Warning: Permanently added '[localhost]:40117' (ED25519) to the list of known hosts.
2025/07/04 17:11:26 ignoring optional flag "sandboxArg"="0"
2025/07/04 17:11:27 parsed 1 programs
syzkaller login: [ 90.921298][ T5328] cgroup: Unknown subsys name 'net'
[ 91.011483][ T5328] cgroup: Unknown subsys name 'cpuset'
[ 91.018230][ T5328] cgroup: Unknown subsys name 'rlimit'
[ 91.827960][ T54] cfg80211: failed to load regulatory.db
[ 92.671200][ T5328] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 97.673831][ T5344] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 100.808512][ T5374] chnl_net:caif_netlink_parms(): no params data found
[ 100.940803][ T5374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.944699][ T5374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.956162][ T5374] bridge_slave_0: entered allmulticast mode
[ 100.960257][ T5374] bridge_slave_0: entered promiscuous mode
[ 100.977366][ T5374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.980536][ T5374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.983610][ T5374] bridge_slave_1: entered allmulticast mode
[ 100.997228][ T5374] bridge_slave_1: entered promiscuous mode
[ 101.048251][ T5374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.054681][ T5374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.116466][ T5374] team0: Port device team_slave_0 added
[ 101.127082][ T5374] team0: Port device team_slave_1 added
[ 101.173050][ T5374] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.185784][ T5374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.206204][ T5374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.216590][ T5374] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.219560][ T5374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.245944][ T5374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.327382][ T5374] hsr_slave_0: entered promiscuous mode
[ 101.337107][ T5374] hsr_slave_1: entered promiscuous mode
[ 101.648415][ T5374] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.676993][ T5374] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.685184][ T5374] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.707422][ T5374] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.858803][ T5374] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.880662][ T5374] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.891572][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.894925][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.919112][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.922683][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.132367][ T5374] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.169726][ T5374] veth0_vlan: entered promiscuous mode
[ 102.181538][ T5374] veth1_vlan: entered promiscuous mode
[ 102.210879][ T5374] veth0_macvtap: entered promiscuous mode
[ 102.219492][ T5374] veth1_macvtap: entered promiscuous mode
[ 102.234559][ T5374] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.246841][ T5374] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.260874][ T5374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.265019][ T5374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.270612][ T5374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.274107][ T5374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.540061][ T1035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.618310][ T1035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.709569][ T1035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.812895][ T1035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.801593][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.808554][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.812288][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.816824][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.820761][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 105.205107][ T1035] bridge_slave_1: left allmulticast mode
[ 105.212212][ T1035] bridge_slave_1: left promiscuous mode
[ 105.215760][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.240637][ T1035] bridge_slave_0: left allmulticast mode
[ 105.243064][ T1035] bridge_slave_0: left promiscuous mode
[ 105.257218][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.720553][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 105.728877][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 105.734083][ T1035] bond0 (unregistering): Released all slaves
[ 105.836462][ T1035] hsr_slave_0: left promiscuous mode
[ 105.843733][ T1035] hsr_slave_1: left promiscuous mode
[ 105.867911][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 105.871257][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 105.878181][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 105.881717][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 105.905033][ T1035] veth1_macvtap: left promiscuous mode
[ 105.908472][ T1035] veth0_macvtap: left promiscuous mode
[ 105.910725][ T1035] veth1_vlan: left promiscuous mode
[ 105.912997][ T1035] veth0_vlan: left promiscuous mode
[ 106.211578][ T1035] team0 (unregistering): Port device team_slave_1 removed
[ 106.231663][ T1035] team0 (unregistering): Port device team_slave_0 removed
[ 106.742365][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.749550][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.827498][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.835270][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/07/04 17:11:47 executed programs: 0
