Warning: Permanently added '[localhost]:51816' (ED25519) to the list of known hosts. 2026/01/02 06:48:47 parsed 1 programs syzkaller login: [ 84.326235][ T5331] cgroup: Unknown subsys name 'net' [ 84.411344][ T5331] cgroup: Unknown subsys name 'cpuset' [ 84.418510][ T5331] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.194983][ T5331] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.684726][ T5346] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.843777][ T9] cfg80211: failed to load regulatory.db [ 92.639549][ T4687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.643229][ T4687] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.646605][ T4687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.657081][ T4687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.663812][ T4687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.940839][ T5401] chnl_net:caif_netlink_parms(): no params data found [ 97.012355][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.015944][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.019504][ T5401] bridge_slave_0: entered allmulticast mode [ 97.023715][ T5401] bridge_slave_0: entered promiscuous mode [ 97.030035][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.033250][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.036244][ T5401] bridge_slave_1: entered allmulticast mode [ 97.040514][ T5401] bridge_slave_1: entered promiscuous mode [ 97.066239][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.072890][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.097563][ T5401] team0: Port device team_slave_0 added [ 97.102018][ T5401] team0: Port device team_slave_1 added [ 97.129449][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.132585][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.144569][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.151474][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.154348][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.165374][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.205138][ T5401] hsr_slave_0: entered promiscuous mode [ 97.208724][ T5401] hsr_slave_1: entered promiscuous mode [ 97.365164][ T5401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.374488][ T5401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.380141][ T5401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.388579][ T5401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.414633][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.417804][ T5401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.421620][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.424661][ T5401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.481925][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.497465][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.502981][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.511552][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.521003][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.524045][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.532472][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.535672][ T3091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.700549][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.742984][ T5401] veth0_vlan: entered promiscuous mode [ 97.751291][ T5401] veth1_vlan: entered promiscuous mode [ 97.775828][ T5401] veth0_macvtap: entered promiscuous mode [ 97.782546][ T5401] veth1_macvtap: entered promiscuous mode [ 97.796847][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.809517][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.820269][ T3091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.824072][ T3091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.835273][ T3091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.848501][ T3091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.081258][ T4248] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.168228][ T4248] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.228598][ T4248] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.305056][ T4248] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.123809][ T3043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.131421][ T3043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.190254][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.193542][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/02 