Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. executing program [ 67.625761][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.865685][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 68.155808][ T7] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 68.165021][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.173368][ T7] usb 1-1: Product: syz [ 68.177567][ T7] usb 1-1: Manufacturer: syz [ 68.182238][ T7] usb 1-1: SerialNumber: syz [ 68.190766][ T7] usb 1-1: config 0 descriptor?? [ 68.665945][ T7] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 68.677765][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 68.706005][ T7] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 68.714030][ T7] usb 1-1: media controller created [ 68.727463][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 69.286415][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 69.293543][ T7] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 69.301633][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 69.325761][ T4165] ------------[ cut here ]------------ [ 69.333506][ T4165] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 69.348855][ T4165] WARNING: CPU: 0 PID: 4165 at drivers/usb/core/urb.c:412 usb_submit_urb+0x1200/0x1980 [ 69.358730][ T4165] Modules linked in: [ 69.362683][ T4165] CPU: 0 PID: 4165 Comm: syz-executor387 Not tainted 5.15.185-syzkaller #0 [ 69.371385][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.381746][ T4165] RIP: 0010:usb_submit_urb+0x1200/0x1980 [ 69.387444][ T4165] Code: ff df 0f b6 44 05 00 84 c0 0f 85 7d 06 00 00 45 0f b6 07 48 c7 c7 40 62 a4 8a 48 8b 74 24 30 4c 89 e2 44 89 f1 e8 40 8b c7 03 <0f> 0b 49 bd 00 00 00 00 00 fc ff df e9 3b f3 ff ff 89 e9 80 e1 07 [ 69.407101][ T4165] RSP: 0018:ffffc90002e1f668 EFLAGS: 00010246 [ 69.413171][ T4165] RAX: 0fdc171b7dfd3a00 RBX: ffff88802a1bd000 RCX: ffff88807ab55940 [ 69.421191][ T4165] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 69.429210][ T4165] RBP: 1ffff11028ea8fae R08: dffffc0000000000 R09: ffffed10172267a8 [ 69.437238][ T4165] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff888022d79b18 [ 69.445229][ T4165] R13: dffffc0000000000 R14: 0000000080000280 R15: ffff888147547d70 [ 69.453253][ T4165] FS: 0000555572295380(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 69.462237][ T4165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.468987][ T4165] CR2: 000055b437402918 CR3: 000000007b128000 CR4: 00000000003506f0 [ 69.477012][ T4165] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.484989][ T4165] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.493001][ T4165] Call Trace: [ 69.496329][ T4165] [ 69.499277][ T4165] usb_start_wait_urb+0x111/0x4b0 [ 69.504316][ T4165] ? usb_api_blocking_completion+0xb0/0xb0 [ 69.510204][ T4165] ? memset+0x1e/0x40 [ 69.514209][ T4165] usb_control_msg+0x22f/0x3e0 [ 69.519036][ T4165] dtv5100_i2c_xfer+0x393/0x650 [ 69.523939][ T4165] ? dtv5100_tuner_attach+0xf0/0xf0 [ 69.529270][ T4165] __i2c_transfer+0x864/0x2060 [ 69.534051][ T4165] ? rwsem_down_read_slowpath+0x990/0x990 [ 69.539858][ T4165] ? i2c_cmd+0x110/0x110 [ 69.544251][ T4165] i2c_transfer+0x24c/0x390 [ 69.548833][ T4165] ? __i2c_transfer+0x2060/0x2060 [ 69.553875][ T4165] ? __might_fault+0xb7/0x110 [ 69.558620][ T4165] i2c_transfer_buffer_flags+0x102/0x190 [ 69.564285][ T4165] ? i2c_transfer+0x390/0x390 [ 69.569021][ T4165] ? __might_fault+0xb3/0x110 [ 69.573725][ T4165] ? _copy_from_user+0x111/0x170 [ 69.578741][ T4165] i2cdev_write+0x87/0x120 [ 69.583184][ T4165] do_iter_write+0x3e4/0x7b0 [ 69.587847][ T4165] do_writev+0x254/0x410 [ 69.592117][ T4165] ? do_readv+0x3e0/0x3e0 [ 69.596512][ T4165] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 69.602520][ T4165] ? lock_chain_count+0x20/0x20 [ 69.607423][ T4165] ? vtime_user_exit+0x2dc/0x400 [ 69.612382][ T4165] ? lockdep_hardirqs_on+0x94/0x140 [ 69.617642][ T4165] do_syscall_64+0x4c/0xa0 [ 69.622078][ T4165] ? clear_bhb_loop+0x30/0x80 [ 69.626887][ T4165] ? clear_bhb_loop+0x30/0x80 [ 69.631582][ T4165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.637554][ T4165] RIP: 0033:0x7f62e44f5159 [ 69.642000][ T4165] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 69.661767][ T4165] RSP: 002b:00007ffeb24c6878 