Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts.
2026/01/02 04:45:33 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 91.021146][ T4603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 92.902977][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.926182][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.930644][ T784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.935435][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 92.943179][ T784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.960179][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 94.479070][ T4679] chnl_net:caif_netlink_parms(): no params data found
[ 94.515242][ T4679] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.522453][ T4679] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.530679][ T4679] device bridge_slave_0 entered promiscuous mode
[ 94.539389][ T4679] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.546759][ T4679] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.554588][ T4679] device bridge_slave_1 entered promiscuous mode
[ 94.574180][ T4679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.584834][ T4679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.604995][ T4679] team0: Port device team_slave_0 added
[ 94.612646][ T4679] team0: Port device team_slave_1 added
[ 94.629015][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.636159][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.662492][ T4679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.674747][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.681869][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.707823][ T4679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.735539][ T4679] device hsr_slave_0 entered promiscuous mode
[ 94.742562][ T4679] device hsr_slave_1 entered promiscuous mode
[ 95.214334][ T4679] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.255375][ T4679] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.266996][ T4679] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.277484][ T4679] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.442666][ T4679] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.458233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 95.467825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 95.481476][ T4679] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.513614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 95.529768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 95.539173][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.546448][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.554328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 95.566436][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 95.575347][ T1502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 95.586517][ T1502] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.593600][ T1502] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.620187][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 95.639033][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 95.648383][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 95.662104][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 95.672170][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 95.706624][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 95.715471][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 95.727431][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 95.736199][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 95.748568][ T4679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 95.762639][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 95.781021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 95.791199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 95.973290][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 95.998019][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 96.020739][ T4679] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.040050][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 96.051635][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 96.072251][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 96.082592][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 96.093801][ T4679] device veth0_vlan entered promiscuous mode
[ 96.102938][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 96.128839][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 96.142342][ T4679] device veth1_vlan entered promiscuous mode
[ 96.183216][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 96.208093][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 96.216732][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 96.225454][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 96.243144][ T4679] device veth0_macvtap entered promiscuous mode
[ 96.256479][ T4679] device veth1_macvtap entered promiscuous mode
[ 96.273296][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.283611][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 96.293078][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 96.302514][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 96.313646][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 96.326725][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.337620][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 96.357925][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 96.377754][ T4679] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.387212][ T4679] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.405672][ T4679] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.414404][ T4679] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/01/02 04:45:42 executed programs: 0
