syzkaller login: [ 92.062827][ T813] cfg80211: failed to load regulatory.db
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000)
Warning: Permanently added '[localhost]:49570' (ED25519) to the list of known hosts.
2026/10/29 18:30:49 parsed 1 programs
2026/10/29 18:30:49 serving rpc on tcp://39763
[ 200.894085][ T5334] cgroup: Unknown subsys name 'net'
[ 200.950974][ T5334] cgroup: Unknown subsys name 'cpuset'
[ 200.959011][ T5334] cgroup: Unknown subsys name 'rlimit'
[ 223.916334][ T1030] ata1.00: exception Emask 0x0 SAct 0x40000000 SErr 0x0 action 0x6 frozen
[ 223.916362][ T1030] ata1.00: failed command: WRITE FPDMA QUEUED
[ 223.916368][ T1030] ata1.00: cmd 61/00:f0:36:81:04/20:00:00:00:00/40 tag 30 ncq dma 4194304 ou
[ 223.916368][ T1030] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout)
[ 223.916387][ T1030] ata1.00: status: { DRDY }
[ 223.916427][ T1030] ata1: hard resetting link
[ 224.260081][ T1030] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[ 224.261962][ T1030] ata1.00: configured for UDMA/100
[ 224.262200][ T1030] ata1: EH complete
Setting up swapspace version 1, size = 127995904 bytes
[ 225.818652][ T5334] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 229.965152][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 229.965173][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 230.029785][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 230.029804][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 230.163016][ T5346] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 232.431943][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 232.433301][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 232.433716][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 232.434389][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 232.435382][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 234.057946][ T5413] rxe_eth0 speed is unknown, defaulting to 1000
[ 234.064394][ T5413] rxe_eth0 speed is unknown, defaulting to 1000
[ 234.079796][ T5413] rxe_eth0 speed is unknown, defaulting to 1000
[ 234.315642][ T5413] infiniband rxe0: set active
[ 234.319006][ T5413] infiniband rxe0: added rxe_eth0
[ 234.322845][ T9] rxe_eth0 speed is unknown, defaulting to 1000
[ 234.345819][ T5413] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 234.345845][ T5413] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 234.345866][ T5413] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 234.395538][ T5413] RDS/IB: rxe0: added
[ 234.400143][ T5413] smc: adding ib device rxe0 with port count 1
[ 234.400241][ T5413] smc: ib device rxe0 port 1 has no pnetid
[ 234.401012][ T9] rxe_eth0 speed is unknown, defaulting to 1000
[ 234.442848][ T5413] rxe_eth0 speed is unknown, defaulting to 1000
[ 234.772760][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state
[ 234.773525][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state
[ 234.773804][ T5413] bridge_slave_0: entered allmulticast mode
[ 234.775060][ T5413] bridge_slave_0: entered promiscuous mode
[ 234.790778][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state
[ 234.790849][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state
[ 234.790947][ T5413] bridge_slave_1: entered allmulticast mode
[ 234.792342][ T5413] bridge_slave_1: entered promiscuous mode
[ 234.832755][ T5413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 234.834989][ T5413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 234.867010][ T5413] team0: Port device team_slave_0 added
[ 234.869316][ T5413] team0: Port device team_slave_1 added
[ 234.896911][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 234.896925][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 234.896946][ T5413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 234.900611][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 234.900623][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 234.900637][ T5413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 234.973510][ T5413] hsr_slave_0: entered promiscuous mode
[ 234.974836][ T5413] hsr_slave_1: entered promiscuous mode
