syzkaller login: [ 91.876854][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:44387' (ED25519) to the list of known hosts. 2026/01/02 05:38:12 parsed 1 programs [ 121.905826][ T5341] cgroup: Unknown subsys name 'net' [ 121.993618][ T5341] cgroup: Unknown subsys name 'cpuset' [ 122.010557][ T5341] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 123.774863][ T5341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 128.075567][ T5357] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 131.314681][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.318915][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.394354][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.398686][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.695868][ T5407] chnl_net:caif_netlink_parms(): no params data found [ 132.853525][ T5407] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.857728][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.861052][ T5407] bridge_slave_0: entered allmulticast mode [ 132.870269][ T5407] bridge_slave_0: entered promiscuous mode [ 132.876229][ T5407] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.889845][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.893323][ T5407] bridge_slave_1: entered allmulticast mode [ 132.899961][ T5407] bridge_slave_1: entered promiscuous mode [ 132.951698][ T5407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.971546][ T5407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.015928][ T5407] team0: Port device team_slave_0 added [ 133.030156][ T5407] team0: Port device team_slave_1 added [ 133.074440][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.077476][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.099404][ T5407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.109979][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.112788][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.139770][ T5407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.211462][ T5407] hsr_slave_0: entered promiscuous mode [ 133.214891][ T5407] hsr_slave_1: entered promiscuous mode [ 133.402860][ T5407] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.413159][ T5407] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.419576][ T5407] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.425613][ T5407] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.579085][ T5407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.620866][ T5407] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.633877][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.636734][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.656295][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.659410][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.969733][ T5407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.023062][ T5407] veth0_vlan: entered promiscuous mode [ 134.031967][ T5407] veth1_vlan: entered promiscuous mode [ 134.057759][ T5407] veth0_macvtap: entered promiscuous mode [ 134.065008][ T5407] veth1_macvtap: entered promiscuous mode [ 134.078062][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.087613][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.098669][ T3023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.108330][ T3023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.121038][ T3023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.124812][ T3023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.325860][ T1077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.332017][ T4682] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.336178][ T4682] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.341296][ T4682] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.345677][ T4682] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.351045][ T4682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.440954][ T1077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.493141][ T1077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.570544][ T1077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.689807][ T1077] bridge_slave_1: left allmulticast mode [ 136.692539][ T1077] bridge_slave_1: left promiscuous mode [ 136.710734][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.727702][ T1077] bridge_slave_0: left