[ 84.595420][ T40] audit: type=1400 audit(1772664570.806:116): avc: denied { transition } for pid=6131 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.603198][ T40] audit: type=1400 audit(1772664570.806:117): avc: denied { noatsecure } for pid=6131 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.610568][ T40] audit: type=1400 audit(1772664570.816:118): avc: denied { rlimitinh } for pid=6131 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.618687][ T40] audit: type=1400 audit(1772664570.816:119): avc: denied { siginh } for pid=6131 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.803525][ T3249] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:13294' (ED25519) to the list of known hosts. 2026/03/04 22:49:38 parsed 1 programs [ 92.353713][ T40] audit: type=1400 audit(1772664578.566:120): avc: denied { node_bind } for pid=6170 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 95.038142][ T40] audit: type=1400 audit(1772664581.256:121): avc: denied { read write } for pid=6180 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.047853][ T40] audit: type=1400 audit(1772664581.256:122): avc: denied { open } for pid=6180 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.119439][ T40] audit: type=1400 audit(1772664581.336:123): avc: denied { unlink } for pid=6180 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 95.434589][ T40] audit: type=1400 audit(1772664581.646:124): avc: denied { relabelto } for pid=6183 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 96.257549][ T6180] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.528938][ T40] audit: type=1400 audit(1772664584.746:125): avc: denied { mounton } for pid=6186 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 99.340716][ T6213] chnl_net:caif_netlink_parms(): no params data found [ 99.405500][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.409089][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.412440][ T6213] bridge_slave_0: entered allmulticast mode [ 99.416406][ T6213] bridge_slave_0: entered promiscuous mode [ 99.422005][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.425366][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.429135][ T6213] bridge_slave_1: entered allmulticast mode [ 99.433292][ T6213] bridge_slave_1: entered promiscuous mode [ 99.460517][ T6213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.467511][ T6213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.495433][ T6213] team0: Port device team_slave_0 added [ 99.500424][ T6213] team0: Port device team_slave_1 added [ 99.524121][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.527416][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.539310][ T6213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.545895][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.549559][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.561499][ T6213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.608416][ T6213] hsr_slave_0: entered promiscuous mode [ 99.611806][ T6213] hsr_slave_1: entered promiscuous mode [ 100.152930][ T6213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.159354][ T6213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.164480][ T6213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.168969][ T6213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.194623][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.197267][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.200656][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.203785][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.243897][ T6213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.253309][ T6213] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.261271][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.266031][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.275438][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.278285][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.290643][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.293861][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.372647][ T40] audit: type=1400 audit(1772664586.586:126): avc: denied { sys_module } for pid=6213 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 100.474481][ T6213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.511344][ T6213] veth0_vlan: entered promiscuous mode [ 100.518919][ T6213] veth1_vlan: entered promiscuous mode [ 100.551698][ T6213] veth0_macvtap: entered promiscuous mode [ 100.557716][ T6213] veth1_macvtap: entered promiscuous mode [ 100.571107][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.591122][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.600790][ T1258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.604175][ T1258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.610422][ T1258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.614558][ T1258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.714134][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.834828][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.868216][ T5288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.872262][ T5288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.875743][ T5288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.887970][ T5288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.891577][ T5288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.929712][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.028994][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.123224][ T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.126227][ T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.142287][ T1258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.145605][ T1258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.502165][ T40] audit: type=1401 audit(1772664587.716:127): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/03/04 22:49:48 executed programs: 0 [ 102.578509][ T6026] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.582782][ T6026] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.586682][ T6026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.592049][ T6026] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.595634][ T6026] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.712464][ T6349] chnl_net:caif_netlink_parms(): no params data found [ 102.770833][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.773993][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.777396][ T6349] bridge_slave_0: entered allmulticast mode [ 102.781050][ T6349] bridge_slave_0: entered promiscuous mode [ 102.785355][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.788851][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.791923][ T6349] bridge_slave_1: entered allmulticast mode [ 102.795529][ T6349] bridge_slave_1: entered promiscuous mode [ 102.815925][ T6349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.821075][ T6349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.840674][ T6349] team0: Port device team_slave_0 added [ 102.843932][ T6349] team0: Port device team_slave_1 added [ 102.857331][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.859747][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.868605][ T6349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.873114][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.875481][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.884686][ T6349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.909788][ T6349] hsr_slave_0: entered promiscuous mode [ 102.912191][ T6349] hsr_slave_1: entered promiscuous mode [ 102.914396][ T6349] debugfs: 'hsr0' already exists in 'hsr' [ 102.916374][ T6349] Cannot create hsr debugfs directory [ 103.845577][ T41] bridge_slave_1: left allmulticast mode [ 103.848807][ T41] bridge_slave_1: left promiscuous mode [ 103.851527][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.856892][ T41] bridge_slave_0: left allmulticast mode [ 103.859728][ T41] bridge_slave_0: left promiscuous mode [ 103.862486][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.074220][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.080246][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.083982][ T41] bond0 (unregistering): Released all slaves [ 104.234114][ T41] hsr_slave_0: left promiscuous mode [ 104.236432][ T41] hsr_slave_1: left promiscuous mode [ 104.238721][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.241218][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.244815][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.247396][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.252806][ T41] veth1_macvtap: left promiscuous mode [ 104.254789][ T41] veth0_macvtap: left promiscuous mode [ 104.256695][ T41] veth1_vlan: left promiscuous mode [ 104.258659][ T41] veth0_vlan: left promiscuous mode [ 104.377648][ T41] team0 (unregistering): Port device team_slave_1 removed [ 104.384892][ T41] team0 (unregistering): Port device team_slave_0 removed [ 104.637132][ T6026] Bluetooth: hci0: command tx timeout [ 104.724116][ T6349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.733676][ T6349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.739851][ T6349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.747536][ T6349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.792703][ T6349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.804014][ T6349] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.811580][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.814204][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.822296][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.825332][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.232913][ T6349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.269265][ T6349] veth0_vlan: entered promiscuous mode [ 105.276945][ T6349] veth1_vlan: entered promiscuous mode [ 105.313440][ T6349] veth0_macvtap: entered promiscuous mode [ 105.320021][ T6349] veth1_macvtap: entered promiscuous mode [ 105.332956][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.348944][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.356817][ T179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.363195][ T179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.366767][ T179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.371291][ T179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.451494][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.455107][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.476516][ T1258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.481201][ T1258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.527563][ T40] audit: type=1400 audit(1772664591.736:128): avc: denied { read write } for pid=6387 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.538233][ T40] audit: type=1400 audit(1772664591.736:129): avc: denied { open } for pid=6387 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.548943][ T40] audit: type=1400 audit(1772664591.736:130): avc: denied { ioctl } for pid=6387 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.777192][ T6086] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 105.929690][ T6086] usb 5-1: not running at top speed; connect to a high speed hub [ 105.934162][ T6086] usb 5-1: config 1 has an invalid interface number: 78 but max is 0 [ 105.937579][ T6086] usb 5-1: config 1 has no interface number 0 [ 105.939625][ T6086] usb 5-1: config 1 interface 78 has no altsetting 0 [ 105.944084][ T6086] usb 5-1: string descriptor 0 read error: -22 [ 105.946228][ T6086] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 105.950264][ T6086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.964807][ T6086] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 105.969359][ T6086] usb 5-1: selecting invalid altsetting 0 [ 106.183400][ T2488] pvrusb2: Invalid read control endpoint [ 106.186197][ T2488] ------------[ cut here ]------------ [ 106.188766][ T2488] URB ffff8880363ccd00 submitted while active [ 106.191536][ T2488] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#2: pvrusb2-context/2488 [ 106.195900][ T2488] Modules linked in: [ 106.198425][ T2488] CPU: 2 UID: 0 PID: 2488 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 106.202445][ T2488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.206843][ T2488] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 106.209657][ T2488] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d 77 b8 fa 48 8d 3d 36 fe 95 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 106.218042][ T2488] RSP: 0018:ffffc9000d99ed68 EFLAGS: 00010293 [ 106.220772][ T2488] RAX: 0000000000000000 RBX: ffff8880363ccd00 RCX: ffffffff88293261 [ 106.224307][ T2488] RDX: ffff88802fe40000 RSI: ffff8880363ccd00 RDI: ffffffff90e63c50 [ 106.227997][ T2488] RBP: 0000000000000005 R08: 0000000000000005 R09: 0000000000000000 [ 106.231551][ T2488] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 106.235047][ T2488] R13: 00000000c0008200 R14: ffff88802f395000 R15: ffff88802b7d9628 [ 106.238771][ T2488] FS: 0000000000000000(0000) GS:ffff8880d6545000(0000) knlGS:0000000000000000 [ 106.242757][ T2488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.245779][ T2488] CR2: 00007fce47f476d4 CR3: 00000000358a5000 CR4: 0000000000352ef0 [ 106.249431][ T2488] Call Trace: [ 106.250668][ T2488] [ 106.251705][ T2488] ? lockdep_init_map_type+0x5c/0x250 [ 106.253957][ T2488] ? lockdep_init_map_type+0x5c/0x250 [ 106.256442][ T2488] ? timer_init_key_on_stack+0xdc/0x120 [ 106.259017][ T2488] pvr2_send_request_ex+0x7ed/0x1ea0 [ 106.261132][ T2488] ? __pfx_pvr2_send_request_ex+0x10/0x10 [ 106.262949][ T2488] ? __pfx___mutex_lock+0x10/0x10 [ 106.264558][ T2488] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 106.266370][ T2488] ? __kasan_check_byte+0x13/0x50 [ 106.268275][ T2488] pvr2_send_request+0x3a/0x50 [ 106.270509][ T2488] pvr2_i2c_read+0x20c/0x670 [ 106.272634][ T2488] pvr2_i2c_basic_op+0xa4/0x100 [ 106.274868][ T2488] pvr2_i2c_xfer+0x380/0xb50 [ 106.277114][ T2488] ? __pfx_pvr2_i2c_basic_op+0x10/0x10 [ 106.279039][ T2488] ? ret_from_fork_asm+0x1a/0x30 [ 106.280800][ T2488] __i2c_transfer+0x5d9/0x17f0 [ 106.282465][ T2488] ? __pfx___i2c_transfer+0x10/0x10 [ 106.284458][ T2488] ? check_noncircular+0x97/0x160 [ 106.286587][ T2488] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 106.289055][ T2488] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 106.291637][ T2488] ? ww_mutex_trylock+0x610/0xd00 [ 106.293966][ T2488] __i2c_smbus_xfer+0x5b7/0x1080 [ 106.296264][ T2488] ? mark_held_locks+0x40/0x70 [ 106.298581][ T2488] ? lockdep_hardirqs_on+0x78/0x100 [ 106.301053][ T2488] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 106.303582][ T2488] ? rt_mutex_slowtrylock+0x93/0x100 [ 106.306089][ T2488] i2c_smbus_xfer+0x185/0x3c0 [ 106.307987][ T2488] i2c_smbus_read_byte_data+0x135/0x1e0 [ 106.309802][ T2488] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10 [ 106.312497][ T2488] saa711x_probe+0x1e1/0x870 [ 106.314615][ T2488] ? __pfx_saa711x_probe+0x10/0x10 [ 106.316861][ T2488] ? dput.part.0+0xdd/0x570 [ 106.318691][ T2488] ? dput+0x24/0x30 [ 106.320088][ T2488] ? __pfx_saa711x_probe+0x10/0x10 [ 106.321833][ T2488] i2c_device_probe+0x658/0xd10 [ 106.323512][ T2488] ? kernfs_put+0x3f/0x60 [ 106.325075][ T2488] ? __pfx_i2c_device_probe+0x10/0x10 [ 106.326840][ T2488] ? sysfs_create_link+0x68/0xc0 [ 106.328662][ T2488] ? __pfx_i2c_device_probe+0x10/0x10 [ 106.330474][ T2488] really_probe+0x241/0xa60 [ 106.332059][ T2488] __driver_probe_device+0x1de/0x400 [ 106.333918][ T2488] driver_probe_device+0x4c/0x1b0 [ 106.335709][ T2488] __device_attach_driver+0x1ff/0x3e0 [ 106.337638][ T2488] ? __pfx___device_attach_driver+0x10/0x10 [ 106.339637][ T2488] bus_for_each_drv+0x159/0x1e0 [ 106.341285][ T2488] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.343101][ T2488] ? lockdep_hardirqs_on+0x78/0x100 [ 106.345161][ T2488] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.347424][ T2488] __device_attach+0x1e4/0x4d0 [ 106.349114][ T2488] ? __pfx___device_attach+0x10/0x10 [ 106.351024][ T2488] ? do_raw_spin_unlock+0x145/0x1e0 [ 106.352865][ T2488] device_initial_probe+0xaf/0xd0 [ 106.354757][ T2488] bus_probe_device+0x64/0x160 [ 106.356398][ T2488] device_add+0x11d9/0x1950 [ 106.358238][ T2488] ? __pfx_device_add+0x10/0x10 [ 106.360280][ T2488] ? lockdep_init_map_type+0x5c/0x250 [ 106.362533][ T2488] ? __init_waitqueue_head+0xca/0x150 [ 106.364909][ T2488] i2c_new_client_device+0x660/0xd30 [ 106.367249][ T2488] v4l2_i2c_new_subdev_board+0xb6/0x2b0 [ 106.369276][ T2488] v4l2_i2c_new_subdev+0x13e/0x190 [ 106.369400][ T6086] usb 5-1: USB disconnect, device number 2 [ 106.371333][ T2488] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10 [ 106.375624][ T2488] ? __pfx_pvr2_context_notify+0x10/0x10 [ 106.377571][ T2488] pvr2_hdw_initialize+0x2158/0x3710 [ 106.379385][ T2488] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 106.381234][ T2488] ? __pfx___schedule+0x10/0x10 [ 106.383052][ T2488] ? find_held_lock+0x2b/0x80 [ 106.385210][ T2488] ? schedule+0x2bf/0x390 [ 106.387285][ T2488] ? kthread+0x13a/0x450 [ 106.389213][ T2488] pvr2_context_thread_func+0x253/0x920 [ 106.391685][ T2488] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 106.394380][ T2488] ? rcu_is_watching+0x12/0xc0 [ 106.396574][ T2488] ? __pfx_autoremove_wake_function+0x10/0x10 [ 106.399517][ T2488] ? __kthread_parkme+0x18c/0x230 [ 106.401814][ T2488] ? kthread+0x13a/0x450 [ 106.403658][ T2488] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 106.406363][ T2488] kthread+0x370/0x450 [ 106.408346][ T2488] ? __pfx_kthread+0x10/0x10 [ 106.410316][ T2488] ret_from_fork+0x754/0xd80 [ 106.411881][ T2488] ? __pfx_ret_from_fork+0x10/0x10 [ 106.413578][ T2488] ? __switch_to+0x7b4/0x1120 [ 106.415162][ T2488] ? __pfx_kthread+0x10/0x10 [ 106.416753][ T2488] ret_from_fork_asm+0x1a/0x30 [ 106.418509][ T2488] [ 106.419582][ T2488] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.421970][ T2488] CPU: 2 UID: 0 PID: 2488 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 106.425503][ T2488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.428903][ T2488] Call Trace: [ 106.430013][ T2488] [ 106.430990][ T2488] dump_stack_lvl+0x100/0x190 [ 106.432623][ T2488] vpanic+0x552/0x970 [ 106.433975][ T2488] ? __pfx_vpanic+0x10/0x10 [ 106.435634][ T2488] panic+0xd1/0xe0 [ 106.437119][ T2488] ? __pfx_panic+0x10/0x10 [ 106.438702][ T2488] ? check_panic_on_warn+0x1f/0x90 [ 106.440616][ T2488] check_panic_on_warn.cold+0x19/0x34 [ 106.442993][ T2488] ? usb_submit_urb+0x15fa/0x1910 [ 106.445215][ T2488] __warn.cold+0x191/0x348 [ 106.447297][ T2488] __report_bug+0x296/0x3d0 [ 106.449445][ T2488] ? usb_submit_urb+0x15fa/0x1910 [ 106.451693][ T2488] ? __pfx___report_bug+0x10/0x10 [ 106.453966][ T2488] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 106.456409][ T2488] ? pvr2_send_request_ex+0x7b1/0x1ea0 [ 106.458493][ T2488] ? do_raw_spin_lock+0x128/0x260 [ 106.460202][ T2488] report_bug_entry+0xe1/0x290 [ 106.461914][ T2488] ? usb_submit_urb+0x15fd/0x1910 [ 106.464143][ T2488] handle_bug+0x1cd/0x2a0 [ 106.465964][ T2488] exc_invalid_op+0x17/0x50 [ 106.468024][ T2488] asm_exc_invalid_op+0x1a/0x20 [ 106.470168][ T2488] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 106.472664][ T2488] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d 77 b8 fa 48 8d 3d 36 fe 95 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 106.481072][ T2488] RSP: 0018:ffffc9000d99ed68 EFLAGS: 00010293 [ 106.483754][ T2488] RAX: 0000000000000000 RBX: ffff8880363ccd00 RCX: ffffffff88293261 [ 106.487292][ T2488] RDX: ffff88802fe40000 RSI: ffff8880363ccd00 RDI: ffffffff90e63c50 [ 106.490763][ T2488] RBP: 0000000000000005 R08: 0000000000000005 R09: 0000000000000000 [ 106.494101][ T2488] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 106.497517][ T2488] R13: 00000000c0008200 R14: ffff88802f395000 R15: ffff88802b7d9628 [ 106.500724][ T2488] ? pvr2_send_request_ex+0x7b1/0x1ea0 [ 106.502905][ T2488] ? usb_submit_urb+0x15f3/0x1910 [ 106.505200][ T2488] ? lockdep_init_map_type+0x5c/0x250 [ 106.507636][ T2488] ? lockdep_init_map_type+0x5c/0x250 [ 106.510061][ T2488] ? timer_init_key_on_stack+0xdc/0x120 [ 106.512597][ T2488] pvr2_send_request_ex+0x7ed/0x1ea0 [ 106.515029][ T2488] ? __pfx_pvr2_send_request_ex+0x10/0x10 [ 106.517607][ T2488] ? __pfx___mutex_lock+0x10/0x10 [ 106.519681][ T2488] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 106.521837][ T2488] ? __kasan_check_byte+0x13/0x50 [ 106.523610][ T2488] pvr2_send_request+0x3a/0x50 [ 106.525392][ T2488] pvr2_i2c_read+0x20c/0x670 [ 106.526975][ T2488] pvr2_i2c_basic_op+0xa4/0x100 [ 106.528774][ T2488] pvr2_i2c_xfer+0x380/0xb50 [ 106.530329][ T2488] ? __pfx_pvr2_i2c_basic_op+0x10/0x10 [ 106.532485][ T2488] ? ret_from_fork_asm+0x1a/0x30 [ 106.534481][ T2488] __i2c_transfer+0x5d9/0x17f0 [ 106.536265][ T2488] ? __pfx___i2c_transfer+0x10/0x10 [ 106.538581][ T2488] ? check_noncircular+0x97/0x160 [ 106.540750][ T2488] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 106.543174][ T2488] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 106.545544][ T2488] ? ww_mutex_trylock+0x610/0xd00 [ 106.547871][ T2488] __i2c_smbus_xfer+0x5b7/0x1080 [ 106.550128][ T2488] ? mark_held_locks+0x40/0x70 [ 106.552300][ T2488] ? lockdep_hardirqs_on+0x78/0x100 [ 106.554655][ T2488] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 106.556980][ T2488] ? rt_mutex_slowtrylock+0x93/0x100 [ 106.558969][ T2488] i2c_smbus_xfer+0x185/0x3c0 [ 106.560590][ T2488] i2c_smbus_read_byte_data+0x135/0x1e0 [ 106.562512][ T2488] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10 [ 106.565034][ T2488] saa711x_probe+0x1e1/0x870 [ 106.567121][ T2488] ? __pfx_saa711x_probe+0x10/0x10 [ 106.569349][ T2488] ? dput.part.0+0xdd/0x570 [ 106.571212][ T2488] ? dput+0x24/0x30 [ 106.572604][ T2488] ? __pfx_saa711x_probe+0x10/0x10 [ 106.574693][ T2488] i2c_device_probe+0x658/0xd10 [ 106.576522][ T2488] ? kernfs_put+0x3f/0x60 [ 106.578014][ T2488] ? __pfx_i2c_device_probe+0x10/0x10 [ 106.579795][ T2488] ? sysfs_create_link+0x68/0xc0 [ 106.581460][ T2488] ? __pfx_i2c_device_probe+0x10/0x10 [ 106.583294][ T2488] really_probe+0x241/0xa60 [ 106.584910][ T2488] __driver_probe_device+0x1de/0x400 [ 106.587305][ T2488] driver_probe_device+0x4c/0x1b0 [ 106.589643][ T2488] __device_attach_driver+0x1ff/0x3e0 [ 106.592112][ T2488] ? __pfx___device_attach_driver+0x10/0x10 [ 106.594570][ T2488] bus_for_each_drv+0x159/0x1e0 [ 106.596346][ T2488] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.598531][ T2488] ? lockdep_hardirqs_on+0x78/0x100 [ 106.600496][ T2488] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.602808][ T2488] __device_attach+0x1e4/0x4d0 [ 106.604468][ T2488] ? __pfx___device_attach+0x10/0x10 [ 106.606360][ T2488] ? do_raw_spin_unlock+0x145/0x1e0 [ 106.608507][ T2488] device_initial_probe+0xaf/0xd0 [ 106.610235][ T2488] bus_probe_device+0x64/0x160 [ 106.611862][ T2488] device_add+0x11d9/0x1950 [ 106.613461][ T2488] ? __pfx_device_add+0x10/0x10 [ 106.615112][ T2488] ? lockdep_init_map_type+0x5c/0x250 [ 106.617065][ T2488] ? __init_waitqueue_head+0xca/0x150 [ 106.619193][ T2488] i2c_new_client_device+0x660/0xd30 [ 106.621054][ T2488] v4l2_i2c_new_subdev_board+0xb6/0x2b0 [ 106.623292][ T2488] v4l2_i2c_new_subdev+0x13e/0x190 [ 106.625464][ T2488] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10 [ 106.627478][ T2488] ? __pfx_pvr2_context_notify+0x10/0x10 [ 106.629462][ T2488] pvr2_hdw_initialize+0x2158/0x3710 [ 106.631216][ T2488] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 106.633099][ T2488] ? __pfx___schedule+0x10/0x10 [ 106.634761][ T2488] ? find_held_lock+0x2b/0x80 [ 106.636439][ T2488] ? schedule+0x2bf/0x390 [ 106.638015][ T2488] ? kthread+0x13a/0x450 [ 106.639877][ T2488] pvr2_context_thread_func+0x253/0x920 [ 106.641691][ T2488] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 106.644033][ T2488] ? rcu_is_watching+0x12/0xc0 [ 106.645950][ T2488] ? __pfx_autoremove_wake_function+0x10/0x10 [ 106.648128][ T2488] ? __kthread_parkme+0x18c/0x230 [ 106.649657][ T2488] ? kthread+0x13a/0x450 [ 106.651332][ T2488] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 106.653857][ T2488] kthread+0x370/0x450 [ 106.655285][ T2488] ? __pfx_kthread+0x10/0x10 [ 106.656807][ T2488] ret_from_fork+0x754/0xd80 [ 106.658635][ T2488] ? __pfx_ret_from_fork+0x10/0x10 [ 106.660839][ T2488] ? __switch_to+0x7b4/0x1120 [ 106.662928][ T2488] ? __pfx_kthread+0x10/0x10 [ 106.664995][ T2488] ret_from_fork_asm+0x1a/0x30 [ 106.667126][ T2488] [ 106.669349][ T2488] Kernel Offset: disabled [ 106.670883][ T2488] Rebooting in 86400 seconds..