Warning: Permanently added '[localhost]:2942' (ED25519) to the list of known hosts. 2026/01/02 04:59:10 parsed 1 programs syzkaller login: [ 87.443200][ T5323] cgroup: Unknown subsys name 'net' [ 87.524365][ T5323] cgroup: Unknown subsys name 'cpuset' [ 87.529525][ T5323] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.219227][ T5323] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.009025][ T5323] ODEBUG: Out of memory. ODEBUG disabled [ 91.826591][ T806] cfg80211: failed to load regulatory.db [ 94.413808][ T5341] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.012021][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 95.167481][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.171448][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.174602][ T5346] bridge_slave_0: entered allmulticast mode [ 95.191394][ T5346] bridge_slave_0: entered promiscuous mode [ 95.196715][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.199885][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.211381][ T5346] bridge_slave_1: entered allmulticast mode [ 95.215175][ T5346] bridge_slave_1: entered promiscuous mode [ 95.259646][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.275234][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.321562][ T5346] team0: Port device team_slave_0 added [ 95.333056][ T5346] team0: Port device team_slave_1 added [ 95.371312][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.374196][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.401312][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.411229][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.413976][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.441386][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.512573][ T5346] hsr_slave_0: entered promiscuous mode [ 95.515759][ T5346] hsr_slave_1: entered promiscuous mode [ 95.819770][ T5346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.843361][ T5346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.862768][ T5346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.869019][ T5346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.925850][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.929096][ T5346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.932589][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.935608][ T5346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.984353][ T4055] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.989345][ T4055] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.052857][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.075554][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.102535][ T3886] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.105492][ T3886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.112707][ T3886] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.115525][ T3886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.166974][ T5346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.181578][ T5346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.400527][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.459516][ T5346] veth0_vlan: entered promiscuous mode [ 96.483605][ T5346] veth1_vlan: entered promiscuous mode [ 96.525958][ T5346] veth0_macvtap: entered promiscuous mode [ 96.544702][ T5346] veth1_macvtap: entered promiscuous mode [ 96.575134][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.594593][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.633995][ T3886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.639740][ T3886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.652298][ T3886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.655975][ T3886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.890320][ T2984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.910748][ T5369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.915205][ T5369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.918293][ T5369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.922170][ T5369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.925565][ T5369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.012726][ T2984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.083300][ T2984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.172518][ T2984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.645229][ T3958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.648758][ T3958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.696237][ T3886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.699605][ T3886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.211631][ T2984] bridge_slave_1: left allmulticast mode [ 99.214378][ T2984] bridge_slave_1: left promiscuous mode [ 99.217485][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.243990][ T2984] bridge_slave_0: left allmulticast mode [ 99.246390][ T2984] bridge_slave_0: left promiscuous mode [ 99.249233][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.512755][ T2984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.518889][ T2984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.523979][ T2984] bond0 (unregistering): Released all slaves [ 99.591680][ T2984] hsr_slave_0: left promiscuous mode [ 99.598195][ T2984] hsr_slave_1: left promiscuous mode [ 99.601753][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.604884][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.608755][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.613890][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.625350][ T2984] veth1_macvtap: left promiscuous mode [ 99.628290][ T2984] veth0_macvtap: left promiscuous mode [ 99.630744][ T2984] veth1_vlan: left promiscuous mode [ 99.634327][ T2984] veth0_vlan: left promiscuous mode [ 99.944763][ T2984] team0 (unregistering): Port device team_slave_1 removed [ 99.966122][ T2984] team0 (unregistering): Port device team_slave_0 removed 2026/01/02 04:59:29 executed programs: 0 [ 104.403639][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.407595][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.410879][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.418634][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.421799][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.595518][ T5469] chnl_net:caif_netlink_parms(): no params data found [ 104.659006][ T5469] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.662624][ T5469] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.665485][ T5469] bridge_slave_0: entered allmulticast mode [ 104.668946][ T5469] bridge_slave_0: entered promiscuous mode [ 104.673559][ T5469] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.676432][ T5469] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.679534][ T5469] bridge_slave_1: entered allmulticast mode [ 104.683531][ T5469] bridge_slave_1: entered promiscuous mode [ 104.708002][ T5469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.714050][ T5469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.736070][ T5469] team0: Port device team_slave_0 added [ 104.740405][ T5469] team0: Port device team_slave_1 added [ 104.760619][ T5469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.764022][ T5469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.775920][ T5469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.791698][ T5469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.794701][ T5469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.808373][ T5469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.841734][ T5469] hsr_slave_0: entered promiscuous mode [ 104.844917][ T5469] hsr_slave_1: entered promiscuous mode [ 105.253591][ T5469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.270096][ T5469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.280159][ T5469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.304088][ T5469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.343909][ T5469] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.347110][ T5469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.350471][ T5469] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.353791][ T5469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.465334][ T5469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.498653][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.512644][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.527586][ T5469] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.547310][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.550310][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.573886][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.577017][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.900475][ T5469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.972693][ T5469] veth0_vlan: entered promiscuous mode [ 105.994455][ T5469] veth1_vlan: entered promiscuous mode [ 106.038798][ T5469] veth0_macvtap: entered promiscuous mode [ 106.053361][ T5469] veth1_macvtap: entered promiscuous mode [ 106.084929][ T5469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.103793][ T5469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.125537][ T73] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.145004][ T2984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.148940][ T2984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.165645][ T2984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.229770][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.235189][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.292152][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.295504][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.468093][ T46] Bluetooth: hci0: command tx timeout [ 106.631066][ T5509] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 106.789000][ T5509] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 106.802944][ T5509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 106.806476][ T5509] usb 5-1: Product: syz [ 106.808221][ T5509] usb 5-1: Manufacturer: syz [ 106.810195][ T5509] usb 5-1: SerialNumber: syz [ 106.834568][ T5509] usb 5-1: config 0 descriptor?? [ 106.856189][ T5509] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 106.859984][ T5509] dvb-usb: bulk message failed: -22 (2/0) [ 106.893895][ T5509] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 106.924698][ T5509] dvb-usb: DigitalNow DVB-T Dual USB error while loading driver (-19) [ 106.928628][ T5509] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 107.040801][ T5513] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 107.046689][ T5513] dvb-usb: bulk message failed: -22 (2/0) [ 107.055681][ T5513] FAULT_INJECTION: forcing a failure. [ 107.055681][ T5513] name failslab, interval 1, probability 0, space 0, times 1 [ 107.071886][ T5513] CPU: 0 UID: 0 PID: 5513 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 107.071905][ T5513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.071912][ T5513] Call Trace: [ 107.071917][ T5513] [ 107.071922][ T5513] dump_stack_lvl+0xe8/0x150 [ 107.072038][ T5513] should_fail_ex+0x414/0x560 [ 107.072089][ T5513] should_failslab+0xa8/0x100 [ 107.072102][ T5513] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 107.072121][ T5513] ? kobject_set_name_vargs+0x61/0x110 [ 107.072167][ T5513] kvasprintf+0xdc/0x190 [ 107.072182][ T5513] ? __pfx_kvasprintf+0x10/0x10 [ 107.072200][ T5513] ? kvasprintf_const+0xe1/0x240 [ 107.072213][ T5513] kobject_set_name_vargs+0x61/0x110 [ 107.072227][ T5513] dev_set_name+0xd4/0x120 [ 107.072242][ T5513] ? __pfx___mutex_trylock_common+0x10/0x10 [ 107.072258][ T5513] ? __pfx_dev_set_name+0x10/0x10 [ 107.072276][ T5513] ? mutex_init_lockep+0xf9/0x130 [ 107.072291][ T5513] i2c_register_adapter+0x3fd/0x1150 [ 107.072341][ T5513] ? __pfx_i2c_register_adapter+0x10/0x10 [ 107.072357][ T5513] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.072377][ T5513] ? idr_alloc+0x89/0xd0 [ 107.072398][ T5513] dvb_usb_i2c_init+0x202/0x2f0 [ 107.072410][ T5513] ? __pfx_cxusb_bluebird_power_ctrl+0x10/0x10 [ 107.072426][ T5513] dvb_usb_device_init+0xf23/0x2580 [ 107.072462][ T5513] ? trace_rpm_return_int+0x83/0x1e0 [ 107.072479][ T5513] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 107.072491][ T5513] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 107.072513][ T5513] cxusb_probe+0xff/0x700 [ 107.072526][ T5513] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 107.072543][ T5513] ? __pfx_cxusb_probe+0x10/0x10 [ 107.072555][ T5513] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 107.072570][ T5513] ? __pm_runtime_set_status+0x785/0xa50 [ 107.072591][ T5513] usb_probe_interface+0x668/0xc90 [ 107.072612][ T5513] ? __pfx_usb_probe_interface+0x10/0x10 [ 107.072623][ T5513] really_probe+0x26d/0xad0 [ 107.072639][ T5513] __driver_probe_device+0x18c/0x320 [ 107.072658][ T5513] driver_probe_device+0x4f/0x240 [ 107.072671][ T5513] __device_attach_driver+0x279/0x430 [ 107.072684][ T5513] bus_for_each_drv+0x251/0x2e0 [ 107.072698][ T5513] ? __pfx___device_attach_driver+0x10/0x10 [ 107.072707][ T5513] ? __pfx_bus_for_each_drv+0x10/0x10 [ 107.072721][ T5513] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.072731][ T5513] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 107.072749][ T5513] __device_attach+0x2b8/0x430 [ 107.072767][ T5513] ? __pfx___device_attach+0x10/0x10 [ 107.072785][ T5513] ? usb_ifnum_to_if+0x262/0x2f0 [ 107.072801][ T5513] proc_ioctl+0x447/0x6c0 [ 107.072816][ T5513] proc_ioctl_default+0xbc/0x100 [ 107.072833][ T5513] ? __pfx_proc_ioctl_default+0x10/0x10 [ 107.072854][ T5513] usbdev_ioctl+0x1367/0x20b0 [ 107.072875][ T5513] ? __pfx_usbdev_ioctl+0x10/0x10 [ 107.072887][ T5513] ? ksys_write+0x1e1/0x250 [ 107.072907][ T5513] ? bpf_lsm_file_ioctl+0x9/0x20 [ 107.072918][ T5513] ? __pfx_usbdev_ioctl+0x10/0x10 [ 107.072931][ T5513] __se_sys_ioctl+0xfc/0x170 [ 107.072949][ T5513] do_syscall_64+0xec/0xf80 [ 107.072959][ T5513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.072970][ T5513] ? trace_irq_disable+0x37/0x100 [ 107.072984][ T5513] ? clear_bhb_loop+0x60/0xb0 [ 107.072997][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.073008][ T5513] RIP: 0033:0x7f6ec518f7c9 [ 107.073020][ T5513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.073029][ T5513] RSP: 002b:00007ffeb9b5b388 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.073043][ T5513] RAX: ffffffffffffffda RBX: 00007f6ec53e5fa0 RCX: 00007f6ec518f7c9 [ 107.073051][ T5513] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000004 [ 107.073057][ T5513] RBP: 00007ffeb9b5b3e0 R08: 0000000000000000 R09: 0000000000000000 [ 107.073064][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.073071][ T5513] R13: 00007f6ec53e5fa0 R14: 00007f6ec53e5fa0 R15: 0000000000000003 [ 107.073090][ T5513] [ 107.073135][ T5513] i2c-core: adapter 'DigitalNow DVB-T Dual USB': can't register device (-22) [ 107.313720][ T5513] INFO: trying to register non-static key. [ 107.316388][ T5513] The code is fine but needs lockdep annotation, or maybe [ 107.320256][ T5513] you didn't initialize this object before use? [ 107.323085][ T5513] turning off the locking correctness validator. [ 107.325847][ T5513] CPU: 0 UID: 0 PID: 5513 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 107.325867][ T5513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.325873][ T5513] Call Trace: [ 107.325880][ T5513] [ 107.325885][ T5513] dump_stack_lvl+0xe8/0x150 [ 107.325907][ T5513] assign_lock_key+0x133/0x150 [ 107.325919][ T5513] register_lock_class+0xcc/0x2e0 [ 107.325933][ T5513] __lock_acquire+0xae/0x2cf0 [ 107.325943][ T5513] ? __irq_work_queue_local+0x1de/0x530 [ 107.325959][ T5513] ? __pfx___irq_work_queue_local+0x10/0x10 [ 107.325972][ T5513] ? console_unlock+0x13a/0x190 [ 107.325984][ T5513] ? preempt_schedule_thunk+0x16/0x30 [ 107.325995][ T5513] ? irq_work_queue+0xbc/0x140 [ 107.326013][ T5513] ? complete+0x28/0x1b0 [ 107.326025][ T5513] lock_acquire+0x107/0x340 [ 107.326034][ T5513] ? complete+0x28/0x1b0 [ 107.326045][ T5513] ? devres_release_all+0x1ca/0x230 [ 107.326057][ T5513] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 107.326073][ T5513] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 107.326085][ T5513] _raw_spin_lock_irqsave+0x40/0x60 [ 107.326104][ T5513] ? complete+0x28/0x1b0 [ 107.326114][ T5513] complete+0x28/0x1b0 [ 107.326130][ T5513] ? i2c_adapter_dev_release+0xd/0x20 [ 107.326147][ T5513] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 107.326160][ T5513] device_release+0x9e/0x1d0 [ 107.326172][ T5513] kobject_put+0x228/0x570 [ 107.326189][ T5513] i2c_register_adapter+0x75f/0x1150 [ 107.326205][ T5513] ? __pfx_i2c_register_adapter+0x10/0x10 [ 107.326219][ T5513] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.326232][ T5513] ? idr_alloc+0x89/0xd0 [ 107.326253][ T5513] dvb_usb_i2c_init+0x202/0x2f0 [ 107.326265][ T5513] ? __pfx_cxusb_bluebird_power_ctrl+0x10/0x10 [ 107.326279][ T5513] dvb_usb_device_init+0xf23/0x2580 [ 107.326297][ T5513] ? trace_rpm_return_int+0x83/0x1e0 [ 107.326309][ T5513] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 107.326320][ T5513] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 107.326340][ T5513] cxusb_probe+0xff/0x700 [ 107.326352][ T5513] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 107.326366][ T5513] ? __pfx_cxusb_probe+0x10/0x10 [ 107.326375][ T5513] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 107.326389][ T5513] ? __pm_runtime_set_status+0x785/0xa50 [ 107.326405][ T5513] usb_probe_interface+0x668/0xc90 [ 107.326420][ T5513] ? __pfx_usb_probe_interface+0x10/0x10 [ 107.326430][ T5513] really_probe+0x26d/0xad0 [ 107.326440][ T5513] __driver_probe_device+0x18c/0x320 [ 107.326453][ T5513] driver_probe_device+0x4f/0x240 [ 107.326461][ T5513] __device_attach_driver+0x279/0x430 [ 107.326470][ T5513] bus_for_each_drv+0x251/0x2e0 [ 107.326481][ T5513] ? __pfx___device_attach_driver+0x10/0x10 [ 107.326490][ T5513] ? __pfx_bus_for_each_drv+0x10/0x10 [ 107.326499][ T5513] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.326509][ T5513] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 107.326523][ T5513] __device_attach+0x2b8/0x430 [ 107.326536][ T5513] ? __pfx___device_attach+0x10/0x10 [ 107.326547][ T5513] ? usb_ifnum_to_if+0x262/0x2f0 [ 107.326559][ T5513] proc_ioctl+0x447/0x6c0 [ 107.326568][ T5513] proc_ioctl_default+0xbc/0x100 [ 107.326578][ T5513] ? __pfx_proc_ioctl_default+0x10/0x10 [ 107.326592][ T5513] usbdev_ioctl+0x1367/0x20b0 [ 107.326605][ T5513] ? __pfx_usbdev_ioctl+0x10/0x10 [ 107.326614][ T5513] ? ksys_write+0x1e1/0x250 [ 107.326636][ T5513] ? bpf_lsm_file_ioctl+0x9/0x20 [ 107.326646][ T5513] ? __pfx_usbdev_ioctl+0x10/0x10 [ 107.326658][ T5513] __se_sys_ioctl+0xfc/0x170 [ 107.326674][ T5513] do_syscall_64+0xec/0xf80 [ 107.326684][ T5513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.326695][ T5513] ? trace_irq_disable+0x37/0x100 [ 107.326709][ T5513] ? clear_bhb_loop+0x60/0xb0 [ 107.326721][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.326732][ T5513] RIP: 0033:0x7f6ec518f7c9 [ 107.326743][ T5513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.326753][ T5513] RSP: 002b:00007ffeb9b5b388 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.326766][ T5513] RAX: ffffffffffffffda RBX: 00007f6ec53e5fa0 RCX: 00007f6ec518f7c9 [ 107.326774][ T5513] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000004 [ 107.326781][ T5513] RBP: 00007ffeb9b5b3e0 R08: 0000000000000000 R09: 0000000000000000 [ 107.326788][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.326794][ T5513] R13: 00007f6ec53e5fa0 R14: 00007f6ec53e5fa0 R15: 0000000000000003 [ 107.326805][ T5513] [ 107.326821][ T5513] BUG: unable to handle page fault for address: fffffffffffffff8 [ 107.515801][ T5513] #PF: supervisor read access in kernel mode [ 107.518416][ T5513] #PF: error_code(0x0000) - not-present page [ 107.521019][ T5513] PGD dd3f067 P4D dd3f067 PUD dd41067 PMD 0 [ 107.523670][ T5513] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 107.526108][ T5513] CPU: 0 UID: 0 PID: 5513 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 107.529949][ T5513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.534635][ T5513] RIP: 0010:complete+0x99/0x1b0 [ 107.536795][ T5513] Code: 89 e7 e8 8a ab 8d 00 4d 8b 3c 24 4d 39 e7 0f 84 d4 00 00 00 49 8d 7f f8 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 67 ab 8d 00 <49> 8b 7f f8 be 03 00 00 00 31 d2 e8 b7 60 f6 ff 4c 89 ff e8 df 51 [ 107.545059][ T5513] RSP: 0018:ffffc900028ff3f8 EFLAGS: 00010046 [ 107.547698][ T5513] RAX: 1fffffffffffffff RBX: ffff8880405b9638 RCX: dffffc0000000000 [ 107.551145][ T5513] RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffffffffffffff8 [ 107.554610][ T5513] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 107.558100][ T5513] R10: dffffc0000000000 R11: fffff5200051fe6c R12: ffff8880405b9678 [ 107.561634][ T5513] R13: 0000000000000001 R14: 0000000000000286 R15: 0000000000000000 [ 107.565093][ T5513] FS: 0000555560ff1500(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000 [ 107.568975][ T5513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.571889][ T5513] CR2: fffffffffffffff8 CR3: 000000004378f000 CR4: 0000000000352ef0 [ 107.575352][ T5513] Call Trace: [ 107.576873][ T5513] [ 107.578195][ T5513] ? i2c_adapter_dev_release+0xd/0x20 [ 107.580456][ T5513] ? __pfx_i2c_adapter_dev_release+0x10/0x10 [ 107.583029][ T5513] device_release+0x9e/0x1d0 [ 107.585119][ T5513] kobject_put+0x228/0x570 [ 107.587035][ T5513] i2c_register_adapter+0x75f/0x1150 [ 107.589293][ T5513] ? __pfx_i2c_register_adapter+0x10/0x10 [ 107.591825][ T5513] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.594449][ T5513] ? idr_alloc+0x89/0xd0 [ 107.596364][ T5513] dvb_usb_i2c_init+0x202/0x2f0 [ 107.598459][ T5513] ? __pfx_cxusb_bluebird_power_ctrl+0x10/0x10 [ 107.601247][ T5513] dvb_usb_device_init+0xf23/0x2580 [ 107.603515][ T5513] ? trace_rpm_return_int+0x83/0x1e0 [ 107.605871][ T5513] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 107.608349][ T5513] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 107.610647][ T5513] cxusb_probe+0xff/0x700 [ 107.612525][ T5513] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 107.614973][ T5513] ? __pfx_cxusb_probe+0x10/0x10 [ 107.617084][ T5513] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 107.619676][ T5513] ? __pm_runtime_set_status+0x785/0xa50 [ 107.622234][ T5513] usb_probe_interface+0x668/0xc90 [ 107.624451][ T5513] ? __pfx_usb_probe_interface+0x10/0x10 [ 107.626875][ T5513] really_probe+0x26d/0xad0 [ 107.628767][ T5513] __driver_probe_device+0x18c/0x320 [ 107.631343][ T5513] driver_probe_device+0x4f/0x240 [ 107.633517][ T5513] __device_attach_driver+0x279/0x430 [ 107.635866][ T5513] bus_for_each_drv+0x251/0x2e0 [ 107.638118][ T5513] ? __pfx___device_attach_driver+0x10/0x10 [ 107.640761][ T5513] ? __pfx_bus_for_each_drv+0x10/0x10 [ 107.643078][ T5513] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.645274][ T5513] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 107.647831][ T5513] __device_attach+0x2b8/0x430 [ 107.649844][ T5513] ? __pfx___device_attach+0x10/0x10 [ 107.652084][ T5513] ? usb_ifnum_to_if+0x262/0x2f0 [ 107.654245][ T5513] proc_ioctl+0x447/0x6c0 [ 107.656139][ T5513] proc_ioctl_default+0xbc/0x100 [ 107.658288][ T5513] ? __pfx_proc_ioctl_default+0x10/0x10 [ 107.660614][ T5513] usbdev_ioctl+0x1367/0x20b0 [ 107.662888][ T5513] ? __pfx_usbdev_ioctl+0x10/0x10 [ 107.665184][ T5513] ? ksys_write+0x1e1/0x250 [ 107.667262][ T5513] ? bpf_lsm_file_ioctl+0x9/0x20 [ 107.669446][ T5513] ? __pfx_usbdev_ioctl+0x10/0x10 [ 107.671770][ T5513] __se_sys_ioctl+0xfc/0x170 [ 107.673871][ T5513] do_syscall_64+0xec/0xf80 [ 107.675910][ T5513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.678621][ T5513] ? trace_irq_disable+0x37/0x100 [ 107.680808][ T5513] ? clear_bhb_loop+0x60/0xb0 [ 107.682975][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.685575][ T5513] RIP: 0033:0x7f6ec518f7c9 [ 107.687632][ T5513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.696084][ T5513] RSP: 002b:00007ffeb9b5b388 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.699592][ T5513] RAX: ffffffffffffffda RBX: 00007f6ec53e5fa0 RCX: 00007f6ec518f7c9 [ 107.703097][ T5513] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000004 [ 107.706642][ T5513] RBP: 00007ffeb9b5b3e0 R08: 0000000000000000 R09: 0000000000000000 [ 107.710161][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.713565][ T5513] R13: 00007f6ec53e5fa0 R14: 00007f6ec53e5fa0 R15: 0000000000000003 [ 107.716975][ T5513] [ 107.718348][ T5513] Modules linked in: [ 107.720066][ T5513] CR2: fffffffffffffff8 [ 107.721953][ T5513] ---[ end trace 0000000000000000 ]--- [ 107.724386][ T5513] RIP: 0010:complete+0x99/0x1b0 [ 107.726581][ T5513] Code: 89 e7 e8 8a ab 8d 00 4d 8b 3c 24 4d 39 e7 0f 84 d4 00 00 00 49 8d 7f f8 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 67 ab 8d 00 <49> 8b 7f f8 be 03 00 00 00 31 d2 e8 b7 60 f6 ff 4c 89 ff e8 df 51 [ 107.735133][ T5513] RSP: 0018:ffffc900028ff3f8 EFLAGS: 00010046 [ 107.737887][ T5513] RAX: 1fffffffffffffff RBX: ffff8880405b9638 RCX: dffffc0000000000 [ 107.741434][ T5513] RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffffffffffffff8 [ 107.745006][ T5513] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 107.748446][ T5513] R10: dffffc0000000000 R11: fffff5200051fe6c R12: ffff8880405b9678 [ 107.752005][ T5513] R13: 0000000000000001 R14: 0000000000000286 R15: 0000000000000000 [ 107.755558][ T5513] FS: 0000555560ff1500(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000 [ 107.759478][ T5513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.762414][ T5513] CR2: fffffffffffffff8 CR3: 000000004378f000 CR4: 0000000000352ef0 [ 107.765926][ T5513] Kernel panic - not syncing: Fatal exception [ 107.768990][ T5513] Kernel Offset: disabled [ 107.770950][ T5513] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:59:32 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900028fec30 R8 =ffff888033d38237 R9 =1ffff110067a7046 R10=dffffc0000000000 R11=ffffffff851bb2e0 R12=dffffc0000000000 R13=ffffffff998fea14 R14=ffffffff99c136a0 R15=0000000000000000 RIP=ffffffff851bb35c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560ff1500 ffffffff 00c00000 GS =0000 ffff88808d416000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f25eabc67e8 CR3=000000004378f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb9b5b660 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ec5215050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ec521505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ec5215057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ec521506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ec52150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ec52151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000