Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. 2026/07/18 02:50:40 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 108.754605][ T4549] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 110.679131][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.690268][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.700287][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.719759][ T3082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.729167][ T3082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.744050][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.855637][ T4696] chnl_net:caif_netlink_parms(): no params data found [ 111.928277][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.936118][ T4696] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.945623][ T4696] device bridge_slave_0 entered promiscuous mode [ 111.955238][ T4696] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.963321][ T4696] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.972710][ T4696] device bridge_slave_1 entered promiscuous mode [ 111.998974][ T4696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.014567][ T4696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.045846][ T4696] team0: Port device team_slave_0 added [ 112.059620][ T4696] team0: Port device team_slave_1 added [ 112.086597][ T4696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.095516][ T4696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.124148][ T4696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.137717][ T4696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.145846][ T4696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.173537][ T4696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.216298][ T4696] device hsr_slave_0 entered promiscuous mode [ 112.223478][ T4696] device hsr_slave_1 entered promiscuous mode [ 113.025706][ T4696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.038752][ T4696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.049710][ T4696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.061876][ T4696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.139961][ T4696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.160112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.170437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.184908][ T4696] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.198351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.209065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.218789][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.226579][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.246145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.256313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.266815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.276898][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.284938][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.295959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.341684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.352871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.365389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.376959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.387503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.407422][ T4696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.420974][ T4696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.435952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.446204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.455774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.466156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.475709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.491241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.637724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.646520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.661123][ T4696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.710666][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.724137][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.766679][ T4696] device veth0_vlan entered promiscuous mode [ 113.773803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.784230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.794272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.805530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.820084][ T4696] device veth1_vlan entered promiscuous mode [ 113.873355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.882938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.893346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.904871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.918333][ T4696] device veth0_macvtap entered promiscuous mode [ 113.928513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.963459][ T4696] device veth1_macvtap entered promiscuous mode [ 113.986116][ T4696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.996399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.018104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.035175][ T4696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.044936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.056384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.075342][ T4696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.085486][ T4696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.095380][ T4696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.107761][ T4696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.849005][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/07/18 02:50:53 executed programs: 0 [ 117.125241][ T4859] chnl_net:caif_netlink_parms(): no params data found [ 117.187276][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.195507][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.205069][ T4859] device bridge_slave_0 entered promiscuous mode [ 117.215187][ T4859] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.223392][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.232626][ T4859] device bridge_slave_1 entered promiscuous mode [ 117.262847][ T4859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.278693][ T4859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.314883][ T4859] team0: Port device team_slave_0 added [ 117.323986][ T4859] team0: Port device team_slave_1 added [ 117.348828][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.356461][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.386575][ T4859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.400631][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.408680][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.437729][ T4859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.483072][ T4859] device hsr_slave_0 entered promiscuous mode [ 117.490492][ T4859] device hsr_slave_1 entered promiscuous mode [ 117.498047][ T4859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.506722][ T4859] Cannot create hsr debugfs directory [ 118.739562][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.789344][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.849102][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.167080][ T4306] Bluetooth: hci0: command 0x0409 tx timeout [ 119.812894][ T4859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.827239][ T4859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.841031][ T4859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.852757][ T4859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.984068][ T4859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.005357][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.017749][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.033422][ T4859] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.071906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.085224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.094945][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.102652][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.140310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.152060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.166696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.175995][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.183763][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.234142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.246973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.259541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.274755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.284204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.294540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.305328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.330273][ T154] device hsr_slave_0 left promiscuous mode [ 120.339398][ T154] device hsr_slave_1 left promiscuous mode [ 120.347339][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.356915][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.366313][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.374693][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.383216][ T154] device bridge_slave_1 left promiscuous mode [ 120.389671][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.399261][ T154] device bridge_slave_0 left promiscuous mode [ 120.406573][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.421738][ T154] device veth1_macvtap left promiscuous mode [ 120.427976][ T154] device veth0_macvtap left promiscuous mode [ 120.434988][ T154] device veth1_vlan left promiscuous mode [ 120.441651][ T154] device veth0_vlan left promiscuous mode [ 120.709165][ T154] team0 (unregistering): Port device team_slave_1 removed [ 120.744405][ T154] team0 (unregistering): Port device team_slave_0 removed [ 120.775987][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.815171][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.966924][ T154] bond0 (unregistering): Released all slaves [ 121.038295][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.054685][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.088688][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.100626][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.113380][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.220009][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 121.325169][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.333641][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.359365][ T4859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.384317][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.395214][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.424882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.434428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.446013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.455202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.468623][ T4859] device veth0_vlan entered promiscuous mode [ 121.502913][ T4859] device veth1_vlan entered promiscuous mode [ 121.547564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.571791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.583613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.593853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.608104][ T4859] device veth0_macvtap entered promiscuous mode [ 121.621616][ T4859] device veth1_macvtap entered promiscuous mode [ 121.662159][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.670135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.692942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.712015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.732274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.755282][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.771724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.783909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.815061][ T4859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.831695][ T4859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.840913][ T4859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.871487][ T4859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.966646][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.986526][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/18 02:50:58 executed programs: 2 [ 122.010160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.029660][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.040395][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.055425][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.392882][ T4306] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.642481][ T4306] usb 1-1: Using ep0 maxpacket: 32 [ 122.804640][ T4306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.892987][ T4306] usb 1-1: config 251 has an invalid interface number: 6 but max is 0 [ 122.912818][ T4306] usb 1-1: config 251 has no interface number 0 [ 122.931151][ T4306] usb 1-1: config 251 interface 6 has no altsetting 0 [ 123.092601][ T4306] usb 1-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=ea.98 [ 123.102586][ T4306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.111274][ T4306] usb 1-1: Product: syz [ 123.116700][ T4306] usb 1-1: Manufacturer: syz [ 123.122642][ T4306] usb 1-1: SerialNumber: syz [ 123.283006][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 123.841943][ T4306] dvb-usb: found a 'DiBcom NIM8096MD reference design' in warm state. [ 123.867295][ T4306] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.894326][ T4306] dvbdev: DVB: registering new adapter (DiBcom NIM8096MD reference design) [ 123.904482][ T4306] usb 1-1: media controller created [ 123.925527][ T4306] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.989087][ T4306] DVB: Unable to find symbol dib8000_attach() [ 123.998195][ T4306] dvb-usb: no frontend was attached by 'DiBcom NIM8096MD reference design' [ 124.042950][ T5059] ------------[ cut here ]------------ [ 124.050321][ T5059] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 124.060459][ T5059] WARNING: CPU: 0 PID: 5059 at drivers/usb/core/urb.c:412 usb_submit_urb+0x117a/0x18d0 [ 124.073154][ T4306] rc_core: IR keymap rc-dib0700-rc5 not found [ 124.080515][ T4306] Registered IR keymap rc-empty [ 124.088354][ T5059] Modules linked in: [ 124.094146][ T5059] CPU: 0 PID: 5059 Comm: syz.0.17 Not tainted syzkaller #0 [ 124.101965][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.114570][ T5059] RIP: 0010:usb_submit_urb+0x117a/0x18d0 [ 124.120749][ T5059] Code: df 0f b6 44 05 00 84 c0 0f 85 5e 06 00 00 45 0f b6 45 00 48 c7 c7 a0 1d c5 8a 48 8b 74 24 08 4c 89 e2 44 89 f1 e8 d6 62 d2 03 <0f> 0b 49 bf 00 00 00 00 00 fc ff df e9 b0 f3 ff ff 89 e9 80 e1 07 [ 124.143123][ T5059] RSP: 0018:ffffc90002e2f878 EFLAGS: 00010246 [ 124.150126][ T5059] RAX: 3be018447c851900 RBX: ffff88801a7a2c00 RCX: ffff88807b17d940 [ 124.158944][ T5059] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 124.168616][ T5059] RBP: 1ffff1100f4eaee1 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 124.178646][ T5059] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff888024a2a690 [ 124.188509][ T5059] R13: ffff88807a757708 R14: 0000000080000280 R15: dffffc0000000000 [ 124.197841][ T5059] FS: 00007f1a0ebba6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 124.209045][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.216213][ T5059] CR2: 00007ff043c38e9c CR3: 000000005bac4000 CR4: 00000000003506f0 [ 124.226188][ T5059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.234612][ T5059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.245366][ T5059] Call Trace: [ 124.248803][ T5059] [ 124.252951][ T5059] usb_start_wait_urb+0x13c/0x580 [ 124.258656][ T5059] ? usb_api_blocking_completion+0xb0/0xb0 [ 124.266600][ T5059] usb_control_msg+0x231/0x3e0 [ 124.272437][ T5059] dib0700_i2c_xfer+0xbc8/0xf90 [ 124.277812][ T5059] ? _raw_spin_unlock+0x40/0x40 [ 124.285092][ T5059] ? __rt_mutex_slowlock+0x6f/0x210 [ 124.290576][ T5059] ? dib0700_set_gpio+0x1f0/0x1f0 [ 124.296337][ T5059] __i2c_transfer+0x88d/0x2090 [ 124.303118][ T5059] ? i2c_cmd+0x110/0x110 [ 124.307539][ T5059] ? __might_fault+0xb7/0x110 [ 124.312776][ T5059] i2c_transfer+0x25d/0x3a0 [ 124.317877][ T5059] ? __i2c_transfer+0x2090/0x2090 [ 124.324928][ T5059] ? __might_fault+0xb3/0x110 [ 124.329969][ T5059] ? _copy_from_user+0x111/0x170 [ 124.341039][ T5059] i2cdev_ioctl_rdwr+0x3dc/0x6c0 [ 124.348452][ T5059] i2cdev_ioctl+0x610/0x7b0 [ 124.353625][ T5059] ? i2cdev_write+0x120/0x120 [ 124.359313][ T5059] ? bpf_lsm_file_ioctl+0x5/0x10 [ 124.366497][ T5059] ? security_file_ioctl+0x7c/0xa0 [ 124.372507][ T5059] ? i2cdev_write+0x120/0x120 [ 124.377619][ T5059] __se_sys_ioctl+0xfa/0x170 [ 124.384434][ T5059] do_syscall_64+0x4c/0xa0 [ 124.389186][ T5059] ? clear_bhb_loop+0x30/0x80 [ 124.394711][ T5059] ? clear_bhb_loop+0x30/0x80 [ 124.399649][ T5059] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.407659][ T5059] RIP: 0033:0x7f1a0f558799 [ 124.412871][ T5059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.435499][ T5059] RSP: 002b:00007f1a0ebba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.444856][ T5059] RAX: ffffffffffffffda RBX: 00007f1a0f7d1fa0 RCX: 00007f1a0f558799 [ 124.454659][ T5059] RDX: 00002000000005c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 124.464017][ T5059] RBP: 00007f1a0f5eebd9 R08: 0000000000000000 R09: 0000000000000000 [ 124.473711][ T5059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.482048][ T5059] R13: 00007f1a0f7d2038 R14: 00007f1a0f7d1fa0 R15: 00007ffe377d9038 [ 124.490632][ T5059] [ 124.495642][ T5059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.503470][ T5059] CPU: 0 PID: 5059 Comm: syz.0.17 Not tainted syzkaller #0 [ 124.511056][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.521635][ T5059] Call Trace: [ 124.525233][ T5059] [ 124.528728][ T5059] dump_stack_lvl+0x188/0x250 [ 124.533537][ T5059] ? show_regs_print_info+0x20/0x20 [ 124.539069][ T5059] ? load_image+0x410/0x410 [ 124.543636][ T5059] panic+0x2f8/0x850 [ 124.547674][ T5059] ? bpf_jit_dump+0xd0/0xd0 [ 124.552241][ T5059] ? usb_submit_urb+0x117a/0x18d0 [ 124.557372][ T5059] __warn+0x248/0x2b0 [ 124.561486][ T5059] ? usb_submit_urb+0x117a/0x18d0 [ 124.566907][ T5059] report_bug+0x1b9/0x2e0 [ 124.571474][ T5059] handle_bug+0x3a/0x70 [ 124.575849][ T5059] exc_invalid_op+0x16/0x40 [ 124.580527][ T5059] asm_exc_invalid_op+0x16/0x20 [ 124.585513][ T5059] RIP: 0010:usb_submit_urb+0x117a/0x18d0 [ 124.591477][ T5059] Code: df 0f b6 44 05 00 84 c0 0f 85 5e 06 00 00 45 0f b6 45 00 48 c7 c7 a0 1d c5 8a 48 8b 74 24 08 4c 89 e2 44 89 f1 e8 d6 62 d2 03 <0f> 0b 49 bf 00 00 00 00 00 fc ff df e9 b0 f3 ff ff 89 e9 80 e1 07 [ 124.611981][ T5059] RSP: 0018:ffffc90002e2f878 EFLAGS: 00010246 [ 124.618572][ T5059] RAX: 3be018447c851900 RBX: ffff88801a7a2c00 RCX: ffff88807b17d940 [ 124.626930][ T5059] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 124.635412][ T5059] RBP: 1ffff1100f4eaee1 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 124.643600][ T5059] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff888024a2a690 [ 124.651890][ T5059] R13: ffff88807a757708 R14: 0000000080000280 R15: dffffc0000000000 [ 124.660112][ T5059] ? usb_submit_urb+0x117a/0x18d0 [ 124.665481][ T5059] usb_start_wait_urb+0x13c/0x580 [ 124.670831][ T5059] ? usb_api_blocking_completion+0xb0/0xb0 [ 124.677248][ T5059] usb_control_msg+0x231/0x3e0 [ 124.682191][ T5059] dib0700_i2c_xfer+0xbc8/0xf90 [ 124.687190][ T5059] ? _raw_spin_unlock+0x40/0x40 [ 124.692260][ T5059] ? __rt_mutex_slowlock+0x6f/0x210 [ 124.697781][ T5059] ? dib0700_set_gpio+0x1f0/0x1f0 [ 124.702993][ T5059] __i2c_transfer+0x88d/0x2090 [ 124.708015][ T5059] ? i2c_cmd+0x110/0x110 [ 124.712564][ T5059] ? __might_fault+0xb7/0x110 [ 124.717520][ T5059] i2c_transfer+0x25d/0x3a0 [ 124.722207][ T5059] ? __i2c_transfer+0x2090/0x2090 [ 124.727911][ T5059] ? __might_fault+0xb3/0x110 [ 124.732745][ T5059] ? _copy_from_user+0x111/0x170 [ 124.737830][ T5059] i2cdev_ioctl_rdwr+0x3dc/0x6c0 [ 124.742867][ T5059] i2cdev_ioctl+0x610/0x7b0 [ 124.747514][ T5059] ? i2cdev_write+0x120/0x120 [ 124.752266][ T5059] ? bpf_lsm_file_ioctl+0x5/0x10 [ 124.757526][ T5059] ? security_file_ioctl+0x7c/0xa0 [ 124.763109][ T5059] ? i2cdev_write+0x120/0x120 [ 124.768039][ T5059] __se_sys_ioctl+0xfa/0x170 [ 124.772683][ T5059] do_syscall_64+0x4c/0xa0 [ 124.777716][ T5059] ? clear_bhb_loop+0x30/0x80 [ 124.782438][ T5059] ? clear_bhb_loop+0x30/0x80 [ 124.787686][ T5059] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.793887][ T5059] RIP: 0033:0x7f1a0f558799 [ 124.798610][ T5059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.819405][ T5059] RSP: 002b:00007f1a0ebba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.827958][ T5059] RAX: ffffffffffffffda RBX: 00007f1a0f7d1fa0 RCX: 00007f1a0f558799 [ 124.836348][ T5059] RDX: 00002000000005c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 124.844629][ T5059] RBP: 00007f1a0f5eebd9 R08: 0000000000000000 R09: 0000000000000000 [ 124.853075][ T5059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.861245][ T5059] R13: 00007f1a0f7d2038 R14: 00007f1a0f7d1fa0 R15: 00007ffe377d9038 [ 124.869551][ T5059] [ 124.873029][ T5059] Kernel Offset: disabled [ 124.877734][ T5059] Rebooting in 86400 seconds..