Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [*] Starting standalone reproducer for mxl111sf_get_stream_config_atsc_mh... [+] Detected 2 online CPUs. [+] Device nodes pre-created successfully. [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=3), issuing DMX_SET_PES_FILTER... [+] Spawned 3 demux worker threads successfully. [*] Starting USB emulation cycle 1... [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=6), issuing DMX_SET_PES_FILTER... [+] Opened /dev/raw-gadget successfully. [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=4), issuing DMX_SET_PES_FILTER... [*] Probing UDC: dummy_udc.2 [+] Successfully initialized raw-gadget on UDC: dummy_udc.2 [+] USB_RAW_IOCTL_RUN successful on dummy_udc.2 [*] Gadget active, waiting for driver binding and demux trigger... [+] Gadget event thread running on CPU 0. [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux4 (fd=3), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux4 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux4 (fd=6), issuing DMX_SET_PES_FILTER... [+] Successfully opened /dev/dvb/adapter0/demux4 (fd=4), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux4 succeeded! [+] Successfully opened /tmp/dvb_demux_3 (fd=3), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux4 succeeded! [-] DMX_SET_PES_FILTER on /tmp/dvb_demux_3 failed: Unknown error 524 [+] Successfully opened /tmp/dvb_demux_4 (fd=4), issuing DMX_SET_PES_FILTER... [+] Successfully opened /tmp/dvb_demux_4 (fd=3), issuing DMX_SET_PES_FILTER... [+] Successfully opened /tmp/dvb_demux_3 (fd=6), issuing DMX_SET_PES_FILTER... [-] DMX_SET_PES_FILTER on /tmp/dvb_demux_3 failed: Unknown error 524 [+] DMX_SET_PES_FILTER on /tmp/dvb_demux_4 succeeded! [+] DMX_SET_PES_FILTER on /tmp/dvb_demux_4 succeeded! [+] Successfully opened /tmp/dvb_demux_4 (fd=6), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /tmp/dvb_demux_4 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux4 (fd=8), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux4 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux4 (fd=10), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux4 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=8), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=4), issuing DMX_SET_PES_FILTER... [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=8), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux4 (fd=10), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux4 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=4), issuing DMX_SET_PES_FILTER... [+] Successfully opened /dev/dvb/adapter0/demux4 (fd=10), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux4 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=3), issuing DMX_SET_PES_FILTER... [+] Successfully opened /tmp/dvb_demux_3 (fd=6), issuing DMX_SET_PES_FILTER... [-] DMX_SET_PES_FILTER on /tmp/dvb_demux_3 failed: Unknown error 524 [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=4), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [+] Successfully opened /tmp/dvb_demux_4 (fd=6), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /tmp/dvb_demux_4 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux4 (fd=4), issuing DMX_SET_PES_FILTER... [ 127.425335][ T5729] usb 3-1: new high-speed USB device number 2 using dummy_hcd [+] Successfully opened /dev/dvb/adapter0/demux4 (fd=3), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux4 succeeded! [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux4 succeeded! [+] Successfully opened /tmp/dvb_demux_3 (fd=7), issuing DMX_SET_PES_FILTER... [-] DMX_SET_PES_FILTER on /tmp/dvb_demux_3 failed: Unknown error 524 [+] Successfully opened /dev/dvb/adapter0/demux4 (fd=8), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux4 succeeded! [+] Successfully opened /tmp/dvb_demux_4 (fd=7), issuing DMX_SET_PES_FILTER... [+] Successfully opened /tmp/dvb_demux_3 (fd=3), issuing DMX_SET_PES_FILTER... [-] DMX_SET_PES_FILTER on /tmp/dvb_demux_3 failed: Unknown error 524 [+] Handled USB_REQ_SET_CONFIGURATION; enabling endpoints... [+] DMX_SET_PES_FILTER on /tmp/dvb_demux_4 succeeded! [+] Successfully opened /tmp/dvb_demux_4 (fd=3), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /tmp/dvb_demux_4 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=7), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [ 127.577000][ T5729] usb 3-1: New USB device found, idVendor=2040, idProduct=c600, bcdDevice= 1.00 [ 127.580546][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.622030][ T5729] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=6), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [+] Successfully opened /dev/dvb/adapter0/demux4 (fd=7), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux4 succeeded! [ 127.643479][ T5729] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 127.644153][ T5729] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 