Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. 2025/11/20 04:11:26 parsed 1 programs [ 92.988382][ T4611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 94.936109][ T4641] chnl_net:caif_netlink_parms(): no params data found [ 94.991464][ T4641] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.999016][ T4641] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.007101][ T4641] device bridge_slave_0 entered promiscuous mode [ 95.015589][ T4641] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.023023][ T4641] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.031139][ T4641] device bridge_slave_1 entered promiscuous mode [ 95.056062][ T4641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.067583][ T4641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.096474][ T4641] team0: Port device team_slave_0 added [ 95.104302][ T4641] team0: Port device team_slave_1 added [ 95.126027][ T4641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.133070][ T4641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.159101][ T4641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.171860][ T4641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.178873][ T4641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.204803][ T4641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.241603][ T4641] device hsr_slave_0 entered promiscuous mode [ 95.249488][ T4641] device hsr_slave_1 entered promiscuous mode [ 95.802728][ T4641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.820993][ T4641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.840654][ T4641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.861689][ T4641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.947642][ T4641] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.954743][ T4641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.962550][ T4641] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.969676][ T4641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.019842][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.040364][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.137355][ T4641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.159573][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.173975][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.184996][ T4641] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.198927][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.209542][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.219652][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.226895][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.248789][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.258737][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.267341][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.274411][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.284350][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.294328][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.303542][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.313683][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.331233][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.339502][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.348556][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.357054][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.366571][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.375609][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.384557][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.395404][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.563395][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.570976][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.586305][ T4641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.605955][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.615779][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.635957][ T4641] device veth0_vlan entered promiscuous mode [ 96.643774][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.652442][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.660785][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.668957][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.680137][ T4641] device veth1_vlan entered promiscuous mode [ 96.700937][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.710181][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.720125][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.729810][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.741707][ T4641] device veth0_macvtap entered promiscuous mode [ 96.764842][ T4641] device veth1_macvtap entered promiscuous mode [ 96.782533][ T4641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.791354][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.800733][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.810283][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.819799][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.833854][ T4641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.847640][ T4641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.860595][ T4641] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.871123][ T4641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.880164][ T4641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.892307][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.901473][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.291318][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.309029][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.348218][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.356548][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.365625][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.375807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/11/20 04:11:35 executed programs: 0 [ 99.433973][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.586608][ T4829] chnl_net:caif_netlink_parms(): no params data found [ 99.646110][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.655539][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.664783][ T4829] device bridge_slave_0 entered promiscuous mode [ 99.674737][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.683279][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.692763][ T4829] device bridge_slave_1 entered promiscuous mode [ 99.722976][ T4829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.735741][ T4829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.769408][ T4829] team0: Port device team_slave_0 added [ 99.779111][ T4829] team0: Port device team_slave_1 added [ 99.803334][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.812306][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.840851][ T4829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.853301][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.862577][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.891729][ T4829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.934422][ T4829] device hsr_slave_0 entered promiscuous mode [ 99.941582][ T4829] device hsr_slave_1 entered promiscuous mode [ 99.951162][ T4829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.959312][ T4829] Cannot create hsr debugfs directory [ 101.294507][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.354391][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.408035][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.487285][ T4251] Bluetooth: hci0: command 0x0409 tx timeout [ 102.238481][ T4829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.250988][ T4829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.261300][ T4829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.273137][ T4829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.404885][ T4829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.420489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.430041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.441036][ T4829] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.460856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.469748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.478740][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.485788][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.495428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.509777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.519018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.528193][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.535318][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.563775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.572710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.589255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.598554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.606972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.615920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.624406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.658704][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.667107][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.679711][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.688672][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.700096][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.803762][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.811973][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.837089][ T4829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.852055][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.862580][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.888572][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.896889][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.905781][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.913774][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.932764][ T4829] device veth0_vlan entered promiscuous mode [ 102.950364][ T4829] device veth1_vlan entered promiscuous mode [ 102.970053][ T4829] device veth0_macvtap entered promiscuous mode [ 102.978434][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.986747][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.996077][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.005276][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.019667][ T4829] device veth1_macvtap entered promiscuous mode [ 103.033727][ T155] device hsr_slave_0 left promiscuous mode [ 103.040062][ T155] device hsr_slave_1 left promiscuous mode [ 103.046304][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.054271][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.062215][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.070874][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.078627][ T155] device bridge_slave_1 left promiscuous mode [ 103.085358][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.095694][ T155] device bridge_slave_0 left promiscuous mode [ 103.102071][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.114194][ T155] device veth1_macvtap left promiscuous mode [ 103.120604][ T155] device veth0_macvtap left promiscuous mode [ 103.126638][ T155] device veth1_vlan left promiscuous mode [ 103.132591][ T155] device veth0_vlan left promiscuous mode [ 103.263687][ T155] team0 (unregistering): Port device team_slave_1 removed [ 103.275442][ T155] team0 (unregistering): Port device team_slave_0 removed [ 103.290472][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.303875][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.353908][ T155] bond0 (unregistering): Released all slaves [ 103.401734][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.410012][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.428019][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.435388][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.444937][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.456234][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.465798][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.474686][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.494585][ T4829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.503637][ T4829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.512682][ T4829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.521553][ T4829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.567604][ T4251] Bluetooth: hci0: command 0x041b tx timeout [ 103.598131][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.606064][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.632236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.638733][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.653659][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.663314][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.977260][ T4266] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.237250][ T4266] usb 1-1: Using ep0 maxpacket: 16 [ 104.557446][ T4266] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 104.566925][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.575141][ T4266] usb 1-1: Product: syz [ 104.579328][ T4266] usb 1-1: Manufacturer: syz [ 104.583900][ T4266] usb 1-1: SerialNumber: syz [ 104.591422][ T4266] usb 1-1: config 0 descriptor?? [ 105.077539][ T4266] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 105.090513][ T4266] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.127796][ T4266] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 105.136340][ T4266] usb 1-1: media controller created [ 105.148520][ T4266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.649260][ T5001] Bluetooth: hci0: command 0x040f tx timeout [ 105.708104][ T4266] zl10353_read_register: readreg error (reg=127, ret==0) [ 105.715311][ T4266] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 105.724218][ T4266] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 105.747467][ T5061] ------------[ cut here ]------------ [ 105.757254][ T5061] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 105.766123][ T5061] WARNING: CPU: 0 PID: 5061 at drivers/usb/core/urb.c:412 usb_submit_urb+0x119f/0x1900 [ 105.775950][ T5061] Modules linked in: [ 105.779976][ T5061] CPU: 0 PID: 5061 Comm: syz.0.16 Not tainted syzkaller #0 [ 105.787614][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.797784][ T5061] RIP: 0010:usb_submit_urb+0x119f/0x1900 [ 105.803440][ T5061] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 6c 06 00 00 45 0f b6 07 48 c7 c7 c0 c6 a4 8a 48 8b 34 24 4c 89 e2 44 89 f1 e8 c1 d4 cf 03 <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 92 f3 ff ff 89 e9 80 e1 07 [ 105.823841][ T5061] RSP: 0018:ffffc9000337f668 EFLAGS: 00010246 [ 105.830482][ T5061] RAX: dd91267a0bc16d00 RBX: ffff8880223a8400 RCX: ffff88801f84bb80 [ 105.838612][ T5061] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 105.846607][ T5061] RBP: 1ffff1100370ac28 R08: dffffc0000000000 R09: ffffed1017204f2c [ 105.854742][ T5061] R10: ffffed1017204f2c R11: 1ffff11017204f2b R12: ffff888024f7ced8 [ 105.862781][ T5061] R13: ffff888060e9a0f8 R14: 0000000080000280 R15: ffff88801b856140 [ 105.870799][ T5061] FS: 00007f0c7cea26c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 105.879896][ T5061] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.886478][ T5061] CR2: 00007ffc32525a28 CR3: 0000000022106000 CR4: 00000000003506f0 [ 105.894811][ T5061] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 105.902870][ T5061] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 105.910939][ T5061] Call Trace: [ 105.914220][ T5061] [ 105.917233][ T5061] usb_start_wait_urb+0x111/0x4b0 [ 105.922427][ T5061] ? usb_api_blocking_completion+0xb0/0xb0 [ 105.928435][ T5061] ? memset+0x1e/0x40 [ 105.932425][ T5061] usb_control_msg+0x22f/0x3e0 [ 105.937769][ T5061] dtv5100_i2c_xfer+0x393/0x650 [ 105.942716][ T5061] ? dtv5100_tuner_attach+0xf0/0xf0 [ 105.948062][ T5061] __i2c_transfer+0x864/0x2060 [ 105.952854][ T5061] ? rwsem_down_read_slowpath+0x990/0x990 [ 105.958709][ T5061] ? i2c_cmd+0x110/0x110 [ 105.962961][ T5061] i2c_transfer+0x24c/0x390 [ 105.967592][ T5061] ? __i2c_transfer+0x2060/0x2060 [ 105.972624][ T5061] ? __might_fault+0xb7/0x110 [ 105.977417][ T5061] i2c_transfer_buffer_flags+0x102/0x190 [ 105.983062][ T5061] ? i2c_transfer+0x390/0x390 [ 105.987789][ T5061] ? __might_fault+0xb3/0x110 [ 105.992587][ T5061] ? _copy_from_user+0x111/0x170 [ 105.997785][ T5061] i2cdev_write+0x87/0x120 [ 106.002215][ T5061] do_iter_write+0x3e4/0x7b0 [ 106.006913][ T5061] do_writev+0x254/0x410 [ 106.011401][ T5061] ? do_readv+0x3e0/0x3e0 [ 106.015917][ T5061] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 106.022127][ T5061] ? lock_chain_count+0x20/0x20 [ 106.027317][ T5061] ? vtime_user_exit+0x2dc/0x400 [ 106.032281][ T5061] ? lockdep_hardirqs_on+0x94/0x140 [ 106.037629][ T5061] do_syscall_64+0x4c/0xa0 [ 106.042063][ T5061] ? clear_bhb_loop+0x30/0x80 [ 106.046739][ T5061] ? clear_bhb_loop+0x30/0x80 [ 106.052139][ T5061] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.058317][ T5061] RIP: 0033:0x7f0c7dc32929 [ 106.063237][ T5061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.082952][ T5061] RSP: 002b:00007f0c7cea2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 106.091546][ T5061] RAX: ffffffffffffffda RBX: 00007f0c7de59fa0 RCX: 00007f0c7dc32929 [ 106.099582][ T5061] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 106.107652][ T5061] RBP: 00007f0c7dcb4b39 R08: 0000000000000000 R09: 0000000000000000 [ 106.115653][ T5061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.123922][ T5061] R13: 0000000000000000 R14: 00007f0c7de59fa0 R15: 00007ffd7b2f0b28 [ 106.132380][ T5061] [ 106.135422][ T5061] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.142708][ T5061] CPU: 0 PID: 5061 Comm: syz.0.16 Not tainted syzkaller #0 [ 106.150008][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.160381][ T5061] Call Trace: [ 106.163654][ T5061] [ 106.166574][ T5061] dump_stack_lvl+0x168/0x230 [ 106.171243][ T5061] ? show_regs_print_info+0x20/0x20 [ 106.176516][ T5061] ? load_image+0x3b0/0x3b0 [ 106.181041][ T5061] panic+0x2c9/0x7f0 [ 106.184960][ T5061] ? bpf_jit_dump+0xd0/0xd0 [ 106.189544][ T5061] ? usb_submit_urb+0x119f/0x1900 [ 106.194573][ T5061] __warn+0x248/0x2b0 [ 106.198658][ T5061] ? usb_submit_urb+0x119f/0x1900 [ 106.203756][ T5061] report_bug+0x1b7/0x2e0 [ 106.208081][ T5061] handle_bug+0x3a/0x70 [ 106.212242][ T5061] exc_invalid_op+0x16/0x40 [ 106.216745][ T5061] asm_exc_invalid_op+0x16/0x20 [ 106.221683][ T5061] RIP: 0010:usb_submit_urb+0x119f/0x1900 [ 106.227305][ T5061] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 6c 06 00 00 45 0f b6 07 48 c7 c7 c0 c6 a4 8a 48 8b 34 24 4c 89 e2 44 89 f1 e8 c1 d4 cf 03 <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 92 f3 ff ff 89 e9 80 e1 07 [ 106.246911][ T5061] RSP: 0018:ffffc9000337f668 EFLAGS: 00010246 [ 106.253074][ T5061] RAX: dd91267a0bc16d00 RBX: ffff8880223a8400 RCX: ffff88801f84bb80 [ 106.261040][ T5061] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 106.269180][ T5061] RBP: 1ffff1100370ac28 R08: dffffc0000000000 R09: ffffed1017204f2c [ 106.277146][ T5061] R10: ffffed1017204f2c R11: 1ffff11017204f2b R12: ffff888024f7ced8 [ 106.285325][ T5061] R13: ffff888060e9a0f8 R14: 0000000080000280 R15: ffff88801b856140 [ 106.293296][ T5061] ? usb_submit_urb+0x119f/0x1900 [ 106.298322][ T5061] usb_start_wait_urb+0x111/0x4b0 [ 106.303340][ T5061] ? usb_api_blocking_completion+0xb0/0xb0 [ 106.309148][ T5061] ? memset+0x1e/0x40 [ 106.313218][ T5061] usb_control_msg+0x22f/0x3e0 [ 106.318182][ T5061] dtv5100_i2c_xfer+0x393/0x650 [ 106.323034][ T5061] ? dtv5100_tuner_attach+0xf0/0xf0 [ 106.328229][ T5061] __i2c_transfer+0x864/0x2060 [ 106.332990][ T5061] ? rwsem_down_read_slowpath+0x990/0x990 [ 106.338708][ T5061] ? i2c_cmd+0x110/0x110 [ 106.343055][ T5061] i2c_transfer+0x24c/0x390 [ 106.347590][ T5061] ? __i2c_transfer+0x2060/0x2060 [ 106.352598][ T5061] ? __might_fault+0xb7/0x110 [ 106.357448][ T5061] i2c_transfer_buffer_flags+0x102/0x190 [ 106.363129][ T5061] ? i2c_transfer+0x390/0x390 [ 106.367973][ T5061] ? __might_fault+0xb3/0x110 [ 106.373069][ T5061] ? _copy_from_user+0x111/0x170 [ 106.377996][ T5061] i2cdev_write+0x87/0x120 [ 106.382410][ T5061] do_iter_write+0x3e4/0x7b0 [ 106.387148][ T5061] do_writev+0x254/0x410 [ 106.391496][ T5061] ? do_readv+0x3e0/0x3e0 [ 106.395833][ T5061] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 106.401828][ T5061] ? lock_chain_count+0x20/0x20 [ 106.406686][ T5061] ? vtime_user_exit+0x2dc/0x400 [ 106.411615][ T5061] ? lockdep_hardirqs_on+0x94/0x140 [ 106.416996][ T5061] do_syscall_64+0x4c/0xa0 [ 106.421417][ T5061] ? clear_bhb_loop+0x30/0x80 [ 106.426090][ T5061] ? clear_bhb_loop+0x30/0x80 [ 106.430867][ T5061] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.436849][ T5061] RIP: 0033:0x7f0c7dc32929 [ 106.441356][ T5061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.461041][ T5061] RSP: 002b:00007f0c7cea2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 106.469662][ T5061] RAX: ffffffffffffffda RBX: 00007f0c7de59fa0 RCX: 00007f0c7dc32929 [ 106.477811][ T5061] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 106.485861][ T5061] RBP: 00007f0c7dcb4b39 R08: 0000000000000000 R09: 0000000000000000 [ 106.493822][ T5061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.501784][ T5061] R13: 0000000000000000 R14: 00007f0c7de59fa0 R15: 00007ffd7b2f0b28 [ 106.509770][ T5061] [ 106.513262][ T5061] Kernel Offset: disabled [ 106.517704][ T5061] Rebooting in 86400 seconds..