Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts.
2025/10/03 08:42:20 parsed 1 programs
syzkaller login: [ 77.293048][ T4272] cgroup: Unknown subsys name 'net'
[ 77.425809][ T4272] cgroup: Unknown subsys name 'rlimit'
[ 78.927755][ T4272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 80.516518][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.525433][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.533797][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.542098][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.549935][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 80.557186][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.898752][ T4295] chnl_net:caif_netlink_parms(): no params data found
[ 80.962753][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.970796][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.978825][ T4295] device bridge_slave_0 entered promiscuous mode
[ 80.988017][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.995380][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.003695][ T4295] device bridge_slave_1 entered promiscuous mode
[ 81.035319][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.047148][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.081780][ T4295] team0: Port device team_slave_0 added
[ 81.096357][ T4295] team0: Port device team_slave_1 added
[ 81.123016][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.130381][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.156385][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.169824][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.176809][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.202809][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.235254][ T4295] device hsr_slave_0 entered promiscuous mode
[ 81.242218][ T4295] device hsr_slave_1 entered promiscuous mode
[ 81.369989][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 81.380987][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 81.390611][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 81.405097][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 81.430740][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.437936][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.445779][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.452951][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.648685][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0
[ 81.673292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 81.684890][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.694399][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.705439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 81.725711][ T4295] 8021q: adding VLAN 0 to HW filter on device team0
[ 81.750393][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 81.761575][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.768780][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.797803][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 81.807160][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.814363][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.837765][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 81.901936][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 81.910825][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 81.919415][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 81.934836][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 81.943553][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 81.955019][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 82.165248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 82.173969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 82.188126][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 82.208528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 82.217467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 82.236878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 82.245232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 82.254705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 82.262737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 82.272889][ T4295] device veth0_vlan entered promiscuous mode
[ 82.284934][ T4295] device veth1_vlan entered promiscuous mode
[ 82.304815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 82.313109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 82.321844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 82.331633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 82.342149][ T4295] device veth0_macvtap entered promiscuous mode
[ 82.353116][ T4295] device veth1_macvtap entered promiscuous mode
[ 82.368149][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 82.375859][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 82.384929][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 82.393617][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 82.402399][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 82.414522][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 82.422316][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 82.431112][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 82.443760][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.452713][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.461516][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.470868][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 82.613607][ T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.508182][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.517615][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.533020][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 83.549581][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.557547][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.566797][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 84.748633][ T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/10/03 08:42:30 executed programs: 0
