] comedi_unlocked_ioctl+0x686/0xf40
[ 118.965723][ T5530] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 118.965738][ T5530] ? vfs_write+0x8d8/0xa90
[ 118.965756][ T5530] ? ksys_write+0x1e1/0x250
[ 118.965768][ T5530] ? bpf_lsm_file_ioctl+0x9/0x20
[ 118.965780][ T5530] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 118.965790][ T5530] __se_sys_ioctl+0xf9/0x170
[ 118.965803][ T5530] do_syscall_64+0xfa/0x3b0
[ 118.965813][ T5530] ? lockdep_hardirqs_on+0x9c/0x150
[ 118.965827][ T5530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.965836][ T5530] ? clear_bhb_loop+0x60/0xb0
[ 118.965848][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.965858][ T5530] RIP: 0033:0x7f4717f8e929
[ 118.965870][ T5530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 118.965878][ T5530] RSP: 002b:00007ffcc11026d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 118.965890][ T5530] RAX: ffffffffffffffda RBX: 00007f47181b5fa0 RCX: 00007f4717f8e929
[ 118.965897][ T5530] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 118.965903][ T5530] RBP: 00007ffcc1102730 R08: 0000000000000000 R09: 0000000000000000
[ 118.965909][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 118.965915][ T5530] R13: 00007f47181b5fa0 R14: 00007f47181b5fa0 R15: 0000000000000003
[ 118.965924][ T5530]
[ 119.239333][ T5530] ------------[ cut here ]------------
[ 119.241752][ T5530] ODEBUG: assert_init not available (active state 0) object: ffff888059792a00 object type: timer_list hint: 0x0
[ 119.249967][ T5530] WARNING: CPU: 0 PID: 5530 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[ 119.255935][ T5530] Modules linked in:
[ 119.257585][ T5530] CPU: 0 UID: 0 PID: 5530 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 119.262461][ T5530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 119.267072][ T5530] RIP: 0010:debug_print_object+0x16b/0x1e0
[ 119.269474][ T5530] Code: 4c 89 ff e8 27 c2 5b fd 4d 8b 0f 48 c7 c7 60 99 e2 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ca e7 bb fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 ef d9 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[ 119.279330][ T5530] RSP: 0018:ffffc90002c1f858 EFLAGS: 00010282
[ 119.282915][ T5530] RAX: 6d6e2a4a6be26a00 RBX: dffffc0000000000 RCX: ffff888031b00000
[ 119.286349][ T5530] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 119.289685][ T5530] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 119.293059][ T5530] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 0000000000000000
[ 119.296856][ T5530] R13: ffffffff8be29b20 R14: ffff888059792a00 R15: ffffffff8b8ce0a0
[ 119.301144][ T5530] FS: 00005555825ba500(0000) GS:ffff88808d21c000(0000) knlGS:0000000000000000
[ 119.304859][ T5530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 119.307815][ T5530] CR2: 00007f77aa361000 CR3: 00000000597a2000 CR4: 0000000000352ef0
[ 119.311623][ T5530] Call Trace:
[ 119.313175][ T5530]
[ 119.314527][ T5530] debug_object_assert_init+0x2db/0x380
[ 119.317787][ T5530] __try_to_del_timer_sync+0x29/0x3a0
[ 119.320340][ T5530] __timer_delete_sync+0x1fe/0x2d0
[ 119.322583][ T5530] ? __pfx___timer_delete_sync+0x10/0x10
[ 119.325178][ T5530] ? down_write+0x162/0x1f0
[ 119.327622][ T5530] ? __pfx_down_write+0x10/0x10
[ 119.330794][ T5530] waveform_detach+0x45/0x60
[ 119.333156][ T5530] comedi_device_detach+0x137/0x720
[ 119.335569][ T5530] ? waveform_common_attach+0x9d/0x800
[ 119.338351][ T5530] comedi_device_attach+0x568/0x670
[ 119.341084][ T5530] comedi_unlocked_ioctl+0x686/0xf40
[ 119.343463][ T5530] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 119.347377][ T5530] ? vfs_write+0x8d8/0xa90
[ 119.350840][ T5530] ? ksys_write+0x1e1/0x250
[ 119.352910][ T5530] ? bpf_lsm_file_ioctl+0x9/0x20
[ 119.355015][ T5530] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 119.358109][ T5530] __se_sys_ioctl+0xf9/0x170
[ 119.360276][ T5530] do_syscall_64+0xfa/0x3b0
[ 119.362223][ T5530] ? lockdep_hardirqs_on+0x9c/0x150
[ 119.364516][ T5530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.367770][ T5530] ? clear_bhb_loop+0x60/0xb0
[ 119.370153][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.372946][ T5530] RIP: 0033:0x7f4717f8e929
[ 119.375123][ T5530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 119.385754][ T5530] RSP: 002b:00007ffcc11026d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 119.389592][ T5530] RAX: ffffffffffffffda RBX: 00007f47181b5fa0 RCX: 00007f4717f8e929
[ 119.393407][ T5530] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 119.398581][ T5530] RBP: 00007ffcc1102730 R08: 0000000000000000 R09: 0000000000000000
[ 119.403221][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 119.407006][ T5530] R13: 00007f47181b5fa0 R14: 00007f47181b5fa0 R15: 0000000000000003
[ 119.411092][ T5530]
