Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. executing program [ 77.831138][ T952] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 78.013471][ T952] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 78.021805][ T952] usb 1-1: config 0 has no interface number 0 [ 78.029752][ T952] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 78.038890][ T952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.046943][ T952] usb 1-1: Product: syz [ 78.051151][ T952] usb 1-1: Manufacturer: syz [ 78.055768][ T952] usb 1-1: SerialNumber: syz [ 78.063214][ T952] usb 1-1: config 0 descriptor?? [ 78.271363][ T952] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 78.282961][ T952] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 78.291902][ T952] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 78.300690][ T952] usb 1-1: media controller created [ 78.307875][ T952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.357805][ T952] DVB: Unable to find symbol dib7000p_attach() [ 78.364186][ T952] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 78.373061][ T952] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 78.382575][ T952] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 78.391446][ T952] usb 1-1: media controller created [ 78.397955][ T952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.408673][ T952] dib0700: the master dib7090 has to be initialized first [ 78.415879][ T952] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 78.472316][ T4250] ------------[ cut here ]------------ [ 78.477939][ T4250] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 78.487148][ T4250] WARNING: CPU: 1 PID: 4250 at drivers/usb/core/urb.c:413 usb_submit_urb+0x11ef/0x1970 [ 78.496963][ T4250] Modules linked in: [ 78.500890][ T4250] CPU: 1 PID: 4250 Comm: syz-executor386 Not tainted 6.1.141-syzkaller #0 [ 78.501658][ T952] rc_core: IR keymap rc-dib0700-rc5 not found [ 78.509496][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.516270][ T952] Registered IR keymap rc-empty [ 78.525685][ T4250] RIP: 0010:usb_submit_urb+0x11ef/0x1970 [ 78.525727][ T4250] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 84 06 00 00 45 0f b6 07 48 c7 c7 a0 48 0e 8b 48 8b 34 24 4c 89 e2 44 89 f1 e8 e1 dd 36 fb <0f> 0b 49 bd 00 00 00 00 00 fc ff df e9 46 f3 ff ff 89 e9 80 e1 07 [ 78.556252][ T4250] RSP: 0018:ffffc90003b97870 EFLAGS: 00010246 [ 78.562445][ T4250] RAX: 384283cc257b4900 RBX: ffff88801de77800 RCX: ffff88807d671dc0 [ 78.570476][ T4250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 78.578673][ T4250] RBP: 1ffff110060fa2d7 R08: dffffc0000000000 R09: fffff52000772e9d [ 78.586749][ T4250] R10: fffff52000772e9d R11: 1ffff92000772e9c R12: ffff88801fe59460 [ 78.594811][ T4250] R13: dffffc0000000000 R14: 0000000080000280 R15: ffff8880307d16b8 [ 78.602856][ T4250] FS: 000055556ab67380(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 78.611857][ T4250] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.618490][ T4250] CR2: 0000200000002580 CR3: 000000001ebd2000 CR4: 00000000003506e0 [ 78.626531][ T4250] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.634570][ T4250] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.642606][ T4250] Call Trace: [ 78.645908][ T4250] [ 78.648877][ T4250] usb_start_wait_urb+0x111/0x4b0 [ 78.654030][ T4250] ? usb_api_blocking_completion+0xb0/0xb0 [ 78.660002][ T4250] ? __kmalloc+0xe1/0x240 [ 78.664438][ T4250] usb_control_msg+0x22f/0x3e0 [ 78.669262][ T4250] dib0700_i2c_xfer+0xbbd/0xf80 [ 78.674286][ T4250] ? rt_mutex_slowlock+0x35a/0x710 [ 78.679458][ T4250] ? dib0700_set_gpio+0x1f0/0x1f0 [ 78.684573][ T4250] __i2c_transfer+0x864/0x2260 [ 78.689426][ T4250] ? i2c_cmd+0x110/0x110 [ 78.693788][ T4250] ? __might_fault+0xa6/0x120 [ 78.698511][ T4250] ? i2c_transfer+0x117/0x390 [ 78.703283][ T4250] i2c_transfer+0x24c/0x390 [ 78.707823][ T4250] ? __i2c_transfer+0x2260/0x2260 [ 78.712929][ T4250] ? __might_fault+0xc2/0x120 [ 78.717636][ T4250] ? __might_fault+0xa6/0x120 [ 78.722661][ T4250] ? _copy_from_user+0x10b/0x170 [ 78.727725][ T4250] i2cdev_ioctl_rdwr+0x3da/0x6c0 [ 78.732765][ T4250] i2cdev_ioctl+0x5ba/0x750 [ 78.737292][ T4250] ? i2cdev_write+0x120/0x120 [ 78.742022][ T4250] ? lock_chain_count+0x20/0x20 [ 78.746907][ T4250] ? bpf_lsm_file_ioctl+0x5/0x10 [ 78.751897][ T4250] ? security_file_ioctl+0x7c/0xa0 [ 78.757041][ T4250] ? i2cdev_write+0x120/0x120 [ 78.761785][ T4250] __se_sys_ioctl+0xfa/0x170 [ 78.766413][ T4250] do_syscall_64+0x4c/0xa0 [ 78.770843][ T4250] ? clear_bhb_loop+0x60/0xb0 [ 78.775566][ T4250] ? clear_bhb_loop+0x60/0xb0 [ 78.780396][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.786474][ T4250] RIP: 0033:0x7f6a60a378f9 [ 78.790936][ T4250] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.811434][ T4250] RSP: 002b:00007ffeb64aa2e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.819926][ T4250] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6a60a378f9 [ 78.828014][ T4250] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004 [ 78.836072][ T4250] RBP: 00007f6a60aaa5f0 R08: 00232d6332692f76 R09: 0000000000000006 [ 78.844121][ T4250] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 78.852151][ T4250] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 78.860153][ T4250] [ 78.863231][ T4250] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.870534][ T4250] CPU: 1 PID: 4250 Comm: syz-executor386 Not tainted 6.1.141-syzkaller #0 [ 78.881382][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.891441][ T4250] Call Trace: [ 78.894724][ T4250] [ 78.897657][ T4250] dump_stack_lvl+0x168/0x22e [ 78.902353][ T4250] ? memcpy+0x3c/0x60 [ 78.906358][ T4250] ? show_regs_print_info+0x12/0x12 [ 78.911589][ T4250] ? load_image+0x3b0/0x3b0 [ 78.916124][ T4250] panic+0x2c9/0x710 [ 78.920137][ T4250] ? bpf_jit_dump+0xd0/0xd0 [ 78.924664][ T4250] __warn+0x2f8/0x4f0 [ 78.928664][ T4250] ? usb_submit_urb+0x11ef/0x1970 [ 78.933718][ T4250] ? usb_submit_urb+0x11ef/0x1970 [ 78.938857][ T4250] report_bug+0x2ba/0x4f0 [ 78.943359][ T4250] ? usb_submit_urb+0x11ef/0x1970 [ 78.948433][ T4250] handle_bug+0x3a/0x70 [ 78.952613][ T4250] exc_invalid_op+0x16/0x40 [ 78.957146][ T4250] asm_exc_invalid_op+0x16/0x20 [ 78.962012][ T4250] RIP: 0010:usb_submit_urb+0x11ef/0x1970 [ 78.967663][ T4250] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 84 06 00 00 45 0f b6 07 48 c7 c7 a0 48 0e 8b 48 8b 34 24 4c 89 e2 44 89 f1 e8 e1 dd 36 fb <0f> 0b 49 bd 00 00 00 00 00 fc ff df e9 46 f3 ff ff 89 e9 80 e1 07 [ 78.987300][ T4250] RSP: 0018:ffffc90003b97870 EFLAGS: 00010246 [ 78.993392][ T4250] RAX: 384283cc257b4900 RBX: ffff88801de77800 RCX: ffff88807d671dc0 [ 79.001478][ T4250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 79.009457][ T4250] RBP: 1ffff110060fa2d7 R08: dffffc0000000000 R09: fffff52000772e9d [ 79.017444][ T4250] R10: fffff52000772e9d R11: 1ffff92000772e9c R12: ffff88801fe59460 [ 79.025430][ T4250] R13: dffffc0000000000 R14: 0000000080000280 R15: ffff8880307d16b8 [ 79.033448][ T4250] usb_start_wait_urb+0x111/0x4b0 [ 79.038536][ T4250] ? usb_api_blocking_completion+0xb0/0xb0 [ 79.044367][ T4250] ? __kmalloc+0xe1/0x240 [ 79.048730][ T4250] usb_control_msg+0x22f/0x3e0 [ 79.053518][ T4250] dib0700_i2c_xfer+0xbbd/0xf80 [ 79.058389][ T4250] ? rt_mutex_slowlock+0x35a/0x710 [ 79.063610][ T4250] ? dib0700_set_gpio+0x1f0/0x1f0 [ 79.068778][ T4250] __i2c_transfer+0x864/0x2260 [ 79.073585][ T4250] ? i2c_cmd+0x110/0x110 [ 79.077872][ T4250] ? __might_fault+0xa6/0x120 [ 79.082568][ T4250] ? i2c_transfer+0x117/0x390 [ 79.087271][ T4250] i2c_transfer+0x24c/0x390 [ 79.091806][ T4250] ? __i2c_transfer+0x2260/0x2260 [ 79.096866][ T4250] ? __might_fault+0xc2/0x120 [ 79.101570][ T4250] ? __might_fault+0xa6/0x120 [ 79.106283][ T4250] ? _copy_from_user+0x10b/0x170 [ 79.111371][ T4250] i2cdev_ioctl_rdwr+0x3da/0x6c0 [ 79.116435][ T4250] i2cdev_ioctl+0x5ba/0x750 [ 79.120953][ T4250] ? i2cdev_write+0x120/0x120 [ 79.125757][ T4250] ? lock_chain_count+0x20/0x20 [ 79.130649][ T4250] ? bpf_lsm_file_ioctl+0x5/0x10 [ 79.135692][ T4250] ? security_file_ioctl+0x7c/0xa0 [ 79.140858][ T4250] ? i2cdev_write+0x120/0x120 [ 79.145560][ T4250] __se_sys_ioctl+0xfa/0x170 [ 79.150188][ T4250] do_syscall_64+0x4c/0xa0 [ 79.154643][ T4250] ? clear_bhb_loop+0x60/0xb0 [ 79.159340][ T4250] ? clear_bhb_loop+0x60/0xb0 [ 79.164045][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.169982][ T4250] RIP: 0033:0x7f6a60a378f9 [ 79.174605][ T4250] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.194499][ T4250] RSP: 002b:00007ffeb64aa2e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.202949][ T4250] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6a60a378f9 [ 79.210944][ T4250] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000004 [ 79.218935][ T4250] RBP: 00007f6a60aaa5f0 R08: 00232d6332692f76 R09: 0000000000000006 [ 79.226917][ T4250] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 79.234900][ T4250] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 79.242903][ T4250] [ 79.246250][ T4250] Kernel Offset: disabled [ 79.250612][ T4250] Rebooting in 86400 seconds..