[ 85.395306][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.403760][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.411354][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.421664][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.429669][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 85.436917][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.571486][ T4366] chnl_net:caif_netlink_parms(): no params data found
[ 85.622697][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.629961][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.637868][ T4366] device bridge_slave_0 entered promiscuous mode
[ 85.646128][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.653429][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.661526][ T4366] device bridge_slave_1 entered promiscuous mode
[ 85.684621][ T4366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 85.696944][ T4366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 85.723801][ T4366] team0: Port device team_slave_0 added
[ 85.731816][ T4366] team0: Port device team_slave_1 added
[ 85.751908][ T4366] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 85.759104][ T4366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.785549][ T4366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 85.798151][ T4366] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 85.805188][ T4366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 85.831512][ T4366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 85.866630][ T4366] device hsr_slave_0 entered promiscuous mode
[ 85.873636][ T4366] device hsr_slave_1 entered promiscuous mode
[ 85.880460][ T4366] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 85.888311][ T4366] Cannot create hsr debugfs directory
[ 86.570621][ T41] cfg80211: failed to load regulatory.db
[ 87.100348][ T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.142225][ T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 87.530519][ T48] Bluetooth: hci0: command 0x0409 tx timeout
[ 87.974423][ T4366] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 87.988419][ T4366] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 88.013376][ T4366] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 88.027433][ T4366] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 88.069985][ T32] device hsr_slave_0 left promiscuous mode
[ 88.076736][ T32] device hsr_slave_1 left promiscuous mode
[ 88.084102][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 88.093872][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 88.102677][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 88.110481][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 88.118321][ T32] device bridge_slave_1 left promiscuous mode
[ 88.125750][ T32] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.137892][ T32] device bridge_slave_0 left promiscuous mode
[ 88.145975][ T32] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.173155][ T32] device veth1_macvtap left promiscuous mode
[ 88.179674][ T32] device veth0_macvtap left promiscuous mode
[ 88.185834][ T32] device veth1_vlan left promiscuous mode
[ 88.192387][ T32] device veth0_vlan left promiscuous mode
[ 88.538934][ T32] team0 (unregistering): Port device team_slave_1 removed
[ 88.568577][ T32] team0 (unregistering): Port device team_slave_0 removed
[ 88.596295][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 88.625118][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 88.886092][ T32] bond0 (unregistering): Released all slaves
[ 89.005878][ T4366] 8021q: adding VLAN 0 to HW filter on device bond0
[ 89.018786][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 89.026940][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 89.041039][ T4366] 8021q: adding VLAN 0 to HW filter on device team0
[ 89.054050][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 89.065857][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 89.077645][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.084791][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 89.094547][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 89.121737][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 89.131499][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 89.141310][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.148412][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 89.156622][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 89.173310][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 89.182378][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 89.202158][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 89.211441][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 89.222930][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 89.232282][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 89.245272][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 89.253935][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 89.265165][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 89.274302][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 89.286363][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 89.535912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 89.543572][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 89.557711][ T4366] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 89.584514][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 89.595558][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 89.611627][ T48] Bluetooth: hci0: command 0x041b tx timeout
