Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. 2025/09/24 06:26:39 parsed 1 programs [ 88.936345][ T5867] cgroup: Unknown subsys name 'net' [ 89.040839][ T5867] cgroup: Unknown subsys name 'cpuset' [ 89.049959][ T5867] cgroup: Unknown subsys name 'rlimit' [ 90.769951][ T5867] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.288789][ T982] cfg80211: failed to load regulatory.db [ 93.924414][ T5879] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.221330][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 94.311798][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.319804][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.327618][ T5884] bridge_slave_0: entered allmulticast mode [ 94.334985][ T5884] bridge_slave_0: entered promiscuous mode [ 94.345868][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.353498][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.361015][ T5884] bridge_slave_1: entered allmulticast mode [ 94.368486][ T5884] bridge_slave_1: entered promiscuous mode [ 94.406432][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.419522][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.457231][ T5884] team0: Port device team_slave_0 added [ 94.465296][ T5884] team0: Port device team_slave_1 added [ 94.498290][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.505261][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.531307][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.544413][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.551768][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.578480][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.628457][ T5884] hsr_slave_0: entered promiscuous mode [ 94.635029][ T5884] hsr_slave_1: entered promiscuous mode [ 94.793249][ T5884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.806055][ T5884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.816728][ T5884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.828264][ T5884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.859161][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.866456][ T5884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.874436][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.881759][ T5884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.942958][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.962940][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.972098][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.990288][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.004585][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.011772][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.025119][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.032344][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.225273][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.272978][ T5884] veth0_vlan: entered promiscuous mode [ 95.284903][ T5884] veth1_vlan: entered promiscuous mode [ 95.318724][ T5884] veth0_macvtap: entered promiscuous mode [ 95.335762][ T5884] veth1_macvtap: entered promiscuous mode [ 95.356462][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.372774][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.390428][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.403572][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.415155][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.424120][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.545790][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.620681][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.680978][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.689383][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.704870][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.744318][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.753405][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.771905][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.809479][ T5958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.818384][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.826206][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.834519][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.843146][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.588632][ T67] bridge_slave_1: left allmulticast mode [ 98.594542][ T67] bridge_slave_1: left promiscuous mode [ 98.618701][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.640560][ T67] bridge_slave_0: left allmulticast mode [ 98.646345][ T67] bridge_slave_0: left promiscuous mode [ 98.659532][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.016091][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.030392][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.041204][ T67] bond0 (unregistering): Released