[ 97.624892][ T4798] chnl_net:caif_netlink_parms(): no params data found
[ 97.737235][ T4798] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.745036][ T4798] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.753214][ T4798] device bridge_slave_0 entered promiscuous mode
[ 97.778093][ T4798] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.785267][ T4798] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.793751][ T4798] device bridge_slave_1 entered promiscuous mode
[ 97.847137][ T4798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 97.868025][ T4798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 97.931384][ T4798] team0: Port device team_slave_0 added
[ 97.948250][ T4798] team0: Port device team_slave_1 added
[ 97.995934][ T4798] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.002905][ T4798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.030312][ T4798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.048282][ T4798] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.055252][ T4798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.081402][ T4798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.108677][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.143656][ T4798] device hsr_slave_0 entered promiscuous mode
[ 98.152069][ T4798] device hsr_slave_1 entered promiscuous mode
[ 98.159906][ T4798] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 98.168406][ T4798] Cannot create hsr debugfs directory
[ 99.437058][ T4258] Bluetooth: hci0: command 0x0409 tx timeout
[ 100.482737][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.762035][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.813836][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.515833][ T4259] Bluetooth: hci0: command 0x041b tx timeout
[ 101.599779][ T4798] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.610462][ T4798] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.624825][ T4798] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.633566][ T4798] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.660962][ T9] device hsr_slave_0 left promiscuous mode
[ 101.667651][ T9] device hsr_slave_1 left promiscuous mode
[ 101.673978][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 101.682626][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 101.690576][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 101.698165][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 101.706247][ T9] device bridge_slave_1 left promiscuous mode
[ 101.712400][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.721148][ T9] device bridge_slave_0 left promiscuous mode
[ 101.727580][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.739566][ T9] device veth1_macvtap left promiscuous mode
[ 101.745857][ T9] device veth0_macvtap left promiscuous mode
[ 101.751996][ T9] device veth1_vlan left promiscuous mode
[ 101.762503][ T9] device veth0_vlan left promiscuous mode
[ 101.877424][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 101.889984][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 101.901112][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 101.913518][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 101.960044][ T9] bond0 (unregistering): Released all slaves
[ 102.040628][ T4798] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.053657][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 102.061835][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 102.072647][ T4798] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.083219][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 102.092031][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 102.100465][ T150] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.107569][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.118501][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 102.126614][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 102.135068][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 102.144139][ T150] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.151234][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.176724][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 102.185554][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 102.203683][ T4798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 102.214477][ T4798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 102.228002][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 102.238498][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 102.247065][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 102.256167][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 102.264532][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 102.273337][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 102.283147][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 102.291494][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 102.299867][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 102.307935][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 102.392749][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 102.400871][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 102.415319][ T4798] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.441353][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 102.450604][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 102.471120][ T4798] device veth0_vlan entered promiscuous mode
