Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. 2025/08/19 23:34:21 ignoring optional flag "sandboxArg"="0" 2025/08/19 23:34:22 parsed 1 programs [ 92.269296][ T6193] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.538100][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.547873][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.555668][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.564444][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.572323][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.713133][ T275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.721263][ T275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.736007][ T275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.743973][ T275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.048326][ T6259] chnl_net:caif_netlink_parms(): no params data found [ 96.085053][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.092689][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.099998][ T6259] bridge_slave_0: entered allmulticast mode [ 96.106710][ T6259] bridge_slave_0: entered promiscuous mode [ 96.114224][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.121516][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.128727][ T6259] bridge_slave_1: entered allmulticast mode [ 96.135473][ T6259] bridge_slave_1: entered promiscuous mode [ 96.156432][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.167576][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.199884][ T6259] team0: Port device team_slave_0 added [ 96.207756][ T6259] team0: Port device team_slave_1 added [ 96.223170][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.230224][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.257159][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.269326][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.276494][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.302894][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.330043][ T6259] hsr_slave_0: entered promiscuous mode [ 96.336189][ T6259] hsr_slave_1: entered promiscuous mode [ 96.606192][ T6259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.617081][ T6259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.626611][ T6259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.637240][ T6259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.660616][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.667772][ T6259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.675191][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.682335][ T6259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.729801][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.745972][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.754731][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.766841][ T6259] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.778637][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.785866][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.816123][ T6259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.828164][ T6259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.845705][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.852930][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.985126][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.017847][ T6259] veth0_vlan: entered promiscuous mode [ 97.033416][ T6259] veth1_vlan: entered promiscuous mode [ 97.064121][ T6259] veth0_macvtap: entered promiscuous mode [ 97.073573][ T6259] veth1_macvtap: entered promiscuous mode [ 97.089014][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.103082][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.116294][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.126083][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.146847][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.167377][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.231673][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.290135][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.368802][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.426054][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/19 23:34:31 executed programs: 0 [ 97.978729][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.989733][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.998701][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.006669][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.014190][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.150698][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 98.215402][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.225793][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.234546][ T6369] bridge_slave_0: entered allmulticast mode [ 98.242004][ T6369] bridge_slave_0: entered promiscuous mode [ 98.253323][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.260550][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.268393][ T6369] bridge_slave_1: entered allmulticast mode [ 98.276468][ T6369] bridge_slave_1: entered promiscuous mode [ 98.303732][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.318600][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.347452][ T6369] team0: Port device team_slave_0 added [ 98.356290][ T6369] team0: Port device team_slave_1 added [ 98.382444][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.389530][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.417330][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.432079][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.439147][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.466352][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.515624][ T6369] hsr_slave_0: entered promiscuous mode [ 98.522901][ T6369] hsr_slave_1: entered promiscuous mode [ 98.529126][ T6369] debugfs: 'hsr0' already exists in 'hsr' [ 98.535860][ T6369] Cannot create hsr debugfs directory [ 99.996105][ T64] bridge_slave_1: left allmulticast mode [ 100.003659][ T64] bridge_slave_1: left promiscuous mode [ 100.009376][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.018803][ T64] bridge_slave_0: left allmulticast mode [ 100.025743][ T64] bridge_slave_0: left promiscuous mode [ 100.032319][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.074300][ T51] Bluetooth: hci0: command tx timeout [ 100.155731][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.166800][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.178256][ T64] bond0 (unregistering): Released all slaves [ 100.311667][ T64] hsr_slave_0: left promiscuous mode [ 100.317670][ T64] hsr_slave_1: left promiscuous mode [ 100.324515][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.332521][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.340628][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.352973][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.364150][ T64] veth1_macvtap: left promiscuous mode [ 100.369699][ T64] veth0_macvtap: left promiscuous mode [ 100.376330][ T64] veth1_vlan: left promiscuous mode [ 100.381790][ T64] veth0_vlan: left promiscuous mode [ 100.521717][ T64] team0 (unregistering): Port device team_slave_1 removed [ 100.546149][ T64] team0 (unregistering): Port device team_slave_0 removed [ 100.714646][ T6369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.724339][ T6369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.736481][ T6369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.745993][ T6369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.829189][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.846749][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.857861][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.865025][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.887508][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.894663][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.916280][ T6369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.927717][ T6369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.180030][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.246886][ T6369] veth0_vlan: entered promiscuous mode [ 101.270587][ T6369] veth1_vlan: entered promiscuous mode [ 101.291635][ T6369] veth0_macvtap: entered promiscuous mode [ 101.299667][ T6369] veth1_macvtap: entered promiscuous mode [ 101.312140][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.324006][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.334823][ T4220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.343869][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.355771][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.364853][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.395387][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.405833][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.420291][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.428933][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.691128][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 101.842159][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 101.851447][ T10] usb 1-1: config 1 has an invalid interface number: 78 but max is 0 [ 101.859642][ T10] usb 1-1: config 1 has no interface number 0 [ 101.866061][ T10] usb 1-1: config 1 interface 78 has no altsetting 0 [ 