06:49:05 executed programs: 0 [ 99.749028][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.753007][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.756370][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.760420][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.763925][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.913779][ T5441] chnl_net:caif_netlink_parms(): no params data found [ 99.980608][ T5441] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.984069][ T5441] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.987766][ T5441] bridge_slave_0: entered allmulticast mode [ 99.991966][ T5441] bridge_slave_0: entered promiscuous mode [ 99.996941][ T5441] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.001026][ T5441] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.005861][ T5441] bridge_slave_1: entered allmulticast mode [ 100.010284][ T5441] bridge_slave_1: entered promiscuous mode [ 100.035464][ T5441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.041582][ T5441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.065673][ T5441] team0: Port device team_slave_0 added [ 100.070415][ T5441] team0: Port device team_slave_1 added [ 100.091933][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.094611][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.106097][ T5441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.112011][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.114651][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.125525][ T5441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.163556][ T5441] hsr_slave_0: entered promiscuous mode [ 100.166915][ T5441] hsr_slave_1: entered promiscuous mode [ 100.170720][ T5441] debugfs: 'hsr0' already exists in 'hsr' [ 100.173373][ T5441] Cannot create hsr debugfs directory [ 100.714105][ T4248] bridge_slave_1: left allmulticast mode [ 100.716835][ T4248] bridge_slave_1: left promiscuous mode [ 100.738371][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.758964][ T4248] bridge_slave_0: left allmulticast mode [ 100.761781][ T4248] bridge_slave_0: left promiscuous mode [ 100.766094][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.119753][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.125660][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.131454][ T4248] bond0 (unregistering): Released all slaves [ 101.217404][ T4248] hsr_slave_0: left promiscuous mode [ 101.223734][ T4248] hsr_slave_1: left promiscuous mode [ 101.226564][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.237606][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.248225][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.251492][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.276037][ T4248] veth1_macvtap: left promiscuous mode [ 101.287860][ T4248] veth0_macvtap: left promiscuous mode [ 101.290468][ T4248] veth1_vlan: left promiscuous mode [ 101.292918][ T4248] veth0_vlan: left promiscuous mode [ 101.774094][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 101.797955][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 101.820862][ T47] Bluetooth: hci0: command tx timeout [ 102.589261][ T5441] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.599651][ T5441] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.620945][ T5441] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.658742][ T5441] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.988882][ T5441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.014556][ T5441] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.042433][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.045418][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.062722][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.065745][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.251602][ T5441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.288138][ T5441] veth0_vlan: entered promiscuous mode [ 103.295040][ T5441] veth1_vlan: entered promiscuous mode [ 103.321542][ T5441] veth0_macvtap: entered promiscuous mode [ 103.328639][ T5441] veth1_macvtap: entered promiscuous mode [ 103.342193][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.353209][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.362596][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.376636][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.384932][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.401894][ T2656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.442667][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.454142][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.473609][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.477066][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.777552][ T1349] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.897536][ T47] Bluetooth: hci0: command tx timeout [ 103.936321][ T1349] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 103.940294][ T1349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 103.943579][ T1349] usb 5-1: Product: syz [ 103.945484][ T1349] usb 5-1: Manufacturer: syz [ 103.948285][ T1349] usb 5-1: SerialNumber: syz [ 103.958324][ T1349] usb 5-1: config 0 descriptor?? [ 103.976556][ T1349] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 103.989954][ T1349] dvb-usb: bulk message failed: -22 (2/0) [ 104.004258][ T1349] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 104.019317][ T1349] dvb-usb: DigitalNow DVB-T Dual USB error while loading driver (-19) [ 104.023551][ T1349] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 104.172386][ T5486] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 104.175790][ T5486] dvb-usb: bulk message failed: -22 (2/0) [ 104.179264][ T5486] FAULT_INJECTION: forcing a failure. [ 104.179264][ T5486] name failslab, interval 1, probability 0, space 0, times 1 [ 104.184615][ T5486] CPU: 0 UID: 0 PID: 5486 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 104.184630][ T5486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.184636][ T5486] Call Trace: [ 104.184642][ T5486] [ 104.184646][ T5486] dump_stack_lvl+0xe8/0x150 [ 104.184752][ T5486] should_fail_ex+0x414/0x560 [ 104.184788][ T5486] should_failslab+0xa8/0x100 [ 104.184797][ T5486] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 104.184808][ T5486] ? kobject_set_name_vargs+0x61/0x110 [ 104.184840][ T5486] kvasprintf+0xdc/0x190 [ 104.184848][ T5486] ? __pfx_kvasprintf+0x10/0x10 [ 104.184858][ T5486] ? kvasprintf_const+0xe1/0x240 [ 104.184865][ T5486] kobject_set_name_vargs+0x61/0x110 [ 104.184873][ T5486] dev_set_name+0xd4/0x120 [ 104.184881][ T5486] ? __pfx___mutex_trylock_common+0x10/0x10 [ 104.184892][ T5486] ? __pfx_dev_set_name+0x10/0x10 [ 104.184905][ T5486] ? mutex_init_lockep+0xf9/0x130 [ 104.184917][ T5486] i2c_register_adapter+0x3fd/0x1150 [ 104.184961][ T5486] ? __pfx_i2c_register_adapter+0x10/0x10 [ 104.184970][ T5486] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.184981][ T5486] ? idr_alloc+0x89/0xd0 [ 104.184998][ T5486] dvb_usb_i2c_init+0x202/0x2f0 [ 104.185009][ T5486] ? __pfx_cxusb_bluebird_power_ctrl+0x10/0x10 [ 104.185023][ T5486] dvb_usb_device_init+0xf23/0x2580 [ 104.185049][ T5486] ? trace_rpm_return_int+0x83/0x1e0 [ 104.185062][ T5486] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 104.185074][ T5486] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.185092][ T5486] cxusb_probe+0xff/0x700 [ 104.185104][ T5486] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 104.185119][ T5486] ? __pfx_cxusb_probe+0x10/0x10 [ 104.185129][ T5486] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 104.185144][ T5486] ? __pm_runtime_set_status+0x785/0xa50 [ 104.185162][ T5486] usb_probe_interface+0x668/0xc90 [ 104.185184][ T5486] ? __pfx_usb_probe_interface+0x10/0x10 [ 104.185193][ T5486] really_probe+0x26d/0xad0 [ 104.185208][ T5486] __driver_probe_device+0x18c/0x320 [ 104.185224][ T5486] driver_probe_device+0x4f/0x240 [ 104.185235][ T5486] __device_attach_driver+0x279/0x430 [ 104.185246][ T5486] bus_for_each_drv+0x251/0x2e0 [ 104.185258][ T5486] ? __pfx___device_attach_driver+0x10/0x10 [ 104.185267][ T5486] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.185279][ T5486] ? lockdep_hardirqs_on+0x7b/0x110 [ 104.185289][ T5486] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 104.185305][ T5486] __device_attach+0x2b8/0x430 [ 104.185320][ T5486] ? __pfx___device_attach+0x10/0x10 [ 104.185335][ T5486] ? usb_ifnum_to_if+0x262/0x2f0 [ 104.185351][ T5486] proc_ioctl+0x447/0x6c0 [ 104.185364][ T5486] proc_ioctl_default+0xbc/0x100 [ 104.185378][ T5486] ? __pfx_proc_ioctl_default+0x10/0x10 [ 104.185398][ T5486] usbdev_ioctl+0x1367/0x20b0 [ 104.185415][ T5486] ? __pfx_usbdev_ioctl+0x10/0x10 [ 104.185425][ T5486] ? ksys_write+0x1e1/0x250 [ 