Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. 2026/04/16 23:12:15 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 109.884516][ T4613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 111.447147][ T4625] chnl_net:caif_netlink_parms(): no params data found [ 111.496372][ T4625] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.503533][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.511665][ T4625] device bridge_slave_0 entered promiscuous mode [ 111.523161][ T4625] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.530849][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.539258][ T4625] device bridge_slave_1 entered promiscuous mode [ 111.560623][ T4625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.574123][ T4625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.597327][ T4625] team0: Port device team_slave_0 added [ 111.607913][ T4625] team0: Port device team_slave_1 added [ 111.625474][ T4625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.632450][ T4625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.658409][ T4625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.671362][ T4625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.678514][ T4625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.704767][ T4625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.735529][ T4625] device hsr_slave_0 entered promiscuous mode [ 111.742794][ T4625] device hsr_slave_1 entered promiscuous mode [ 112.475748][ T4625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.497636][ T4625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.518869][ T4625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.538342][ T4625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.681544][ T4625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.700037][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.714356][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.737888][ T4625] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.759005][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.771818][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.795396][ T562] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.802625][ T562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.824035][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.849304][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.867051][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.877833][ T562] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.885086][ T562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.905437][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.916439][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.926118][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.938362][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.958770][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.971056][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.981250][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.991772][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.001149][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.011417][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.021182][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.032964][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.221939][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.233383][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.248704][ T4625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.276428][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.295778][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.335066][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.355135][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.376237][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.395830][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.406647][ T4625] device veth0_vlan entered promiscuous mode [ 113.429934][ T4625] device veth1_vlan entered promiscuous mode [ 113.466119][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.476215][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.504139][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.516273][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.536529][ T4625] device veth0_macvtap entered promiscuous mode [ 113.558144][ T4625] device veth1_macvtap entered promiscuous mode [ 113.587928][ T4625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.607853][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.625306][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.644165][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.667321][ T4625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.680296][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.689618][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.702196][ T4625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.711679][ T4625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.721834][ T4625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.730794][ T4625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.033348][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.920358][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.948747][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.971874][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.996105][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.029227][ T562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.038145][ T562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.046596][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/04/16 23:12:27 executed programs: 0 [ 117.645082][ T4873] chnl_net:caif_netlink_parms(): no params data found [ 117.711552][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.719095][ T4873] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.727701][ T4873] device bridge_slave_0 entered promiscuous mode [ 117.736638][ T4873] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.744772][ T4873] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.753030][ T4873] device bridge_slave_1 entered promiscuous mode [ 117.779862][ T4873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.791940][ T4873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.821155][ T4873] team0: Port device team_slave_0 added [ 117.836324][ T4873] team0: Port device team_slave_1 added [ 117.862592][ T4873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.869652][ T4873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.896143][ T4873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.909490][ T4873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.916913][ T4873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.943163][ T4873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.983102][ T4873] device hsr_slave_0 entered promiscuous mode [ 117.990411][ T4873] device hsr_slave_1 entered promiscuous mode [ 117.997901][ T4873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.006007][ T4873] Cannot create hsr debugfs directory [ 118.192007][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.251929][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.050958][ T4873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.065507][ T4873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.076750][ T4873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.087444][ T4873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.151463][ T9] device hsr_slave_0 left promiscuous mode [ 119.158715][ T9] device hsr_slave_1 left promiscuous mode [ 119.167257][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.174968][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.183012][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.190705][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.199182][ T9] device bridge_slave_1 left promiscuous mode [ 119.205538][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.217261][ T9] device bridge_slave_0 left promiscuous mode [ 119.223605][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.242176][ T9] device veth1_macvtap left promiscuous mode [ 119.248644][ T9] device veth0_macvtap left promiscuous mode [ 119.255308][ T9] device veth1_vlan left promiscuous mode [ 119.261174][ T9] device veth0_vlan left promiscuous mode [ 119.477030][ T9] team0 (unregistering): Port device team_slave_1 removed [ 119.490719][ T9] team0 (unregistering): Port device team_slave_0 removed [ 119.505173][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.522851][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.580650][ T9] bond0 (unregistering): Released all slaves [ 119.587020][ T4250] Bluetooth: hci0: command 0x0409 tx timeout [ 119.648233][ T4873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.662470][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.673960][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.686140][ T4873] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.711149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.722425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.731509][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.738704][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.749789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.765063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.775449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.784352][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.791457][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.809655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.818811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.836936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.858778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.869069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.880747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.898001][ T4873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.908790][ T4873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.926535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.939409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.949580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.958625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.973195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.982450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.122522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.134792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.147277][ T4873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.193129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.215101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.249531][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.258598][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.277013][ T4873] device veth0_vlan entered