[ 108.620573][ T4685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 108.624785][ T4685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 108.632168][ T4685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 108.638938][ T4685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 108.642829][ T4685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 108.972216][ T5462] chnl_net:caif_netlink_parms(): no params data found
[ 109.102249][ T5462] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.105125][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state
[ 109.114659][ T5462] bridge_slave_0: entered allmulticast mode
[ 109.127184][ T5462] bridge_slave_0: entered promiscuous mode
[ 109.131413][ T5462] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.134224][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state
[ 109.147951][ T5462] bridge_slave_1: entered allmulticast mode
[ 109.156352][ T5462] bridge_slave_1: entered promiscuous mode
[ 109.209349][ T5462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 109.226198][ T5462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 109.278628][ T5462] team0: Port device team_slave_0 added
[ 109.283669][ T5462] team0: Port device team_slave_1 added
[ 109.332816][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 109.350044][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 109.377007][ T5462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 109.382901][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 109.392420][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 109.426790][ T5462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 109.497199][ T5462] hsr_slave_0: entered promiscuous mode
[ 109.508487][ T5462] hsr_slave_1: entered promiscuous mode
[ 110.220359][ T5462] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 110.238229][ T5462] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 110.258068][ T5462] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 110.276967][ T5462] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 110.427677][ T5462] 8021q: adding VLAN 0 to HW filter on device bond0
[ 110.450661][ T5462] 8021q: adding VLAN 0 to HW filter on device team0
[ 110.469174][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.472341][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 110.489844][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.493113][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 110.710422][ T4685] Bluetooth: hci0: command tx timeout
[ 110.873793][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 110.957813][ T5462] veth0_vlan: entered promiscuous mode
[ 110.980961][ T5462] veth1_vlan: entered promiscuous mode
[ 111.049030][ T5462] veth0_macvtap: entered promiscuous mode
[ 111.069839][ T5462] veth1_macvtap: entered promiscuous mode
[ 111.097055][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 111.124697][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 111.140049][ T5462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.144701][ T5462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.167726][ T5462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.171580][ T5462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.320168][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.323403][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.417123][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.420118][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.560530][ T5518] FAULT_INJECTION: forcing a failure.
[ 111.560530][ T5518] name failslab, interval 1, probability 0, space 0, times 1
[ 111.624588][ T5518] CPU: 0 UID: 0 PID: 5518 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 111.624613][ T5518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 111.624621][ T5518] Call Trace:
[ 111.624628][ T5518]
[ 111.624634][ T5518] dump_stack_lvl+0x189/0x250
[ 111.624775][ T5518] ? __pfx____ratelimit+0x10/0x10
[ 111.624828][ T5518] ? __pfx_dump_stack_lvl+0x10/0x10
[ 111.624842][ T5518] ? __pfx__printk+0x10/0x10
[ 111.624862][ T5518] ? __pfx___might_resched+0x10/0x10
[ 111.624876][ T5518] ? fs_reclaim_acquire+0x7d/0x100
[ 111.624940][ T5518] should_fail_ex+0x414/0x560
[ 111.624963][ T5518] should_failslab+0xa8/0x100
[ 111.624981][ T5518] __kmalloc_noprof+0xcb/0x4f0
[ 111.624995][ T5518] ? rcu_is_watching+0x15/0xb0
[ 111.625007][ T5518] ? comedi_alloc_subdevices+0x4a/0x240
[ 111.626209][ T5518] comedi_alloc_subdevices+0x4a/0x240
[ 111.626231][ T5518] waveform_common_attach+0x89/0x800
[ 111.626252][ T5518] comedi_device_attach+0x51d/0x670
[ 111.626268][ T5518] comedi_unlocked_ioctl+0x686/0xf40
[ 111.626291][ T5518] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 111.626319][ T5518] ? vfs_write+0x8d8/0xa90
[ 111.626356][ T5518] ? ksys_write+0x1e1/0x250
[ 111.626374][ T5518] ? bpf_lsm_file_ioctl+0x9/0x20
[ 111.626388][ T5518] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 111.626414][ T5518] __se_sys_ioctl+0xf9/0x170
[ 111.626430][ T5518] do_syscall_64+0xfa/0x3b0
[ 111.626454][ T5518] ? lockdep_hardirqs_on+0x9c/0x150
[ 111.626472][ T5518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.626483][ T5518] ? clear_bhb_loop+0x60/0xb0
[ 111.626498][ T5518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.626509][ T5518] RIP: 0033:0x7fa16e38e929
[ 111.626522][ T5518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 111.626531][ T5518] RSP: 002b:00007ffc832acc18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 111.626545][ T5518] RAX: ffffffffffffffda RBX: 00007fa16e5b5fa0 RCX: 00007fa16e38e929
[ 111.626551][ T5518] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 111.626558][ T5518] RBP: 00007ffc832acc70 R08: 0000000000000000 R09: 0000000000000000
[ 111.626564][ T5518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 111.626570][ T5518] R13: 00007fa16e5b5fa0 R14: 00007fa16e5b5fa0 R15: 0000000000000003
[ 111.626588][ T5518]
[ 111.897852][ T5518] INFO: trying to register non-static key.
