Warning: Permanently added '[localhost]:63261' (ED25519) to the list of known hosts.
2025/07/04 16:25:11 ignoring optional flag "sandboxArg"="0"
2025/07/04 16:25:12 parsed 1 programs
syzkaller login: [ 87.597292][ T5333] cgroup: Unknown subsys name 'net'
[ 87.687851][ T5333] cgroup: Unknown subsys name 'cpuset'
[ 87.693393][ T5333] cgroup: Unknown subsys name 'rlimit'
[ 89.268665][ T5333] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.891745][ T10] cfg80211: failed to load regulatory.db
[ 94.746927][ T5349] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 96.621257][ T5366] chnl_net:caif_netlink_parms(): no params data found
[ 96.746257][ T5366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.750540][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.754733][ T5366] bridge_slave_0: entered allmulticast mode
[ 96.764140][ T5366] bridge_slave_0: entered promiscuous mode
[ 96.776178][ T5366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.779372][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.782587][ T5366] bridge_slave_1: entered allmulticast mode
[ 96.804192][ T5366] bridge_slave_1: entered promiscuous mode
[ 96.855147][ T5366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.860358][ T5366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.919730][ T5366] team0: Port device team_slave_0 added
[ 96.928230][ T5366] team0: Port device team_slave_1 added
[ 96.974323][ T5366] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.977392][ T5366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.004181][ T5366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 97.023960][ T5366] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 97.027004][ T5366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 97.054080][ T5366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 97.125343][ T5366] hsr_slave_0: entered promiscuous mode
[ 97.128539][ T5366] hsr_slave_1: entered promiscuous mode
[ 97.401819][ T5366] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.412059][ T5366] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.418941][ T5366] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.426104][ T5366] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.544411][ T5366] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.577948][ T5366] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.587536][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.591093][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.620569][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.623917][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.979863][ T5366] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.051702][ T5366] veth0_vlan: entered promiscuous mode
[ 98.076443][ T5366] veth1_vlan: entered promiscuous mode
[ 98.127573][ T5366] veth0_macvtap: entered promiscuous mode
[ 98.145134][ T5366] veth1_macvtap: entered promiscuous mode
[ 98.174660][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.196864][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.217612][ T5366] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.221315][ T5366] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.234224][ T5366] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.238139][ T5366] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.494329][ T5366] syz-executor (5366) used greatest stack depth: 20280 bytes left
[ 98.530811][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.636054][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.718271][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.797026][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.858337][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.862339][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.950749][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.956924][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.694257][ T31] bridge_slave_1: left allmulticast mode
[ 100.696664][ T31] bridge_slave_1: left promiscuous mode
[ 100.699906][ T31] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.789207][ T31] bridge_slave_0: left allmulticast mode
[ 100.791464][ T31] bridge_slave_0: left promiscuous mode
[ 100.834158][ T31] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.966894][ T5419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.971113][ T5419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.975325][ T5419] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.979404][ T5419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.982985][ T5419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 101.596467][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 101.604592][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 101.616057][ T31] bond0 (unregistering): Released all slaves
[ 101.764286][ T31] hsr_slave_0: left promiscuous mode
[ 101.768136][ T31] hsr_slave_1: left promiscuous mode
[ 101.775575][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 101.779251][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 101.794764][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 101.797798][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 101.829251][ T31] veth1_macvtap: left promiscuous mode
[ 101.832374][ T31] veth0_macvtap: left promiscuous mode
[ 101.843971][ T31] veth1_vlan: left promiscuous mode
[ 101.847016][ T31] veth0_vlan: left promiscuous mode
[ 102.435684][ T31] team0 (unregistering): Port device team_slave_1 removed
[ 102.495207][ T31] team0 (unregistering): Port device team_slave_0 removed
[ 103.008247][ T5419] Bluetooth: hci0: command tx timeout
2025/07/04 16:25:33 executed programs: 0
