Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. executing program [ 61.821723][ T3507] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.061662][ T3507] usb 1-1: Using ep0 maxpacket: 16 [ 62.341852][ T3507] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 62.351129][ T3507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.359173][ T3507] usb 1-1: Product: syz [ 62.363373][ T3507] usb 1-1: Manufacturer: syz [ 62.367962][ T3507] usb 1-1: SerialNumber: syz [ 62.375356][ T3507] usb 1-1: config 0 descriptor?? [ 62.851832][ T3507] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 62.862777][ T3507] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 62.892080][ T3507] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 62.900120][ T3507] usb 1-1: media controller created [ 62.914650][ T3507] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 63.472570][ T3507] zl10353_read_register: readreg error (reg=127, ret==0) [ 63.479671][ T3507] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 63.487687][ T3507] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 63.501919][ T4166] ------------[ cut here ]------------ [ 63.507579][ T4166] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 63.517076][ T4166] WARNING: CPU: 1 PID: 4166 at drivers/usb/core/urb.c:412 usb_submit_urb+0x1200/0x1980 [ 63.527267][ T4166] Modules linked in: [ 63.531283][ T4166] CPU: 1 PID: 4166 Comm: syz-executor389 Not tainted 5.15.185-syzkaller #0 [ 63.546845][ T4166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.557656][ T4166] RIP: 0010:usb_submit_urb+0x1200/0x1980 [ 63.563678][ T4166] Code: ff df 0f b6 44 05 00 84 c0 0f 85 7d 06 00 00 45 0f b6 07 48 c7 c7 40 62 a4 8a 48 8b 74 24 30 4c 89 e2 44 89 f1 e8 40 8b c7 03 <0f> 0b 49 bd 00 00 00 00 00 fc ff df e9 3b f3 ff ff 89 e9 80 e1 07 [ 63.583650][ T4166] RSP: 0018:ffffc90002edf668 EFLAGS: 00010246 [ 63.589765][ T4166] RAX: 5e21497a5e068a00 RBX: ffff88801b589700 RCX: ffff888073d28000 [ 63.597900][ T4166] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 63.606237][ T4166] RBP: 1ffff1100484caa0 R08: dffffc0000000000 R09: ffffed10172267a8 [ 63.614384][ T4166] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff88814883f988 [ 63.622420][ T4166] R13: dffffc0000000000 R14: 0000000080000280 R15: ffff888024265500 [ 63.630399][ T4166] FS: 000055558ccf6380(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 63.639640][ T4166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.646307][ T4166] CR2: 00007f203e8518c8 CR3: 000000007abf3000 CR4: 00000000003506e0 [ 63.654436][ T4166] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.662591][ T4166] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.670610][ T4166] Call Trace: [ 63.673963][ T4166] [ 63.676917][ T4166] usb_start_wait_urb+0x111/0x4b0 [ 63.682043][ T4166] ? usb_api_blocking_completion+0xb0/0xb0 [ 63.687885][ T4166] ? memset+0x1e/0x40 [ 63.691931][ T4166] usb_control_msg+0x22f/0x3e0 [ 63.696732][ T4166] dtv5100_i2c_xfer+0x393/0x650 [ 63.701668][ T4166] ? dtv5100_tuner_attach+0xf0/0xf0 [ 63.706885][ T4166] __i2c_transfer+0x864/0x2060 [ 63.711700][ T4166] ? rwsem_down_read_slowpath+0x990/0x990 [ 63.717457][ T4166] ? i2c_cmd+0x110/0x110 [ 63.721784][ T4166] i2c_transfer+0x24c/0x390 [ 63.726317][ T4166] ? __i2c_transfer+0x2060/0x2060 [ 63.731341][ T4166] ? __might_fault+0xb7/0x110 [ 63.736117][ T4166] i2c_transfer_buffer_flags+0x102/0x190 [ 63.741823][ T4166] ? i2c_transfer+0x390/0x390 [ 63.746518][ T4166] ? __might_fault+0xb3/0x110 [ 63.751195][ T4166] ? _copy_from_user+0x111/0x170 [ 63.756180][ T4166] i2cdev_write+0x87/0x120 [ 63.760615][ T4166] do_iter_write+0x3e4/0x7b0 [ 63.765380][ T4166] do_writev+0x254/0x410 [ 63.769660][ T4166] ? do_readv+0x3e0/0x3e0 [ 63.774194][ T4166] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 63.780231][ T4166] ? lock_chain_count+0x20/0x20 [ 63.785218][ T4166] ? vtime_user_exit+0x2dc/0x400 [ 63.790181][ T4166] ? lockdep_hardirqs_on+0x94/0x140 [ 63.795472][ T4166] do_syscall_64+0x4c/0xa0 [ 63.799908][ T4166] ? clear_bhb_loop+0x30/0x80 [ 63.804661][ T4166] ? clear_bhb_loop+0x30/0x80 [ 63.809374][ T4166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.815319][ T4166] RIP: 0033:0x7fdddb20a159 [ 63.819752][ T4166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 63.839485][ T4166] RSP: 