104.185442][ T5486] ? bpf_lsm_file_ioctl+0x9/0x20 [ 104.185453][ T5486] ? __pfx_usbdev_ioctl+0x10/0x10 [ 104.185477][ T5486] __se_sys_ioctl+0xfc/0x170 [ 104.185492][ T5486] do_syscall_64+0xec/0xf80 [ 104.185502][ T5486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.185510][ T5486] ? trace_irq_disable+0x37/0x100 [ 104.185523][ T5486] ? clear_bhb_loop+0x60/0xb0 [ 104.185542][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.185551][ T5486] RIP: 0033:0x7f297d78f7c9 [ 104.185562][ T5486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.185569][ T5486] RSP: 002b:00007ffef89f6238 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.185582][ T5486] RAX: ffffffffffffffda RBX: 00007f297d9e5fa0 RCX: 00007f297d78f7c9 [ 104.185588][ T5486] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000004 [ 104.185595][ T5486] RBP: 00007ffef89f6290 R08: 0000000000000000 R09: 0000000000000000 [ 104.185601][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.185607][ T5486] R13: 00007f297d9e5fa0 R14: 00007f297d9e5fa0 R15: 0000000000000003 [ 104.185623][ T5486] [ 104.185673][ T5486] i2c-core: adapter 'DigitalNow DVB-T Dual USB': can't register device (-22) [ 104.385387][ T5486] INFO: trying to register non-static key. [ 104.387919][ T5486] The code is fine but needs lockdep annotation, or maybe [ 104.391839][ T5486] you didn't initialize this object before use? [ 104.394567][ T5486] turning off the locking correctness validator. [ 104.397209][ T5486] CPU: 0 UID: 0 PID: 5486 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 104.397221][ T5486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.397234][ T5486] Call Trace: [ 104.397241][ T5486] [ 104.397246][ T5486] dump_stack_lvl+0xe8/0x150 [ 104.397262][ T5486] assign_lock_key+0x133/0x150 [ 104.397276][ T5486] register_lock_class+0xcc/0x2e0 [ 104.397286][ T5486] __lock_acquire+0xae/0x2cf0 [ 104.397295][ T5486] ? __irq_work_queue_local+0x1de/0x530 [ 104.397309][ T5486] ? __pfx___irq_work_queue_local+0x10/0x10 [ 104.397321][ T5486] ? console_unlock+0x13a/0x190 [ 104.397332][ T5486] ? preempt_schedule_thunk+0x16/0x30 [ 104.397343][ T5486] ? irq_work_queue+0xbc/0x140 [ 104.397357][ T5486] ? complete+0x28/0x1b0 [ 104.397368][ T5486] lock_acquire+0x107/0x340 [ 104.397377][ T5486] ? complete+0x28/0x1b0 [ 104.397388][ T5486] ? devres_release_all+0x1ca/0x230 [ 104.397397][ T5486] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 104.397411][ T5486] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 104.397422][ T5486] _raw_spin_lock_irqsave+0x40/0x60 [ 104.397435][ T5486] ? complete+0x28/0x1b0 [ 104.397445][ T5486] complete+0x28/0x1b0 [ 104.397454][ T5486] ? i2c_adapter_dev_release+0xd/0x20 [ 104.397466][ T5486] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 104.397478][ T5486] device_release+0x9e/0x1d0 [ 104.397490][ T5486] kobject_put+0x228/0x570 [ 104.397502][ T5486] i2c_register_adapter+0x75f/0x1150 [ 104.397515][ T5486] ? __pfx_i2c_register_adapter+0x10/0x10 [ 104.397528][ T5486] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.397540][ T5486] ? idr_alloc+0x89/0xd0 [ 104.397555][ T5486] dvb_usb_i2c_init+0x202/0x2f0 [ 104.397565][ T5486] ? __pfx_cxusb_bluebird_power_ctrl+0x10/0x10 [ 104.397578][ T5486] dvb_usb_device_init+0xf23/0x2580 [ 104.397589][ T5486] ? trace_rpm_return_int+0x83/0x1e0 [ 104.397596][ T5486] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 104.397602][ T5486] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.397611][ T5486] cxusb_probe+0xff/0x700 [ 104.397619][ T5486] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 104.397628][ T5486] ? __pfx_cxusb_probe+0x10/0x10 [ 104.397634][ T5486] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 104.397643][ T5486] ? __pm_runtime_set_status+0x785/0xa50 [ 104.397653][ T5486] usb_probe_interface+0x668/0xc90 [ 104.397661][ T5486] ? __pfx_usb_probe_interface+0x10/0x10 [ 104.397670][ T5486] really_probe+0x26d/0xad0 [ 104.397680][ T5486] __driver_probe_device+0x18c/0x320 [ 104.397694][ T5486] driver_probe_device+0x4f/0x240 [ 104.397703][ T5486] __device_attach_driver+0x279/0x430 [ 104.397714][ T5486] bus_for_each_drv+0x251/0x2e0 [ 104.397726][ T5486] ? __pfx___device_attach_driver+0x10/0x10 [ 104.397735][ T5486] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.397746][ T5486] ? lockdep_hardirqs_on+0x7b/0x110 [ 104.397755][ T5486] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 104.397766][ T5486] __device_attach+0x2b8/0x430 [ 104.397779][ T5486] ? __pfx___device_attach+0x10/0x10 [ 104.397791][ T5486] ? usb_ifnum_to_if+0x262/0x2f0 [ 104.397803][ T5486] proc_ioctl+0x447/0x6c0 [ 104.397813][ T5486] proc_ioctl_default+0xbc/0x100 [ 104.397826][ T5486] ? __pfx_proc_ioctl_default+0x10/0x10 [ 104.397840][ T5486] usbdev_ioctl+0x1367/0x20b0 [ 104.397853][ T5486] ? __pfx_usbdev_ioctl+0x10/0x10 [ 104.397863][ T5486] ? ksys_write+0x1e1/0x250 [ 104.397878][ T5486] ? bpf_lsm_file_ioctl+0x9/0x20 [ 104.397887][ T5486] ? __pfx_usbdev_ioctl+0x10/0x10 [ 104.397898][ T5486] __se_sys_ioctl+0xfc/0x170 [ 104.397910][ T5486] do_syscall_64+0xec/0xf80 [ 104.397920][ T5486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.397929][ T5486] ? trace_irq_disable+0x37/0x100 [ 104.397941][ T5486] ? clear_bhb_loop+0x60/0xb0 [ 104.397952][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.397962][ T5486] RIP: 0033:0x7f297d78f7c9 [ 104.397972][ T5486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.397981][ T5486] RSP: 002b:00007ffef89f6238 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.397993][ T5486] RAX: ffffffffffffffda RBX: 00007f297d9e5fa0 RCX: 00007f297d78f7c9 [ 104.397999][ T5486] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000004 [ 104.398006][ T5486] RBP: 00007ffef89f6290 R08: 0000000000000000 R09: 0000000000000000 [ 104.398012][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.398018][ T5486] R13: 00007f297d9e5fa0 R14: 00007f297d9e5fa0 R15: 0000000000000003 [ 104.398029][ T5486] [ 104.398044][ T5486] BUG: unable to handle page fault for address: fffffffffffffff8 [ 104.588326][ T5486] #PF: supervisor read access in kernel mode [ 104.590953][ T5486] #PF: error_code(0x0000) - not-present page [ 104.593565][ T5486] PGD dd3f067 P4D dd3f067 PUD dd41067 PMD 0 [ 104.596209][ T5486] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 104.598549][ T5486] CPU: 0 UID: 0 PID: 5486 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 104.602453][ T5486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.607243][ T5486] RIP: 0010:complete+0x99/0x1b0 [ 104.609403][ T5486] Code: 89 e7 e8 8a ab 8d 00 4d 8b 3c 24 4d 39 e7 0f 84 d4 00 00 00 49 8d 7f f8 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 67 ab 8d 00 <49> 8b 7f f8 be 03 00 00 00 31 d2 e8 b7 60 f6 ff 4c 89 ff e8 df 51 [ 104.617750][ T5486] RSP: 0018:ffffc900083cf3f8 EFLAGS: 00010046 [ 104.620350][ T5486] RAX: 1fffffffffffffff RBX: ffff888040481638 RCX: dffffc0000000000 [ 104.623693][ T5486] RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffffffffffffff8 [ 104.627101][ T5486] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 104.630497][ T5486] R10: dffffc0000000000 R11: fffff52001079e6c R12: ffff888040481678 [ 104.633916][ T5486] R13: 0000000000000001 R14: 0000000000000286 R15: 0000000000000000 [ 104.637311][ T5486] FS: 00005555621b9500(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000 [ 104.641111][ T5486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.643967][ T5486] CR2: fffffffffffffff8 CR3: 000000001a1ba000 CR4: 0000000000352ef0 [ 104.647423][ T5486] Call Trace: [ 104.648866][ T5486] [ 104.650161][ T5486] ? i2c_adapter_dev_release+0xd/0x20 [ 104.652533][ T5486] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 104.655111][ T5486] device_release+0x9e/0x1d0 [ 104.657102][ T5486] kobject_put+0x228/0x570 [ 104.659026][ T5486] i2c_register_adapter+0x75f/0x1150 [ 104.661330][ T5486] ? __pfx_i2c_register_adapter+0x10/0x10 [ 104.663704][ T5486] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.666168][ T5486] ? idr_alloc+0x89/0xd0 [ 104.667970][ T5486] dvb_usb_i2c_init+0x202/0x2f0 [ 104.669995][ T5486] ? __pfx_cxusb_bluebird_power_ctrl+0x10/0x10 [ 104.672594][ T5486] dvb_usb_device_init+0xf23/0x2580 [ 104.674858][ T5486] ? trace_rpm_return_int+0x83/0x1e0 [ 104.677138][ T5486] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 104.679528][ T5486] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.681850][ T5486] cxusb_probe+0xff/0x700 [ 104.683700][ T5486] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 104.686228][ T5486] ? __pfx_cxusb_probe+0x10/0x10 [ 104.688415][ T5486] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 104.690947][ T5486] ? __pm_runtime_set_status+0x785/0xa50 [ 104.693384][ T5486] usb_probe_interface+0x668/0xc90 [ 104.695620][ T5486] ? __pfx_usb_probe_interface+0x10/0x10 [ 104.698008][ T5486] really_probe+0x26d/0xad0 [ 104.700025][ T5486] __driver_probe_device+0x18c/0x320 [ 104.702263][ T5486] driver_probe_device+0x4f/0x240 [ 104.704449][ T5486] __device_attach_driver+0x279/0x430 [ 104.706745][ T5486] bus_for_each_drv+0x251/0x2e0 [ 104.708818][ T5486] ? __pfx___device_attach_driver+0x10/0x10 [ 104.711366][ T5486] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.713619][ T5486] ? lockdep_hardirqs_on+0x7b/0x110 [ 104.715899][ T5486] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 104.718395][ T5486] __device_attach+0x2b8/0x430 [ 104.720459][ T5486] ? __pfx___device_attach+0x10/0x10 [ 104.722661][ T5486] ? usb_ifnum_to_if+0x262/0x2f0 [ 104.724722][ T5486] proc_ioctl+0x447/0x6c0 [ 104.726513][ T5486] proc_ioctl_default+0xbc/0x100 [ 104.728481][ T5486] ? __pfx_proc_ioctl_default+0x10/0x10 [ 104.730722][ T5486] usbdev_ioctl+0x1367/0x20b0 [ 104.732768][ T5486] ? __pfx_usbdev_ioctl+0x10/0x10 [ 104.734951][ T5486] ? ksys_write+0x1e1/0x250 [ 104.736950][ T5486] ? bpf_lsm_file_ioctl+0x9/0x20 [ 104.739138][ T5486] ? __pfx_usbdev_ioctl+0x10/0x10 [ 104.741303][ T5486] __se_sys_ioctl+0xfc/0x170 [ 104.743340][ T5486] do_syscall_64+0xec/0xf80 [ 104.745273][ T5486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.747870][ T5486] ? trace_irq_disable+0x37/0x100 [ 104.749963][ T5486] ? clear_bhb_loop+0x60/0xb0 [ 104.751984][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.754592][ T5486] RIP: 0033:0x7f297d78f7c9 [ 104.756653][ T5486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.764901][ T5486] RSP: 002b:00007ffef89f6238 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.768519][ T5486] RAX: ffffffffffffffda RBX: 00007f297d9e5fa0 RCX: 00007f297d78f7c9 [ 104.772426][ T5486] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000004 [ 104.776790][ T5486] RBP: 00007ffef89f6290 R08: 0000000000000000 R09: 0000000000000000 [ 104.780100][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.783483][ T5486] R13: 00007f297d9e5fa0 R14: 00007f297d9e5fa0 R15: 0000000000000003 [ 104.786853][ T5486] [ 104.788260][ T5486] Modules linked in: [ 104.790004][ T5486] CR2: fffffffffffffff8 [ 104.791889][ T5486] ---[ end trace 0000000000000000 ]--- [ 104.794184][ T5486] RIP: 0010:complete+0x99/0x1b0 [ 104.796318][ T5486] Code: 89 e7 e8 8a ab 8d 00 4d 8b 3c 24 4d 39 e7 0f 84 d4 00 00 00 49 8d 7f f8 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 67 ab 8d 00 <49> 8b 7f f8 be 03 00 00 00 31 d2 e8 b7 60 f6 ff 4c 89 ff e8 df 51 [ 104.804644][ T5486] RSP: 0018:ffffc900083cf3f8 EFLAGS: 00010046 [ 104.807290][ T5486] RAX: 1fffffffffffffff RBX: ffff888040481638 RCX: dffffc0000000000 [ 104.810690][ T5486] RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffffffffffffff8 [ 104.814110][ T5486] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 104.817654][ T5486] R10: dffffc0000000000 R11: fffff52001079e6c R12: ffff888040481678 [ 104.821086][ T5486] R13: 0000000000000001 R14: 0000000000000286 R15: 0000000000000000 [ 104.824525][ T5486] FS: 00005555621b9500(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000 [ 104.828399][ T5486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.831179][ T5486] CR2: fffffffffffffff8 CR3: 000000001a1ba000 CR4: 0000000000352ef0 [ 104.834591][ T5486] Kernel panic - not syncing: Fatal exception [ 104.837508][ T5486] Kernel Offset: disabled [ 104.839380][ T5486] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:49:09 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006e RBX=000000000000006e RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900083cec30 R8 =ffff888033c98237 R9 =1ffff11006793046 R10=dffffc0000000000 R11=ffffffff851bb2e0 R12=dffffc0000000000 R13=ffffffff998fea1d R14=ffffffff99c136a0 R15=0000000000000000 RIP=ffffffff851bb35c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555621b9500 ffffffff 00c00000 GS =0000 ffff88808d416000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b30c63fff CR3=000000001a1ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef89f6510 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297d815050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297d81505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297d815057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297d81506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297d8150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f297d8151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000