Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. 2025/09/08 16:04:35 parsed 1 programs [ 96.879566][ T4641] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 98.950569][ T4677] chnl_net:caif_netlink_parms(): no params data found [ 99.012912][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.021303][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.029722][ T4677] device bridge_slave_0 entered promiscuous mode [ 99.038634][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.045898][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.056091][ T4677] device bridge_slave_1 entered promiscuous mode [ 99.082739][ T4677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.094959][ T4677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.124988][ T4677] team0: Port device team_slave_0 added [ 99.133622][ T4677] team0: Port device team_slave_1 added [ 99.157626][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.165325][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.195401][ T4677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.208514][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.215485][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.241819][ T4677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.282874][ T4677] device hsr_slave_0 entered promiscuous mode [ 99.289858][ T4677] device hsr_slave_1 entered promiscuous mode [ 99.901643][ T4677] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.929421][ T4677] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.951684][ T4677] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.971671][ T4677] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.091601][ T4677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.137219][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.156421][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.205054][ T4677] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.251834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.271535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.292375][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.300369][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.328715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.337515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.358399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.378319][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.385758][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.394804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.405067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.429246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.439840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.450266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.460547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.470772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.480577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.491069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.500297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.510531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.522615][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.643306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.652697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.666959][ T4677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.705794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.715212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.755224][ T4677] device veth0_vlan entered promiscuous mode [ 100.762807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.771433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.785710][ T4677] device veth1_vlan entered promiscuous mode [ 100.794155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.804704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.814501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.857650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.868351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.880747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.894134][ T4677] device veth0_macvtap entered promiscuous mode [ 100.917535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.930274][ T4677] device veth1_macvtap entered promiscuous mode [ 100.951244][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.959636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.977146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.990228][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.000687][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.009902][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.036067][ T4677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.046391][ T4677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.055972][ T4677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.065088][ T4677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.551049][ T3083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.588551][ T3083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.601788][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.612461][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.613389][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.655328][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.358277][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/08 