[ 235.166546][ T5413] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 235.172678][ T5413] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 235.173675][ T5413] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 235.185823][ T5413] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 235.193292][ T5413] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 235.201601][ T5413] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 235.202452][ T5413] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 235.217106][ T5413] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 235.244874][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state
[ 235.245138][ T5413] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 235.245514][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state
[ 235.245619][ T5413] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 235.322549][ T5413] 8021q: adding VLAN 0 to HW filter on device bond0
[ 235.339716][ T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 235.340555][ T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 235.357857][ T5413] 8021q: adding VLAN 0 to HW filter on device team0
[ 235.363788][ T80] bridge0: port 1(bridge_slave_0) entered blocking state
[ 235.364044][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 235.383658][ T80] bridge0: port 2(bridge_slave_1) entered blocking state
[ 235.383723][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 235.773053][ T5413] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 235.822976][ T5413] veth0_vlan: entered promiscuous mode
[ 235.832834][ T5413] veth1_vlan: entered promiscuous mode
[ 235.868075][ T5413] veth0_macvtap: entered promiscuous mode
[ 235.872057][ T5413] veth1_macvtap: entered promiscuous mode
[ 235.892718][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 235.912599][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 235.978898][ T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 235.979209][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 235.979233][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 235.979250][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 236.210845][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 236.301311][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 236.371070][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 236.423780][ T5455] rxe_eth0 speed is unknown, defaulting to 1000
[ 236.463027][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 236.959823][ T5462] rxe_eth0 speed is unknown, defaulting to 1000
[ 237.366595][ T5469] br_netfilter no longer supported in user namespaces
[ 237.371908][ T5469] rxe_eth0 speed is unknown, defaulting to 1000
[ 237.678213][ T5475] rxe_eth0 speed is unknown, defaulting to 1000
[ 237.978828][ T5480] rxe_eth0 speed is unknown, defaulting to 1000
[ 238.249353][ T44] bridge_slave_1: left allmulticast mode
[ 238.249390][ T44] bridge_slave_1: left promiscuous mode
[ 238.250109][ T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 238.281348][ T44] bridge_slave_0: left allmulticast mode
[ 238.281371][ T44] bridge_slave_0: left promiscuous mode
[ 238.281524][ T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 238.597560][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 238.599341][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 238.600190][ T44] bond0 (unregistering): Released all slaves
[ 238.699824][ T5487] rxe_eth0 speed is unknown, defaulting to 1000
[ 239.056147][ T44] hsr_slave_0: left promiscuous mode
[ 239.060117][ T44] hsr_slave_1: left promiscuous mode
[ 239.061598][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 239.061620][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 239.064981][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 239.064996][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 239.111585][ T44] veth1_macvtap: left promiscuous mode
[ 239.111637][ T44] veth0_macvtap: left promiscuous mode
[ 239.111777][ T44] veth1_vlan: left promiscuous mode
[ 239.111828][ T44] veth0_vlan: left promiscuous mode
[ 239.455668][ T44] team0 (unregistering): Port device team_slave_1 removed
[ 239.470802][ T44] team0 (unregistering): Port device team_slave_0 removed
[ 239.589143][ T5008] 8021q: adding VLAN 0 to HW filter on device eth2
[ 240.454587][ T5008] 8021q: adding VLAN 0 to HW filter on device eth3