[ 106.160751][ T4689] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 106.165805][ T4689] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 106.169304][ T4689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 106.173321][ T4689] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 106.177306][ T4689] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 106.557151][ T5472] chnl_net:caif_netlink_parms(): no params data found
[ 106.696406][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.700602][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.716096][ T5472] bridge_slave_0: entered allmulticast mode
[ 106.734496][ T5472] bridge_slave_0: entered promiscuous mode
[ 106.739208][ T5472] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.742270][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.752847][ T5472] bridge_slave_1: entered allmulticast mode
[ 106.765218][ T5472] bridge_slave_1: entered promiscuous mode
[ 106.819792][ T5472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 106.836632][ T5472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 106.890518][ T5472] team0: Port device team_slave_0 added
[ 106.905845][ T5472] team0: Port device team_slave_1 added
[ 106.958164][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 106.961549][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 106.995793][ T5472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 107.005882][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 107.008912][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 107.033286][ T5472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 107.104795][ T5472] hsr_slave_0: entered promiscuous mode
[ 107.107895][ T5472] hsr_slave_1: entered promiscuous mode
[ 107.847740][ T5472] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 107.870740][ T5472] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 107.888136][ T5472] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 107.907170][ T5472] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 108.071024][ T5472] 8021q: adding VLAN 0 to HW filter on device bond0
[ 108.105774][ T5472] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.126127][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.129401][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.148023][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.151197][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 108.204773][ T4689] Bluetooth: hci0: command tx timeout
[ 108.227279][ T5472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 108.520487][ T5472] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 108.598479][ T5472] veth0_vlan: entered promiscuous mode
[ 108.619173][ T5472] veth1_vlan: entered promiscuous mode
[ 108.667958][ T5472] veth0_macvtap: entered promiscuous mode
[ 108.691492][ T5472] veth1_macvtap: entered promiscuous mode
[ 108.728025][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 108.737390][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 108.767265][ T5472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.771222][ T5472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.785321][ T5472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.789106][ T5472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.922747][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.934390][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.996808][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.000849][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.097651][ T5529] FAULT_INJECTION: forcing a failure.
[ 109.097651][ T5529] name failslab, interval 1, probability 0, space 0, times 1
[ 109.134635][ T5529] CPU: 0 UID: 0 PID: 5529 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 109.134651][ T5529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 109.134657][ T5529] Call Trace:
[ 109.134668][ T5529]
[ 109.134674][ T5529] dump_stack_lvl+0x189/0x250
[ 109.134774][ T5529] ? __pfx____ratelimit+0x10/0x10
[ 109.134821][ T5529] ? __pfx_dump_stack_lvl+0x10/0x10
[ 109.134833][ T5529] ? __pfx__printk+0x10/0x10
[ 109.134850][ T5529] ? __pfx___might_resched+0x10/0x10
[ 109.134861][ T5529] ? fs_reclaim_acquire+0x7d/0x100
[ 109.134907][ T5529] should_fail_ex+0x414/0x560
[ 109.134925][ T5529] should_failslab+0xa8/0x100
[ 109.134940][ T5529] __kmalloc_noprof+0xcb/0x4f0
[ 109.134951][ T5529] ? rcu_is_watching+0x15/0xb0
[ 109.134962][ T5529] ? comedi_alloc_subdevices+0x4a/0x240
[ 109.135006][ T5529] comedi_alloc_subdevices+0x4a/0x240
[ 109.135018][ T5529] waveform_common_attach+0x89/0x800
[ 109.135036][ T5529] comedi_device_attach+0x51d/0x670
[ 109.135051][ T5529] comedi_unlocked_ioctl+0x686/0xf40
[ 109.135070][ T5529] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 109.135095][ T5529] ? vfs_write+0x8d8/0xa90
[ 109.135127][ T5529] ? ksys_write+0x1e1/0x250
[ 109.135143][ T5529] ? bpf_lsm_file_ioctl+0x9/0x20
[ 109.135154][ T5529] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 109.135167][ T5529] __se_sys_ioctl+0xf9/0x170
[ 109.135181][ T5529] do_syscall_64+0xfa/0x3b0
[ 109.135191][ T5529] ? lockdep_hardirqs_on+0x9c/0x150
[ 109.135205][ T5529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.135215][ T5529] ? clear_bhb_loop+0x60/0xb0
[ 109.135224][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.135230][ T5529] RIP: 0033:0x7f63b958e929
[ 109.135238][ T5529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 109.135244][ T5529] RSP: 002b:00007ffc34c105c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 109.135252][ T5529] RAX: ffffffffffffffda RBX: 00007f63b97b5fa0 RCX: 00007f63b958e929
[ 109.135257][ T5529] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 109.135261][ T5529] RBP: 00007ffc34c10620 R08: 0000000000000000 R09: 0000000000000000
[ 109.135265][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 109.135268][ T5529] R13: 00007f63b97b5fa0 R14: 00007f63b97b5fa0 R15: 0000000000000003
[ 109.135278][ T5529]
[ 109.135304][ T5529] INFO: trying to register non-static key.