allmulticast mode [ 136.745760][ T1077] bridge_slave_0: left promiscuous mode [ 136.760924][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state 2026/01/02 05:38:30 executed programs: 0 [ 137.388288][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.399071][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.411315][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.415379][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.418870][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.422836][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.427106][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.440579][ T1077] bond0 (unregistering): Released all slaves [ 137.537098][ T1077] hsr_slave_0: left promiscuous mode [ 137.550731][ T1077] hsr_slave_1: left promiscuous mode [ 137.553983][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.556978][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.571406][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.574774][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.603282][ T1077] veth1_macvtap: left promiscuous mode [ 137.605733][ T1077] veth0_macvtap: left promiscuous mode [ 137.608281][ T1077] veth1_vlan: left promiscuous mode [ 137.619631][ T1077] veth0_vlan: left promiscuous mode [ 138.066218][ T1077] team0 (unregistering): Port device team_slave_1 removed [ 138.096061][ T1077] team0 (unregistering): Port device team_slave_0 removed [ 138.686183][ T5460] chnl_net:caif_netlink_parms(): no params data found [ 139.200619][ T5460] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.203853][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.207112][ T5460] bridge_slave_0: entered allmulticast mode [ 139.225389][ T5460] bridge_slave_0: entered promiscuous mode [ 139.240632][ T5460] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.243700][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.246698][ T5460] bridge_slave_1: entered allmulticast mode [ 139.259600][ T5460] bridge_slave_1: entered promiscuous mode [ 139.303726][ T5460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.324686][ T5460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.388245][ T5460] team0: Port device team_slave_0 added [ 139.420321][ T5460] team0: Port device team_slave_1 added [ 139.465988][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.469108][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.481554][ T46] Bluetooth: hci0: command tx timeout [ 139.506571][ T5460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.518848][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.522371][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.533494][ T5460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.598732][ T5460] hsr_slave_0: entered promiscuous mode [ 139.604666][ T5460] hsr_slave_1: entered promiscuous mode [ 140.112490][ T5460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.134044][ T5460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.153365][ T5460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.160981][ T5460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.294390][ T5460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.328677][ T5460] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.348359][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.351222][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.371081][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.374259][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.695131][ T5460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.773964][ T5460] veth0_vlan: entered promiscuous mode [ 140.794367][ T5460] veth1_vlan: entered promiscuous mode [ 140.846592][ T5460] veth0_macvtap: entered promiscuous mode [ 140.866385][ T5460] veth1_macvtap: entered promiscuous mode [ 140.892234][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.916357][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.936208][ T1077] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.951280][ T1077] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.975702][ T1077] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.985954][ T1077] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.064383][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.067906][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.131745][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.135378][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.473506][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 141.550250][ T46] Bluetooth: hci0: command tx timeout [ 141.643455][ T9] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 141.647405][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 141.659701][ T9] usb 5-1: Product: syz [ 141.661566][ T9] usb 5-1: Manufacturer: syz [ 141.663548][ T9] usb 5-1: SerialNumber: syz [ 141.682839][ T9] usb 5-1: config 0 descriptor?? [ 141.695992][ T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 141.714270][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 141.734628][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 141.753872][ T9] dvb-usb: DigitalNow DVB-T Dual USB error while loading driver (-19) [ 141.757913][ T9] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 141.892426][ T5526] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 141.899356][ T5526] dvb-usb: bulk message failed: -22 (2/0) [ 141.901794][ T5526] FAULT_INJECTION: forcing a failure. [ 141.901794][ T5526] name failslab, interval 1, probability 0, space 0, times 1 [ 141.906766][ T5526] CPU: 0 UID: 0 PID: 5526 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 141.906781][ T5526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.906788][ T5526] Call Trace: [ 141.906795][ T5526] [ 141.906800][ T5526] dump_stack_lvl+0xe8/0x150 [ 141.906916][ T5526] should_fail_ex+0x414/0x560 [ 141.906962][ T5526] should_failslab+0xa8/0x100 [ 141.906975][ T5526] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 141.906991][ T5526] ? kobject_set_name_vargs+0x61/0x110 [ 141.907037][ T5526] kvasprintf+0xdc/0x190 [ 141.907048][ T5526] ? __pfx_kvasprintf+0x10/0x10 [ 141.907064][ T5526] ? kvasprintf_const+0xe1/0x240 [ 141.907077][ T5526] kobject_set_name_vargs+0x61/0x110 [ 141.907089][ T5526] dev_set_name+0xd4/0x120 [ 141.907100][ T5526] ? __pfx___mutex_trylock_common+0x10/0x10 [ 141.907117][ T5526] ? __pfx_dev_set_name+0x10/0x10 [ 141.907132][ T5526] ? mutex_init_lockep+0xf9/0x130 [ 141.907144][ T5526] i2c_register_adapter+0x3fd/0x1150 [ 141.907192][ T5526] ? __pfx_i2c_register_adapter+0x10/0x10 [ 141.907206][ T5526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.907222][ T5526] ? idr_alloc+0x89/0xd0 [ 141.907240][ T5526] dvb_usb_i2c_init+0x202/0x2f0 [ 141.907251][ T5526] ? __pfx_cxusb_bluebird_power_ctrl+0x10/0x10 [ 141.907265][ T5526] dvb_usb_device_init+0xf23/0x2580 [ 141.907291][ T5526] ? trace_rpm_return_int+0x83/0x1e0 [ 141.907305][ T5526] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 141.907315][ T5526] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 141.907333][ T5526] cxusb_probe+0xff/0x700 [ 141.907344][ T5526] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 141.907360][ T5526] ? __pfx_cxusb_probe+0x10/0x10 [ 141.907370][ T5526] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.907383][ T5526] ? __pm_runtime_set_status+0x785/0xa50 [ 141.907403][ T5526] usb_probe_interface+0x668/0xc90 [ 141.907428][ T5526] ? __pfx_usb_probe_interface+0x10/0x10 [ 141.907438][ T5526] really_probe+0x26d/0xad0 [ 141.907451][ T5526] __driver_probe_device+0x18c/0x320 [ 141.907468][ T5526] driver_probe_device+0x4f/0x240 [ 141.907478][ T5526] __device_attach_driver+0x279/0x430 [ 141.907491][ T5526] bus_for_each_drv+0x251/0x2e0 [ 141.907504][ T5526] ? __pfx___device_attach_driver+0x10/0x10 [ 141.907520][ T5526] ? __pfx_bus_for_each_drv+0x10/0x10 [ 141.907531][ T5526] ? lockdep_hardirqs_on+0x7b/0x110 [ 141.907540][ T5526] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.907556][ T5526] __device_attach+0x2b8/0x430 [ 141.907572][ T5526] ? __pfx___device_attach+0x10/0x10 [ 141.907587][ T5526] ? usb_ifnum_to_if+0x262/0x2f0 [ 141.907602][ T5526] proc_ioctl+0x447/0x6c0 [ 141.907616][ T5526] proc_ioctl_default+0xbc/0x100 [ 141.907631][ T5526] ? __pfx_proc_ioctl_default+0x10/0x10 [ 141.907650][ T5526] usbdev_ioctl+0x1367/0x20b0 [ 141.907666][ T5526] ? __pfx_usbdev_ioctl+0x10/0x10 [ 141.907676][ T5526] ? ksys_write+0x1e1/0x250 [ 141.907693][ T5526] ? bpf_lsm_file_ioctl+0x9/0x20 [ 141.907704][ T5526] ? __pfx_usbdev_ioctl+0x10/0x10 [ 141.907715][ T5526] __se_sys_ioctl+0xfc/0x170 [ 141.907730][ T5526] do_syscall_64+0xec/0xf80 [ 141.907739][ T5526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.907748][ T5526] ? trace_irq_disable+0x37/0x100 [ 141.907760][ T5526] ? clear_bhb_loop+0x60/0xb0 [ 141.907773][ T5526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.907783][ T5526] RIP: 0033:0x7f673fd8f7c9 [ 141.907795][ T5526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.907803][ T5526] RSP: 002b:00007ffecf92b5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.907814][ T5526] RAX: ffffffffffffffda RBX: 00007f673ffe5fa0 RCX: 00007f673fd8f7c9 [ 141.907819][ T5526] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000004 [ 141.907823][ T5526] RBP: 00007ffecf92b610 R08: 0000000000000000 R09: 0000000000000000 [ 141.907827][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.907831][ T5526] R13: 00007f673ffe5fa0 R14: 00007f673ffe5fa0 R15: 0000000000000003 [ 141.907841][ T5526] [ 141.907885][ T5526] i2c-core: adapter 'DigitalNow DVB-T Dual USB': can't register device (-22) [ 142.138640][ T5526] INFO: trying to register non-static key. [ 142.141226][ T5526] The code is fine but needs lockdep annotation, or maybe [ 142.144793][ T5526] you didn't initialize this object before use? [ 142.147535][ T5526] turning off the locking correctness validator. [ 142.150203][ T5526] CPU: 0 UID: 0 PID: 5526 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 142.150217][ T5526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.150223][ T5526] Call Trace: [ 142.150230][ T5526] [ 142.150236][ T5526] dump_stack_lvl+0xe8/0x150 [ 142.150344][ T5526] assign_lock_key+0x133/0x150 [ 142.150353][ T5526] register_lock_class+0xcc/0x2e0 [ 142.150360][ T5526] __lock_acquire+0xae/0x2cf0 [ 142.150366][ T5526] ? __irq_work_queue_local+0x1de/0x530 [ 142.150375][ T5526] ? __pfx___irq_work_queue_local+0x10/0x10 [ 142.150383][ T5526] ? console_unlock+0x13a/0x190 [ 142.150391][ T5526] ? preempt_schedule_thunk+0x16/0x30 [ 142.150398][ T5526] ? irq_work_queue+0xbc/0x140 [ 142.150406][ T5526] ? complete+0x28/0x1b0 [ 142.150414][ T5526] lock_acquire+0x107/0x340 [ 142.150420][ T5526] ? complete+0x28/0x1b0 [ 142.150427][ T5526] ? devres_release_all+0x1ca/0x230 [ 142.150466][ T5526] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 142.150507][ T5526] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 142.150518][ T5526] _raw_spin_lock_irqsave+0x40/0x60 [ 142.150561][ T5526] ? complete+0x28/0x1b0 [ 142.150571][ T5526] complete+0x28/0x1b0 [ 142.150581][ T5526] ? i2c_adapter_dev_release+0xd/0x20 [ 142.150594][ T5526] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 142.150606][ T5526] device_release+0x9e/0x1d0 [ 142.150617][ T5526] kobject_put+0x228/0x570 [ 142.150630][ T5526] i2c_register_adapter+0x75f/0x1150 [ 142.150644][ T5526] ? __pfx_i2c_register_adapter+0x10/0x10 [ 142.150652][ T5526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.150660][ T5526] ? idr_alloc+0x89/0xd0 [ 142.150670][ T5526] dvb_usb_i2c_init+0x202/0x2f0 [ 142.150677][ T5526] ? __pfx_cxusb_bluebird_power_ctrl+0x10/0x10 [ 142.150689][ T5526] dvb_usb_device_init+0xf23/0x2580 [ 142.150703][ T5526] ? trace_rpm_return_int+0x83/0x1e0 [ 142.150714][ T5526] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 142.150723][ T5526] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.150748][ T5526] cxusb_probe+0xff/0x700 [ 142.150759][ T5526] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 142.150771][ T5526] ? __pfx_cxusb_probe+0x10/0x10 [ 142.150780][ T5526] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 142.150792][ T5526] ? __pm_runtime_set_status+0x785/0xa50 [ 142.150808][ T5526] usb_probe_interface+0x668/0xc90 [ 142.150822][ T5526] ? __pfx_usb_probe_interface+0x10/0x10 [ 142.150832][ T5526] really_probe+0x26d/0xad0 [ 142.150842][ T5526] __driver_probe_device+0x18c/0x320 [ 142.150852][ T5526] driver_probe_device+0x4f/0x240 [ 142.150858][ T5526] __device_attach_driver+0x279/0x430 [ 142.150865][ T5526] bus_for_each_drv+0x251/0x2e0 [ 142.150872][ T5526] ? __pfx___device_attach_driver+0x10/0x10 [ 142.150878][ T5526] ? __pfx_bus_for_each_drv+0x10/0x10 [ 142.150887][ T5526] ? lockdep_hardirqs_on+0x7b/0x110 [ 142.150895][ T5526] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 142.150908][ T5526] __device_attach+0x2b8/0x430 [ 142.150921][ T5526] ? __pfx___device_attach+0x10/0x10 [ 142.150935][ T5526] ? usb_ifnum_to_if+0x262/0x2f0 [ 142.150947][ T5526] proc_ioctl+0x447/0x6c0 [ 142.150956][ T5526] proc_ioctl_default+0xbc/0x100 [ 142.150969][ T5526] ? __pfx_proc_ioctl_default+0x10/0x10 [ 142.150983][ T5526] usbdev_ioctl+0x1367/0x20b0 [ 142.151092][ T5526] ? __pfx_usbdev_ioctl+0x10/0x10 [ 142.151103][ T5526] ? ksys_write+0x1e1/0x250 [ 142.151117][ T5526] ? bpf_lsm_file_ioctl+0x9/0x20 [ 142.151127][ T5526] ? __pfx_usbdev_ioctl+0x10/0x10 [ 142.151139][ T5526] __se_sys_ioctl+0xfc/0x170 [ 142.151157][ T5526] do_syscall_64+0xec/0xf80 [ 142.151167][ T5526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.151175][ T5526] ? trace_irq_disable+0x37/0x100 [ 142.151184][ T5526] ? clear_bhb_loop+0x60/0xb0 [ 142.151191][ T5526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.151197][ T5526] RIP: 0033:0x7f673fd8f7c9 [ 142.151206][ T5526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.151214][ T5526] RSP: 002b:00007ffecf92b5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.151226][ T5526] RAX: ffffffffffffffda RBX: 00007f673ffe5fa0 RCX: 00007f673fd8f7c9 [ 142.151233][ T5526] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000004 [ 142.151239][ T5526] RBP: 00007ffecf92b610 R08: 0000000000000000 R09: 0000000000000000 [ 142.151244][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.151250][ T5526] R13: 00007f673ffe5fa0 R14: 00007f673ffe5fa0 R15: 0000000000000003 [ 142.151258][ T5526] [ 142.151274][ T5526] BUG: unable to handle page fault for address: fffffffffffffff8 [ 142.343736][ T5526] #PF: supervisor read access in kernel mode [ 142.346271][ T5526] #PF: error_code(0x0000) - not-present page [ 142.348756][ T5526] PGD dd3f067 P4D dd3f067 PUD dd41067 PMD 0 [ 142.351391][ T5526] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 142.353728][ T5526] CPU: 0 UID: 0 PID: 5526 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 142.357627][ T5526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.362384][ T5526] RIP: 0010:complete+0x99/0x1b0 [ 142.364513][ T5526] Code: 89 e7 e8 8a ab 8d 00 4d 8b 3c 24 4d 39 e7 0f 84 d4 00 00 00 49 8d 7f f8 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 67 ab 8d 00 <49> 8b 7f f8 be 03 00 00 00 31 d2 e8 b7 60 f6 ff 4c 89 ff e8 df 51 [ 142.372881][ T5526] RSP: 0018:ffffc90002b073f8 EFLAGS: 00010046 [ 142.375424][ T5526] RAX: 1fffffffffffffff RBX: ffff88801fd15638 RCX: dffffc0000000000 [ 142.378928][ T5526] RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffffffffffffff8 [ 142.382426][ T5526] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 142.385776][ T5526] R10: dffffc0000000000 R11: fffff52000560e6c R12: ffff88801fd15678 [ 142.389238][ T5526] R13: 0000000000000001 R14: 0000000000000286 R15: 0000000000000000 [ 142.392637][ T5526] FS: 000055556f906500(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000 [ 142.396457][ T5526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.399312][ T5526] CR2: fffffffffffffff8 CR3: 000000003f85d000 CR4: 0000000000352ef0 [ 142.402787][ T5526] Call Trace: [ 142.404324][ T5526] [ 142.405610][ T5526] ? i2c_adapter_dev_release+0xd/0x20 [ 142.407918][ T5526] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 142.410498][ T5526] device_release+0x9e/0x1d0 [ 142.412554][ T5526] kobject_put+0x228/0x570 [ 142.414459][ T5526] i2c_register_adapter+0x75f/0x1150 [ 142.416839][ T5526] ? __pfx_i2c_register_adapter+0x10/0x10 [ 142.419346][ T5526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.421974][ T5526] ? idr_alloc+0x89/0xd0 [ 142.423827][ T5526] dvb_usb_i2c_init+0x202/0x2f0 [ 142.425999][ T5526] ? __pfx_cxusb_bluebird_power_ctrl+0x10/0x10 [ 142.428701][ T5526] dvb_usb_device_init+0xf23/0x2580 [ 142.430991][ T5526] ? trace_rpm_return_int+0x83/0x1e0 [ 142.433370][ T5526] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 142.435837][ T5526] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.438220][ T5526] cxusb_probe+0xff/0x700 [ 142.440105][ T5526] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 142.442698][ T5526] ? __pfx_cxusb_probe+0x10/0x10 [ 142.444922][ T5526] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 142.447580][ T5526] ? __pm_runtime_set_status+0x785/0xa50 [ 142.450076][ T5526] usb_probe_interface+0x668/0xc90 [ 142.452381][ T5526] ? __pfx_usb_probe_interface+0x10/0x10 [ 142.454967][ T5526] really_probe+0x26d/0xad0 [ 142.456952][ T5526] __driver_probe_device+0x18c/0x320 [ 142.459292][ T5526] driver_probe_device+0x4f/0x240 [ 142.461484][ T5526] __device_attach_driver+0x279/0x430 [ 142.463851][ T5526] bus_for_each_drv+0x251/0x2e0 [ 142.465966][ T5526] ? __pfx___device_attach_driver+0x10/0x10 [ 142.468486][ T5526] ? __pfx_bus_for_each_drv+0x10/0x10 [ 142.470797][ T5526] ? lockdep_hardirqs_on+0x7b/0x110 [ 142.473040][ T5526] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 142.475594][ T5526] __device_attach+0x2b8/0x430 [ 142.477667][ T5526] ? __pfx___device_attach+0x10/0x10 [ 142.479958][ T5526] ? usb_ifnum_to_if+0x262/0x2f0 [ 142.482226][ T5526] proc_ioctl+0x447/0x6c0 [ 142.484122][ T5526] proc_ioctl_default+0xbc/0x100 [ 142.486247][ T5526] ? __pfx_proc_ioctl_default+0x10/0x10 [ 142.488599][ T5526] usbdev_ioctl+0x1367/0x20b0 [ 142.490628][ T5526] ? __pfx_usbdev_ioctl+0x10/0x10 [ 142.492769][ T5526] ? ksys_write+0x1e1/0x250 [ 142.494691][ T5526] ? bpf_lsm_file_ioctl+0x9/0x20 [ 142.496816][ T5526] ? __pfx_usbdev_ioctl+0x10/0x10 [ 142.499026][ T5526] __se_sys_ioctl+0xfc/0x170 [ 142.501042][ T5526] do_syscall_64+0xec/0xf80 [ 142.503057][ T5526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.505559][ T5526] ? trace_irq_disable+0x37/0x100 [ 142.507754][ T5526] ? clear_bhb_loop+0x60/0xb0 [ 142.509794][ T5526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.512422][ T5526] RIP: 0033:0x7f673fd8f7c9 [ 142.514344][ T5526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.522228][ T5526] RSP: 002b:00007ffecf92b5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.525486][ T5526] RAX: ffffffffffffffda RBX: 00007f673ffe5fa0 RCX: 00007f673fd8f7c9 [ 142.528799][ T5526] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000004 [ 142.532123][ T5526] RBP: 00007ffecf92b610 R08: 0000000000000000 R09: 0000000000000000 [ 142.535440][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.538836][ T5526] R13: 00007f673ffe5fa0 R14: 00007f673ffe5fa0 R15: 0000000000000003 [ 142.542232][ T5526] [ 142.543605][ T5526] Modules linked in: [ 142.545290][ T5526] CR2: fffffffffffffff8 [ 142.547071][ T5526] ---[ end trace 0000000000000000 ]--- [ 142.549427][ T5526] RIP: 0010:complete+0x99/0x1b0 [ 142.551509][ T5526] Code: 89 e7 e8 8a ab 8d 00 4d 8b 3c 24 4d 39 e7 0f 84 d4 00 00 00 49 8d 7f f8 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 67 ab 8d 00 <49> 8b 7f f8 be 03 00 00 00 31 d2 e8 b7 60 f6 ff 4c 89 ff e8 df 51 [ 142.559568][ T5526] RSP: 0018:ffffc90002b073f8 EFLAGS: 00010046 [ 142.562193][ T5526] RAX: 1fffffffffffffff RBX: ffff88801fd15638 RCX: dffffc0000000000 [ 142.565602][ T5526] RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffffffffffffff8 [ 142.569088][ T5526] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 142.572614][ T5526] R10: dffffc0000000000 R11: fffff52000560e6c R12: ffff88801fd15678 [ 142.576129][ T5526] R13: 0000000000000001 R14: 0000000000000286 R15: 0000000000000000 [ 142.579615][ T5526] FS: 000055556f906500(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000 [ 142.583596][ T5526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.586519][ T5526] CR2: fffffffffffffff8 CR3: 000000003f85d000 CR4: 0000000000352ef0 [ 142.590058][ T5526] Kernel panic - not syncing: Fatal exception [ 142.592988][ T5526] Kernel Offset: disabled [ 142.594975][ T5526] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:38:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002b06c30 R8 =ffff888033d10237 R9 =1ffff110067a2046 R10=dffffc0000000000 R11=ffffffff851bb2e0 R12=dffffc0000000000 R13=ffffffff998fea18 R14=ffffffff99c136a0 R15=0000000000000000 RIP=ffffffff851bb35c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556f906500 ffffffff 00c00000 GS =0000 ffff88808d416000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffec1c7b048 CR3=000000003f85d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffecf92b890 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f673fe15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f673fe1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f673fe15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f673fe1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f673fe150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f673fe151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000