Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. 2025/08/26 03:50:21 parsed 1 programs syzkaller login: [ 62.161082][ T4271] cgroup: Unknown subsys name 'net' [ 62.294049][ T4271] cgroup: Unknown subsys name 'rlimit' [ 63.570072][ T4271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.826445][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.837487][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.848069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.861934][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.869936][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.878406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.165526][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 65.212707][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.220945][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.229067][ T4286] device bridge_slave_0 entered promiscuous mode [ 65.240948][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.248371][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.256142][ T4286] device bridge_slave_1 entered promiscuous mode [ 65.278100][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.289674][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.317749][ T4286] team0: Port device team_slave_0 added [ 65.325017][ T4286] team0: Port device team_slave_1 added [ 65.342466][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.349687][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.376468][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.391317][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.398481][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.425564][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.459016][ T4286] device hsr_slave_0 entered promiscuous mode [ 65.465676][ T4286] device hsr_slave_1 entered promiscuous mode [ 65.587142][ T4286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.597666][ T4286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.607882][ T4286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.617055][ T4286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.686600][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.694132][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.702473][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.709645][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.771721][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.791748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.801893][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.810942][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.827029][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.839762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.850629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.860526][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.867816][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.891986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.903023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.912687][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.919912][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.929915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.939618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.949189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.959885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.969517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.983321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.992511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.005433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.014356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.026327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.036385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.049293][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.215231][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.222848][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.238017][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.256881][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.265946][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.284953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.293821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.303368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.311409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.323858][ T4286] device veth0_vlan entered promiscuous mode [ 66.334280][ T4286] device veth1_vlan entered promiscuous mode [ 66.353200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.361679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.370099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.378972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.390584][ T4286] device veth0_macvtap entered promiscuous mode [ 66.402011][ T4286] device veth1_macvtap entered promiscuous mode [ 66.424158][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.431820][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.444123][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.452669][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.462807][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.476000][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.489444][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.498008][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.509575][ T4286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.519541][ T4286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.529086][ T4286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.537795][ T4286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.905232][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.719450][ T4338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.727531][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.738029][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.750148][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.758242][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.766163][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/08/26 03:50:30 executed programs: 0 [ 69.117800][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.158071][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.166072][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.174706][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.183401][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.192059][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.199491][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.305048][ T4367] chnl_net:caif_netlink_parms(): no params data found [ 69.342572][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.350095][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.357890][ T4367] device bridge_slave_0 entered promiscuous mode [ 69.365870][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.373089][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.380974][ T4367] device bridge_slave_1 entered promiscuous mode [ 69.401652][ T4367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.412980][ T4367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.435111][ T4367] team0: Port device team_slave_0 added [ 69.443060][ T4367] team0: Port device team_slave_1 added [ 69.458823][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.465788][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.491923][ T4367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.503689][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.510906][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.537128][ T4367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.564832][ T4367] device hsr_slave_0 entered promiscuous mode [ 69.571504][ T4367] device hsr_slave_1 entered promiscuous mode [ 69.578409][ T4367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.586244][ T4367] Cannot create hsr debugfs directory [ 71.269624][ T4338] Bluetooth: hci0: command 0x0409 tx timeout [ 71.432516][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.439099][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.689166][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.797483][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.647009][ T4367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.656781][ T4367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.670559][ T52] device hsr_slave_0 left promiscuous mode [ 72.676992][ T52] device hsr_slave_1 left promiscuous mode [ 72.683637][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.691212][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.700039][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.707461][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.715409][ T52] device bridge_slave_1 left promiscuous mode [ 72.722577][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.733857][ T52] device bridge_slave_0 left promiscuous mode [ 72.741170][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.760226][ T52] device veth1_macvtap left promiscuous mode [ 72.766514][ T52] device veth0_macvtap left promiscuous mode [ 72.772900][ T52] device veth1_vlan left promiscuous mode [ 72.778928][ T52] device veth0_vlan left promiscuous mode [ 73.060683][ T52] team0 (unregistering): Port device team_slave_1 removed [ 73.091563][ T52] team0 (unregistering): Port device team_slave_0 removed [ 73.118602][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.147651][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.349680][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 73.414837][ T52] bond0 (unregistering): Released all slaves [ 73.505194][ T4367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.517864][ T4367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.577887][ T4367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.602202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.610265][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.620680][ T4367] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.630305][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.640022][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.649335][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.656411][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.664558][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.676756][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.686236][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.695064][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.702228][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.713497][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.726294][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.736776][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.745959][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.762384][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.773147][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.782091][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.792111][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.800643][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.815529][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.824162][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.837823][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.034694][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.046503][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.058597][ T4367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.074098][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.083042][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.108453][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.116780][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.125799][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.134803][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.145871][ T4367] device veth0_vlan entered promiscuous mode [ 74.163920][ T4367] device veth1_vlan entered promiscuous mode [ 74.203790][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.212785][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.221388][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.230710][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.241531][ T4367] device veth0_macvtap entered promiscuous mode [ 74.258002][ T4367] device veth1_macvtap entered promiscuous mode [ 74.274960][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.284406][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.293013][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.301954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.310981][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.323457][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.349616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.358775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.370081][ T4367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.379576][ T4367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.388473][ T4367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.397258][ T4367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.491889][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.508090][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.539377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.549978][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.559129][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.568025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.878341][ T4430] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.080505][ T4430] usb 1-1: Using ep0 maxpacket: 8 [ 75.088034][ T4430] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.098431][ T4430] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 75.106660][ T4430] usb 1-1: config 4 has no interface number 0 [ 75.113105][ T4430] usb 1-1: config 4 interface 30 has no altsetting 0 [ 75.125742][ T4430] usb 1-1: string descriptor 0 read error: -22 [ 75.132089][ T4430] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 75.141293][ T4430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.157871][ T4430] dw2102: su3000_identify_state [ 75.162914][ T4430] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 75.170222][ T4430] dw2102: su3000_power_ctrl: 1, initialized 0 [ 75.176690][ T4430] dvb-usb: bulk message failed: -22 (2/0) [ 75.187193][ T4430] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 75.197797][ T4430] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 75.205678][ T4430] usb 1-1: media controller created [ 75.211419][ T4430] dvb-usb: bulk message failed: -22 (6/0) [ 75.217266][ T4430] dw2102: i2c transfer failed. [ 75.222271][ T4430] dvb-usb: bulk message failed: -22 (6/0) [ 75.227998][ T4430] dw2102: i2c transfer failed. [ 75.232901][ T4430] dvb-usb: bulk message failed: -22 (6/0) [ 75.238893][ T4430] dw2102: i2c transfer failed. [ 75.243937][ T4430] dvb-usb: bulk message failed: -22 (6/0) [ 75.249754][ T4430] dw2102: i2c transfer failed. [ 75.254531][ T4430] dvb-usb: bulk message failed: -22 (6/0) [ 75.260433][ T4430] dw2102: i2c transfer failed. [ 75.265235][ T4430] dvb-usb: bulk message failed: -22 (6/0) [ 75.271184][ T4430] dw2102: i2c transfer failed. [ 75.276047][ T4430] dvb-usb: MAC address: 02:02:02:02:02:02 [ 75.290017][ T4430] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.304442][ T4430] dvb-usb: bulk message failed: -22 (3/0) [ 75.310399][ T4430] dw2102: command 0x0e transfer failed. [ 75.316179][ T4430] dvb-usb: bulk message failed: -22 (3/0) [ 75.321962][ T4430] dw2102: command 0x0e transfer failed. [ 75.428383][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 75.638544][ T4430] dvb-usb: bulk message failed: -22 (3/0) [ 75.644450][ T4430] dw2102: command 0x0e transfer failed. [ 75.650180][ T4430] dvb-usb: bulk message failed: -22 (3/0) [ 75.656159][ T4430] dw2102: command 0x0e transfer failed. [ 75.661863][ T4430] dvb-usb: bulk message failed: -22 (1/0) [ 75.667587][ T4430] dw2102: command 0x51 transfer failed. [ 75.673382][ T4430] dvb-usb: bulk message failed: -22 (5/0) [ 75.679158][ T4430] dw2102: i2c probe for address 0x68 failed. [ 75.685150][ T4430] dvb-usb: bulk message failed: -22 (5/0) [ 75.691000][ T4430] dw2102: i2c probe for address 0x69 failed. [ 75.696978][ T4430] dvb-usb: bulk message failed: -22 (5/0) [ 75.702783][ T4430] dw2102: i2c probe for address 0x6a failed. [ 75.709440][ T4430] dw2102: probing for demodulator failed. Is the external power switched on? [ 75.709541][ T4432] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 75.718520][ T4430] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 75.730051][ T4432] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 75.730083][ T4432] CPU: 1 PID: 4432 Comm: syz.0.17 Not tainted 6.1.148-syzkaller #0 [ 75.730098][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.730105][ T4432] RIP: 0010:su3000_i2c_transfer+0x1a9/0x1020 [ 75.730138][ T4432] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 a1 08 09 fb 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 50 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 75.789936][ T4432] RSP: 0018:ffffc900034c7ac8 EFLAGS: 00010202 [ 75.796095][ T4432] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 75.804048][ T4432] RDX: ffffffff86c7d221 RSI: ffffffff8d952e30 RDI: 0000000000001900 [ 75.812088][ T4432] RBP: 0000000000000000 R08: ffff8880308f5940 R09: 0000000000000002 [ 75.820297][ T4432] R10: 0000000000001a00 R11: 0000000000000000 R12: dffffc0000000000 [ 75.828248][ T4432] R13: 1ffff1100385d838 R14: 0000000000000001 R15: ffff88801c2ec1c8 [ 75.836200][ T4432] FS: 000055556f40a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 75.845110][ T4432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.851674][ T4432] CR2: 0000001b2da63fff CR3: 00000000290ae000 CR4: 00000000003506e0 [ 75.859738][ T4432] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.867708][ T4432] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.875661][ T4432] Call Trace: [ 75.878927][ T4432] [ 75.881855][ T4432] ? su3000_rc_query+0x1e0/0x1e0 [ 75.886783][ T4432] __i2c_transfer+0x864/0x2260 [ 75.891533][ T4432] ? i2c_cmd+0x110/0x110 [ 75.895760][ T4432] ? __might_fault+0xa6/0x120 [ 75.900432][ T4432] ? i2c_transfer+0x117/0x390 [ 75.905094][ T4432] i2c_transfer+0x24c/0x390 [ 75.909613][ T4432] ? __i2c_transfer+0x2260/0x2260 [ 75.914619][ T4432] ? __might_fault+0xc2/0x120 [ 75.919278][ T4432] ? __might_fault+0xa6/0x120 [ 75.923947][ T4432] ? _copy_from_user+0x10b/0x170 [ 75.928871][ T4432] i2cdev_ioctl_rdwr+0x3da/0x6c0 [ 75.933943][ T4432] i2cdev_ioctl+0x5ba/0x750 [ 75.938488][ T4432] ? i2cdev_write+0x120/0x120 [ 75.943151][ T4432] ? lock_chain_count+0x20/0x20 [ 75.947986][ T4432] ? bpf_lsm_file_ioctl+0x5/0x10 [ 75.952937][ T4432] ? security_file_ioctl+0x7c/0xa0 [ 75.958039][ T4432] ? i2cdev_write+0x120/0x120 [ 75.962704][ T4432] __se_sys_ioctl+0xfa/0x170 [ 75.967281][ T4432] do_syscall_64+0x4c/0xa0 [ 75.971709][ T4432] ? clear_bhb_loop+0x60/0xb0 [ 75.976366][ T4432] ? clear_bhb_loop+0x60/0xb0 [ 75.981181][ T4432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.987063][ T4432] RIP: 0033:0x7fdabef8ebe9 [ 75.991471][ T4432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.011098][ T4432] RSP: 002b:00007ffdd0f55b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.019919][ T4432] RAX: ffffffffffffffda RBX: 00007fdabf1b5fa0 RCX: 00007fdabef8ebe9 [ 76.027870][ T4432] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 76.035858][ T4432] RBP: 00007fdabf011e19 R08: 0000000000000000 R09: 0000000000000000 [ 76.043816][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.051774][ T4432] R13: 00007fdabf1b5fa0 R14: 00007fdabf1b5fa0 R15: 0000000000000003 [ 76.059738][ T4432] [ 76.062751][ T4432] Modules linked in: [ 76.071654][ T4432] ---[ end trace 0000000000000000 ]--- [ 76.077141][ T4432] RIP: 0010:su3000_i2c_transfer+0x1a9/0x1020 [ 76.083223][ T4432] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 a1 08 09 fb 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 50 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 76.102966][ T4432] RSP: 0018:ffffc900034c7ac8 EFLAGS: 00010202 [ 76.109147][ T4432] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 76.117126][ T4432] RDX: ffffffff86c7d221 RSI: ffffffff8d952e30 RDI: 0000000000001900 [ 76.125337][ T4432] RBP: 0000000000000000 R08: ffff8880308f5940 R09: 0000000000000002 [ 76.133418][ T4432] R10: 0000000000001a00 R11: 0000000000000000 R12: dffffc0000000000 [ 76.141734][ T4432] R13: 1ffff1100385d838 R14: 0000000000000001 R15: ffff88801c2ec1c8 [ 76.148290][ T4430] rc_core: IR keymap rc-tt-1500 not found [ 76.153300][ T4432] FS: 000055556f40a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 76.155557][ T4430] Registered IR keymap rc-empty [ 76.165871][ T4432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.170367][ T4430] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 76.177219][ T4432] CR2: 00007faeeb12de9c CR3: 00000000290ae000 CR4: 00000000003506e0 [ 76.186211][ T4430] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 76.203058][ T4432] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.204661][ T4430] dvb-usb: schedule remote query interval to 250 msecs. [ 76.211120][ T4432] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.218193][ T4430] dw2102: su3000_power_ctrl: 0, initialized 1 [ 76.226482][ T4432] Kernel panic - not syncing: Fatal exception [ 76.232301][ T4432] Kernel Offset: disabled [ 76.242670][ T4432] Rebooting in 86400 seconds..