101.874825][ T10] usb 1-1: string descriptor 0 read error: -22 [ 101.881334][ T10] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 101.890363][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.903904][ T10] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 101.912637][ T10] usb 1-1: selecting invalid altsetting 0 [ 102.119129][ T2339] pvrusb2: Invalid read control endpoint [ 102.125145][ T2339] ------------[ cut here ]------------ [ 102.130620][ T2339] URB ffff88802686c100 submitted while active [ 102.137571][ T2339] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0xfc1/0x1830, CPU#0: pvrusb2-context/2339 [ 102.148236][ T2339] Modules linked in: [ 102.152443][ T2339] CPU: 0 UID: 0 PID: 2339 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 102.154094][ T51] Bluetooth: hci0: command tx timeout [ 102.162455][ T2339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.162474][ T2339] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 102.162505][ T2339] Code: 44 89 f2 e8 e1 54 f6 f9 e9 13 fc ff ff e8 a7 6e 89 fa c6 05 da 67 98 08 01 90 48 c7 c7 a0 6f 56 8c 48 89 de e8 10 12 4d fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 81 6e 89 fa eb 11 e8 7a 6e 89 fa bd [ 102.162519][ T2339] RSP: 0018:ffffc90004a968f0 EFLAGS: 00010246 [ 102.162536][ T2339] RAX: 027230423bacf500 RBX: ffff88802686c100 RCX: ffff888029a28000 [ 102.162549][ T2339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 102.225807][ T2339] RBP: ffffc90004a96b40 R08: 0000000000000003 R09: 0000000000000004 [ 102.233941][ T2339] R10: dffffc0000000000 R11: fffffbfff1c7a1ec R12: dffffc0000000000 [ 102.242161][ T2339] R13: ffff88803335d5f8 R14: ffff88802686c108 R15: 0000000000000cc0 [ 102.250370][ T2339] FS: 0000000000000000(0000) GS:ffff8881257cf000(0000) knlGS:0000000000000000 [ 102.259402][ T2339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.266068][ T2339] CR2: 00007fb01ee86e9c CR3: 000000000e336000 CR4: 00000000003526f0 [ 102.274195][ T2339] Call Trace: [ 102.277490][ T2339] [ 102.280421][ T2339] ? timer_init_key_on_stack+0xd9/0x110 [ 102.286020][ T2339] pvr2_send_request_ex+0xc33/0x2020 [ 102.291345][ T2339] ? __pfx_pvr2_send_request_ex+0x10/0x10 [ 102.297074][ T2339] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 102.302750][ T2339] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 102.305900][ T3092] usb 1-1: USB disconnect, device number 2 [ 102.308177][ T2339] pvr2_send_request+0x38/0x50 [ 102.319110][ T2339] pvr2_i2c_basic_op+0x44e/0x930 [ 102.324340][ T2339] pvr2_i2c_xfer+0x9e0/0xda0 [ 102.329128][ T2339] ? __pfx_pvr2_i2c_basic_op+0x10/0x10 [ 102.334688][ T2339] __i2c_transfer+0x874/0x2170 [ 102.339556][ T2339] ? rcu_is_watching+0x15/0xb0 [ 102.344358][ T2339] ? __pfx___i2c_transfer+0x10/0x10 [ 102.349570][ T2339] ? rcu_is_watching+0x15/0xb0 [ 102.354384][ T2339] __i2c_smbus_xfer+0xfb0/0x1e50 [ 102.359330][ T2339] ? do_raw_spin_lock+0x121/0x290 [ 102.364396][ T2339] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 102.369778][ T2339] ? rcu_is_watching+0x15/0xb0 [ 102.374608][ T2339] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 102.380508][ T2339] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 102.386964][ T2339] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 102.392481][ T2339] i2c_smbus_xfer+0x275/0x3c0 [ 102.397208][ T2339] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 102.402455][ T2339] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 102.408533][ T2339] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 102.414962][ T2339] i2c_smbus_read_byte_data+0xfe/0x1c0 [ 102.420450][ T2339] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10 [ 102.426750][ T2339] ? do_raw_spin_lock+0x121/0x290 [ 102.431810][ T2339] saa711x_probe+0x1c1/0x1570 [ 102.436656][ T2339] ? rcu_is_watching+0x10/0xb0 [ 102.441472][ T2339] ? __pfx_saa711x_probe+0x10/0x10 [ 102.446634][ T2339] ? inc_nlink+0x4d/0x150 [ 102.451018][ T2339] ? debugfs_create_dir+0x37f/0x420 [ 102.456232][ T2339] i2c_device_probe+0x906/0xc10 [ 102.461207][ T2339] ? __pfx_i2c_device_probe+0x10/0x10 [ 102.466652][ T2339] ? driver_sysfs_add+0x1fe/0x210 [ 102.471792][ T2339] ? __pfx_i2c_device_probe+0x10/0x10 [ 102.477188][ T2339] really_probe+0x26d/0x9e0 [ 102.481738][ T2339] __driver_probe_device+0x18c/0x2f0 [ 102.487087][ T2339] driver_probe_device+0x4f/0x430 [ 102.492172][ T2339] __device_attach_driver+0x2ce/0x530 [ 102.497733][ T2339] bus_for_each_drv+0x24e/0x2e0 [ 102.502637][ T2339] ? __pfx___device_attach_driver+0x10/0x10 [ 102.508530][ T2339] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.514106][ T2339] __device_attach+0x2b8/0x400 [ 102.518984][ T2339] ? __pfx___device_attach+0x10/0x10 [ 