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 69.670331][ T4165] RAX: ffffffffffffffda RBX: 00007ffeb24c6a48 RCX: 00007f62e44f5159 [ 69.678369][ T4165] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 69.686391][ T4165] RBP: 00007f62e4568610 R08: 00232d6332692f76 R09: 00007ffeb24c6a48 [ 69.694367][ T4165] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 69.702376][ T4165] R13: 00007ffeb24c6a38 R14: 0000000000000001 R15: 0000000000000001 [ 69.710497][ T4165] [ 69.713532][ T4165] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.720802][ T4165] CPU: 0 PID: 4165 Comm: syz-executor387 Not tainted 5.15.185-syzkaller #0 [ 69.729477][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.739528][ T4165] Call Trace: [ 69.742804][ T4165] [ 69.745872][ T4165] dump_stack_lvl+0x168/0x230 [ 69.750548][ T4165] ? show_regs_print_info+0x20/0x20 [ 69.755743][ T4165] ? load_image+0x3b0/0x3b0 [ 69.760252][ T4165] panic+0x2c9/0x7f0 [ 69.764177][ T4165] ? bpf_jit_dump+0xd0/0xd0 [ 69.768683][ T4165] ? usb_submit_urb+0x1200/0x1980 [ 69.773711][ T4165] __warn+0x248/0x2b0 [ 69.777695][ T4165] ? usb_submit_urb+0x1200/0x1980 [ 69.782810][ T4165] report_bug+0x1b7/0x2e0 [ 69.787137][ T4165] handle_bug+0x3a/0x70 [ 69.791288][ T4165] exc_invalid_op+0x16/0x40 [ 69.795793][ T4165] asm_exc_invalid_op+0x16/0x20 [ 69.800643][ T4165] RIP: 0010:usb_submit_urb+0x1200/0x1980 [ 69.806370][ T4165] Code: ff df 0f b6 44 05 00 84 c0 0f 85 7d 06 00 00 45 0f b6 07 48 c7 c7 40 62 a4 8a 48 8b 74 24 30 4c 89 e2 44 89 f1 e8 40 8b c7 03 <0f> 0b 49 bd 00 00 00 00 00 fc ff df e9 3b f3 ff ff 89 e9 80 e1 07 [ 69.826060][ T4165] RSP: 0018:ffffc90002e1f668 EFLAGS: 00010246 [ 69.832237][ T4165] RAX: 0fdc171b7dfd3a00 RBX: ffff88802a1bd000 RCX: ffff88807ab55940 [ 69.840338][ T4165] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 69.848416][ T4165] RBP: 1ffff11028ea8fae R08: dffffc0000000000 R09: ffffed10172267a8 [ 69.856387][ T4165] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff888022d79b18 [ 69.864354][ T4165] R13: dffffc0000000000 R14: 0000000080000280 R15: ffff888147547d70 [ 69.872332][ T4165] ? usb_submit_urb+0x1200/0x1980 [ 69.877365][ T4165] usb_start_wait_urb+0x111/0x4b0 [ 69.882395][ T4165] ? usb_api_blocking_completion+0xb0/0xb0 [ 69.888201][ T4165] ? memset+0x1e/0x40 [ 69.892197][ T4165] usb_control_msg+0x22f/0x3e0 [ 69.897056][ T4165] dtv5100_i2c_xfer+0x393/0x650 [ 69.901912][ T4165] ? dtv5100_tuner_attach+0xf0/0xf0 [ 69.907107][ T4165] __i2c_transfer+0x864/0x2060 [ 69.911865][ T4165] ? rwsem_down_read_slowpath+0x990/0x990 [ 69.917679][ T4165] ? i2c_cmd+0x110/0x110 [ 69.921928][ T4165] i2c_transfer+0x24c/0x390 [ 69.926424][ T4165] ? __i2c_transfer+0x2060/0x2060 [ 69.931439][ T4165] ? __might_fault+0xb7/0x110 [ 69.936116][ T4165] i2c_transfer_buffer_flags+0x102/0x190 [ 69.941742][ T4165] ? i2c_transfer+0x390/0x390 [ 69.946428][ T4165] ? __might_fault+0xb3/0x110 [ 69.951104][ T4165] ? _copy_from_user+0x111/0x170 [ 69.956062][ T4165] i2cdev_write+0x87/0x120 [ 69.960485][ T4165] do_iter_write+0x3e4/0x7b0 [ 69.965077][ T4165] do_writev+0x254/0x410 [ 69.969319][ T4165] ? do_readv+0x3e0/0x3e0 [ 69.973656][ T4165] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 69.979637][ T4165] ? lock_chain_count+0x20/0x20 [ 69.984485][ T4165] ? vtime_user_exit+0x2dc/0x400 [ 69.989432][ T4165] ? lockdep_hardirqs_on+0x94/0x140 [ 69.994647][ T4165] do_syscall_64+0x4c/0xa0 [ 69.999180][ T4165] ? clear_bhb_loop+0x30/0x80 [ 70.003874][ T4165] ? clear_bhb_loop+0x30/0x80 [ 70.008564][ T4165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.014469][ T4165] RIP: 0033:0x7f62e44f5159 [ 70.018895][ T4165] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.038588][ T4165] RSP: 002b:00007ffeb24c6878 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 70.047001][ T4165] RAX: ffffffffffffffda RBX: 00007ffeb24c6a48 RCX: 00007f62e44f5159 [ 70.054970][ T4165] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 70.062944][ T4165] RBP: 00007f62e4568610 R08: 00232d6332692f76 R09: 00007ffeb24c6a48 [ 70.070911][ T4165] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 70.078879][ T4165] R13: 00007ffeb24c6a38 R14: 0000000000000001 R15: 0000000000000001 [ 70.086857][ T4165] [ 70.090147][ T4165] Kernel Offset: disabled [ 70.094568][ T4165] Rebooting in 86400 seconds..