[ 111.900107][ T5518] The code is fine but needs lockdep annotation, or maybe
[ 111.904306][ T5518] you didn't initialize this object before use?
[ 111.907458][ T5518] turning off the locking correctness validator.
[ 111.910261][ T5518] CPU: 0 UID: 0 PID: 5518 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 111.910272][ T5518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 111.910277][ T5518] Call Trace:
[ 111.910283][ T5518]
[ 111.910288][ T5518] dump_stack_lvl+0x189/0x250
[ 111.910300][ T5518] ? rcu_is_watching+0x15/0xb0
[ 111.910309][ T5518] ? __pfx_dump_stack_lvl+0x10/0x10
[ 111.910316][ T5518] ? __pfx__printk+0x10/0x10
[ 111.910328][ T5518] ? __is_module_percpu_address+0x39b/0x3f0
[ 111.910339][ T5518] ? is_module_address+0x17/0xf0
[ 111.910353][ T5518] assign_lock_key+0x133/0x150
[ 111.910365][ T5518] register_lock_class+0x105/0x320
[ 111.910376][ T5518] __lock_acquire+0x99/0xd20
[ 111.910386][ T5518] ? __timer_delete_sync+0x106/0x2d0
[ 111.910405][ T5518] lock_acquire+0x120/0x360
[ 111.910415][ T5518] ? __timer_delete_sync+0x106/0x2d0
[ 111.910429][ T5518] ? __timer_delete_sync+0x106/0x2d0
[ 111.910442][ T5518] __timer_delete_sync+0x11f/0x2d0
[ 111.910452][ T5518] ? __timer_delete_sync+0x106/0x2d0
[ 111.910461][ T5518] ? __pfx___timer_delete_sync+0x10/0x10
[ 111.910470][ T5518] ? down_write+0x162/0x1f0
[ 111.910480][ T5518] ? __pfx_down_write+0x10/0x10
[ 111.910488][ T5518] waveform_detach+0x45/0x60
[ 111.910498][ T5518] comedi_device_detach+0x137/0x720
[ 111.910504][ T5518] ? waveform_common_attach+0x9d/0x800
[ 111.910514][ T5518] comedi_device_attach+0x568/0x670
[ 111.910528][ T5518] comedi_unlocked_ioctl+0x686/0xf40
[ 111.910546][ T5518] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 111.910563][ T5518] ? vfs_write+0x8d8/0xa90
[ 111.910581][ T5518] ? ksys_write+0x1e1/0x250
[ 111.910592][ T5518] ? bpf_lsm_file_ioctl+0x9/0x20
[ 111.910607][ T5518] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 111.910619][ T5518] __se_sys_ioctl+0xf9/0x170
[ 111.910630][ T5518] do_syscall_64+0xfa/0x3b0
[ 111.910639][ T5518] ? lockdep_hardirqs_on+0x9c/0x150
[ 111.910653][ T5518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.910661][ T5518] ? clear_bhb_loop+0x60/0xb0
[ 111.910670][ T5518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.910680][ T5518] RIP: 0033:0x7fa16e38e929
[ 111.910690][ T5518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 111.910698][ T5518] RSP: 002b:00007ffc832acc18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 111.910709][ T5518] RAX: ffffffffffffffda RBX: 00007fa16e5b5fa0 RCX: 00007fa16e38e929
[ 111.910716][ T5518] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 111.910722][ T5518] RBP: 00007ffc832acc70 R08: 0000000000000000 R09: 0000000000000000
[ 111.910728][ T5518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 111.910734][ T5518] R13: 00007fa16e5b5fa0 R14: 00007fa16e5b5fa0 R15: 0000000000000003
[ 111.910743][ T5518]
[ 112.096487][ T5518] ------------[ cut here ]------------
[ 112.098750][ T5518] ODEBUG: assert_init not available (active state 0) object: ffff888059fb4800 object type: timer_list hint: 0x0
[ 112.103500][ T5518] WARNING: CPU: 0 PID: 5518 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[ 112.107262][ T5518] Modules linked in:
[ 112.108668][ T5518] CPU: 0 UID: 0 PID: 5518 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 112.113723][ T5518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 112.121361][ T5518] RIP: 0010:debug_print_object+0x16b/0x1e0
[ 112.125141][ T5518] Code: 4c 89 ff e8 27 c2 5b fd 4d 8b 0f 48 c7 c7 60 99 e2 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ca e7 bb fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 ef d9 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[ 112.135148][ T5518] RSP: 0018:ffffc90002d9f858 EFLAGS: 00010282