[ 109.239822][ T5529] The code is fine but needs lockdep annotation, or maybe
[ 109.243581][ T5529] you didn't initialize this object before use?
[ 109.246221][ T5529] turning off the locking correctness validator.
[ 109.249063][ T5529] CPU: 0 UID: 0 PID: 5529 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 109.249078][ T5529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 109.249085][ T5529] Call Trace:
[ 109.249094][ T5529]
[ 109.249100][ T5529] dump_stack_lvl+0x189/0x250
[ 109.249117][ T5529] ? rcu_is_watching+0x15/0xb0
[ 109.249131][ T5529] ? __pfx_dump_stack_lvl+0x10/0x10
[ 109.249143][ T5529] ? __pfx__printk+0x10/0x10
[ 109.249158][ T5529] ? __is_module_percpu_address+0x39b/0x3f0
[ 109.249172][ T5529] ? is_module_address+0x17/0xf0
[ 109.249188][ T5529] assign_lock_key+0x133/0x150
[ 109.249201][ T5529] register_lock_class+0x105/0x320
[ 109.249220][ T5529] __lock_acquire+0x99/0xd20
[ 109.249232][ T5529] ? __timer_delete_sync+0x106/0x2d0
[ 109.249247][ T5529] lock_acquire+0x120/0x360
[ 109.249257][ T5529] ? __timer_delete_sync+0x106/0x2d0
[ 109.249273][ T5529] ? __timer_delete_sync+0x106/0x2d0
[ 109.249288][ T5529] __timer_delete_sync+0x11f/0x2d0
[ 109.249303][ T5529] ? __timer_delete_sync+0x106/0x2d0
[ 109.249318][ T5529] ? __pfx___timer_delete_sync+0x10/0x10
[ 109.249333][ T5529] ? down_write+0x162/0x1f0
[ 109.249344][ T5529] ? __pfx_down_write+0x10/0x10
[ 109.249357][ T5529] waveform_detach+0x45/0x60
[ 109.249372][ T5529] comedi_device_detach+0x137/0x720
[ 109.249382][ T5529] ? waveform_common_attach+0x9d/0x800
[ 109.249397][ T5529] comedi_device_attach+0x568/0x670
[ 109.249410][ T5529] comedi_unlocked_ioctl+0x686/0xf40
[ 109.249427][ T5529] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 109.249445][ T5529] ? vfs_write+0x8d8/0xa90
[ 109.249467][ T5529] ? ksys_write+0x1e1/0x250
[ 109.249480][ T5529] ? bpf_lsm_file_ioctl+0x9/0x20
[ 109.249492][ T5529] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 109.249506][ T5529] __se_sys_ioctl+0xf9/0x170
[ 109.249518][ T5529] do_syscall_64+0xfa/0x3b0
[ 109.249529][ T5529] ? lockdep_hardirqs_on+0x9c/0x150
[ 109.249545][ T5529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.249555][ T5529] ? clear_bhb_loop+0x60/0xb0
[ 109.249567][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.249578][ T5529] RIP: 0033:0x7f63b958e929
[ 109.249590][ T5529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 109.249600][ T5529] RSP: 002b:00007ffc34c105c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 109.249613][ T5529] RAX: ffffffffffffffda RBX: 00007f63b97b5fa0 RCX: 00007f63b958e929
[ 109.249621][ T5529] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 109.249628][ T5529] RBP: 00007ffc34c10620 R08: 0000000000000000 R09: 0000000000000000
[ 109.249635][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 109.249641][ T5529] R13: 00007f63b97b5fa0 R14: 00007f63b97b5fa0 R15: 0000000000000003
[ 109.249652][ T5529]
[ 109.516125][ T5529] ------------[ cut here ]------------
[ 109.518583][ T5529] ODEBUG: assert_init not available (active state 0) object: ffff88803fd8ae00 object type: timer_list hint: 0x0
[ 109.533955][ T5529] WARNING: CPU: 0 PID: 5529 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[ 109.537512][ T5529] Modules linked in:
[ 109.539201][ T5529] CPU: 0 UID: 0 PID: 5529 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 109.544485][ T5529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 109.548953][ T5529] RIP: 0010:debug_print_object+0x16b/0x1e0
[ 109.551548][ T5529] Code: 4c 89 ff e8 27 c2 5b fd 4d 8b 0f 48 c7 c7 60 99 e2 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ca e7 bb fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 ef d9 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[ 109.559825][ T5529] RSP: 0018:ffffc900029cf858 EFLAGS: 00010282
