[ 471.660768][ T847] usb 1-1: can't set config #0, error -71 [ 471.678061][ T847] usb 1-1: USB disconnect, device number 113 [ 471.699297][ T1325] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.758387][ T1325] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.816337][ T1325] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.889628][ T1325] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.004382][ T1325] bridge_slave_1: left allmulticast mode [ 472.011587][ T1325] bridge_slave_1: left promiscuous mode [ 472.018044][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.027587][ T1325] bridge_slave_0: left allmulticast mode [ 472.033818][ T1325] bridge_slave_0: left promiscuous mode [ 472.042599][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.259318][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.270116][ T1325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.280347][ T1325] bond0 (unregistering): Released all slaves [ 472.574082][ T1325] hsr_slave_0: left promiscuous mode [ 472.583903][ T1325] hsr_slave_1: left promiscuous mode [ 472.592715][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.600404][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.608887][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.618953][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.637789][ T1325] veth1_macvtap: left promiscuous mode [ 472.643455][ T1325] veth0_macvtap: left promiscuous mode [ 472.649223][ T1325] veth1_vlan: left promiscuous mode [ 472.655253][ T1325] veth0_vlan: left promiscuous mode [ 472.962646][ T1325] team0 (unregistering): Port device team_slave_1 removed [ 472.993849][ T1325] team0 (unregistering): Port device team_slave_0 removed Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. executing program [ 477.486754][ T10] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 477.636844][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 477.643618][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 477.652781][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.662640][ T10] usb 1-1: config 0 descriptor?? [ 477.870536][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 477.879177][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 477.889258][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 477.896423][ T10] usb 1-1: media controller created [ 477.908795][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.948959][ T10] DVB: Unable to find symbol dib7000p_attach() [ 477.955135][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 478.006754][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 478.012860][ T10] Registered IR keymap rc-empty [ 478.018453][ T10] dvb-usb: could not initialize remote control. [ 478.024708][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 478.232964][ T7045] ------------[ cut here ]------------ [ 478.238656][ T7045] usb 1-1: BOGUS control dir, pipe 80007280 doesn't match bRequestType c0 [ 478.247212][ T7045] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#0: syz-executor361/7045 [ 478.257933][ T7045] Modules linked in: [ 478.261909][ T7045] CPU: 0 UID: 0 PID: 7045 Comm: syz-executor361 Not tainted syzkaller #0 PREEMPT(full) [ 478.271640][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.281735][ T7045] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 478.287488][ T7045] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 478.307128][ T7045] RSP: 0018:ffffc90003f4f820 EFLAGS: 00010246 [ 478.313234][ T7045] RAX: 0000000000000000 