syzkaller syzkaller login: [ 28.622108][ T3550] cgroup: Unknown subsys name 'net' [ 28.743688][ T3550] cgroup: Unknown subsys name 'rlimit' [ 29.709060][ T3550] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.697434][ T3565] veth0_vlan: entered promiscuous mode [ 31.104517][ T114] veth0_vlan: left promiscuous mode [ 31.892306][ T3810] veth0_vlan: entered promiscuous mode [ 32.303784][ T337] veth0_vlan: left promiscuous mode Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. 2025/11/10 03:50:04 parsed 1 programs [ 51.399826][ T4019] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.630000][ T4075] veth0_vlan: entered promiscuous mode 2025/11/10 03:50:07 executed programs: 0 [ 53.057402][ T35] veth0_vlan: left promiscuous mode [ 53.570301][ T4277] veth0_vlan: entered promiscuous mode [ 54.012631][ T224] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 54.192601][ T224] usb 3-1: Using ep0 maxpacket: 16 [ 54.199860][ T224] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 54.209102][ T224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.217085][ T224] usb 3-1: Product: syz [ 54.221206][ T224] usb 3-1: Manufacturer: syz [ 54.225873][ T224] usb 3-1: SerialNumber: syz [ 54.231952][ T224] usb 3-1: config 0 descriptor?? [ 54.638161][ T224] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 54.645940][ T224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 54.655321][ T224] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 54.663323][ T224] usb 3-1: media controller created [ 54.670112][ T224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 55.212570][ T224] zl10353_read_register: readreg error (reg=127, ret==0) [ 55.219620][ T224] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 55.227595][ T224] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 55.242570][ T4461] ------------[ cut here ]------------ [ 55.248026][ T4461] usb 3-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 55.256574][ T4461] WARNING: CPU: 0 PID: 4461 at drivers/usb/core/urb.c:413 usb_submit_urb+0x5ab/0x5c0 [ 55.266013][ T4461] Modules linked in: [ 55.269883][ T4461] CPU: 0 PID: 4461 Comm: syz.2.17 Not tainted syzkaller #0 [ 55.277080][ T4461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.287121][ T4461] RIP: 0010:usb_submit_urb+0x5ab/0x5c0 [ 55.292577][ T4461] Code: 00 00 48 85 d2 75 03 49 8b 16 4c 8b 74 24 08 41 8b 4e 50 45 0f b6 45 00 48 c7 c7 17 0e 8f 83 48 89 c6 e8 38 2f b4 00 4c 89 f7 <0f> 0b 8b 74 24 04 44 89 e2 e9 eb fb ff ff 0f 1f 80 00 00 00 00 f3 [ 55.312172][ T4461] RSP: 0018:ffffc90001bdbc38 EFLAGS: 00010246 [ 55.318232][ T4461] RAX: bf89d12969252f00 RBX: ffff888168445000 RCX: bf89d12969252f00 [ 55.326341][ T4461] RDX: 0000000000000000 RSI: 00000000ffffdfff RDI: ffff888113332900 [ 55.334314][ T4461] RBP: ffff888168445058 R08: 0000000000001fff R09: ffffffff83d08020 [ 55.342262][ T4461] R10: 0000000000005ffd R11: 00000000ffffdfff R12: 0000000000000001 [ 55.350225][ T4461] R13: ffff888115021df8 R14: ffff888113332900 R15: 0000000000000000 [ 55.358204][ T4461] FS: 00007f77f65ef6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 55.367133][ T4461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.373900][ T4461] CR2: 00007fff52e7b6d8 CR3: 0000000178fda000 CR4: 00000000003506f0 [ 55.381849][ T4461] Call Trace: [ 55.385145][ T4461] [ 55.388058][ T4461] usb_start_wait_urb+0xc5/0x1c0 [ 55.393022][ T4461] usb_control_msg+0xd7/0x140 [ 55.397684][ T4461] dtv5100_i2c_msg+0xec/0x150 [ 55.402381][ T4461] dtv5100_i2c_xfer+0x7f/0xe0 [ 55.407240][ T4461] __i2c_transfer+0x40d/0x810 [ 55.411908][ T4461] ? i2c_transfer+0x88/0xf0 [ 55.416397][ T4461] i2c_transfer+0x95/0xf0 [ 55.420707][ T4461] i2cdev_ioctl_rdwr+0x13b/0x1e0 [ 55.425646][ T4461] i2cdev_ioctl+0x27d/0x340 [ 55.430136][ T4461] __se_sys_ioctl+0x68/0xb0 [ 55.434632][ T4461] do_syscall_64+0x55/0xb0 [ 55.439035][ T4461] ? clear_bhb_loop+0x40/0x90 [ 55.443710][ T4461] ? clear_bhb_loop+0x40/0x90 [ 55.448418][ T4461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.454311][ T4461] RIP: 0033:0x7f77f578ebe9 [ 55.458705][ T4461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.478324][ T4461] RSP: 002b:00007f77f65ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.486819][ T4461] RAX: ffffffffffffffda RBX: 00007f77f59b5fa0 RCX: 00007f77f578ebe9 [ 55.494908][ T4461] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 55.502883][ T4461] RBP: 00007f77f5811e19 R08: 0000000000000000 R09: 0000000000000000 [ 55.510931][ T4461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.518914][ T4461] R13: 00007f77f59b6038 R14: 00007f77f59b5fa0 R15: 00007ffe98aabff8 [ 55.526999][ T4461] [ 55.529997][ T4461] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 55.537265][ T4461] CPU: 0 PID: 4461 Comm: syz.2.17 Not tainted syzkaller #0 [ 55.544514][ T4461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.554543][ T4461] Call Trace: [ 55.557857][ T4461] [ 55.560765][ T4461] dump_stack_lvl+0x78/0xc0 [ 55.565592][ T4461] panic+0x11b/0x2d0 [ 55.569455][ T4461] ? usb_submit_urb+0x5ab/0x5c0 [ 55.574271][ T4461] __warn+0x15d/0x1f0 [ 55.578218][ T4461] ? usb_submit_urb+0x5ab/0x5c0 [ 55.583073][ T4461] report_bug+0xcd/0x160 [ 55.587368][ T4461] ? usb_submit_urb+0x5ab/0x5c0 [ 55.592194][ T4461] ? usb_submit_urb+0x5ad/0x5c0 [ 55.597012][ T4461] handle_bug+0xcf/0x120 [ 55.601265][ T4461] exc_invalid_op+0x1a/0x50 [ 55.605731][ T4461] asm_exc_invalid_op+0x1a/0x20 [ 55.610559][ T4461] RIP: 0010:usb_submit_urb+0x5ab/0x5c0 [ 55.615983][ T4461] Code: 00 00 48 85 d2 75 03 49 8b 16 4c 8b 74 24 08 41 8b 4e 50 45 0f b6 45 00 48 c7 c7 17 0e 8f 83 48 89 c6 e8 38 2f b4 00 4c 89 f7 <0f> 0b 8b 74 24 04 44 89 e2 e9 eb fb ff ff 0f 1f 80 00 00 00 00 f3 [ 55.635758][ T4461] RSP: 0018:ffffc90001bdbc38 EFLAGS: 00010246 [ 55.641848][ T4461] RAX: bf89d12969252f00 RBX: ffff888168445000 RCX: bf89d12969252f00 [ 55.649783][ T4461] RDX: 0000000000000000 RSI: 00000000ffffdfff RDI: ffff888113332900 [ 55.657811][ T4461] RBP: ffff888168445058 R08: 0000000000001fff R09: ffffffff83d08020 [ 55.665752][ T4461] R10: 0000000000005ffd R11: 00000000ffffdfff R12: 0000000000000001 [ 55.673688][ T4461] R13: ffff888115021df8 R14: ffff888113332900 R15: 0000000000000000 [ 55.681627][ T4461] ? usb_submit_urb+0x5a8/0x5c0 [ 55.686469][ T4461] usb_start_wait_urb+0xc5/0x1c0 [ 55.691469][ T4461] usb_control_msg+0xd7/0x140 [ 55.696122][ T4461] dtv5100_i2c_msg+0xec/0x150 [ 55.700761][ T4461] dtv5100_i2c_xfer+0x7f/0xe0 [ 55.705411][ T4461] __i2c_transfer+0x40d/0x810 [ 55.710060][ T4461] ? i2c_transfer+0x88/0xf0 [ 55.714528][ T4461] i2c_transfer+0x95/0xf0 [ 55.718821][ T4461] i2cdev_ioctl_rdwr+0x13b/0x1e0 [ 55.723722][ T4461] i2cdev_ioctl+0x27d/0x340 [ 55.728187][ T4461] __se_sys_ioctl+0x68/0xb0 [ 55.732655][ T4461] do_syscall_64+0x55/0xb0 [ 55.737034][ T4461] ? clear_bhb_loop+0x40/0x90 [ 55.741673][ T4461] ? clear_bhb_loop+0x40/0x90 [ 55.746317][ T4461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.752175][ T4461] RIP: 0033:0x7f77f578ebe9 [ 55.756557][ T4461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.776126][ T4461] RSP: 002b:00007f77f65ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.784545][ T4461] RAX: ffffffffffffffda RBX: 00007f77f59b5fa0 RCX: 00007f77f578ebe9 [ 55.792569][ T4461] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 55.800540][ T4461] RBP: 00007f77f5811e19 R08: 0000000000000000 R09: 0000000000000000 [ 55.808562][ T4461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.816670][ T4461] R13: 00007f77f59b6038 R14: 00007f77f59b5fa0 R15: 00007ffe98aabff8 [ 55.824611][ T4461] [ 55.827899][ T4461] Kernel Offset: disabled [ 55.832201][ T4461] Rebooting in 86400 seconds..