16:04:45 executed programs: 0 [ 103.707914][ T4863] chnl_net:caif_netlink_parms(): no params data found [ 103.774114][ T4863] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.782556][ T4863] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.790822][ T4863] device bridge_slave_0 entered promiscuous mode [ 103.801628][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.811202][ T4863] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.820584][ T4863] device bridge_slave_1 entered promiscuous mode [ 103.858895][ T4863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.873053][ T4863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.907018][ T4863] team0: Port device team_slave_0 added [ 103.917137][ T4863] team0: Port device team_slave_1 added [ 103.944757][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.952296][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.981298][ T4863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.995597][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.003356][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.031672][ T4863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.072136][ T4863] device hsr_slave_0 entered promiscuous mode [ 104.079662][ T4863] device hsr_slave_1 entered promiscuous mode [ 104.088138][ T4863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.097647][ T4863] Cannot create hsr debugfs directory [ 105.625503][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.648850][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 105.695626][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.792261][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.661736][ T4863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.674298][ T4863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.685392][ T4863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.698188][ T4863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.836370][ T4863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.867930][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.878293][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.890887][ T4863] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.910609][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.924907][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.937635][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.947783][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.960671][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.973290][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.984374][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.992906][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.005287][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.048822][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.057176][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.071539][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.083728][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.095100][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.105023][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.114146][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.123424][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.160432][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.170771][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.180106][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.197601][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.316922][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.324704][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.354614][ T4863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.375892][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.388211][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.417526][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.429757][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.440663][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.449172][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.460335][ T4863] device veth0_vlan entered promiscuous mode [ 107.493492][ T4863] device veth1_vlan entered promiscuous mode [ 107.515868][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.527625][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.537401][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.547047][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.559533][ T4863] device veth0_macvtap entered promiscuous mode [ 107.570230][ T4863] device veth1_macvtap entered promiscuous mode [ 107.597413][ T9] device hsr_slave_0 left promiscuous mode [ 107.604568][ T9] device hsr_slave_1 left promiscuous mode [ 107.613260][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.621944][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.630730][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.640414][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.650558][ T9] device bridge_slave_1 left promiscuous mode [ 107.657529][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.667531][ T9] device bridge_slave_0 left promiscuous mode [ 107.675292][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.687707][ T9] device veth1_macvtap left promiscuous mode [ 107.694282][ T9] device veth0_macvtap left promiscuous mode [ 107.701461][ T9] device veth1_vlan left promiscuous mode [ 107.707525][ T9] device veth0_vlan left promiscuous mode [ 107.718667][ T4322] Bluetooth: hci0: command 0x041b tx timeout [ 107.852825][ T9] team0 (unregistering): Port device team_slave_1 removed [ 107.865617][ T9] team0 (unregistering): Port device team_slave_0 removed [ 107.879758][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.893726][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.949279][ T9] bond0 (unregistering): Released all slaves [ 108.014830][ T4863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.025872][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.034720][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.043174][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.052741][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.065550][ T4863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.075620][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.085355][ T1244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.100029][ T4863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.109368][ T4863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.118137][ T4863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.127410][ T4863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.182956][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.197618][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.210580][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.221762][ T3083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.238575][ T3083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.256819][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.588655][ T4322] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 108.968715][ T4322] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 108.977445][ T4322] usb 1-1: config 0 has no interface number 0 [ 109.174541][ T4322] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 109.185350][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.193950][ T4322] usb 1-1: Product: syz [ 109.198258][ T4322] usb 1-1: Manufacturer: syz [ 109.203962][ T4322] usb 1-1: SerialNumber: syz [ 109.222281][ T4322] usb 1-1: config 0 descriptor?? [ 109.489162][ T4322] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 109.502988][ T4322] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 109.529016][ T4322] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 109.538326][ T4322] usb 1-1: media controller created [ 109.545653][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.576671][ T4322] DVB: Unable to find symbol dib7000p_attach() [ 109.583317][ T4322] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 109.592731][ T4322] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 109.619047][ T4322] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 109.629361][ T4322] usb 1-1: media controller created [ 109.635707][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.646905][ T4322] dib0700: the master dib7090 has to be initialized first [ 109.654210][ T4322] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 109.690952][ T5085] ------------[ cut here ]------------ [ 109.696986][ T5085] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 109.707443][ T5085] WARNING: CPU: 1 PID: 5085 at drivers/usb/core/urb.c:412 usb_submit_urb+0x119f/0x1900 [ 109.719494][ T4322] rc_core: IR keymap rc-dib0700-rc5 not found [ 109.725686][ T4322] Registered IR keymap rc-empty [ 109.731141][ T5085] Modules linked in: [ 109.735169][ T5085] CPU: 1 PID: 5085 Comm: syz.0.17 Not tainted syzkaller #0 [ 109.743996][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.755097][ T5085] RIP: 0010:usb_submit_urb+0x119f/0x1900 [ 109.761106][ T5085] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 6c 06 00 00 45 0f b6 07 48 c7 c7 80 63 a4 8a 48 8b 34 24 4c 89 e2 44 89 f1 e8 a1 89 cf 03 <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 92 f3 ff ff 89 e9 80 e1 07 [ 109.781840][ T5085] RSP: 0018:ffffc9000303f868 EFLAGS: 00010246 [ 109.789114][ T5085] RAX: 9ad89300aeb4d700 RBX: ffff888019fb3300 RCX: ffff88807e653b80 [ 109.798896][ T4308] Bluetooth: hci0: command 0x040f tx timeout [ 109.805736][ T5085] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 109.814546][ T5085] RBP: 1ffff1100373a464 R08: dffffc0000000000 R09: ffffed10172267a8 [ 109.823938][ T5085] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff888021a093e8 [ 109.832487][ T5085] R13: ffff88802a0370f8 R14: 0000000080000280 R15: ffff88801b9d2320 [ 109.842186][ T5085] FS: 00007f7749ea56c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 109.852080][ T5085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.860753][ T5085] CR2: 00007f97a6e29e9c CR3: 0000000061a26000 CR4: 00000000003506e0 [ 109.869156][ T5085] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.878132][ T5085] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.889362][ T5085] Call Trace: [ 109.892880][ T5085] [ 109.895957][ T5085] usb_start_wait_urb+0x111/0x4b0 [ 109.902133][ T5085] ? usb_api_blocking_completion+0xb0/0xb0 [ 109.908231][ T5085] usb_control_msg+0x22f/0x3e0 [ 109.914635][ T5085] dib0700_i2c_xfer+0xbbd/0xf80 [ 109.920541][ T5085] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 109.928086][ T5085] ? __rt_mutex_slowlock+0x6f/0x210 [ 109.935013][ T5085] ? dib0700_set_gpio+0x1f0/0x1f0 [ 109.940480][ T5085] __i2c_transfer+0x864/0x2060 [ 109.945701][ T5085] ? rwsem_down_read_slowpath+0x990/0x990 [ 109.953894][ T5085] ? i2c_cmd+0x110/0x110 [ 109.959159][ T5085] ? __might_fault+0xb7/0x110 [ 109.964043][ T5085] i2c_transfer+0x24c/0x390 [ 109.970176][ T5085] ? __i2c_transfer+0x2060/0x2060 [ 109.975321][ T5085] ? __might_fault+0xb3/0x110 [ 109.980571][ T5085] ? _copy_from_user+0x111/0x170 [ 109.985655][ T5085] i2cdev_ioctl_rdwr+0x3da/0x6c0 [ 109.992273][ T5085] i2cdev_ioctl+0x5ba/0x750 [ 109.997015][ T5085] ? i2cdev_write+0x120/0x120 [ 110.002312][ T5085] ? bpf_lsm_file_ioctl+0x5/0x10 [ 110.007494][ T5085] ? security_file_ioctl+0x7c/0xa0 [ 110.014160][ T5085] ? i2cdev_write+0x120/0x120 [ 110.019467][ T5085] __se_sys_ioctl+0xfa/0x170 [ 110.024740][ T5085] do_syscall_64+0x4c/0xa0 [ 110.030412][ T5085] ? clear_bhb_loop+0x30/0x80 [ 110.035479][ T5085] ? clear_bhb_loop+0x30/0x80 [ 110.040663][ T5085] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.046734][ T5085] RIP: 0033:0x7f774a835be9 [ 110.052209][ T5085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.072769][ T5085] RSP: 002b:00007f7749ea5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.082338][ T5085] RAX: ffffffffffffffda RBX: 00007f774aa5cfa0 RCX: 00007f774a835be9 [ 110.091898][ T5085] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 110.100703][ T5085] RBP: 00007f774a8b8e19 R08: 0000000000000000 R09: 0000000000000000 [ 110.109637][ T5085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.118138][ T5085] R13: 00007f774aa5d038 R14: 00007f774aa5cfa0 R15: 00007fff7b604698 [ 110.127456][ T5085] [ 110.130950][ T5085] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.138348][ T5085] CPU: 1 PID: 5085 Comm: syz.0.17 Not tainted syzkaller #0 [ 110.145641][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.157535][ T5085] Call Trace: [ 110.160926][ T5085] [ 110.163910][ T5085] dump_stack_lvl+0x168/0x230 [ 110.169651][ T5085] ? show_regs_print_info+0x20/0x20 [ 110.175539][ T5085] ? load_image+0x3b0/0x3b0 [ 110.181322][ T5085] panic+0x2c9/0x7f0 [ 110.185454][ T5085] ? bpf_jit_dump+0xd0/0xd0 [ 110.190270][ T5085] ? usb_submit_urb+0x119f/0x1900 [ 110.195963][ T5085] __warn+0x248/0x2b0 [ 110.200059][ T5085] ? usb_submit_urb+0x119f/0x1900 [ 110.205124][ T5085] report_bug+0x1b7/0x2e0 [ 110.209486][ T5085] handle_bug+0x3a/0x70 [ 110.213744][ T5085] exc_invalid_op+0x16/0x40 [ 110.218332][ T5085] asm_exc_invalid_op+0x16/0x20 [ 110.223384][ T5085] RIP: 0010:usb_submit_urb+0x119f/0x1900 [ 110.229028][ T5085] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 6c 06 00 00 45 0f b6 07 48 c7 c7 80 63 a4 8a 48 8b 34 24 4c 89 e2 44 89 f1 e8 a1 89 cf 03 <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 92 f3 ff ff 89 e9 80 e1 07 [ 110.249364][ T5085] RSP: 0018:ffffc9000303f868 EFLAGS: 00010246 [ 110.256142][ T5085] RAX: 9ad89300aeb4d700 RBX: ffff888019fb3300 RCX: ffff88807e653b80 [ 110.264331][ T5085] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 110.272519][ T5085] RBP: 1ffff1100373a464 R08: dffffc0000000000 R09: ffffed10172267a8 [ 110.280894][ T5085] R10: ffffed10172267a8 R11: 1ffff110172267a7 R12: ffff888021a093e8 [ 110.289069][ T5085] R13: ffff88802a0370f8 R14: 0000000080000280 R15: ffff88801b9d2320 [ 110.298188][ T5085] ? usb_submit_urb+0x119f/0x1900 [ 110.303443][ T5085] usb_start_wait_urb+0x111/0x4b0 [ 110.312010][ T5085] ? usb_api_blocking_completion+0xb0/0xb0 [ 110.319180][ T5085] usb_control_msg+0x22f/0x3e0 [ 110.324828][ T5085] dib0700_i2c_xfer+0xbbd/0xf80 [ 110.329840][ T5085] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 110.336174][ T5085] ? __rt_mutex_slowlock+0x6f/0x210 [ 110.341999][ T5085] ? dib0700_set_gpio+0x1f0/0x1f0 [ 110.347040][ T5085] __i2c_transfer+0x864/0x2060 [ 110.352450][ T5085] ? rwsem_down_read_slowpath+0x990/0x990 [ 110.358390][ T5085] ? i2c_cmd+0x110/0x110 [ 110.362649][ T5085] ? __might_fault+0xb7/0x110 [ 110.367354][ T5085] i2c_transfer+0x24c/0x390 [ 110.371897][ T5085] ? __i2c_transfer+0x2060/0x2060 [ 110.376923][ T5085] ? __might_fault+0xb3/0x110 [ 110.381691][ T5085] ? _copy_from_user+0x111/0x170 [ 110.386742][ T5085] i2cdev_ioctl_rdwr+0x3da/0x6c0 [ 110.391715][ T5085] i2cdev_ioctl+0x5ba/0x750 [ 110.396250][ T5085] ? i2cdev_write+0x120/0x120 [ 110.400944][ T5085] ? bpf_lsm_file_ioctl+0x5/0x10 [ 110.405908][ T5085] ? security_file_ioctl+0x7c/0xa0 [ 110.411070][ T5085] ? i2cdev_write+0x120/0x120 [ 110.415749][ T5085] __se_sys_ioctl+0xfa/0x170 [ 110.420879][ T5085] do_syscall_64+0x4c/0xa0 [ 110.425648][ T5085] ? clear_bhb_loop+0x30/0x80 [ 110.431626][ T5085] ? clear_bhb_loop+0x30/0x80 [ 110.436433][ T5085] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.442349][ T5085] RIP: 0033:0x7f774a835be9 [ 110.446964][ T5085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.468419][ T5085] RSP: 002b:00007f7749ea5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.476885][ T5085] RAX: ffffffffffffffda RBX: 00007f774aa5cfa0 RCX: 00007f774a835be9 [ 110.484957][ T5085] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 110.493044][ T5085] RBP: 00007f774a8b8e19 R08: 0000000000000000 R09: 0000000000000000 [ 110.501270][ T5085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.509720][ T5085] R13: 00007f774aa5d038 R14: 00007f774aa5cfa0 R15: 00007fff7b604698 [ 110.517731][ T5085] [ 110.521044][ T5085] Kernel Offset: disabled [ 110.525525][ T5085] Rebooting in 86400 seconds..