[ 89.647437][ T4366] device veth0_vlan entered promiscuous mode
[ 89.654775][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 89.665020][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 89.680542][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 89.688508][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 89.699197][ T4366] device veth1_vlan entered promiscuous mode
[ 89.734420][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 89.742687][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 89.756696][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 89.765880][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 89.779227][ T4366] device veth0_macvtap entered promiscuous mode
[ 89.799051][ T4366] device veth1_macvtap entered promiscuous mode
[ 89.820519][ T4366] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.827920][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 89.836559][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 89.844920][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 89.853924][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 89.866195][ T4366] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.873847][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 89.882693][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 89.893791][ T4366] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.903165][ T4366] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.912261][ T4366] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.921208][ T4366] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.975394][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.991982][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.004126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 90.014518][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.022664][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.032765][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 90.348988][ T2120] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 90.570370][ T2120] usb 1-1: Using ep0 maxpacket: 16
[ 90.590127][ T2120] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 90.600312][ T2120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 90.608368][ T2120] usb 1-1: Product: syz
[ 90.613020][ T2120] usb 1-1: Manufacturer: syz
[ 90.617856][ T2120] usb 1-1: SerialNumber: syz
[ 90.627914][ T2120] usb 1-1: config 0 descriptor??
[ 91.036783][ T2120] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 91.057780][ T2120] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 91.069861][ T2120] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 91.078099][ T2120] usb 1-1: media controller created
[ 91.100896][ T2120] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 91.660069][ T2120] zl10353_read_register: readreg error (reg=127, ret==0)
[ 91.667613][ T2120] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 91.676192][ T2120] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 91.689348][ T48] Bluetooth: hci0: command 0x040f tx timeout
[ 91.696581][ T4432] ------------[ cut here ]------------
[ 91.702332][ T4432] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0
[ 91.714695][ T4432] WARNING: CPU: 1 PID: 4432 at drivers/usb/core/urb.c:413 usb_submit_urb+0x11a5/0x1910
[ 91.724786][ T4432] Modules linked in:
[ 91.728762][ T4432] CPU: 1 PID: 4432 Comm: syz.0.17 Not tainted syzkaller #0
[ 91.736067][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 91.746207][ T4432] RIP: 0010:usb_submit_urb+0x11a5/0x1910
[ 91.751947][ T4432] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 60 3f 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 9b 41 37 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07
[ 91.771647][ T4432] RSP: 0018:ffffc900034e7848 EFLAGS: 00010246
[ 91.777937][ T4432] RAX: 98b74e1fe3b69900 RBX: ffff888018432b00 RCX: ffff888026af1dc0
[ 91.785966][ T4432] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 91.794013][ T4432] RBP: 1ffff11003a7c8f0 R08: dffffc0000000000 R09: fffff5200069cea9
[ 91.802088][ T4432] R10: fffff5200069cea9 R11: 1ffff9200069cea8 R12: ffff8880290b6d70
[ 91.810118][ T4432] R13: ffff88807bc8b0f8 R14: 0000000080000280 R15: ffff88801d3e4780
[ 91.818118][ T4432] FS: 000055558c1c3500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 91.827125][ T4432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 91.833769][ T4432] CR2: 0000001b2d963fff CR3: 00000000787fa000 CR4: 00000000003506e0
[ 91.841837][ T4432] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 91.849994][ T4432] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 91.857993][ T4432] Call Trace:
[ 91.861336][ T4432]
[ 91.864299][ T4432] usb_start_wait_urb+0x111/0x4b0
[ 91.869383][ T4432] ? usb_api_blocking_completion+0xb0/0xb0
[ 91.875232][ T4432] ? usb_alloc_urb+0x3f/0x140
[ 91.879966][ T4432] ? __kmalloc+0xe1/0x240
[ 91.884330][ T4432] ? memset+0x1e/0x40
[ 91.888416][ T4432] usb_control_msg+0x22f/0x3e0
[ 91.893244][ T4432] dtv5100_i2c_msg+0x22a/0x2d0
[ 91.898053][ T4432] dtv5100_i2c_xfer+0x1a0/0x3b0
[ 91.902987][ T4432] ? dtv5100_tuner_attach+0xf0/0xf0
[ 91.908231][ T4432] __i2c_transfer+0x864/0x2260