[ 241.309255][ T5008] 8021q: adding VLAN 0 to HW filter on device eth4
2026/10/29 18:31:32 executed programs: 0
[ 241.537189][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 241.542889][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 241.545019][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 241.545772][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 241.558180][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 242.220087][ T5008] 8021q: adding VLAN 0 to HW filter on device eth5
[ 242.528880][ T5514] rxe_eth0 speed is unknown, defaulting to 1000
[ 243.272145][ T5514] bridge0: port 1(bridge_slave_0) entered blocking state
[ 243.272236][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state
[ 243.272300][ T5514] bridge_slave_0: entered allmulticast mode
[ 243.273089][ T5514] bridge_slave_0: entered promiscuous mode
[ 243.286382][ T5514] bridge0: port 2(bridge_slave_1) entered blocking state
[ 243.286471][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state
[ 243.286532][ T5514] bridge_slave_1: entered allmulticast mode
[ 243.287425][ T5514] bridge_slave_1: entered promiscuous mode
[ 243.320702][ T5514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 243.323061][ T5514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 243.349329][ T5514] team0: Port device team_slave_0 added
[ 243.351487][ T5514] team0: Port device team_slave_1 added
[ 243.375525][ T5514] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 243.375541][ T5514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 243.375554][ T5514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 243.397941][ T5514] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 243.397954][ T5514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 243.397968][ T5514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 243.463425][ T5514] hsr_slave_0: entered promiscuous mode
[ 243.465008][ T5514] hsr_slave_1: entered promiscuous mode
[ 243.579192][ T48] Bluetooth: hci0: command tx timeout
[ 244.019939][ T5514] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 244.031283][ T5514] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 244.041946][ T5514] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 244.051712][ T5514] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 244.054128][ T5514] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 244.072326][ T5514] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 244.073917][ T5514] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 244.088547][ T5514] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 244.132868][ T5514] bridge0: port 2(bridge_slave_1) entered blocking state
[ 244.132951][ T5514] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 244.133120][ T5514] bridge0: port 1(bridge_slave_0) entered blocking state
[ 244.133191][ T5514] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 244.152961][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 244.153413][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 244.269664][ T5514] 8021q: adding VLAN 0 to HW filter on device bond0
[ 244.302565][ T5514] 8021q: adding VLAN 0 to HW filter on device team0
[ 244.316869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 244.316938][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 244.338751][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 244.338837][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 245.053305][ T5514] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 245.129125][ T5514] veth0_vlan: entered promiscuous mode
[ 245.145079][ T5514] veth1_vlan: entered promiscuous mode
[ 245.201046][ T5514] veth0_macvtap: entered promiscuous mode
[ 245.208754][ T5514] veth1_macvtap: entered promiscuous mode
[ 245.235548][ T5514] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 245.250880][ T5514] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 245.266397][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 245.297379][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 245.301199][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 245.301221][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 245.382338][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 245.382350][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 245.445209][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 245.445221][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 245.541893][ T5449] rxe_eth0 speed is unknown, defaulting to 1000