002b:00007fffcb80b268 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 63.847961][ T4166] RAX: ffffffffffffffda RBX: 00007fffcb80b438 RCX: 00007fdddb20a159 [ 63.856002][ T4166] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 63.864028][ T4166] RBP: 00007fdddb27d610 R08: 00232d6332692f76 R09: 00007fffcb80b438 [ 63.872061][ T4166] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 63.880051][ T4166] R13: 00007fffcb80b428 R14: 0000000000000001 R15: 0000000000000001 [ 63.888111][ T4166] [ 63.891154][ T4166] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.898432][ T4166] CPU: 1 PID: 4166 Comm: syz-executor389 Not tainted 5.15.185-syzkaller #0 [ 63.907008][ T4166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.917061][ T4166] Call Trace: [ 63.920338][ T4166] [ 63.923266][ T4166] dump_stack_lvl+0x168/0x230 [ 63.928213][ T4166] ? show_regs_print_info+0x20/0x20 [ 63.933402][ T4166] ? load_image+0x3b0/0x3b0 [ 63.937906][ T4166] panic+0x2c9/0x7f0 [ 63.941805][ T4166] ? bpf_jit_dump+0xd0/0xd0 [ 63.946361][ T4166] ? usb_submit_urb+0x1200/0x1980 [ 63.951386][ T4166] __warn+0x248/0x2b0 [ 63.955367][ T4166] ? usb_submit_urb+0x1200/0x1980 [ 63.960391][ T4166] report_bug+0x1b7/0x2e0 [ 63.964721][ T4166] handle_bug+0x3a/0x70 [ 63.968871][ T4166] exc_invalid_op+0x16/0x40 [ 63.973367][ T4166] asm_exc_invalid_op+0x16/0x20 [ 63.978213][ T4166] RIP: 0010:usb_submit_urb+0x1200/0x1980 [ 63.983841][ T4166] Code: ff df 0f b6 44 05 00 84 c0 0f 85 7d 06 00 00 45 0f b6 07 48 c7 c7 40 62 a4 8a 48 8b 74 24 30 4c 89 e2 44 89 f1 e8 40 8b c7 03 <0f> 0b 49 bd 00 00 00 00 00 fc ff df e9 3b f3 ff ff 89 e9 80 e1 07 [ 64.003442][ T4166] RSP: 0018:ffffc90002edf668 EFLAGS: 00010246 [ 64.009505][ T4166] RAX: 5e21497a5e068a00 RBX: ffff88801b589700 RCX: ffff888073d28000 [ 64.017469][ T4166] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 64.025432][ T4166] RBP: 1ffff1100484caa0 R08: dffffc0000000000 R09: ffffed10172267a8 [ 64.033407][ T4166] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff88814883f988 [ 64.041384][ T4166] R13: dffffc0000000000 R14: 0000000080000280 R15: ffff888024265500 [ 64.049377][ T4166] ? usb_submit_urb+0x1200/0x1980 [ 64.054421][ T4166] usb_start_wait_urb+0x111/0x4b0 [ 64.059449][ T4166] ? usb_api_blocking_completion+0xb0/0xb0 [ 64.065260][ T4166] ? memset+0x1e/0x40 [ 64.069244][ T4166] usb_control_msg+0x22f/0x3e0 [ 64.074015][ T4166] dtv5100_i2c_xfer+0x393/0x650 [ 64.078878][ T4166] ? dtv5100_tuner_attach+0xf0/0xf0 [ 64.084075][ T4166] __i2c_transfer+0x864/0x2060 [ 64.088921][ T4166] ? rwsem_down_read_slowpath+0x990/0x990 [ 64.094642][ T4166] ? i2c_cmd+0x110/0x110 [ 64.098879][ T4166] i2c_transfer+0x24c/0x390 [ 64.103382][ T4166] ? __i2c_transfer+0x2060/0x2060 [ 64.108397][ T4166] ? __might_fault+0xb7/0x110 [ 64.113076][ T4166] i2c_transfer_buffer_flags+0x102/0x190 [ 64.118726][ T4166] ? i2c_transfer+0x390/0x390 [ 64.123416][ T4166] ? __might_fault+0xb3/0x110 [ 64.128092][ T4166] ? _copy_from_user+0x111/0x170 [ 64.133033][ T4166] i2cdev_write+0x87/0x120 [ 64.137458][ T4166] do_iter_write+0x3e4/0x7b0 [ 64.142151][ T4166] do_writev+0x254/0x410 [ 64.146399][ T4166] ? do_readv+0x3e0/0x3e0 [ 64.150742][ T4166] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 64.156749][ T4166] ? lock_chain_count+0x20/0x20 [ 64.161681][ T4166] ? vtime_user_exit+0x2dc/0x400 [ 64.166627][ T4166] ? lockdep_hardirqs_on+0x94/0x140 [ 64.171834][ T4166] do_syscall_64+0x4c/0xa0 [ 64.176245][ T4166] ? clear_bhb_loop+0x30/0x80 [ 64.180915][ T4166] ? clear_bhb_loop+0x30/0x80 [ 64.185592][ T4166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.191655][ T4166] RIP: 0033:0x7fdddb20a159 [ 64.196164][ T4166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 64.215759][ T4166] RSP: 002b:00007fffcb80b268 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 64.224177][ T4166] RAX: ffffffffffffffda RBX: 00007fffcb80b438 RCX: 00007fdddb20a159 [ 64.232153][ T4166] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 64.240122][ T4166] RBP: 00007fdddb27d610 R08: 00232d6332692f76 R09: 00007fffcb80b438 [ 64.248099][ T4166] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 64.256063][ T4166] R13: 00007fffcb80b428 R14: 0000000000000001 R15: 0000000000000001 [ 64.264064][ T4166] [ 64.267240][ T4166] Kernel Offset: disabled [ 64.271651][ T4166] Rebooting in 86400 seconds..