[ 109.562356][ T5529] RAX: 60bad73c19fe2e00 RBX: dffffc0000000000 RCX: ffff88801c74a440
[ 109.566199][ T5529] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 109.569853][ T5529] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 109.572853][ T5529] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 0000000000000000
[ 109.575973][ T5529] R13: ffffffff8be29b20 R14: ffff88803fd8ae00 R15: ffffffff8b8ce0a0
[ 109.579435][ T5529] FS: 000055555f711500(0000) GS:ffff88808d21c000(0000) knlGS:0000000000000000
[ 109.583762][ T5529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 109.587040][ T5529] CR2: 00007f9c22337000 CR3: 000000003fd7a000 CR4: 0000000000352ef0
[ 109.591144][ T5529] Call Trace:
[ 109.592767][ T5529]
[ 109.595011][ T5529] debug_object_assert_init+0x2db/0x380
[ 109.597638][ T5529] __try_to_del_timer_sync+0x29/0x3a0
[ 109.600030][ T5529] __timer_delete_sync+0x1fe/0x2d0
[ 109.602524][ T5529] ? __pfx___timer_delete_sync+0x10/0x10
[ 109.605690][ T5529] ? down_write+0x162/0x1f0
[ 109.608172][ T5529] ? __pfx_down_write+0x10/0x10
[ 109.610408][ T5529] waveform_detach+0x45/0x60
[ 109.612600][ T5529] comedi_device_detach+0x137/0x720
[ 109.615954][ T5529] ? waveform_common_attach+0x9d/0x800
[ 109.618320][ T5529] comedi_device_attach+0x568/0x670
[ 109.620505][ T5529] comedi_unlocked_ioctl+0x686/0xf40
[ 109.622756][ T5529] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 109.625331][ T5529] ? vfs_write+0x8d8/0xa90
[ 109.627299][ T5529] ? ksys_write+0x1e1/0x250
[ 109.629312][ T5529] ? bpf_lsm_file_ioctl+0x9/0x20
[ 109.631481][ T5529] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 109.634117][ T5529] __se_sys_ioctl+0xf9/0x170
[ 109.635838][ T5529] do_syscall_64+0xfa/0x3b0
[ 109.637562][ T5529] ? lockdep_hardirqs_on+0x9c/0x150
[ 109.639706][ T5529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.642286][ T5529] ? clear_bhb_loop+0x60/0xb0
[ 109.644772][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.647361][ T5529] RIP: 0033:0x7f63b958e929
[ 109.649337][ T5529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 109.657485][ T5529] RSP: 002b:00007ffc34c105c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 109.661072][ T5529] RAX: ffffffffffffffda RBX: 00007f63b97b5fa0 RCX: 00007f63b958e929
[ 109.664821][ T5529] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 109.668771][ T5529] RBP: 00007ffc34c10620 R08: 0000000000000000 R09: 0000000000000000
[ 109.672427][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 109.675732][ T5529] R13: 00007f63b97b5fa0 R14: 00007f63b97b5fa0 R15: 0000000000000003
[ 109.678968][ T5529]
[ 109.680220][ T5529] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 109.683298][ T5529] CPU: 0 UID: 0 PID: 5529 Comm: syz.0.16 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full)
[ 109.688499][ T5529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 109.693070][ T5529] Call Trace:
[ 109.694560][ T5529]
[ 109.695750][ T5529] dump_stack_lvl+0x99/0x250
[ 109.697689][ T5529] ? __asan_memcpy+0x40/0x70
[ 109.699682][ T5529] ? __pfx_dump_stack_lvl+0x10/0x10
[ 109.701821][ T5529] ? __pfx__printk+0x10/0x10
[ 109.703782][ T5529] panic+0x2db/0x790
[ 109.705475][ T5529] ? __pfx_panic+0x10/0x10
[ 109.707456][ T5529] __warn+0x31b/0x4b0
[ 109.709279][ T5529] ? debug_print_object+0x16b/0x1e0
[ 109.711476][ T5529] ? debug_print_object+0x16b/0x1e0
[ 109.713774][ T5529] report_bug+0x2be/0x4f0
[ 109.715719][ T5529] ? debug_print_object+0x16b/0x1e0
[ 109.718081][ T5529] ? debug_print_object+0x16b/0x1e0
[ 109.720517][ T5529] ? debug_print_object+0x16d/0x1e0
[ 109.723080][ T5529] handle_bug+0x84/0x160
[ 109.724875][ T5529] exc_invalid_op+0x1a/0x50
[ 109.726951][ T5529] asm_exc_invalid_op+0x1a/0x20