127.644216][ T5729] usb 3-1: media controller created [ 127.682237][ T5937] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000a1: 0000 [#1] SMP KASAN PTI [+] Successfully opened /tmp/dvb_demux_68 (fd=8), issuing DMX_SET_PES_FILTER... [ 127.693992][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.702891][ T5937] KASAN: null-ptr-deref in range [0x0000000000000508-0x000000000000050f] [ 127.711922][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: syz-executor260 Not tainted syzkaller #0 PREEMPT(full) [ 127.721693][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.732716][ T5937] RIP: 0010:mxl111sf_get_stream_config_atsc_mh+0x3e/0x9d0 [ 127.740952][ T5937] Code: 49 89 ff 49 bd 00 00 00 00 00 fc ff df e8 0a 54 92 f9 0f 1f 44 00 00 e8 00 54 92 f9 49 81 c7 08 05 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 e7 03 00 00 45 8b 3f 4c 89 ff 48 c7 c6 [ 127.761311][ T5937] RSP: 0018:ffffc9000345fb28 EFLAGS: 00010202 [ 127.768396][ T5937] RAX: 00000000000000a1 RBX: ffffc9000345fbc0 RCX: ffff888077398000 [ 127.776674][ T5937] RDX: 0000000000000000 RSI: ffff888058feca19 RDI: 0000000000000000 [ 127.784798][ T5937] RBP: ffffc9000345fc38 R08: 0000001800060502 R09: 0000000100000c00 [ 127.792901][ T5937] R10: 0000001800060502 R11: ffffffff8835bdd0 R12: dffffc0000000000 [ 127.801237][ T5937] R13: dffffc0000000000 R14: ffff888058feca19 R15: 0000000000000508 [ 127.809348][ T5937] FS: 00007f554a6f06c0(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 127.818516][ T5937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.825330][ T5937] CR2: 00007fc031d500f5 CR3: 0000000034892000 CR4: 00000000003526f0 [ 127.833437][ T5937] Call Trace: [ 127.836764][ T5937] [ 127.839834][ T5937] ? __pfx_mxl111sf_get_stream_config_atsc_mh+0x10/0x10 [ 127.846810][ T5937] dvb_usb_start_feed+0x361/0xc70 [ 127.852131][ T5937] ? __pfx_dvb_usb_start_feed+0x10/0x10 [ 127.857801][ T5937] dmx_ts_feed_start_filtering+0x129/0x220 [ 127.863831][ T5937] dvb_dmxdev_filter_start+0x434/0x10d0 [ 127.869621][ T5937] dvb_demux_do_ioctl+0x48b/0x540 [ 127.874859][ T5937] dvb_usercopy+0x199/0x2e0 [ 127.879810][ T5937] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 127.885771][ T5937] ? __pfx_dvb_usercopy+0x10/0x10 [ 127.891017][ T5937] ? __fget_files+0x3a2/0x420 [ 127.896230][ T5937] ? __fget_files+0x2a/0x420 [ 127.901832][ T5937] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 127.907202][ T5937] dvb_demux_ioctl+0x29/0x40 [ 127.911851][ T5937] __se_sys_ioctl+0xfc/0x170 [ 127.916642][ T5937] do_syscall_64+0x166/0x520 [ 127.921455][ T5937] ? trace_irq_disable+0x3b/0x140 [ 127.926689][ T5937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.932987][ T5937] ? clear_bhb_loop+0x70/0xc0 [ 127.937971][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.944382][ T5937] RIP: 0033:0x7f554a728c1b [ 127.948926][ T5937] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 127.969353][ T5937] RSP: 002b:00007f554a6efe30 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.977926][ T5937] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f554a728c1b [ 127.986461][ T5937] RDX: 00007f554a6efe90 RSI: 0000000040146f2c RDI: 0000000000000008 [+] Successfully opened /dev/dvb/adapter0/demux0 (fd=7), issuing DMX_SET_PES_FILTER... [+] DMX_SET_PES_FILTER on /dev/dvb/adapter0/demux0 succeeded! [ 127.994900][ T5937] RBP: 00007f554a796625 R08: 0000000000000000 R09: 0000000000000000 [ 128.003335][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f554a79644d [ 128.011857][ T5937] R13: 00007f554a7c1598 R14: 00007f5540000b70 R15: 00007f554a7c15b0 [ 128.020740][ T5937] [ 128.023793][ T5937] Modules linked in: [ 128.028414][ T5937] ---[ end trace 0000000000000000 ]--- [ 128.040878][ T5937] RIP: 0010:mxl111sf_get_stream_config_atsc_mh+0x3e/0x9d0 [ 128.041117][ T5937] Code: 49 89 ff 49 bd 00 00 00 00 00 fc ff df e8 0a 54 92 f9 0f 1f 44 00 00 e8 00 54 92 f9 49 81 c7 08 05 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 e7 03 00 00 45 8b 3f 4c 89 ff 48 c7 c6 [ 128.041138][ T5937] RSP: 0018:ffffc9000345fb28 EFLAGS: 00010202 [ 128.041160][ T5937] RAX: 00000000000000a1 RBX: ffffc9000345fbc0 RCX: ffff888077398000 [ 128.041176][ T5937] RDX: 0000000000000000 RSI: ffff888058feca19 RDI: 0000000000000000 [ 128.041372][ T5937] RBP: ffffc9000345fc38 R08: 0000001800060502 R09: 0000000100000c00 [ 128.041389][ T5937] R10: 0000001800060502 R11: ffffffff8835bdd0 R12: dffffc0000000000 [ 128.041403][ T5937] R13: dffffc0000000000 R14: ffff888058feca19 R15: 0000000000000508 [ 128.041418][ T5937] FS: 00007f554a6f06c0(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 128.041446][ T5937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.041461][ T5937] CR2: 00007fc031d500f5 CR3: 0000000034892000 CR4: 00000000003526f0 [ 128.041483][ T5937] Kernel panic - not syncing: Fatal exception [ 128.146765][ T5937] Kernel Offset: disabled [ 128.151395][ T5937] Rebooting in 86400 seconds..