[ 119.413108][ T5530] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 119.417962][ T5530] CPU: 0 UID: 0 PID: 5530 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 119.423286][ T5530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 119.428296][ T5530] Call Trace:
[ 119.430075][ T5530]
[ 119.431629][ T5530] dump_stack_lvl+0x99/0x250
[ 119.433746][ T5530] ? __asan_memcpy+0x40/0x70
[ 119.435830][ T5530] ? __pfx_dump_stack_lvl+0x10/0x10
[ 119.438162][ T5530] ? __pfx__printk+0x10/0x10
[ 119.440085][ T5530] panic+0x2db/0x790
[ 119.441978][ T5530] ? __pfx_panic+0x10/0x10
[ 119.444126][ T5530] __warn+0x31b/0x4b0
[ 119.446353][ T5530] ? debug_print_object+0x16b/0x1e0
[ 119.449032][ T5530] ? debug_print_object+0x16b/0x1e0
[ 119.451541][ T5530] report_bug+0x2be/0x4f0
[ 119.453433][ T5530] ? debug_print_object+0x16b/0x1e0
[ 119.455794][ T5530] ? debug_print_object+0x16b/0x1e0
[ 119.458287][ T5530] ? debug_print_object+0x16d/0x1e0
[ 119.460874][ T5530] handle_bug+0x84/0x160
[ 119.462808][ T5530] exc_invalid_op+0x1a/0x50
[ 119.465575][ T5530] asm_exc_invalid_op+0x1a/0x20
[ 119.468678][ T5530] RIP: 0010:debug_print_object+0x16b/0x1e0
[ 119.472150][ T5530] Code: 4c 89 ff e8 27 c2 5b fd 4d 8b 0f 48 c7 c7 60 99 e2 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ca e7 bb fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 ef d9 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[ 119.480697][ T5530] RSP: 0018:ffffc90002c1f858 EFLAGS: 00010282
[ 119.483414][ T5530] RAX: 6d6e2a4a6be26a00 RBX: dffffc0000000000 RCX: ffff888031b00000
[ 119.486816][ T5530] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 119.490438][ T5530] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 119.494076][ T5530] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 0000000000000000
[ 119.499269][ T5530] R13: ffffffff8be29b20 R14: ffff888059792a00 R15: ffffffff8b8ce0a0
[ 119.503571][ T5530] debug_object_assert_init+0x2db/0x380
[ 119.506406][ T5530] __try_to_del_timer_sync+0x29/0x3a0
[ 119.509622][ T5530] __timer_delete_sync+0x1fe/0x2d0
[ 119.511862][ T5530] ? __pfx___timer_delete_sync+0x10/0x10
[ 119.515040][ T5530] ? down_write+0x162/0x1f0
[ 119.517564][ T5530] ? __pfx_down_write+0x10/0x10
[ 119.520323][ T5530] waveform_detach+0x45/0x60
[ 119.522469][ T5530] comedi_device_detach+0x137/0x720
[ 119.524881][ T5530] ? waveform_common_attach+0x9d/0x800
[ 119.527336][ T5530] comedi_device_attach+0x568/0x670
[ 119.529573][ T5530] comedi_unlocked_ioctl+0x686/0xf40
[ 119.531965][ T5530] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 119.534594][ T5530] ? vfs_write+0x8d8/0xa90
[ 119.536643][ T5530] ? ksys_write+0x1e1/0x250
[ 119.538712][ T5530] ? bpf_lsm_file_ioctl+0x9/0x20
[ 119.541322][ T5530] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 119.544236][ T5530] __se_sys_ioctl+0xf9/0x170
[ 119.546730][ T5530] do_syscall_64+0xfa/0x3b0
[ 119.548747][ T5530] ? lockdep_hardirqs_on+0x9c/0x150
[ 119.551645][ T5530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.554999][ T5530] ? clear_bhb_loop+0x60/0xb0
[ 119.557675][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 119.561543][ T5530] RIP: 0033:0x7f4717f8e929
[ 119.564348][ T5530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 119.572993][ T5530] RSP: 002b:00007ffcc11026d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 119.577139][ T5530] RAX: ffffffffffffffda RBX: 00007f47181b5fa0 RCX: 00007f4717f8e929
[ 119.581095][ T5530] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 119.584543][ T5530] RBP: 00007ffcc1102730 R08: 0000000000000000 R09: 0000000000000000
[ 119.588301][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 119.592262][ T5530] R13: 00007f47181b5fa0 R14: 00007f47181b5fa0 R15: 0000000000000003
[ 119.596196][ T5530]
[ 119.598086][ T5530] Kernel Offset: disabled
[ 119.600087][ T5530] Rebooting in 86400 seconds..
VM DIAGNOSIS:
15:48:14 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002c1f190
R8 =ffff888032268237 R9 =1ffff1100644d046 R10=dffffc0000000000 R11=ffffffff8547b6a0
R12=dffffc0000000000 R13=ffffffff99af88f1 R14=ffffffff99dfd760 R15=0000000000000000
RIP=ffffffff8547b71c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555825ba500 ffffffff 00c00000
GS =0000 ffff88808d21c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00005555825ba808 CR3=00000000597a2000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc11029b0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4718011b12
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4718011b1f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4718011b19
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4718011b2d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4718011bb3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4718011c91
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000