[ 112.138371][ T5518] RAX: 475940cc4ed76c00 RBX: dffffc0000000000 RCX: ffff8880003f4880
[ 112.141857][ T5518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 112.145022][ T5518] RBP: 0000000000000000 R08: ffff88801fc24293 R09: 1ffff11003f84852
[ 112.148506][ T5518] R10: dffffc0000000000 R11: ffffed1003f84853 R12: 0000000000000000
[ 112.151812][ T5518] R13: ffffffff8be29b20 R14: ffff888059fb4800 R15: ffffffff8b8ce0a0
[ 112.155319][ T5518] FS: 0000555582b99500(0000) GS:ffff88808d21c000(0000) knlGS:0000000000000000
[ 112.158679][ T5518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 112.161583][ T5518] CR2: 00007f1afde3743c CR3: 0000000059f57000 CR4: 0000000000352ef0
[ 112.164758][ T5518] Call Trace:
[ 112.166114][ T5518]
[ 112.167380][ T5518] debug_object_assert_init+0x2db/0x380
[ 112.169928][ T5518] __try_to_del_timer_sync+0x29/0x3a0
[ 112.172587][ T5518] __timer_delete_sync+0x1fe/0x2d0
[ 112.174702][ T5518] ? __pfx___timer_delete_sync+0x10/0x10
[ 112.176969][ T5518] ? down_write+0x162/0x1f0
[ 112.178768][ T5518] ? __pfx_down_write+0x10/0x10
[ 112.180895][ T5518] waveform_detach+0x45/0x60
[ 112.182925][ T5518] comedi_device_detach+0x137/0x720
[ 112.185245][ T5518] ? waveform_common_attach+0x9d/0x800
[ 112.187939][ T5518] comedi_device_attach+0x568/0x670
[ 112.190419][ T5518] comedi_unlocked_ioctl+0x686/0xf40
[ 112.192820][ T5518] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 112.195370][ T5518] ? vfs_write+0x8d8/0xa90
[ 112.197348][ T5518] ? ksys_write+0x1e1/0x250
[ 112.199258][ T5518] ? bpf_lsm_file_ioctl+0x9/0x20
[ 112.201133][ T5518] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 112.203496][ T5518] __se_sys_ioctl+0xf9/0x170
[ 112.205336][ T5518] do_syscall_64+0xfa/0x3b0
[ 112.207368][ T5518] ? lockdep_hardirqs_on+0x9c/0x150
[ 112.209470][ T5518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.212004][ T5518] ? clear_bhb_loop+0x60/0xb0
[ 112.214271][ T5518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.216946][ T5518] RIP: 0033:0x7fa16e38e929
[ 112.218622][ T5518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 112.226649][ T5518] RSP: 002b:00007ffc832acc18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 112.230450][ T5518] RAX: ffffffffffffffda RBX: 00007fa16e5b5fa0 RCX: 00007fa16e38e929
[ 112.234063][ T5518] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 112.237507][ T5518] RBP: 00007ffc832acc70 R08: 0000000000000000 R09: 0000000000000000
[ 112.240586][ T5518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 112.243513][ T5518] R13: 00007fa16e5b5fa0 R14: 00007fa16e5b5fa0 R15: 0000000000000003
[ 112.247216][ T5518]
[ 112.248842][ T5518] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 112.251823][ T5518] CPU: 0 UID: 0 PID: 5518 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 112.256226][ T5518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 112.260603][ T5518] Call Trace:
[ 112.262027][ T5518]
[ 112.263495][ T5518] dump_stack_lvl+0x99/0x250
[ 112.265532][ T5518] ? __asan_memcpy+0x40/0x70
[ 112.267472][ T5518] ? __pfx_dump_stack_lvl+0x10/0x10
[ 112.269522][ T5518] ? __pfx__printk+0x10/0x10
[ 112.271462][ T5518] panic+0x2db/0x790
[ 112.273064][ T5518] ? __pfx_panic+0x10/0x10
[ 112.274712][ T5518] __warn+0x31b/0x4b0
[ 112.276098][ T5518] ? debug_print_object+0x16b/0x1e0
[ 112.277958][ T5518] ? debug_print_object+0x16b/0x1e0
[ 112.280041][ T5518] report_bug+0x2be/0x4f0
[ 112.281843][ T5518] ? debug_print_object+0x16b/0x1e0
[ 112.284154][ T5518] ? debug_print_object+0x16b/0x1e0
[ 112.286745][ T5518] ? debug_print_object+0x16d/0x1e0
[ 112.289209][ T5518] handle_bug+0x84/0x160
[ 112.290927][ T5518] exc_invalid_op+0x1a/0x50
[ 112.292854][ T5518] asm_exc_invalid_op+0x1a/0x20
[ 112.294950][ T5518] RIP: 0010:debug_print_object+0x16b/0x1e0