[ 102.477795][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 102.487063][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 102.495420][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 102.503312][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 102.515469][ T4798] device veth1_vlan entered promiscuous mode
[ 102.540892][ T4798] device veth0_macvtap entered promiscuous mode
[ 102.548580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 102.558677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 102.567800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 102.577423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 102.586674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 102.608965][ T4798] device veth1_macvtap entered promiscuous mode
[ 102.627867][ T4798] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.635444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 102.646552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 102.655200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 102.671250][ T4798] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.680337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 102.689484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 102.701748][ T4798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.710740][ T4798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.724362][ T4798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.733424][ T4798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.800409][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.816312][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.831544][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 102.841921][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2026/01/02 04:45:47 executed programs: 2
[ 102.851251][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.862056][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 103.205811][ T4258] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 103.445754][ T4258] usb 1-1: Using ep0 maxpacket: 16
[ 103.595842][ T4254] Bluetooth: hci0: command 0x040f tx timeout
[ 103.746035][ T4258] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 103.755850][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 103.763959][ T4258] usb 1-1: Product: syz
[ 103.768194][ T4258] usb 1-1: Manufacturer: syz
[ 103.772803][ T4258] usb 1-1: SerialNumber: syz
[ 103.780301][ T4258] usb 1-1: config 0 descriptor??
[ 104.266644][ T4258] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 104.278556][ T4258] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 104.306244][ T4258] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 104.314554][ T4258] usb 1-1: media controller created
[ 104.326533][ T4258] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 104.896986][ T4258] zl10353_read_register: readreg error (reg=127, ret==0)
[ 104.904067][ T4258] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 104.912152][ T4258] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 104.925929][ T5085] ------------[ cut here ]------------
[ 104.931694][ T5085] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0
[ 104.941028][ T5085] WARNING: CPU: 0 PID: 5085 at drivers/usb/core/urb.c:412 usb_submit_urb+0x119f/0x1900
[ 104.954422][ T5085] Modules linked in:
[ 104.958882][ T5085] CPU: 0 PID: 5085 Comm: syz.0.17 Not tainted syzkaller #0
[ 104.966448][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 104.977306][ T5085] RIP: 0010:usb_submit_urb+0x119f/0x1900
[ 104.982996][ T5085] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 6c 06 00 00 45 0f b6 07 48 c7 c7 80 ca a4 8a 48 8b 34 24 4c 89 e2 44 89 f1 e8 01 59 c8 03 <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 92 f3 ff ff 89 e9 80 e1 07
[ 105.003718][ T5085] RSP: 0018:ffffc9000300f868 EFLAGS: 00010246
[ 105.009991][ T5085] RAX: 99e41d1cd2d8eb00 RBX: ffff888028698200 RCX: ffff88807bcbd940
[ 105.018041][ T5085] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 105.026196][ T5085] RBP: 1ffff110044c5d7c R08: dffffc0000000000 R09: ffffed10172067b0
[ 105.034179][ T5085] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffff8880181ba348
[ 105.042221][ T5085] R13: ffff88807dfe20f8 R14: 0000000080000280 R15: ffff88802262ebe0
[ 105.050257][ T5085] FS: 00007f3d19cf06c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[ 105.059437][ T5085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 105.066141][ T5085] CR2: 00007ffc7eadaecc CR3: 000000001f4cc000 CR4: 00000000003506e0
[ 105.074391][ T5085] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 105.082609][ T5085] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 105.090821][ T5085] Call Trace:
[ 105.094210][ T5085]
[ 105.097209][ T5085] usb_start_wait_urb+0x111/0x4b0
[ 105.102328][ T5085] ? usb_api_blocking_completion+0xb0/0xb0
[ 105.108176][ T5085] ? memset+0x1e/0x40
[ 105.112176][ T5085] usb_control_msg+0x22f/0x3e0
[ 105.117258][ T5085] dtv5100_i2c_xfer+0x393/0x650