[ 91.913131][ T4432] ? i2c_cmd+0x110/0x110
[ 91.917422][ T4432] ? __might_fault+0xa6/0x120
[ 91.922197][ T4432] ? i2c_transfer+0x117/0x390
[ 91.926919][ T4432] i2c_transfer+0x24c/0x390
[ 91.931511][ T4432] ? __i2c_transfer+0x2260/0x2260
[ 91.936583][ T4432] ? __might_fault+0xc2/0x120
[ 91.941358][ T4432] ? __might_fault+0xa6/0x120
[ 91.946092][ T4432] ? _copy_from_user+0x10b/0x170
[ 91.951133][ T4432] i2cdev_ioctl_rdwr+0x3da/0x6c0
[ 91.956138][ T4432] i2cdev_ioctl+0x5ba/0x750
[ 91.960734][ T4432] ? i2cdev_write+0x120/0x120
[ 91.965464][ T4432] ? lock_chain_count+0x20/0x20
[ 91.970369][ T4432] ? bpf_lsm_file_ioctl+0x5/0x10
[ 91.975337][ T4432] ? security_file_ioctl+0x7c/0xa0
[ 91.980509][ T4432] ? i2cdev_write+0x120/0x120
[ 91.985229][ T4432] __se_sys_ioctl+0xfa/0x170
[ 91.989877][ T4432] do_syscall_64+0x4c/0xa0
[ 91.994320][ T4432] ? clear_bhb_loop+0x60/0xb0
[ 91.999048][ T4432] ? clear_bhb_loop+0x60/0xb0
[ 92.003749][ T4432] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 92.009700][ T4432] RIP: 0033:0x7f7da8d8eec9
[ 92.014154][ T4432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 92.033828][ T4432] RSP: 002b:00007fff28108fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 92.042322][ T4432] RAX: ffffffffffffffda RBX: 00007f7da8fe5fa0 RCX: 00007f7da8d8eec9
[ 92.050338][ T4432] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000004
[ 92.058332][ T4432] RBP: 00007f7da8e11f91 R08: 0000000000000000 R09: 0000000000000000
[ 92.066459][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 92.074591][ T4432] R13: 00007f7da8fe5fa0 R14: 00007f7da8fe5fa0 R15: 0000000000000003
[ 92.082631][ T4432]
[ 92.085676][ T4432] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 92.092954][ T4432] CPU: 1 PID: 4432 Comm: syz.0.17 Not tainted syzkaller #0
[ 92.100160][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 92.110243][ T4432] Call Trace:
[ 92.113521][ T4432]
[ 92.116452][ T4432] dump_stack_lvl+0x168/0x22e
[ 92.121136][ T4432] ? memcpy+0x3c/0x60
[ 92.125130][ T4432] ? show_regs_print_info+0x12/0x12
[ 92.130419][ T4432] ? load_image+0x3b0/0x3b0
[ 92.134942][ T4432] panic+0x2c9/0x710
[ 92.138863][ T4432] ? bpf_jit_dump+0xd0/0xd0
[ 92.143516][ T4432] __warn+0x2f8/0x4f0
[ 92.147502][ T4432] ? usb_submit_urb+0x11a5/0x1910
[ 92.152639][ T4432] ? usb_submit_urb+0x11a5/0x1910
[ 92.157661][ T4432] report_bug+0x2ba/0x4f0
[ 92.162006][ T4432] ? usb_submit_urb+0x11a5/0x1910
[ 92.167085][ T4432] handle_bug+0x3a/0x70
[ 92.171251][ T4432] exc_invalid_op+0x16/0x40
[ 92.175776][ T4432] asm_exc_invalid_op+0x16/0x20
[ 92.180638][ T4432] RIP: 0010:usb_submit_urb+0x11a5/0x1910
[ 92.186289][ T4432] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 60 3f 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 9b 41 37 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07
[ 92.205992][ T4432] RSP: 0018:ffffc900034e7848 EFLAGS: 00010246
[ 92.212065][ T4432] RAX: 98b74e1fe3b69900 RBX: ffff888018432b00 RCX: ffff888026af1dc0
[ 92.220046][ T4432] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 92.228040][ T4432] RBP: 1ffff11003a7c8f0 R08: dffffc0000000000 R09: fffff5200069cea9
[ 92.236016][ T4432] R10: fffff5200069cea9 R11: 1ffff9200069cea8 R12: ffff8880290b6d70
[ 92.243992][ T4432] R13: ffff88807bc8b0f8 R14: 0000000080000280 R15: ffff88801d3e4780
[ 92.251977][ T4432] ? usb_submit_urb+0x11a5/0x1910
[ 92.257013][ T4432] usb_start_wait_urb+0x111/0x4b0
[ 92.262047][ T4432] ? usb_api_blocking_completion+0xb0/0xb0
[ 92.268050][ T4432] ? usb_alloc_urb+0x3f/0x140
[ 92.272738][ T4432] ? __kmalloc+0xe1/0x240
[ 92.277080][ T4432] ? memset+0x1e/0x40
[ 92.281080][ T4432] usb_control_msg+0x22f/0x3e0
[ 92.285948][ T4432] dtv5100_i2c_msg+0x22a/0x2d0
[ 92.290730][ T4432] dtv5100_i2c_xfer+0x1a0/0x3b0
[ 92.295684][ T4432] ? dtv5100_tuner_attach+0xf0/0xf0
[ 92.300892][ T4432] __i2c_transfer+0x864/0x2260
[ 92.305764][ T4432] ? i2c_cmd+0x110/0x110
[ 92.310010][ T4432] ? __might_fault+0xa6/0x120
[ 92.314703][ T4432] ? i2c_transfer+0x117/0x390
[ 92.319399][ T4432] i2c_transfer+0x24c/0x390
[ 92.323927][ T4432] ? __i2c_transfer+0x2260/0x2260
[ 92.328981][ T4432] ? __might_fault+0xc2/0x120
[ 92.333749][ T4432] ? __might_fault+0xa6/0x120
[ 92.338457][ T4432] ? _copy_from_user+0x10b/0x170
[ 92.343415][ T4432] i2cdev_ioctl_rdwr+0x3da/0x6c0
[ 92.348379][ T4432] i2cdev_ioctl+0x5ba/0x750
[ 92.352926][ T4432] ? i2cdev_write+0x120/0x120
[ 92.357709][ T4432] ? lock_chain_count+0x20/0x20
[ 92.362576][ T4432] ? bpf_lsm_file_ioctl+0x5/0x10
[ 92.367522][ T4432] ? security_file_ioctl+0x7c/0xa0
[ 92.372639][ T4432] ? i2cdev_write+0x120/0x120
[ 92.377330][ T4432] __se_sys_ioctl+0xfa/0x170
[ 92.382055][ T4432] do_syscall_64+0x4c/0xa0
[ 92.386478][ T4432] ? clear_bhb_loop+0x60/0xb0
[ 92.391178][ T4432] ? clear_bhb_loop+0x60/0xb0
[ 92.395886][ T4432] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 92.401789][ T4432] RIP: 0033:0x7f7da8d8eec9
[ 92.406210][ T4432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 92.425830][ T4432] RSP: 002b:00007fff28108fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 92.434258][ T4432] RAX: ffffffffffffffda RBX: 00007f7da8fe5fa0 RCX: 00007f7da8d8eec9
[ 92.442249][ T4432] RDX: 0000200000000280 RSI: 0000000000000707 RDI: 0000000000000004
[ 92.450229][ T4432] RBP: 00007f7da8e11f91 R08: 0000000000000000 R09: 0000000000000000
[ 92.458203][ T4432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 92.466197][ T4432] R13: 00007f7da8fe5fa0 R14: 00007f7da8fe5fa0 R15: 0000000000000003
[ 92.474193][ T4432]
[ 92.477541][ T4432] Kernel Offset: disabled
[ 92.481939][ T4432] Rebooting in 86400 seconds..