[ 112.297432][ T5518] Code: 4c 89 ff e8 27 c2 5b fd 4d 8b 0f 48 c7 c7 60 99 e2 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ca e7 bb fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 ef d9 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[ 112.306380][ T5518] RSP: 0018:ffffc90002d9f858 EFLAGS: 00010282
[ 112.309241][ T5518] RAX: 475940cc4ed76c00 RBX: dffffc0000000000 RCX: ffff8880003f4880
[ 112.312421][ T5518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 112.315465][ T5518] RBP: 0000000000000000 R08: ffff88801fc24293 R09: 1ffff11003f84852
[ 112.318619][ T5518] R10: dffffc0000000000 R11: ffffed1003f84853 R12: 0000000000000000
[ 112.322132][ T5518] R13: ffffffff8be29b20 R14: ffff888059fb4800 R15: ffffffff8b8ce0a0
[ 112.325579][ T5518] debug_object_assert_init+0x2db/0x380
[ 112.327991][ T5518] __try_to_del_timer_sync+0x29/0x3a0
[ 112.330634][ T5518] __timer_delete_sync+0x1fe/0x2d0
[ 112.333611][ T5518] ? __pfx___timer_delete_sync+0x10/0x10
[ 112.336859][ T5518] ? down_write+0x162/0x1f0
[ 112.339174][ T5518] ? __pfx_down_write+0x10/0x10
[ 112.341212][ T5518] waveform_detach+0x45/0x60
[ 112.343307][ T5518] comedi_device_detach+0x137/0x720
[ 112.345706][ T5518] ? waveform_common_attach+0x9d/0x800
[ 112.348050][ T5518] comedi_device_attach+0x568/0x670
[ 112.350257][ T5518] comedi_unlocked_ioctl+0x686/0xf40
[ 112.352413][ T5518] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 112.354970][ T5518] ? vfs_write+0x8d8/0xa90
[ 112.356938][ T5518] ? ksys_write+0x1e1/0x250
[ 112.358877][ T5518] ? bpf_lsm_file_ioctl+0x9/0x20
[ 112.361093][ T5518] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 112.364154][ T5518] __se_sys_ioctl+0xf9/0x170
[ 112.366689][ T5518] do_syscall_64+0xfa/0x3b0
[ 112.368908][ T5518] ? lockdep_hardirqs_on+0x9c/0x150
[ 112.371327][ T5518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.373668][ T5518] ? clear_bhb_loop+0x60/0xb0
[ 112.375368][ T5518] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.377433][ T5518] RIP: 0033:0x7fa16e38e929
[ 112.378971][ T5518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 112.386813][ T5518] RSP: 002b:00007ffc832acc18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 112.390497][ T5518] RAX: ffffffffffffffda RBX: 00007fa16e5b5fa0 RCX: 00007fa16e38e929
[ 112.393872][ T5518] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 112.397520][ T5518] RBP: 00007ffc832acc70 R08: 0000000000000000 R09: 0000000000000000
[ 112.401041][ T5518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 112.404535][ T5518] R13: 00007fa16e5b5fa0 R14: 00007fa16e5b5fa0 R15: 0000000000000003
[ 112.407878][ T5518]
[ 112.409656][ T5518] Kernel Offset: disabled
[ 112.411849][ T5518] Rebooting in 86400 seconds..
VM DIAGNOSIS:
17:11:51 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002d9f190
R8 =ffff8880339d0237 R9 =1ffff1100673a046 R10=dffffc0000000000 R11=ffffffff8547b6a0
R12=dffffc0000000000 R13=ffffffff99af88f7 R14=ffffffff99dfd760 R15=0000000000000000
RIP=ffffffff8547b71c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555582b99500 ffffffff 00c00000
GS =0000 ffff88808d21c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9fcaffd210 CR3=0000000059f57000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000010100 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc832acef0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa16e411b12
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa16e411b1f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa16e411b19
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa16e411b2d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa16e411bb3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa16e411c91
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 0000000000000001 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000