all slaves [ 99.193294][ T67] hsr_slave_0: left promiscuous mode [ 99.200395][ T67] hsr_slave_1: left promiscuous mode [ 99.206735][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.214785][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.224994][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.232816][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.261477][ T67] veth1_macvtap: left promiscuous mode [ 99.267418][ T67] veth0_macvtap: left promiscuous mode [ 99.274391][ T67] veth1_vlan: left promiscuous mode [ 99.280574][ T67] veth0_vlan: left promiscuous mode 2025/09/24 06:26:54 executed programs: 0 [ 99.920921][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.932213][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.941899][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.950007][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.959078][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.987921][ T67] team0 (unregistering): Port device team_slave_1 removed [ 100.014420][ T67] team0 (unregistering): Port device team_slave_0 removed [ 100.510911][ T5989] chnl_net:caif_netlink_parms(): no params data found [ 100.664102][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.673091][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.680629][ T5989] bridge_slave_0: entered allmulticast mode [ 100.689625][ T5989] bridge_slave_0: entered promiscuous mode [ 100.706827][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.716462][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.724104][ T5989] bridge_slave_1: entered allmulticast mode [ 100.732421][ T5989] bridge_slave_1: entered promiscuous mode [ 100.788758][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.801889][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.292723][ T5989] team0: Port device team_slave_0 added [ 101.307454][ T5989] team0: Port device team_slave_1 added [ 101.364136][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.371768][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.402388][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.429536][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.436545][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.463238][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.639495][ T5989] hsr_slave_0: entered promiscuous mode [ 101.650556][ T5989] hsr_slave_1: entered promiscuous mode [ 102.047615][ T52] Bluetooth: hci0: command tx timeout [ 102.450858][ T5989] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.462782][ T5989] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.474818][ T5989] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.486834][ T5989] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.619621][ T5989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.642279][ T5989] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.660174][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.667502][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.684197][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.691523][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.976601][ T5989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.056612][ T5989] veth0_vlan: entered promiscuous mode [ 103.073241][ T5989] veth1_vlan: entered promiscuous mode [ 103.118137][ T5989] veth0_macvtap: entered promiscuous mode [ 103.130092][ T5989] veth1_macvtap: entered promiscuous mode [ 103.162412][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.181284][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.203026][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.223257][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.242525][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.266628][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.335115][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.355217][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.389391][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.399000][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.457279][ T6067] comedi comedi1: c6xdigio: I/O port conflict (0x401,3) [ 103.484308][ T6068] comedi comedi1: c6xdigio: I/O port conflict (0x401,3) [ 103.492678][ T6068] ================================================================== [ 103.500782][ T6068] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x3d/0x70 [ 103.508817][ T6068] Read of size 8 at addr ffff88814c9b5030 by task syz.0.18/6068 [ 103.516476][ T6068] [ 103.518852][ T6068] CPU: 0 UID: 0 PID: 6068 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 103.518878][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.518898][ T6068] Call Trace: [ 103.518907][ T6068] [ 103.518915][ T6068] dump_stack_lvl+0x189/0x250 [ 103.518953][ T6068] ? __virt_addr_valid+0x1c8/0x5c0 [ 103.518985][ T6068] ? rcu_is_watching+0x15/0xb0 [ 103.519014][ T6068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.519046][ T6068] ? rcu_is_watching+0x15/0xb0 [ 103.519074][ T6068] ? lock_release+0x4b/0x3e0 [ 103.519097][ T6068] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 103.519126][ T6068] ? __virt_addr_valid+0x1c8/0x5c0 [ 103.519158][ T6068] ? __virt_addr_valid+0x4a5/0x5c0 [ 103.519191][ T6068] print_report+0xca/0x240 [ 103.519212][ T6068] ? sysfs_remove_file_ns+0x3d/0x70 [ 103.519238][ T6068] kasan_report+0x118/0x150 [ 103.519258][ T6068] ? sysfs_remove_file_ns+0x3d/0x70 [ 103.519289][ T6068] sysfs_remove_file_ns+0x3d/0x70 [ 103.519316][ T6068] bus_remove_driver+0x198/0x2f0 [ 103.519349][ T6068] comedi_device_detach_locked+0x178/0x750 [ 103.519389][ T6068] comedi_device_attach+0x5d4/0x720 [ 103.519413][ T6068] comedi_unlocked_ioctl+0x5ff/0x1020 [ 103.519439][ T6068] ? kasan_quarantine_put+0xdd/0x220 [ 103.519472][ T6068] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 103.519515][ T6068] ? do_futex+0x395/0x420 [ 103.519543][ T6068] ? __se_sys_futex+0x36f/0x400 [ 103.519566][ T6068] ? __pfx___se_sys_futex+0x10/0x10 [ 103.519587][ T6068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 103.519610][ T6068] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 103.519637][ T6068] __se_sys_ioctl+0xfc/0x170 [ 103.519668][ T6068] do_syscall_64+0xfa/0xfa0 [ 103.519695][ T6068] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.519722][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.519744][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 103.519767][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.519788][ T6068] RIP: 0033:0x7f9aee78eec9 [ 103.519812][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.519830][ T6068] RSP: 002b:00007ffe7540fbc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.519853][ T6068] RAX: ffffffffffffffda RBX: 00007f9aee9e5fa0 RCX: 00007f9aee78eec9 [ 103.519869][ T6068] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000004 [ 103.519884][ T6068] RBP: 00007f9aee811f91 R08: 0000000000000000 R09: 0000000000000000 [ 103.519897][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.519910][ T6068] R13: 00007f9aee9e5fa0 R14: 00007f9aee9e5fa0 R15: 0000000000000003 [ 103.519934][ T6068] [ 103.519942][ T6068] [ 103.781158][ T6068] Allocated by task 6067: [ 103.785677][ T6068] kasan_save_track+0x3e/0x80 [ 103.790379][ T6068] __kasan_kmalloc+0x93/0xb0 [ 103.794985][ T6068] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 103.800462][ T6068] bus_add_driver+0x162/0x640 [ 103.805170][ T6068] driver_register+0x23a/0x320 [ 103.809952][ T6068] c6xdigio_attach+0x94/0x890 [ 103.814641][ T6068] comedi_device_attach+0x51f/0x720 [ 103.819848][ T6068] comedi_unlocked_ioctl+0x5ff/0x1020 [ 103.825232][ T6068] __se_sys_ioctl+0xfc/0x170 [ 103.829837][ T6068] do_syscall_64+0xfa/0xfa0 [ 103.834370][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.840263][ T6068] [ 103.842608][ T6068] Freed by task 6067: [ 103.846589][ T6068] kasan_save_track+0x3e/0x80 [ 103.851277][ T6068] __kasan_save_free_info+0x46/0x50 [ 103.856492][ T6068] __kasan_slab_free+0x5c/0x80 [ 103.861270][ T6068] kfree+0x19a/0x6d0 [ 103.865173][ T6068] kobject_put+0x22b/0x480 [ 103.869856][ T6068] bus_remove_driver+0x245/0x2f0 [ 103.874798][ T6068] comedi_device_detach_locked+0x178/0x750 [ 103.880614][ T6068] comedi_device_attach+0x5d4/0x720 [ 103.885810][ T6068] comedi_unlocked_ioctl+0x5ff/0x1020 [ 103.891184][ T6068] __se_sys_ioctl+0xfc/0x170 [ 103.895783][ T6068] do_syscall_64+0xfa/0xfa0 [ 103.900317][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.906232][ T6068] [ 103.908563][ T6068] The buggy address belongs to the object at ffff88814c9b5000 [ 103.908563][ T6068] which belongs to the cache kmalloc-256 of size 256 [ 103.922614][ T6068] The buggy address is located 48 bytes inside of [ 103.922614][ T6068] freed 256-byte region [ffff88814c9b5000, ffff88814c9b5100) [ 103.936362][ T6068] [ 103.938691][ T6068] The buggy address belongs to the physical page: [ 103.945164][ T6068] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14c9b4 [ 103.954027][ T6068] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 103.962566][ T6068] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 103.970650][ T6068] page_type: f5(slab) [ 103.974644][ T6068] raw: 057ff00000000040 ffff88813fe26b40 0000000000000000 0000000000000001 [ 103.983244][ T6068] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 103.991844][ T6068] head: 057ff00000000040 ffff88813fe26b40 0000000000000000 0000000000000001 [ 104.000521][ T6068] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 104.009208][ T6068] head: 057ff00000000001 ffffea0005326d01 00000000ffffffff 00000000ffffffff [ 104.018160][ T6068] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 104.026827][ T6068] page dumped because: kasan: bad access detected [ 104.033254][ T6068] page_owner tracks the page as allocated [ 104.038971][ T6068] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 27843801833, free_ts 0 [ 104.058685][ T6068] post_alloc_hook+0x240/0x2a0 [ 104.063464][ T6068] get_page_from_freelist+0x2365/0x2440 [ 104.069009][ T6068] __alloc_frozen_pages_noprof+0x181/0x370 [ 104.074813][ T6068] alloc_pages_mpol+0x232/0x4a0 [ 104.079937][ T6068] allocate_slab+0x96/0x3a0 [ 104.084448][ T6068] ___slab_alloc+0xe94/0x1920 [ 104.089141][ T6068] __slab_alloc+0x65/0x100 [ 104.093561][ T6068] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 104.099984][ T6068] krealloc_node_align_noprof+0x140/0x390 [ 104.105741][ T6068] add_sysfs_param+0xd4/0xa30 [ 104.110462][ T6068] kernel_add_sysfs_param+0x7f/0xe0 [ 104.115666][ T6068] param_sysfs_builtin+0x18a/0x230 [ 104.120800][ T6068] param_sysfs_builtin_init+0x23/0x30 [ 104.126182][ T6068] do_one_initcall+0x236/0x820 [ 104.131127][ T6068] do_initcall_level+0x104/0x190 [ 104.136072][ T6068] do_initcalls+0x59/0xa0 [ 104.140426][ T6068] page_owner free stack trace missing [ 104.145795][ T6068] [ 104.148121][ T6068] Memory state around the buggy address: [ 104.153746][ T6068] ffff88814c9b4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.161807][ T6068] ffff88814c9b4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.169869][ T6068] >ffff88814c9b5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.177925][ T6068] ^ [ 104.183551][ T6068] ffff88814c9b5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.191636][ T6068] ffff88814c9b5100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.199705][ T6068] ================================================================== [ 104.216952][ T6068] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.224197][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 104.233345][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.243430][ T6068] Call Trace: [ 104.246735][ T6068] [ 104.249698][ T6068] dump_stack_lvl+0x99/0x250 [ 104.254327][ T6068] ? __asan_memcpy+0x40/0x70 [ 104.258937][ T6068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.264159][ T6068] ? __pfx__printk+0x10/0x10 [ 104.268767][ T6068] vpanic+0x237/0x6d0 [ 104.272768][ T6068] ? __pfx_vpanic+0x10/0x10 [ 104.277346][ T6068] ? preempt_schedule+0xae/0xc0 [ 104.282217][ T6068] ? __pfx_preempt_schedule+0x10/0x10 [ 104.287614][ T6068] panic+0xb9/0xc0 [ 104.291348][ T6068] ? __pfx_panic+0x10/0x10 [ 104.295773][ T6068] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 104.301691][ T6068] ? is_module_address+0x17/0xf0 [ 104.306634][ T6068] ? sysfs_remove_file_ns+0x3d/0x70 [ 104.311845][ T6068] check_panic_on_warn+0x89/0xb0 [ 104.316788][ T6068] ? sysfs_remove_file_ns+0x3d/0x70 [ 104.321998][ T6068] end_report+0x78/0x160 [ 104.326371][ T6068] kasan_report+0x129/0x150 [ 104.331026][ T6068] ? sysfs_remove_file_ns+0x3d/0x70 [ 104.336355][ T6068] sysfs_remove_file_ns+0x3d/0x70 [ 104.341427][ T6068] bus_remove_driver+0x198/0x2f0 [ 104.346392][ T6068] comedi_device_detach_locked+0x178/0x750 [ 104.352235][ T6068] comedi_device_attach+0x5d4/0x720 [ 104.357455][ T6068] comedi_unlocked_ioctl+0x5ff/0x1020 [ 104.362858][ T6068] ? kasan_quarantine_put+0xdd/0x220 [ 104.368176][ T6068] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 104.374013][ T6068] ? do_futex+0x395/0x420 [ 104.378364][ T6068] ? __se_sys_futex+0x36f/0x400 [ 104.383227][ T6068] ? __pfx___se_sys_futex+0x10/0x10 [ 104.388443][ T6068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 104.393398][ T6068] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 104.399233][ T6068] __se_sys_ioctl+0xfc/0x170 [ 104.403855][ T6068] do_syscall_64+0xfa/0xfa0 [ 104.408379][ T6068] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.413592][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.419670][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 104.424359][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.430266][ T6068] RIP: 0033:0x7f9aee78eec9 [ 104.434687][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.454294][ T6068] RSP: 002b:00007ffe7540fbc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.462734][ T6068] RAX: ffffffffffffffda RBX: 00007f9aee9e5fa0 RCX: 00007f9aee78eec9 [ 104.470710][ T6068] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000004 [ 104.478692][ T6068] RBP: 00007f9aee811f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.486848][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.494840][ T6068] R13: 00007f9aee9e5fa0 R14: 00007f9aee9e5fa0 R15: 0000000000000003 [ 104.502920][ T6068] [ 104.506294][ T6068] Kernel Offset: disabled [ 104.510623][ T6068] Rebooting in 86400 seconds..