[ 245.657140][ T48] Bluetooth: hci0: command tx timeout
[ 245.946473][ T5449] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 246.099429][ T5449] usb 5-1: New USB device found: idVendor=1df7, idProduct=2500, bcdDevice=1.00
[ 246.101804][ T5449] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 246.101838][ T5449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 246.352898][ T5449] msi2500 5-1:1.0: Registered as swradio24
[ 246.352915][ T5449] msi2500 5-1:1.0: SDR API is still slightly experimental and functionality changes may follow
[ 246.474983][ T5588] FAULT_INJECTION: forcing a failure.
[ 246.474983][ T5588] name failslab, interval 1, probability 0, space 0, times 1
[ 246.475007][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 246.475020][ T5588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 246.475026][ T5588] Call Trace:
[ 246.475060][ T5588]
[ 246.475067][ T5588] dump_stack_lvl+0xe8/0x150
[ 246.475235][ T5588] should_fail_ex+0x3eb/0x540
[ 246.475375][ T5588] should_failslab+0xa8/0x100
[ 246.475422][ T5588] ? radix_tree_node_alloc+0x82/0x3a0
[ 246.475516][ T5588] kmem_cache_alloc_noprof+0x9c/0x600
[ 246.475538][ T5588] ? radix_tree_node_alloc+0x82/0x3a0
[ 246.475556][ T5588] radix_tree_node_alloc+0x82/0x3a0
[ 246.475569][ T5588] ? __pfx___mutex_trylock_common+0x10/0x10
[ 246.475625][ T5588] idr_get_free+0x28f/0xa10
[ 246.475646][ T5588] idr_alloc_u32+0x18a/0x330
[ 246.475670][ T5588] ? __pfx_idr_alloc_u32+0x10/0x10
[ 246.475692][ T5588] idr_alloc+0x6e/0xd0
[ 246.475708][ T5588] spi_register_controller+0x2a7/0x1670
[ 246.475764][ T5588] ? __spi_alloc_controller+0x397/0x480
[ 246.475782][ T5588] msi2500_probe+0x4c6/0x9e0
[ 246.475878][ T5588] usb_probe_interface+0x751/0xe00
[ 246.475929][ T5588] ? __pfx_usb_probe_interface+0x10/0x10
[ 246.475939][ T5588] ? kernfs_create_link+0x1cd/0x240
[ 246.475982][ T5588] ? sysfs_do_create_link_sd+0xe0/0x110
[ 246.475998][ T5588] ? driver_sysfs_add+0x1fe/0x210
[ 246.476040][ T5588] ? __pfx_usb_probe_interface+0x10/0x10
[ 246.476050][ T5588] really_probe+0x254/0xae0
[ 246.476064][ T5588] __driver_probe_device+0x1e8/0x360
[ 246.476078][ T5588] driver_probe_device+0x4f/0x240
[ 246.476091][ T5588] __device_attach_driver+0x270/0x410
[ 246.476106][ T5588] bus_for_each_drv+0x258/0x2f0
[ 246.476121][ T5588] ? __pfx___device_attach_driver+0x10/0x10
[ 246.476132][ T5588] ? __pfx_bus_for_each_drv+0x10/0x10
[ 246.476149][ T5588] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 246.476175][ T5588] __device_attach+0x2bd/0x430
[ 246.476188][ T5588] ? __pfx___device_attach+0x10/0x10
[ 246.476204][ T5588] proc_ioctl+0x409/0x660
[ 246.476224][ T5588] proc_ioctl_default+0xc4/0x110
[ 246.476237][ T5588] ? __pfx_proc_ioctl_default+0x10/0x10
[ 246.476257][ T5588] usbdev_ioctl+0x139d/0x21a0
[ 246.476273][ T5588] ? __pfx_usbdev_ioctl+0x10/0x10
[ 246.476284][ T5588] ? ksys_write+0x1fc/0x270
[ 246.476310][ T5588] ? bpf_lsm_file_ioctl+0x9/0x20
[ 246.476344][ T5588] ? __pfx_usbdev_ioctl+0x10/0x10
[ 246.476356][ T5588] __se_sys_ioctl+0xfc/0x170
[ 246.476374][ T5588] do_syscall_64+0x166/0x520
[ 246.476388][ T5588] ? trace_irq_disable+0x3b/0x140
[ 246.476411][ T5588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 246.476438][ T5588] ? clear_bhb_loop+0x70/0xc0
[ 246.476463][ T5588] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 246.476474][ T5588] RIP: 0033:0x7fe4cff9f559
[ 246.476486][ T5588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 246.476494][ T5588] RSP: 002b:00007ffc6b706298 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 246.476519][ T5588] RAX: ffffffffffffffda RBX: 00007fe4d0225fa0 RCX: 00007fe4cff9f559
[ 246.476527][ T5588] RDX: 0000200000000900 RSI: 00000000c0105512 RDI: 0000000000000004
[ 246.476534][ T5588] RBP: 00007ffc6b706300 R08: 0000000000000000 R09: 0000000000000000
[ 246.476540][ T5588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 246.476547][ T5588] R13: 00007fe4d0225fac R14: 00007fe4d0225fa0 R15: 00007fe4d0225fa0