promiscuous mode [ 120.294972][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.303983][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.327815][ T4873] device veth1_vlan entered promiscuous mode [ 120.372134][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.395059][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.403416][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.417288][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.430285][ T4873] device veth0_macvtap entered promiscuous mode [ 120.447723][ T4873] device veth1_macvtap entered promiscuous mode [ 120.484311][ T4873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.503863][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.524088][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.532459][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.550974][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.574422][ T4873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.587215][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.604514][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.628204][ T4873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.654338][ T4873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.663106][ T4873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.683750][ T4873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.792714][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.812163][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.822692][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.847496][ T1611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.867253][ T1611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.884710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.243720][ T4309] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.493719][ T4309] usb 1-1: Using ep0 maxpacket: 16 [ 121.663953][ T4308] Bluetooth: hci0: command 0x041b tx timeout [ 121.774024][ T4309] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 121.793805][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.801876][ T4309] usb 1-1: Product: syz [ 121.813622][ T4309] usb 1-1: Manufacturer: syz [ 121.824003][ T4309] usb 1-1: SerialNumber: syz [ 121.850829][ T4309] usb 1-1: config 0 descriptor?? [ 122.323975][ T4309] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 122.339370][ T4309] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.364435][ T4309] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 122.373218][ T4309] usb 1-1: media controller created [ 122.387874][ T4309] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.955420][ T4309] zl10353_read_register: readreg error (reg=127, ret==0) [ 122.963857][ T4309] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 122.971810][ T4309] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 122.991237][ T4994] ------------[ cut here ]------------ [ 122.998357][ T4994] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 123.008105][ T4994] WARNING: CPU: 1 PID: 4994 at drivers/usb/core/urb.c:412 usb_submit_urb+0x11a5/0x1910 [ 123.023262][ T4994] Modules linked in: [ 123.028606][ T4994] CPU: 0 PID: 4994 Comm: syz.0.17 Not tainted syzkaller #0 [ 123.037114][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.049762][ T4994] RIP: 0010:usb_submit_urb+0x11a5/0x1910 [ 123.055870][ T4994] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 6c 06 00 00 45 0f b6 07 48 c7 c7 20 1a c5 8a 48 8b 34 24 4c 89 e2 44 89 f1 e8 9b 52 d3 03 <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 92 f3 ff ff 89 e9 80 e1 07 [ 123.077432][ T4994] RSP: 0018:ffffc900031cf5a8 EFLAGS: 00010246 [ 123.084088][ T4994] RAX: 42abdcab15048700 RBX: ffff888023a8f000 RCX: ffff888020c79dc0 [ 123.092549][ T4994] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 123.100777][ T4994] RBP: 1ffff1102916a92c R08: ffff8880b9133d7f R09: 1ffff110172267af [ 123.109737][ T4994] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff8880181f6de8 [ 123.118155][ T4994] R13: ffff88807c75d0f8 R14: 0000000080000280 R15: ffff888148b54960 [ 123.127060][ T4994] FS: 00007fdc7e1f36c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 123.136441][ T4994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.143247][ T4994] CR2: 000055817c165080 CR3: 000000007b43c000 CR4: 00000000003506e0 [ 123.151724][ T4994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.159892][ T4994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 123.168008][ T4994] Call Trace: [ 123.171323][ T4994] [ 123.174790][ T4994] usb_start_wait_urb+0x128/0x4e0 [ 123.179873][ T4994] ? usb_api_blocking_completion+0xb0/0xb0 [ 123.188232][ T4994] usb_control_msg+0x22f/0x3e0 [ 123.193520][ T4994] dtv5100_i2c_xfer+0x393/0x650 [ 123.198607][ T4994] ? dtv5100_tuner_attach+0xf0/0xf0 [ 123.204289][ T4994] __i2c_transfer+0x880/0x20b0 [ 123.209215][ T4994] ? mark_lock+0x94/0x320 [ 123.213938][ T4994] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 123.220128][ T4994] ? i2c_cmd+0x110/0x110 [ 123.224768][ T4994] ? lock_chain_count+0x20/0x20 [ 123.233096][ T4994] __i2c_smbus_xfer+0x1015/0x1dc0 [ 123.239376][ T4994] ? __rt_mutex_slowlock+0xf3/0x210 [ 123.245027][ T4994] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0 [ 123.251409][ T4994] ? i2c_smbus_xfer+0x120/0x3b0 [ 123.257012][ T4994] ? kfree+0xef/0x2a0 [ 123.261135][ T4994] i2c_smbus_xfer+0x272/0x3b0 [ 123.266516][ T4994] ? i2c_smbus_read_byte+0x1d0/0x1d0 [ 123.272121][ T4994] i2cdev_ioctl_smbus+0x1da/0x680 [ 123.278064][ T4994] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0 [ 123.283379][ T4994] ? __might_fault+0xb3/0x110 [ 123.288553][ T4994] ? _copy_from_user+0x111/0x170 [ 123.295219][ T4994] i2cdev_ioctl+0x583/0x7b0 [ 123.299868][ T4994] ? i2cdev_write+0x120/0x120 [ 123.305033][ T4994] ? bpf_lsm_file_ioctl+0x5/0x10 [ 123.310170][ T4994] ? security_file_ioctl+0x7c/0xa0 [ 123.315814][ T4994] ? i2cdev_write+0x120/0x120 [ 123.320670][ T4994] __se_sys_ioctl+0xfa/0x170 [ 123.325834][ T4994] do_syscall_64+0x4c/0xa0 [ 123.330471][ T4994] ? clear_bhb_loop+0x30/0x80 [ 123.335666][ T4994] ? clear_bhb_loop+0x30/0x80 [ 123.340482][ T4994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.347484][ T4994] RIP: 0033:0x7fdc7eb91799 [ 123.351964][ T4994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.372547][ T4994] RSP: 002b:00007fdc7e1f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.381378][ T4994] RAX: ffffffffffffffda RBX: 00007fdc7ee0afa0 RCX: 00007fdc7eb91799 [ 123.389753][ T4994] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000004 [ 123.397924][ T4994] RBP: 00007fdc7ec27c99 R08: 0000000000000000 R09: 0000000000000000 [ 123.406116][ T4994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.415394][ T4994] R13: 00007fdc7ee0b038 R14: 00007fdc7ee0afa0 R15: 00007ffff8747728 [ 123.424861][ T4994] [ 123.428067][ T4994] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.435388][ T4994] CPU: 0 PID: 4994 Comm: syz.0.17 Not tainted syzkaller #0 [ 123.442611][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.452667][ T4994] Call Trace: [ 123.455951][ T4994] [ 123.458881][ T4994] dump_stack_lvl+0x188/0x250 [ 123.463589][ T4994] ? show_regs_print_info+0x20/0x20 [ 123.468813][ T4994] ? load_image+0x400/0x400 [ 123.473330][ T4994] panic+0x2e5/0x810 [ 123.477245][ T4994] ? bpf_jit_dump+0xd0/0xd0 [ 123.481782][ T4994] ? usb_submit_urb+0x11a5/0x1910 [ 123.486845][ T4994] __warn+0x248/0x2b0 [ 123.491023][ T4994] ? usb_submit_urb+0x11a5/0x1910 [ 123.496143][ T4994] report_bug+0x1b7/0x2e0 [ 123.500566][ T4994] handle_bug+0x3a/0x70 [ 123.504953][ T4994] exc_invalid_op+0x16/0x40 [ 123.509502][ T4994] asm_exc_invalid_op+0x16/0x20 [ 123.514485][ T4994] RIP: 0010:usb_submit_urb+0x11a5/0x1910 [ 123.520172][ T4994] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 6c 06 00 00 45 0f b6 07 48 c7 c7 20 1a c5 8a 48 8b 34 24 4c 89 e2 44 89 f1 e8 9b 52 d3 03 <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 92 f3 ff ff 89 e9 80 e1 07 [ 123.539808][ T4994] RSP: 0018:ffffc900031cf5a8 EFLAGS: 00010246 [ 123.545889][ T4994] RAX: 42abdcab15048700 RBX: ffff888023a8f000 RCX: ffff888020c79dc0 [ 123.553894][ T4994] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 123.561887][ T4994] RBP: 1ffff1102916a92c R08: ffff8880b9133d7f R09: 1ffff110172267af [ 123.569882][ T4994] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff8880181f6de8 [ 123.577861][ T4994] R13: ffff88807c75d0f8 R14: 0000000080000280 R15: ffff888148b54960 [ 123.585855][ T4994] ? usb_submit_urb+0x11a5/0x1910 [ 123.590904][ T4994] usb_start_wait_urb+0x128/0x4e0 [ 123.595941][ T4994] ? usb_api_blocking_completion+0xb0/0xb0 [ 123.601780][ T4994] usb_control_msg+0x22f/0x3e0 [ 123.606552][ T4994] dtv5100_i2c_xfer+0x393/0x650 [ 123.611595][ T4994] ? dtv5100_tuner_attach+0xf0/0xf0 [ 123.616814][ T4994] __i2c_transfer+0x880/0x20b0 [ 123.621608][ T4994] ? mark_lock+0x94/0x320 [ 123.626048][ T4994] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 123.632162][ T4994] ? i2c_cmd+0x110/0x110 [ 123.636519][ T4994] ? lock_chain_count+0x20/0x20 [ 123.641448][ T4994] __i2c_smbus_xfer+0x1015/0x1dc0 [ 123.646656][ T4994] ? __rt_mutex_slowlock+0xf3/0x210 [ 123.651881][ T4994] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0 [ 123.658186][ T4994] ? i2c_smbus_xfer+0x120/0x3b0 [ 123.663058][ T4994] ? kfree+0xef/0x2a0 [ 123.667069][ T4994] i2c_smbus_xfer+0x272/0x3b0 [ 123.671784][ T4994] ? i2c_smbus_read_byte+0x1d0/0x1d0 [ 123.677210][ T4994] i2cdev_ioctl_smbus+0x1da/0x680 [ 123.682278][ T4994] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0 [ 123.687610][ T4994] ? __might_fault+0xb3/0x110 [ 123.692311][ T4994] ? _copy_from_user+0x111/0x170 [ 123.697292][ T4994] i2cdev_ioctl+0x583/0x7b0 [ 123.701893][ T4994] ? i2cdev_write+0x120/0x120 [ 123.706591][ T4994] ? bpf_lsm_file_ioctl+0x5/0x10 [ 123.711535][ T4994] ? security_file_ioctl+0x7c/0xa0 [ 123.716672][ T4994] ? i2cdev_write+0x120/0x120 [ 123.721364][ T4994] __se_sys_ioctl+0xfa/0x170 [ 123.725980][ T4994] do_syscall_64+0x4c/0xa0 [ 123.730426][ T4994] ? clear_bhb_loop+0x30/0x80 [ 123.735134][ T4994] ? clear_bhb_loop+0x30/0x80 [ 123.739838][ T4994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.745886][ T4994] RIP: 0033:0x7fdc7eb91799 [ 123.750327][ T4994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.770130][ T4994] RSP: 002b:00007fdc7e1f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.778554][ T4994] RAX: ffffffffffffffda RBX: 00007fdc7ee0afa0 RCX: 00007fdc7eb91799 [ 123.786689][ T4994] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000004 [ 123.794680][ T4994] RBP: 00007fdc7ec27c99 R08: 0000000000000000 R09: 0000000000000000 [ 123.802832][ T4994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.810817][ T4994] R13: 00007fdc7ee0b038 R14: 00007fdc7ee0afa0 R15: 00007ffff8747728 [ 123.818814][ T4994] [ 123.822208][ T4994] Kernel Offset: disabled [ 123.826695][ T4994] Rebooting in 86400 seconds..