[ 33.644266][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.651663][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.728298][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.736530][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.811666][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.819856][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.829359][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.837486][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.936340][ T2453] syz-executor (2453) used greatest stack depth: 11248 bytes left [ 34.210040][ T35] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.254' (ED25519) to the list of known hosts. 2025/11/29 03:34:44 parsed 1 programs [ 54.291488][ T2913] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.569686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.611409][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.620391][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.631945][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.640854][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.902311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.910591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.921150][ T2969] device veth0_vlan entered promiscuous mode [ 55.927763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.935820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.943853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.951373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.029106][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.037357][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.110158][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.118533][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.127786][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.136134][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/11/29 03:34:47 executed programs: 0 [ 56.430371][ T300] device veth0_vlan left promiscuous mode [ 57.024683][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.032159][ T2516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.072863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.081718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.091344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.099701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.110858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.118911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.127387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.135391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.387766][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.396104][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.406105][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.414353][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.422762][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.430273][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.437907][ T3163] device veth0_vlan entered promiscuous mode [ 57.518093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.526438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.599203][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.607349][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.616284][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.624600][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.988623][ T1972] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.178555][ T1972] usb 3-1: Using ep0 maxpacket: 8 [ 58.184975][ T1972] usb 3-1: unable to get BOS descriptor or descriptor too short [ 58.193305][ T1972] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 58.201491][ T1972] usb 3-1: config 4 has no interface number 0 [ 58.207611][ T1972] usb 3-1: config 4 interface 30 has no altsetting 0 [ 58.216739][ T1972] usb 3-1: string descriptor 0 read error: -22 [ 58.223129][ T1972] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 58.232273][ T1972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.241864][ T1972] dw2102: su3000_identify_state [ 58.246769][ T1972] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 58.253816][ T1972] dw2102: su3000_power_ctrl: 1, initialized 0 [ 58.260149][ T1972] dvb-usb: bulk message failed: -22 (2/0) [ 58.266610][ T1972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 58.276123][ T1972] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 58.283706][ T1972] usb 3-1: media controller created [ 58.289193][ T1972] dvb-usb: bulk message failed: -22 (6/0) [ 58.294907][ T1972] dw2102: i2c transfer failed. [ 58.299733][ T1972] dvb-usb: bulk message failed: -22 (6/0) [ 58.305532][ T1972] dw2102: i2c transfer failed. [ 58.310304][ T1972] dvb-usb: bulk message failed: -22 (6/0) [ 58.316010][ T1972] dw2102: i2c transfer failed. [ 58.320783][ T1972] dvb-usb: bulk message failed: -22 (6/0) [ 58.326492][ T1972] dw2102: i2c transfer failed. [ 58.331290][ T1972] dvb-usb: bulk message failed: -22 (6/0) [ 58.337046][ T1972] dw2102: i2c transfer failed. [ 58.341885][ T1972] dvb-usb: bulk message failed: -22 (6/0) [ 58.347614][ T1972] dw2102: i2c transfer failed. [ 58.352465][ T1972] dvb-usb: MAC address: 02:02:02:02:02:02 [ 58.360933][ T1972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 58.370470][ T1972] dvb-usb: bulk message failed: -22 (3/0) [ 58.376461][ T1972] dw2102: command 0x0e transfer failed. [ 58.382272][ T1972] dvb-usb: bulk message failed: -22 (3/0) [ 58.388251][ T1972] dw2102: command 0x0e transfer failed. [ 58.708521][ T1972] dvb-usb: bulk message failed: -22 (3/0) [ 58.714381][ T1972] dw2102: command 0x0e transfer failed. [ 58.719944][ T1972] dvb-usb: bulk message failed: -22 (3/0) [ 58.725658][ T1972] dw2102: command 0x0e transfer failed. [ 58.731216][ T1972] dvb-usb: bulk message failed: -22 (1/0) [ 58.737015][ T1972] dw2102: command 0x51 transfer failed. [ 58.742598][ T1972] dvb-usb: bulk message failed: -22 (5/0) [ 58.748371][ T1972] dw2102: i2c probe for address 0x68 failed. [ 58.754368][ T1972] dvb-usb: bulk message failed: -22 (5/0) [ 58.760103][ T1972] dw2102: i2c probe for address 0x69 failed. [ 58.766057][ T1972] dvb-usb: bulk message failed: -22 (5/0) [ 58.771783][ T1972] dw2102: i2c probe for address 0x6a failed. [ 58.777755][ T1972] dw2102: probing for demodulator failed. Is the external power switched on? [ 58.778116][ T3346] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 58.786540][ T1972] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 58.794383][ T3346] #PF: supervisor read access in kernel mode [ 58.794387][ T3346] #PF: error_code(0x0000) - not-present page [ 58.794390][ T3346] PGD 17b890067 P4D 17b890067 PUD 0 [ 58.802706][ T1972] Registered IR keymap rc-tt-1500 [ 58.807908][ T3346] Oops: 0000 [#1] PREEMPT SMP [ 58.814032][ T1972] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 58.819255][ T3346] CPU: 1 PID: 3346 Comm: syz.2.17 Not tainted syzkaller #0 [ 58.819261][ T3346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.819264][ T3346] RIP: 0010:su3000_i2c_transfer+0xa8/0x3d0 [ 58.824432][ T1972] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input4 [ 58.828935][ T3346] Code: 68 02 48 8d 48 03 48 89 4c 24 18 48 8d 48 05 48 89 4c 24 38 48 83 c0 06 48 89 44 24 20 45 31 e4 48 8b 1c 24 eb 44 49 8b 47 08 <0f> b6 00 04 36 48 8b 4c 24 10 88 41 02 66 c7 41 03 03 00 48 89 df [ 58.828939][ T3346] RSP: 0018:ffffc9000156bd80 EFLAGS: 00010246 [ 58.828944][ T3346] RAX: 0000000000000010 RBX: ffff888177654000 RCX: ffff888114c1a885 [ 58.828947][ T3346] RDX: ffff88817d7f8000 RSI: ffffffff83960e37 RDI: 00000000ffffffff [ 58.828950][ T3346] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000003 [ 58.838737][ T1972] dvb-usb: schedule remote query interval to 250 msecs. [ 58.845242][ T3346] R10: 00000000003f1400 R11: 0000000000000001 R12: 0000000000000000 [ 58.855316][ T1972] dw2102: su3000_power_ctrl: 0, initialized 1 [ 58.861127][ T3346] R13: ffff888114c1a882 R14: ffff888108b37a20 R15: ffff888108b37a20 [ 58.861131][ T3346] FS: 00007f9210d2f6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 58.861135][ T3346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.861138][ T3346] CR2: 0000000000000010 CR3: 000000017b173000 CR4: 00000000003506e0 [ 58.861145][ T3346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.870793][ T1972] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 58.890610][ T3346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.890614][ T3346] Call Trace: [ 58.890618][ T3346] [ 58.890623][ T3346] __i2c_transfer+0x3ce/0x740 [ 59.008767][ T3346] ? i2c_transfer+0x72/0xb0 [ 59.013350][ T3346] i2c_transfer+0x7f/0xb0 [ 59.017662][ T3346] i2cdev_ioctl_rdwr+0x138/0x1e0 [ 59.022597][ T3346] i2cdev_ioctl+0x150/0x2d0 [ 59.027101][ T3346] __se_sys_ioctl+0x65/0xb0 [ 59.031615][ T3346] do_syscall_64+0x4c/0xa0 [ 59.036036][ T3346] ? clear_bhb_loop+0x60/0xb0 [ 59.040784][ T3346] ? clear_bhb_loop+0x60/0xb0 [ 59.045443][ T3346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.051500][ T3346] RIP: 0033:0x7f920ff8ebe9 [ 59.055988][ T3346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.075591][ T3346] RSP: 002b:00007f9210d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.084172][ T3346] RAX: ffffffffffffffda RBX: 00007f92101b5fa0 RCX: 00007f920ff8ebe9 [ 59.092131][ T3346] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 59.100171][ T3346] RBP: 00007f9210011e19 R08: 0000000000000000 R09: 0000000000000000 [ 59.108298][ T3346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.116257][ T3346] R13: 00007f92101b6038 R14: 00007f92101b5fa0 R15: 00007ffe2a0fd218 [ 59.124216][ T3346] [ 59.127225][ T3346] Modules linked in: [ 59.131111][ T3346] CR2: 0000000000000010 [ 59.135314][ T3346] ---[ end trace 0000000000000000 ]--- [ 59.140755][ T3346] RIP: 0010:su3000_i2c_transfer+0xa8/0x3d0 [ 59.146548][ T3346] Code: 68 02 48 8d 48 03 48 89 4c 24 18 48 8d 48 05 48 89 4c 24 38 48 83 c0 06 48 89 44 24 20 45 31 e4 48 8b 1c 24 eb 44 49 8b 47 08 <0f> b6 00 04 36 48 8b 4c 24 10 88 41 02 66 c7 41 03 03 00 48 89 df [ 59.166311][ T3346] RSP: 0018:ffffc9000156bd80 EFLAGS: 00010246 [ 59.172475][ T3346] RAX: 0000000000000010 RBX: ffff888177654000 RCX: ffff888114c1a885 [ 59.180526][ T3346] RDX: ffff88817d7f8000 RSI: ffffffff83960e37 RDI: 00000000ffffffff [ 59.188491][ T3346] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000003 [ 59.196467][ T3346] R10: 00000000003f1400 R11: 0000000000000001 R12: 0000000000000000 [ 59.204593][ T3346] R13: ffff888114c1a882 R14: ffff888108b37a20 R15: ffff888108b37a20 [ 59.212651][ T3346] FS: 00007f9210d2f6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 59.221634][ T3346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.228410][ T3346] CR2: 0000000000000010 CR3: 000000017b173000 CR4: 00000000003506e0 [ 59.236498][ T3346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.244638][ T3346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.252803][ T3346] Kernel panic - not syncing: Fatal exception [ 59.259212][ T3346] Kernel Offset: disabled [ 59.263659][ T3346] Rebooting in 86400 seconds..