[ 246.476565][ T5588]
[ 246.660769][ T5588] ------------[ cut here ]------------
[ 246.660781][ T5588] couldn't get idr
[ 246.660784][ T5588] WARNING: drivers/spi/spi.c:3634 at spi_register_controller+0x1261/0x1670, CPU#0: syz.0.17/5588
[ 246.669632][ T5588] Modules linked in:
[ 246.671432][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 246.675369][ T5588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 246.679900][ T5588] RIP: 0010:spi_register_controller+0x1261/0x1670
[ 246.682807][ T5588] Code: 8c e8 33 d5 79 fa e9 1e ff ff ff e8 a9 a6 16 fb 48 8d 3d 72 3f 18 0b 67 48 0f b9 3a eb 11 e8 96 a6 16 fb 48 8d 3d 6f 3f 18 0b <67> 48 0f b9 3a bf e4 ff ff ff 44 89 f6 e8 8d ab 16 fb 41 83 fe e4
[ 246.691068][ T5588] RSP: 0018:ffffc90004de7878 EFLAGS: 00010293
[ 246.693636][ T5588] RAX: ffffffff86b27e5a RBX: ffff888050e4a000 RCX: ffff888034fc4b00
[ 246.697175][ T5588] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: ffffffff91cabdd0
[ 246.700585][ T5588] RBP: 0000000000000000 R08: ffffc90004de7807 R09: 1ffff920009bcf00
[ 246.704715][ T5588] R10: dffffc0000000000 R11: fffff520009bcf01 R12: 1ffff1100a1c9408
[ 246.708125][ T5588] R13: dffffc0000000000 R14: 00000000fffffff4 R15: ffff888050e4a4d8
[ 246.711437][ T5588] FS: 000055558743d500(0000) GS:ffff88808aa10000(0000) knlGS:0000000000000000
[ 246.715373][ T5588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 246.718245][ T5588] CR2: 00007fbfc3e0ca90 CR3: 0000000040ab8000 CR4: 0000000000352ef0
[ 246.721533][ T5588] Call Trace:
[ 246.723038][ T5588]
[ 246.724351][ T5588] ? __spi_alloc_controller+0x397/0x480
[ 246.726904][ T5588] msi2500_probe+0x4c6/0x9e0
[ 246.728963][ T5588] usb_probe_interface+0x751/0xe00
[ 246.731190][ T5588] ? __pfx_usb_probe_interface+0x10/0x10
[ 246.733536][ T5588] ? kernfs_create_link+0x1cd/0x240
[ 246.735780][ T5588] ? sysfs_do_create_link_sd+0xe0/0x110
[ 246.738387][ T5588] ? driver_sysfs_add+0x1fe/0x210
[ 246.740452][ T5588] ? __pfx_usb_probe_interface+0x10/0x10
[ 246.742833][ T5588] really_probe+0x254/0xae0
[ 246.744801][ T5588] __driver_probe_device+0x1e8/0x360
[ 246.746966][ T5588] driver_probe_device+0x4f/0x240
[ 246.749086][ T5588] __device_attach_driver+0x270/0x410
[ 246.751368][ T5588] bus_for_each_drv+0x258/0x2f0
[ 246.753586][ T5588] ? __pfx___device_attach_driver+0x10/0x10
[ 246.756628][ T5588] ? __pfx_bus_for_each_drv+0x10/0x10
[ 246.759326][ T5588] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 246.761936][ T5588] __device_attach+0x2bd/0x430
[ 246.763985][ T5588] ? __pfx___device_attach+0x10/0x10
[ 246.766258][ T5588] proc_ioctl+0x409/0x660
[ 246.768141][ T5588] proc_ioctl_default+0xc4/0x110
[ 246.770192][ T5588] ? __pfx_proc_ioctl_default+0x10/0x10
[ 246.772506][ T5588] usbdev_ioctl+0x139d/0x21a0
[ 246.774513][ T5588] ? __pfx_usbdev_ioctl+0x10/0x10
[ 246.776900][ T5588] ? ksys_write+0x1fc/0x270
[ 246.778915][ T5588] ? bpf_lsm_file_ioctl+0x9/0x20
[ 246.781073][ T5588] ? __pfx_usbdev_ioctl+0x10/0x10
[ 246.783213][ T5588] __se_sys_ioctl+0xfc/0x170
[ 246.785223][ T5588] do_syscall_64+0x166/0x520
[ 246.787240][ T5588] ? trace_irq_disable+0x3b/0x140
[ 246.789238][ T5588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 246.791773][ T5588] ? clear_bhb_loop+0x70/0xc0
[ 246.793810][ T5588] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 246.796373][ T5588] RIP: 0033:0x7fe4cff9f559
[ 246.798352][ T5588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 246.806533][ T5588] RSP: 002b:00007ffc6b706298 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 246.809900][ T5588] RAX: ffffffffffffffda RBX: 00007fe4d0225fa0 RCX: 00007fe4cff9f559
[ 246.813486][ T5588] RDX: 0000200000000900 RSI: 00000000c0105512 RDI: 0000000000000004
[ 246.817836][ T5588] RBP: 00007ffc6b706300 R08: 0000000000000000 R09: 0000000000000000
[ 246.821307][ T5588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 246.824587][ T5588] R13: 00007fe4d0225fac R14: 00007fe4d0225fa0 R15: 00007fe4d0225fa0
[ 246.828077][ T5588]
[ 246.829458][ T5588] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 246.832586][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 246.836650][ T5588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 246.841124][ T5588] Call Trace:
[ 246.842547][ T5588]