[ 109.729158][ T5529] RIP: 0010:debug_print_object+0x16b/0x1e0
[ 109.731966][ T5529] Code: 4c 89 ff e8 27 c2 5b fd 4d 8b 0f 48 c7 c7 60 99 e2 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ca e7 bb fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 ef d9 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[ 109.740249][ T5529] RSP: 0018:ffffc900029cf858 EFLAGS: 00010282
[ 109.742908][ T5529] RAX: 60bad73c19fe2e00 RBX: dffffc0000000000 RCX: ffff88801c74a440
[ 109.746324][ T5529] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 109.749727][ T5529] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 109.753170][ T5529] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 0000000000000000
[ 109.756437][ T5529] R13: ffffffff8be29b20 R14: ffff88803fd8ae00 R15: ffffffff8b8ce0a0
[ 109.759729][ T5529] debug_object_assert_init+0x2db/0x380
[ 109.762146][ T5529] __try_to_del_timer_sync+0x29/0x3a0
[ 109.764498][ T5529] __timer_delete_sync+0x1fe/0x2d0
[ 109.766764][ T5529] ? __pfx___timer_delete_sync+0x10/0x10
[ 109.769109][ T5529] ? down_write+0x162/0x1f0
[ 109.771192][ T5529] ? __pfx_down_write+0x10/0x10
[ 109.773322][ T5529] waveform_detach+0x45/0x60
[ 109.775240][ T5529] comedi_device_detach+0x137/0x720
[ 109.777566][ T5529] ? waveform_common_attach+0x9d/0x800
[ 109.779949][ T5529] comedi_device_attach+0x568/0x670
[ 109.782053][ T5529] comedi_unlocked_ioctl+0x686/0xf40
[ 109.784305][ T5529] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 109.786898][ T5529] ? vfs_write+0x8d8/0xa90
[ 109.789118][ T5529] ? ksys_write+0x1e1/0x250
[ 109.791453][ T5529] ? bpf_lsm_file_ioctl+0x9/0x20
[ 109.793834][ T5529] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 109.796358][ T5529] __se_sys_ioctl+0xf9/0x170
[ 109.798330][ T5529] do_syscall_64+0xfa/0x3b0
[ 109.800208][ T5529] ? lockdep_hardirqs_on+0x9c/0x150
[ 109.802553][ T5529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.805798][ T5529] ? clear_bhb_loop+0x60/0xb0
[ 109.807792][ T5529] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.810109][ T5529] RIP: 0033:0x7f63b958e929
[ 109.812103][ T5529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 109.820376][ T5529] RSP: 002b:00007ffc34c105c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 109.823942][ T5529] RAX: ffffffffffffffda RBX: 00007f63b97b5fa0 RCX: 00007f63b958e929
[ 109.827266][ T5529] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 109.830810][ T5529] RBP: 00007ffc34c10620 R08: 0000000000000000 R09: 0000000000000000
[ 109.834201][ T5529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 109.837965][ T5529] R13: 00007f63b97b5fa0 R14: 00007f63b97b5fa0 R15: 0000000000000003
[ 109.841241][ T5529]
[ 109.842908][ T5529] Kernel Offset: disabled
[ 109.844770][ T5529] Rebooting in 86400 seconds..
VM DIAGNOSIS:
16:25:36 Registers:
info registers vcpu 0
CPU#0
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900029cf190
R8 =ffff8880339a0237 R9 =1ffff11006734046 R10=dffffc0000000000 R11=ffffffff8547b6a0
R12=dffffc0000000000 R13=ffffffff99af88f6 R14=ffffffff99dfd760 R15=0000000000000000
RIP=ffffffff8547b71c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555f711500 ffffffff 00c00000
GS =0000 ffff88808d21c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fee6d1bc230 CR3=000000003fd7a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc34c108a0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63b9611b12
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63b9611b1f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63b9611b19
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63b9611b2d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63b9611bb3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63b9611c91
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000