[ 105.122133][ T5085] ? dtv5100_tuner_attach+0xf0/0xf0
[ 105.127397][ T5085] __i2c_transfer+0x864/0x2060
[ 105.132188][ T5085] ? rwsem_down_read_slowpath+0x990/0x990
[ 105.137992][ T5085] ? i2c_cmd+0x110/0x110
[ 105.142234][ T5085] ? __might_fault+0xb7/0x110
[ 105.147219][ T5085] i2c_transfer+0x24c/0x390
[ 105.151888][ T5085] ? __i2c_transfer+0x2060/0x2060
[ 105.157079][ T5085] ? __might_fault+0xb3/0x110
[ 105.161775][ T5085] ? _copy_from_user+0x111/0x170
[ 105.166884][ T5085] i2cdev_ioctl_rdwr+0x3da/0x6c0
[ 105.171828][ T5085] i2cdev_ioctl+0x5ba/0x750
[ 105.176497][ T5085] ? i2cdev_write+0x120/0x120
[ 105.181185][ T5085] ? bpf_lsm_file_ioctl+0x5/0x10
[ 105.186147][ T5085] ? security_file_ioctl+0x7c/0xa0
[ 105.191276][ T5085] ? i2cdev_write+0x120/0x120
[ 105.196079][ T5085] __se_sys_ioctl+0xfa/0x170
[ 105.200891][ T5085] do_syscall_64+0x4c/0xa0
[ 105.205405][ T5085] ? clear_bhb_loop+0x30/0x80
[ 105.210458][ T5085] ? clear_bhb_loop+0x30/0x80
[ 105.215173][ T5085] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 105.221320][ T5085] RIP: 0033:0x7f3d1a681749
[ 105.225848][ T5085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 105.245772][ T5085] RSP: 002b:00007f3d19cf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 105.254325][ T5085] RAX: ffffffffffffffda RBX: 00007f3d1a8d7fa0 RCX: 00007f3d1a681749
[ 105.262429][ T5085] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004
[ 105.270461][ T5085] RBP: 00007f3d1a705f91 R08: 0000000000000000 R09: 0000000000000000
[ 105.278830][ T5085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.286873][ T5085] R13: 00007f3d1a8d8038 R14: 00007f3d1a8d7fa0 R15: 00007ffe7a1d1bc8
[ 105.294852][ T5085]
[ 105.297904][ T5085] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 105.305176][ T5085] CPU: 1 PID: 5085 Comm: syz.0.17 Not tainted syzkaller #0
[ 105.312358][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 105.322636][ T5085] Call Trace:
[ 105.325913][ T5085]
[ 105.328840][ T5085] dump_stack_lvl+0x168/0x230
[ 105.333512][ T5085] ? show_regs_print_info+0x20/0x20
[ 105.338790][ T5085] ? load_image+0x3b0/0x3b0
[ 105.343304][ T5085] panic+0x2c9/0x7f0
[ 105.347186][ T5085] ? bpf_jit_dump+0xd0/0xd0
[ 105.351688][ T5085] ? usb_submit_urb+0x119f/0x1900
[ 105.356706][ T5085] __warn+0x248/0x2b0
[ 105.360777][ T5085] ? usb_submit_urb+0x119f/0x1900
[ 105.365792][ T5085] report_bug+0x1b7/0x2e0
[ 105.370129][ T5085] handle_bug+0x3a/0x70
[ 105.374284][ T5085] exc_invalid_op+0x16/0x40
[ 105.378781][ T5085] asm_exc_invalid_op+0x16/0x20
[ 105.383735][ T5085] RIP: 0010:usb_submit_urb+0x119f/0x1900
[ 105.389361][ T5085] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 6c 06 00 00 45 0f b6 07 48 c7 c7 80 ca a4 8a 48 8b 34 24 4c 89 e2 44 89 f1 e8 01 59 c8 03 <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 92 f3 ff ff 89 e9 80 e1 07
[ 105.409042][ T5085] RSP: 0018:ffffc9000300f868 EFLAGS: 00010246
[ 105.415110][ T5085] RAX: 99e41d1cd2d8eb00 RBX: ffff888028698200 RCX: ffff88807bcbd940
[ 105.423072][ T5085] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 105.431129][ T5085] RBP: 1ffff110044c5d7c R08: dffffc0000000000 R09: ffffed10172067b0
[ 105.439099][ T5085] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffff8880181ba348
[ 105.447066][ T5085] R13: ffff88807dfe20f8 R14: 0000000080000280 R15: ffff88802262ebe0
[ 105.455041][ T5085] ? usb_submit_urb+0x119f/0x1900
[ 105.460073][ T5085] usb_start_wait_urb+0x111/0x4b0
[ 105.465190][ T5085] ? usb_api_blocking_completion+0xb0/0xb0
[ 105.471025][ T5085] ? memset+0x1e/0x40
[ 105.475022][ T5085] usb_control_msg+0x22f/0x3e0
[ 105.479783][ T5085] dtv5100_i2c_xfer+0x393/0x650
[ 105.484653][ T5085] ? dtv5100_tuner_attach+0xf0/0xf0
[ 105.489836][ T5085] __i2c_transfer+0x864/0x2060
[ 105.494600][ T5085] ? rwsem_down_read_slowpath+0x990/0x990
[ 105.500318][ T5085] ? i2c_cmd+0x110/0x110
[ 105.504570][ T5085] ? __might_fault+0xb7/0x110
[ 105.509248][ T5085] i2c_transfer+0x24c/0x390
[ 105.513748][ T5085] ? __i2c_transfer+0x2060/0x2060
[ 105.518769][ T5085] ? __might_fault+0xb3/0x110
[ 105.523637][ T5085] ? _copy_from_user+0x111/0x170
[ 105.528575][ T5085] i2cdev_ioctl_rdwr+0x3da/0x6c0
[ 105.533510][ T5085] i2cdev_ioctl+0x5ba/0x750
[ 105.537997][ T5085] ? i2cdev_write+0x120/0x120
[ 105.542674][ T5085] ? bpf_lsm_file_ioctl+0x5/0x10
[ 105.547609][ T5085] ? security_file_ioctl+0x7c/0xa0
[ 105.552710][ T5085] ? i2cdev_write+0x120/0x120
[ 105.557383][ T5085] __se_sys_ioctl+0xfa/0x170
[ 105.561968][ T5085] do_syscall_64+0x4c/0xa0
[ 105.566384][ T5085] ? clear_bhb_loop+0x30/0x80
[ 105.571073][ T5085] ? clear_bhb_loop+0x30/0x80
[ 105.575927][ T5085] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 105.581810][ T5085] RIP: 0033:0x7f3d1a681749
[ 105.586286][ T5085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 105.605899][ T5085] RSP: 002b:00007f3d19cf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 105.614321][ T5085] RAX: ffffffffffffffda RBX: 00007f3d1a8d7fa0 RCX: 00007f3d1a681749
[ 105.622286][ T5085] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004
[ 105.630357][ T5085] RBP: 00007f3d1a705f91 R08: 0000000000000000 R09: 0000000000000000
[ 105.638326][ T5085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.646299][ T5085] R13: 00007f3d1a8d8038 R14: 00007f3d1a8d7fa0 R15: 00007ffe7a1d1bc8
[ 105.654288][ T5085]
[ 105.657678][ T5085] Kernel Offset: disabled
[ 105.662124][ T5085] Rebooting in 86400 seconds..