102.524451][ T2339] ? do_raw_spin_unlock+0x122/0x240 [ 102.529680][ T2339] bus_probe_device+0x185/0x260 [ 102.534749][ T2339] device_add+0x7b6/0xb50 [ 102.539082][ T2339] i2c_new_client_device+0xa11/0x1120 [ 102.544564][ T2339] ? __pfx___request_module+0x10/0x10 [ 102.549942][ T2339] ? __pfx_i2c_new_client_device+0x10/0x10 [ 102.555954][ T2339] ? idr_alloc+0x89/0xd0 [ 102.560310][ T2339] v4l2_i2c_new_subdev_board+0x86/0x250 [ 102.565935][ T2339] v4l2_i2c_new_subdev+0x14a/0x1e0 [ 102.571128][ T2339] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10 [ 102.576789][ T2339] ? finish_task_switch+0x18b/0x950 [ 102.582076][ T2339] ? rcu_is_watching+0x15/0xb0 [ 102.586855][ T2339] pvr2_hdw_initialize+0xe18/0x3ac0 [ 102.592102][ T2339] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 102.597752][ T2339] ? rcu_is_watching+0x15/0xb0 [ 102.602573][ T2339] ? trace_contention_end+0x39/0x120 [ 102.607867][ T2339] ? rcu_is_watching+0x15/0xb0 [ 102.612674][ T2339] ? lock_release+0x4b/0x3e0 [ 102.617284][ T2339] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 102.623132][ T2339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.629318][ T2339] ? schedule+0x16f/0x360 [ 102.634028][ T2339] pvr2_context_thread_func+0x487/0xaf0 [ 102.639589][ T2339] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 102.645734][ T2339] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 102.651746][ T2339] ? __pfx_autoremove_wake_function+0x10/0x10 [ 102.657849][ T2339] ? lock_release+0x4b/0x3e0 [ 102.662482][ T2339] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 102.668486][ T2339] ? __kthread_parkme+0x7b/0x200 [ 102.673455][ T2339] ? __kthread_parkme+0x1a1/0x200 [ 102.678507][ T2339] kthread+0x70e/0x8a0 [ 102.682608][ T2339] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 102.688768][ T2339] ? __pfx_kthread+0x10/0x10 [ 102.693413][ T2339] ? rcu_is_watching+0x15/0xb0 [ 102.698187][ T2339] ? __pfx_kthread+0x10/0x10 [ 102.702807][ T2339] ret_from_fork+0x3f9/0x770 [ 102.707412][ T2339] ? __pfx_ret_from_fork+0x10/0x10 [ 102.712584][ T2339] ? __switch_to_asm+0x39/0x70 [ 102.717437][ T2339] ? __switch_to_asm+0x33/0x70 [ 102.722701][ T2339] ? __pfx_kthread+0x10/0x10 [ 102.727314][ T2339] ret_from_fork_asm+0x1a/0x30 [ 102.732285][ T2339] [ 102.735330][ T2339] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.742602][ T2339] CPU: 0 UID: 0 PID: 2339 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 102.752394][ T2339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.762482][ T2339] Call Trace: [ 102.765770][ T2339] [ 102.768687][ T2339] dump_stack_lvl+0x99/0x250 [ 102.773359][ T2339] ? __asan_memcpy+0x40/0x70 [ 102.777957][ T2339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.783145][ T2339] ? __pfx__printk+0x10/0x10 [ 102.787857][ T2339] vpanic+0x281/0x750 [ 102.791842][ T2339] ? __pfx__printk+0x10/0x10 [ 102.796441][ T2339] ? __pfx_vpanic+0x10/0x10 [ 102.800947][ T2339] ? is_bpf_text_address+0x292/0x2b0 [ 102.806231][ T2339] ? is_bpf_text_address+0x26/0x2b0 [ 102.811451][ T2339] panic+0xb9/0xc0 [ 102.815175][ T2339] ? __pfx_panic+0x10/0x10 [ 102.819758][ T2339] __warn+0x334/0x4c0 [ 102.823729][ T2339] ? usb_submit_urb+0xfc1/0x1830 [ 102.828672][ T2339] ? usb_submit_urb+0xfc1/0x1830 [ 102.833598][ T2339] report_bug+0x2be/0x4f0 [ 102.837919][ T2339] ? usb_submit_urb+0xfc1/0x1830 [ 102.842877][ T2339] ? usb_submit_urb+0xfc1/0x1830 [ 102.847809][ T2339] ? usb_submit_urb+0xfc3/0x1830 [ 102.852746][ T2339] handle_bug+0x84/0x160 [ 102.856975][ T2339] exc_invalid_op+0x1a/0x50 [ 102.861567][ T2339] asm_exc_invalid_op+0x1a/0x20 [ 102.866403][ T2339] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 102.871941][ T2339] Code: 44 89 f2 e8 e1 54 f6 f9 e9 13 fc ff ff e8 a7 6e 89 fa c6 05 da 67 98 08 01 90 48 c7 c7 a0 6f 56 8c 48 89 de e8 10 12 4d fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 81 6e 89 fa eb 11 e8 7a 6e 89 fa bd [ 102.891531][ T2339] RSP: 0018:ffffc90004a968f0 EFLAGS: 00010246 [ 102.897595][ T2339] RAX: 027230423bacf500 RBX: ffff88802686c100 RCX: ffff888029a28000 [ 102.905551][ T2339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 102.913505][ T2339] RBP: ffffc90004a96b40 R08: 0000000000000003 R09: 0000000000000004 [ 102.921462][ T2339] R10: dffffc0000000000 R11: fffffbfff1c7a1ec R12: dffffc0000000000 [ 102.929427][ T2339] R13: ffff88803335d5f8 R14: ffff88802686c108 R15: 0000000000000cc0 [ 102.937406][ T2339] ? timer_init_key_on_stack+0xd9/0x110 [ 102.942954][ T2339] pvr2_send_request_ex+0xc33/0x2020 [ 102.948255][ T2339] ? __pfx_pvr2_send_request_ex+0x10/0x10 [ 102.954020][ T2339] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 102.959649][ T2339] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 102.965034][ T2339] pvr2_send_request+0x38/0x50 [ 102.969798][ T2339] pvr2_i2c_basic_op+0x44e/0x930 [ 102.974725][ T2339] pvr2_i2c_xfer+0x9e0/0xda0 [ 102.979389][ T2339] ? __pfx_pvr2_i2c_basic_op+0x10/0x10 [ 102.984848][ T2339] __i2c_transfer+0x874/0x2170 [ 102.989612][ T2339] ? rcu_is_watching+0x15/0xb0 [ 102.994378][ T2339] ? __pfx___i2c_transfer+0x10/0x10 [ 102.999584][ T2339] ? rcu_is_watching+0x15/0xb0 [ 103.004342][ T2339] __i2c_smbus_xfer+0xfb0/0x1e50 [ 103.009273][ T2339] ? do_raw_spin_lock+0x121/0x290 [ 103.014407][ T2339] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 103.020031][ T2339] ? rcu_is_watching+0x15/0xb0 [ 103.024801][ T2339] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 103.030712][ T2339] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 103.037047][ T2339] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 103.042459][ T2339] i2c_smbus_xfer+0x275/0x3c0 [ 103.047134][ T2339] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 103.052333][ T2339] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 103.058389][ T2339] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 103.064645][ T2339] i2c_smbus_read_byte_data+0xfe/0x1c0 [ 103.070183][ T2339] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10 [ 103.076238][ T2339] ? do_raw_spin_lock+0x121/0x290 [ 103.081252][ T2339] saa711x_probe+0x1c1/0x1570 [ 103.085952][ T2339] ? rcu_is_watching+0x10/0xb0 [ 103.090705][ T2339] ? __pfx_saa711x_probe+0x10/0x10 [ 103.095808][ T2339] ? inc_nlink+0x4d/0x150 [ 103.100134][ T2339] ? debugfs_create_dir+0x37f/0x420 [ 103.105335][ T2339] i2c_device_probe+0x906/0xc10 [ 103.110204][ T2339] ? __pfx_i2c_device_probe+0x10/0x10 [ 103.115562][ T2339] ? driver_sysfs_add+0x1fe/0x210 [ 103.120584][ T2339] ? __pfx_i2c_device_probe+0x10/0x10 [ 103.125960][ T2339] really_probe+0x26d/0x9e0 [ 103.130457][ T2339] __driver_probe_device+0x18c/0x2f0 [ 103.135738][ T2339] driver_probe_device+0x4f/0x430 [ 103.140759][ T2339] __device_attach_driver+0x2ce/0x530 [ 103.146131][ T2339] bus_for_each_drv+0x24e/0x2e0 [ 103.150980][ T2339] ? __pfx___device_attach_driver+0x10/0x10 [ 103.156980][ T2339] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.162347][ T2339] __device_attach+0x2b8/0x400 [ 103.167123][ T2339] ? __pfx___device_attach+0x10/0x10 [ 103.172487][ T2339] ? do_raw_spin_unlock+0x122/0x240 [ 103.177670][ T2339] bus_probe_device+0x185/0x260 [ 103.182522][ T2339] device_add+0x7b6/0xb50 [ 103.186868][ T2339] i2c_new_client_device+0xa11/0x1120 [ 103.192260][ T2339] ? __pfx___request_module+0x10/0x10 [ 103.197633][ T2339] ? __pfx_i2c_new_client_device+0x10/0x10 [ 103.203434][ T2339] ? idr_alloc+0x89/0xd0 [ 103.207701][ T2339] v4l2_i2c_new_subdev_board+0x86/0x250 [ 103.213242][ T2339] v4l2_i2c_new_subdev+0x14a/0x1e0 [ 103.218391][ T2339] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10 [ 103.224157][ T2339] ? finish_task_switch+0x18b/0x950 [ 103.229365][ T2339] ? rcu_is_watching+0x15/0xb0 [ 103.234128][ T2339] pvr2_hdw_initialize+0xe18/0x3ac0 [ 103.239517][ T2339] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 103.245411][ T2339] ? rcu_is_watching+0x15/0xb0 [ 103.250193][ T2339] ? trace_contention_end+0x39/0x120 [ 103.255579][ T2339] ? rcu_is_watching+0x15/0xb0 [ 103.260349][ T2339] ? lock_release+0x4b/0x3e0 [ 103.264949][ T2339] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 103.270598][ T2339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.276580][ T2339] ? schedule+0x16f/0x360 [ 103.280934][ T2339] pvr2_context_thread_func+0x487/0xaf0 [ 103.286475][ T2339] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 103.292532][ T2339] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 103.298424][ T2339] ? __pfx_autoremove_wake_function+0x10/0x10 [ 103.304659][ T2339] ? lock_release+0x4b/0x3e0 [ 103.309235][ T2339] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 103.315202][ T2339] ? __kthread_parkme+0x7b/0x200 [ 103.320130][ T2339] ? __kthread_parkme+0x1a1/0x200 [ 103.325149][ T2339] kthread+0x70e/0x8a0 [ 103.329208][ T2339] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 103.335266][ T2339] ? __pfx_kthread+0x10/0x10 [ 103.339845][ T2339] ? rcu_is_watching+0x15/0xb0 [ 103.344603][ T2339] ? __pfx_kthread+0x10/0x10 [ 103.349191][ T2339] ret_from_fork+0x3f9/0x770 [ 103.353773][ T2339] ? __pfx_ret_from_fork+0x10/0x10 [ 103.358971][ T2339] ? __switch_to_asm+0x39/0x70 [ 103.363723][ T2339] ? __switch_to_asm+0x33/0x70 [ 103.368499][ T2339] ? __pfx_kthread+0x10/0x10 [ 103.373163][ T2339] ret_from_fork_asm+0x1a/0x30 [ 103.377950][ T2339] [ 103.381227][ T2339] Kernel Offset: disabled [ 103.385534][ T2339] Rebooting in 86400 seconds..