RBX: ffff888078ba1600 RCX: 0000000080007280 [ 478.321255][ T7045] RDX: ffff88802a208620 RSI: ffffffff8c360b00 RDI: ffffffff8fd09a60 [ 478.329320][ T7045] RBP: 1ffff1100521cbf8 R08: 00000000000000c0 R09: 0000000000000000 [ 478.337327][ T7045] R10: ffffc90003f4f920 R11: fffff520007e9f30 R12: ffff88807deaa100 [ 478.345308][ T7045] R13: ffff8880290e5fc0 R14: 0000000080007280 R15: ffff88802a208620 [ 478.353313][ T7045] FS: 00007fbf7f3f36c0(0000) GS:ffff8881259dc000(0000) knlGS:0000000000000000 [ 478.362273][ T7045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.368869][ T7045] CR2: 0000200000001480 CR3: 000000002a65e000 CR4: 00000000003526f0 [ 478.376864][ T7045] Call Trace: [ 478.380129][ T7045] [ 478.383041][ T7045] ? __init_swait_queue_head+0xa9/0x150 [ 478.388605][ T7045] usb_start_wait_urb+0x115/0x4f0 [ 478.393640][ T7045] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 478.399233][ T7045] usb_control_msg+0x232/0x3e0 [ 478.404023][ T7045] dib0700_i2c_xfer+0xba7/0xf70 [ 478.408934][ T7045] __i2c_transfer+0x871/0x2110 [ 478.413715][ T7045] ? lockdep_hardirqs_on+0x98/0x140 [ 478.418942][ T7045] ? __pfx___i2c_transfer+0x10/0x10 [ 478.424146][ T7045] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 478.429550][ T7045] ? i2c_transfer+0x120/0x3a0 [ 478.434226][ T7045] i2c_transfer+0x25b/0x3a0 [ 478.438830][ T7045] ? __pfx_i2c_transfer+0x10/0x10 [ 478.443866][ T7045] ? _copy_from_user+0x94/0xb0 [ 478.448664][ T7045] i2cdev_ioctl_rdwr+0x460/0x740 [ 478.453617][ T7045] i2cdev_ioctl+0x64b/0x820 [ 478.458158][ T7045] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 478.463190][ T7045] ? __fget_files+0x3a0/0x420 [ 478.467888][ T7045] ? __fget_files+0x2a/0x420 [ 478.472481][ T7045] ? bpf_lsm_file_ioctl+0x9/0x20 [ 478.477436][ T7045] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 478.482468][ T7045] __se_sys_ioctl+0xfc/0x170 [ 478.487085][ T7045] do_syscall_64+0xfa/0xf80 [ 478.491705][ T7045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.497789][ T7045] ? clear_bhb_loop+0x60/0xb0 [ 478.502471][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.508388][ T7045] RIP: 0033:0x7fbf7f43e209 [ 478.512820][ T7045] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 478.532494][ T7045] RSP: 002b:00007fbf7f3f3218 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.540941][ T7045] RAX: ffffffffffffffda RBX: 00007fbf7f4c53e8 RCX: 00007fbf7f43e209 [ 478.549203][ T7045] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 478.557216][ T7045] RBP: 00007fbf7f4c53e0 R08: 0000000000000000 R09: 0000000000000000 [ 478.565196][ T7045] R10: 0000000000000011 R11: 0000000000000246 R12: 0000200000000200 [ 478.573198][ T7045] R13: 0000200000001480 R14: 6332692f7665642f R15: 0000200000000000 [ 478.581215][ T7045] [ 478.584239][ T7045] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 478.591528][ T7045] CPU: 0 UID: 0 PID: 7045 Comm: syz-executor361 Not tainted syzkaller #0 PREEMPT(full) [ 478.601228][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.611357][ T7045] Call Trace: [ 478.614626][ T7045] [ 478.617644][ T7045] dump_stack_lvl+0x99/0x250 [ 478.622230][ T7045] ? __asan_memcpy+0x40/0x70 [ 478.626817][ T7045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.632000][ T7045] ? __pfx__printk+0x10/0x10 [ 478.636774][ T7045] vpanic+0x237/0x6d0 [ 478.640744][ T7045] ? __pfx_vpanic+0x10/0x10 [ 478.645232][ T7045] ? is_bpf_text_address+0x292/0x2b0 [ 478.650509][ T7045] ? is_bpf_text_address+0x26/0x2b0 [ 478.655711][ T7045] panic+0xb9/0xc0 [ 478.659420][ T7045] ? __pfx_panic+0x10/0x10 [ 478.663841][ T7045] __warn+0x317/0x4b0 [ 478.667811][ T7045] ? usb_submit_urb+0x105c/0x18d0 [ 478.672826][ T7045] ? usb_submit_urb+0x105c/0x18d0 [ 478.677837][ T7045] __report_bug+0x288/0x500 [ 478.682327][ T7045] ? usb_submit_urb+0x105c/0x18d0 [ 478.687345][ T7045] ? __pfx___report_bug+0x10/0x10 [ 478.692363][ T7045] ? stack_depot_save_flags+0x422/0x850 [ 478.697902][ T7045] report_bug_entry+0x19a/0x290 [ 478.702744][ T7045] ? usb_submit_urb+0x111c/0x18d0 [ 478.707754][ T7045] ? usb_submit_urb+0x1121/0x18d0 [ 478.712767][ T7045] handle_bug+0xca/0x200 [ 478.716996][ T7045] exc_invalid_op+0x1a/0x50 [ 478.721488][ T7045] asm_exc_invalid_op+0x1a/0x20 [ 478.726322][ T7045] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 478.732047][ T7045] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 478.751659][ T7045] RSP: 0018:ffffc90003f4f820 EFLAGS: 00010246 [ 478.757739][ T7045] RAX: 0000000000000000 RBX: ffff888078ba1600 RCX: 0000000080007280 [ 478.765699][ T7045] RDX: ffff88802a208620 RSI: ffffffff8c360b00 RDI: ffffffff8fd09a60 [ 478.773656][ T7045] RBP: 1ffff1100521cbf8 R08: 00000000000000c0 R09: 0000000000000000 [ 478.781614][ T7045] R10: ffffc90003f4f920 R11: fffff520007e9f30 R12: ffff88807deaa100 [ 478.789570][ T7045] R13: ffff8880290e5fc0 R14: 0000000080007280 R15: ffff88802a208620 [ 478.797558][ T7045] ? __init_swait_queue_head+0xa9/0x150 [ 478.803098][ T7045] usb_start_wait_urb+0x115/0x4f0 [ 478.808122][ T7045] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 478.813768][ T7045] usb_control_msg+0x232/0x3e0 [ 478.818528][ T7045] dib0700_i2c_xfer+0xba7/0xf70 [ 478.823383][ T7045] __i2c_transfer+0x871/0x2110 [ 478.828153][ T7045] ? lockdep_hardirqs_on+0x98/0x140 [ 478.833348][ T7045] ? __pfx___i2c_transfer+0x10/0x10 [ 478.838538][ T7045] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 478.843900][ T7045] ? i2c_transfer+0x120/0x3a0 [ 478.848562][ T7045] i2c_transfer+0x25b/0x3a0 [ 478.853077][ T7045] ? __pfx_i2c_transfer+0x10/0x10 [ 478.858096][ T7045] ? _copy_from_user+0x94/0xb0 [ 478.862854][ T7045] i2cdev_ioctl_rdwr+0x460/0x740 [ 478.867787][ T7045] i2cdev_ioctl+0x64b/0x820 [ 478.872276][ T7045] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 478.877295][ T7045] ? __fget_files+0x3a0/0x420 [ 478.881960][ T7045] ? __fget_files+0x2a/0x420 [ 478.886556][ T7045] ? bpf_lsm_file_ioctl+0x9/0x20 [ 478.891479][ T7045] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 478.896493][ T7045] __se_sys_ioctl+0xfc/0x170 [ 478.901079][ T7045] do_syscall_64+0xfa/0xf80 [ 478.905591][ T7045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.911663][ T7045] ? clear_bhb_loop+0x60/0xb0 [ 478.916337][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.922222][ T7045] RIP: 0033:0x7fbf7f43e209 [ 478.926629][ T7045] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 478.946225][ T7045] RSP: 002b:00007fbf7f3f3218 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.954627][ T7045] RAX: ffffffffffffffda RBX: 00007fbf7f4c53e8 RCX: 00007fbf7f43e209 [ 478.962583][ T7045] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 478.970652][ T7045] RBP: 00007fbf7f4c53e0 R08: 0000000000000000 R09: 0000000000000000 [ 478.978609][ T7045] R10: 0000000000000011 R11: 0000000000000246 R12: 0000200000000200 [ 478.986580][ T7045] R13: 0000200000001480 R14: 6332692f7665642f R15: 0000200000000000 [ 478.994550][ T7045] [ 478.998004][ T7045] Kernel Offset: disabled [ 479.002313][ T7045] Rebooting in 86400 seconds..