Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. 2025/10/12 09:24:37 parsed 1 programs [ 92.402917][ T4644] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 94.959277][ T757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.980690][ T757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.000857][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.002700][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.016596][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.026679][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.508067][ T4707] chnl_net:caif_netlink_parms(): no params data found [ 95.566469][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.573858][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.582128][ T4707] device bridge_slave_0 entered promiscuous mode [ 95.590556][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.598047][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.606449][ T4707] device bridge_slave_1 entered promiscuous mode [ 95.704879][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.726541][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.772103][ T4707] team0: Port device team_slave_0 added [ 95.779882][ T4707] team0: Port device team_slave_1 added [ 95.795783][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.803093][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.829366][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.844288][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.851353][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.878191][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.904846][ T4707] device hsr_slave_0 entered promiscuous mode [ 95.911948][ T4707] device hsr_slave_1 entered promiscuous mode [ 96.389588][ T4707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.434225][ T4707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.444719][ T4707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.455562][ T4707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.597088][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.612273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.621360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.636373][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.678611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.689112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.698838][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.705996][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.716982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.726146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.735631][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.742945][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.764542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.773758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.786861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.797648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.808869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.818072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.828726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.875357][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.888011][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.900049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.912503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.925094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.938867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.949024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.003639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.096007][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.104370][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.119277][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.165185][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.175233][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.212523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.222043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.234485][ T4707] device veth0_vlan entered promiscuous mode [ 97.250368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.268529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.281838][ T4707] device veth1_vlan entered promiscuous mode [ 97.317425][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.326177][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.336378][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.345844][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.356905][ T4707] device veth0_macvtap entered promiscuous mode [ 97.413321][ T4707] device veth1_macvtap entered promiscuous mode [ 97.429134][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.437884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.447709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.456703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.466842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.480205][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.491332][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.502165][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.516295][ T4707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.527209][ T4707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.537739][ T4707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.548572][ T4707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/10/12 09:24:46 executed programs: 0 [ 98.430399][ T4831] chnl_net:caif_netlink_parms(): no params data found [ 98.500282][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.507761][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.516186][ T4831] device bridge_slave_0 entered promiscuous mode [ 98.524746][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.532340][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.541019][ T4831] device bridge_slave_1 entered promiscuous mode [ 98.582779][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.604658][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.677747][ T4831] team0: Port device team_slave_0 added [ 98.696796][ T4831] team0: Port device team_slave_1 added [ 98.748946][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.756268][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.788351][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.801676][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.824842][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.854473][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.909534][ T4831] device hsr_slave_0 entered promiscuous mode [ 98.944001][ T4831] device hsr_slave_1 entered promiscuous mode [ 98.956256][ T4831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.967722][ T4831] Cannot create hsr debugfs directory [ 99.097275][ T4831] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.232804][ T4322] Bluetooth: hci0: command 0x0409 tx timeout [ 102.160978][ T4831] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.313152][ T4322] Bluetooth: hci0: command 0x041b tx timeout [ 102.548582][ T4831] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.598813][ T4831] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.670463][ T4831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.686876][ T4831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.695942][ T4831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.711064][ T4831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.760394][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.773572][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.781426][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.799519][ T4831] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.810355][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.819278][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.828409][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.835518][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.844705][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.860269][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.869551][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.878858][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.887673][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.905997][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.915031][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.924642][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.934124][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.943394][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.952132][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.969443][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.979159][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.988317][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.999781][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.008891][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.026859][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.109117][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.117726][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.129275][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.146668][ T3048] device hsr_slave_0 left promiscuous mode [ 103.154047][ T3048] device hsr_slave_1 left promiscuous mode [ 103.160899][ T3048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.168833][ T3048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.177153][ T3048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.186002][ T3048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.194586][ T3048] device bridge_slave_1 left promiscuous mode [ 103.200980][ T3048] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.209771][ T3048] device bridge_slave_0 left promiscuous mode [ 103.216177][ T3048] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.227368][ T3048] device veth1_macvtap left promiscuous mode [ 103.234404][ T3048] device veth0_macvtap left promiscuous mode [ 103.240581][ T3048] device veth1_vlan left promiscuous mode [ 103.246632][ T3048] device veth0_vlan left promiscuous mode [ 103.365630][ T3048] team0 (unregistering): Port device team_slave_1 removed [ 103.378066][ T3048] team0 (unregistering): Port device team_slave_0 removed [ 103.391180][ T3048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.407662][ T3048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.458226][ T3048] bond0 (unregistering): Released all slaves [ 103.526876][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.535733][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.551285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.562031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.573185][ T4831] device veth0_vlan entered promiscuous mode [ 103.582466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.591191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.610238][ T4831] device veth1_vlan entered promiscuous mode [ 103.628748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.637314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.646103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.655542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.667403][ T4831] device veth0_macvtap entered promiscuous mode [ 103.679277][ T4831] device veth1_macvtap entered promiscuous mode [ 103.699977][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.709040][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.717896][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.726257][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.735637][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.748170][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.760046][ T4831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.778658][ T4831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.787893][ T4831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.796934][ T4831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.807470][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.816678][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.873134][ T1259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.884005][ T1259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.910598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/10/12 09:24:52 executed programs: 2 [ 103.924879][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.934502][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.946992][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.292892][ T4716] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.392775][ T4718] Bluetooth: hci0: command 0x040f tx timeout [ 104.542887][ T4716] usb 1-1: Using ep0 maxpacket: 16 [ 104.853405][ T4716] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 104.862896][ T4716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.870877][ T4716] usb 1-1: Product: syz [ 104.875535][ T4716] usb 1-1: Manufacturer: syz [ 104.880157][ T4716] usb 1-1: SerialNumber: syz [ 104.888834][ T4716] usb 1-1: config 0 descriptor?? [ 105.373547][ T4716] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 105.386056][ T4716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.413090][ T4716] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 105.422494][ T4716] usb 1-1: media controller created [ 105.434908][ T4716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.994177][ T4716] zl10353_read_register: readreg error (reg=127, ret==0) [ 106.001444][ T4716] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 106.010344][ T4716] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 106.032896][ T5094] ------------[ cut here ]------------ [ 106.040431][ T5094] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 106.053698][ T5094] WARNING: CPU: 1 PID: 5094 at drivers/usb/core/urb.c:412 usb_submit_urb+0x119f/0x1900 [ 106.063802][ T5094] Modules linked in: [ 106.067918][ T5094] CPU: 0 PID: 5094 Comm: syz.0.16 Not tainted syzkaller #0 [ 106.075745][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.086831][ T5094] RIP: 0010:usb_submit_urb+0x119f/0x1900 [ 106.093193][ T5094] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 6c 06 00 00 45 0f b6 07 48 c7 c7 40 69 a4 8a 48 8b 34 24 4c 89 e2 44 89 f1 e8 11 bd cf 03 <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 92 f3 ff ff 89 e9 80 e1 07 [ 106.114975][ T5094] RSP: 0018:ffffc9000308f668 EFLAGS: 00010246 [ 106.121699][ T5094] RAX: 9bb8144cc5e91200 RBX: ffff88801bafeb00 RCX: ffff888072518000 [ 106.130011][ T5094] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 106.138201][ T5094] RBP: 1ffff11003d72ceb R08: dffffc0000000000 R09: ffffed10172267b0 [ 106.146472][ T5094] R10: ffffed10172267b0 R11: 1ffff110172267af R12: ffff888017988d20 [ 106.154855][ T5094] R13: ffff88805b3350f8 R14: 0000000080000280 R15: ffff88801eb96758 [ 106.163306][ T5094] FS: 00007f7463ea56c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 106.172504][ T5094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.179215][ T5094] CR2: 00007fd336d138c8 CR3: 000000007d67a000 CR4: 00000000003506f0 [ 106.187233][ T5094] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.195404][ T5094] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.203699][ T5094] Call Trace: [ 106.207081][ T5094] [ 106.210029][ T5094] usb_start_wait_urb+0x111/0x4b0 [ 106.215199][ T5094] ? usb_api_blocking_completion+0xb0/0xb0 [ 106.221150][ T5094] ? memset+0x1e/0x40 [ 106.225370][ T5094] usb_control_msg+0x22f/0x3e0 [ 106.230363][ T5094] dtv5100_i2c_xfer+0x393/0x650 [ 106.236297][ T5094] ? dtv5100_tuner_attach+0xf0/0xf0 [ 106.242749][ T5094] __i2c_transfer+0x864/0x2060 [ 106.247637][ T5094] ? rwsem_down_read_slowpath+0x990/0x990 [ 106.253996][ T5094] ? i2c_cmd+0x110/0x110 [ 106.258519][ T5094] i2c_transfer+0x24c/0x390 [ 106.263412][ T5094] ? __i2c_transfer+0x2060/0x2060 [ 106.268575][ T5094] ? __might_fault+0xb7/0x110 [ 106.273423][ T5094] i2c_transfer_buffer_flags+0x102/0x190 [ 106.279175][ T5094] ? i2c_transfer+0x390/0x390 [ 106.284009][ T5094] ? __might_fault+0xb3/0x110 [ 106.289098][ T5094] ? _copy_from_user+0x111/0x170 [ 106.294080][ T5094] i2cdev_write+0x87/0x120 [ 106.298509][ T5094] do_iter_write+0x3e4/0x7b0 [ 106.303284][ T5094] do_writev+0x254/0x410 [ 106.307850][ T5094] ? do_readv+0x3e0/0x3e0 [ 106.312186][ T5094] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 106.318290][ T5094] ? lock_chain_count+0x20/0x20 [ 106.323327][ T5094] ? vtime_user_exit+0x2dc/0x400 [ 106.328549][ T5094] ? lockdep_hardirqs_on+0x94/0x140 [ 106.334174][ T5094] do_syscall_64+0x4c/0xa0 [ 106.338671][ T5094] ? clear_bhb_loop+0x30/0x80 [ 106.343582][ T5094] ? clear_bhb_loop+0x30/0x80 [ 106.348268][ T5094] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.354411][ T5094] RIP: 0033:0x7f7464c35929 [ 106.358957][ T5094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.378910][ T5094] RSP: 002b:00007f7463ea5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 106.387387][ T5094] RAX: ffffffffffffffda RBX: 00007f7464e5cfa0 RCX: 00007f7464c35929 [ 106.396119][ T5094] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 106.404662][ T5094] RBP: 00007f7464cb7b39 R08: 0000000000000000 R09: 0000000000000000 [ 106.412887][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.420851][ T5094] R13: 0000000000000000 R14: 00007f7464e5cfa0 R15: 00007fffd70cbc18 [ 106.429200][ T5094] [ 106.432329][ T5094] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.439616][ T5094] CPU: 0 PID: 5094 Comm: syz.0.16 Not tainted syzkaller #0 [ 106.446884][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.457013][ T5094] Call Trace: [ 106.460281][ T5094] [ 106.463198][ T5094] dump_stack_lvl+0x168/0x230 [ 106.467912][ T5094] ? show_regs_print_info+0x20/0x20 [ 106.473208][ T5094] ? load_image+0x3b0/0x3b0 [ 106.477751][ T5094] panic+0x2c9/0x7f0 [ 106.481643][ T5094] ? bpf_jit_dump+0xd0/0xd0 [ 106.483949][ T4716] Bluetooth: hci0: command 0x0419 tx timeout [ 106.486156][ T5094] ? usb_submit_urb+0x119f/0x1900 [ 106.497271][ T5094] __warn+0x248/0x2b0 [ 106.501334][ T5094] ? usb_submit_urb+0x119f/0x1900 [ 106.506440][ T5094] report_bug+0x1b7/0x2e0 [ 106.511092][ T5094] handle_bug+0x3a/0x70 [ 106.515329][ T5094] exc_invalid_op+0x16/0x40 [ 106.519828][ T5094] asm_exc_invalid_op+0x16/0x20 [ 106.524669][ T5094] RIP: 0010:usb_submit_urb+0x119f/0x1900 [ 106.530292][ T5094] Code: fc ff df 0f b6 44 05 00 84 c0 0f 85 6c 06 00 00 45 0f b6 07 48 c7 c7 40 69 a4 8a 48 8b 34 24 4c 89 e2 44 89 f1 e8 11 bd cf 03 <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 92 f3 ff ff 89 e9 80 e1 07 [ 106.550057][ T5094] RSP: 0018:ffffc9000308f668 EFLAGS: 00010246 [ 106.556215][ T5094] RAX: 9bb8144cc5e91200 RBX: ffff88801bafeb00 RCX: ffff888072518000 [ 106.564218][ T5094] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 106.572180][ T5094] RBP: 1ffff11003d72ceb R08: dffffc0000000000 R09: ffffed10172267b0 [ 106.580154][ T5094] R10: ffffed10172267b0 R11: 1ffff110172267af R12: ffff888017988d20 [ 106.588223][ T5094] R13: ffff88805b3350f8 R14: 0000000080000280 R15: ffff88801eb96758 [ 106.596216][ T5094] ? usb_submit_urb+0x119f/0x1900 [ 106.601285][ T5094] usb_start_wait_urb+0x111/0x4b0 [ 106.606310][ T5094] ? usb_api_blocking_completion+0xb0/0xb0 [ 106.612242][ T5094] ? memset+0x1e/0x40 [ 106.616419][ T5094] usb_control_msg+0x22f/0x3e0 [ 106.621334][ T5094] dtv5100_i2c_xfer+0x393/0x650 [ 106.626208][ T5094] ? dtv5100_tuner_attach+0xf0/0xf0 [ 106.631452][ T5094] __i2c_transfer+0x864/0x2060 [ 106.636210][ T5094] ? rwsem_down_read_slowpath+0x990/0x990 [ 106.642020][ T5094] ? i2c_cmd+0x110/0x110 [ 106.646258][ T5094] i2c_transfer+0x24c/0x390 [ 106.650889][ T5094] ? __i2c_transfer+0x2060/0x2060 [ 106.655917][ T5094] ? __might_fault+0xb7/0x110 [ 106.660591][ T5094] i2c_transfer_buffer_flags+0x102/0x190 [ 106.666273][ T5094] ? i2c_transfer+0x390/0x390 [ 106.670944][ T5094] ? __might_fault+0xb3/0x110 [ 106.675694][ T5094] ? _copy_from_user+0x111/0x170 [ 106.680639][ T5094] i2cdev_write+0x87/0x120 [ 106.685076][ T5094] do_iter_write+0x3e4/0x7b0 [ 106.689756][ T5094] do_writev+0x254/0x410 [ 106.694020][ T5094] ? do_readv+0x3e0/0x3e0 [ 106.698435][ T5094] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 106.704412][ T5094] ? lock_chain_count+0x20/0x20 [ 106.709262][ T5094] ? vtime_user_exit+0x2dc/0x400 [ 106.714408][ T5094] ? lockdep_hardirqs_on+0x94/0x140 [ 106.719596][ T5094] do_syscall_64+0x4c/0xa0 [ 106.723998][ T5094] ? clear_bhb_loop+0x30/0x80 [ 106.728775][ T5094] ? clear_bhb_loop+0x30/0x80 [ 106.733562][ T5094] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.739478][ T5094] RIP: 0033:0x7f7464c35929 [ 106.743985][ T5094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.763686][ T5094] RSP: 002b:00007f7463ea5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 106.772567][ T5094] RAX: ffffffffffffffda RBX: 00007f7464e5cfa0 RCX: 00007f7464c35929 [ 106.780780][ T5094] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004 [ 106.788843][ T5094] RBP: 00007f7464cb7b39 R08: 0000000000000000 R09: 0000000000000000 [ 106.796835][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.804880][ T5094] R13: 0000000000000000 R14: 00007f7464e5cfa0 R15: 00007fffd70cbc18 [ 106.812951][ T5094] [ 106.816363][ T5094] Kernel Offset: disabled [ 106.820937][ T5094] Rebooting in 86400 seconds..