[ 246.843887][ T5588] vpanic+0x26f/0x710
[ 246.848108][ T5588] panic+0xc5/0xd0
[ 246.849611][ T5588] ? __pfx_panic+0x10/0x10
[ 246.851373][ T5588] __warn+0x315/0x4c0
[ 246.852987][ T5588] ? spi_register_controller+0x1261/0x1670
[ 246.855445][ T5588] ? spi_register_controller+0x1261/0x1670
[ 246.857848][ T5588] __report_bug+0x276/0x570
[ 246.859701][ T5588] ? spi_register_controller+0x1261/0x1670
[ 246.862096][ T5588] ? __pfx___report_bug+0x10/0x10
[ 246.864137][ T5588] report_bug_entry+0x19b/0x290
[ 246.866133][ T5588] ? spi_register_controller+0x1261/0x1670
[ 246.868545][ T5588] ? spi_register_controller+0x1266/0x1670
[ 246.870853][ T5588] handle_bug+0xce/0x200
[ 246.872563][ T5588] exc_invalid_op+0x1a/0x50
[ 246.874496][ T5588] asm_exc_invalid_op+0x1a/0x20
[ 246.876574][ T5588] RIP: 0010:spi_register_controller+0x1261/0x1670
[ 246.879232][ T5588] Code: 8c e8 33 d5 79 fa e9 1e ff ff ff e8 a9 a6 16 fb 48 8d 3d 72 3f 18 0b 67 48 0f b9 3a eb 11 e8 96 a6 16 fb 48 8d 3d 6f 3f 18 0b <67> 48 0f b9 3a bf e4 ff ff ff 44 89 f6 e8 8d ab 16 fb 41 83 fe e4
[ 246.887051][ T5588] RSP: 0018:ffffc90004de7878 EFLAGS: 00010293
[ 246.889737][ T5588] RAX: ffffffff86b27e5a RBX: ffff888050e4a000 RCX: ffff888034fc4b00
[ 246.893126][ T5588] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: ffffffff91cabdd0
[ 246.896452][ T5588] RBP: 0000000000000000 R08: ffffc90004de7807 R09: 1ffff920009bcf00
[ 246.899865][ T5588] R10: dffffc0000000000 R11: fffff520009bcf01 R12: 1ffff1100a1c9408
[ 246.903195][ T5588] R13: dffffc0000000000 R14: 00000000fffffff4 R15: ffff888050e4a4d8
[ 246.906548][ T5588] ? spi_register_controller+0x125a/0x1670
[ 246.909072][ T5588] ? spi_register_controller+0x125a/0x1670
[ 246.911578][ T5588] ? __spi_alloc_controller+0x397/0x480
[ 246.913938][ T5588] msi2500_probe+0x4c6/0x9e0
[ 246.915950][ T5588] usb_probe_interface+0x751/0xe00
[ 246.918156][ T5588] ? __pfx_usb_probe_interface+0x10/0x10
[ 246.920409][ T5588] ? kernfs_create_link+0x1cd/0x240
[ 246.922498][ T5588] ? sysfs_do_create_link_sd+0xe0/0x110
[ 246.924752][ T5588] ? driver_sysfs_add+0x1fe/0x210
[ 246.926809][ T5588] ? __pfx_usb_probe_interface+0x10/0x10
[ 246.929115][ T5588] really_probe+0x254/0xae0
[ 246.930911][ T5588] __driver_probe_device+0x1e8/0x360
[ 246.933099][ T5588] driver_probe_device+0x4f/0x240
[ 246.935237][ T5588] __device_attach_driver+0x270/0x410
[ 246.937643][ T5588] bus_for_each_drv+0x258/0x2f0
[ 246.939694][ T5588] ? __pfx___device_attach_driver+0x10/0x10
[ 246.942214][ T5588] ? __pfx_bus_for_each_drv+0x10/0x10
[ 246.944504][ T5588] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 246.946973][ T5588] __device_attach+0x2bd/0x430
[ 246.949060][ T5588] ? __pfx___device_attach+0x10/0x10
[ 246.951382][ T5588] proc_ioctl+0x409/0x660
[ 246.953263][ T5588] proc_ioctl_default+0xc4/0x110
[ 246.955485][ T5588] ? __pfx_proc_ioctl_default+0x10/0x10
[ 246.957845][ T5588] usbdev_ioctl+0x139d/0x21a0
[ 246.959809][ T5588] ? __pfx_usbdev_ioctl+0x10/0x10
[ 246.961879][ T5588] ? ksys_write+0x1fc/0x270
[ 246.963783][ T5588] ? bpf_lsm_file_ioctl+0x9/0x20
[ 246.965917][ T5588] ? __pfx_usbdev_ioctl+0x10/0x10
[ 246.968051][ T5588] __se_sys_ioctl+0xfc/0x170
[ 246.970007][ T5588] do_syscall_64+0x166/0x520
[ 246.971951][ T5588] ? trace_irq_disable+0x3b/0x140
[ 246.974112][ T5588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 246.976669][ T5588] ? clear_bhb_loop+0x70/0xc0
[ 246.978721][ T5588] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 246.981190][ T5588] RIP: 0033:0x7fe4cff9f559
[ 246.983048][ T5588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 246.992849][ T5588] RSP: 002b:00007ffc6b706298 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 246.996275][ T5588] RAX: ffffffffffffffda RBX: 00007fe4d0225fa0 RCX: 00007fe4cff9f559
[ 246.999782][ T5588] RDX: 0000200000000900 RSI: 00000000c0105512 RDI: 0000000000000004
[ 247.003047][ T5588] RBP: 00007ffc6b706300 R08: 0000000000000000 R09: 0000000000000000
[ 247.006224][ T5588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 247.009430][ T5588] R13: 00007fe4d0225fac R14: 00007fe4d0225fa0 R15: 00007fe4d0225fa0
[ 247.012566][ T5588]
[ 247.014222][ T5588] Kernel Offset: disabled
[ 247.016132][ T5588] Rebooting in 86400 seconds..