Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. 2024/08/15 12:39:31 ignoring optional flag "sandboxArg"="0" 2024/08/15 12:39:31 parsed 1 programs 2024/08/15 12:39:31 executed programs: 0 [ 63.608931][ T29] audit: type=1400 audit(1723725571.389:107): avc: denied { mounton } for pid=3124 comm="syz-executor.0" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 65.843486][ T29] audit: type=1400 audit(1723725573.619:108): avc: denied { create } for pid=3124 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.865583][ T29] audit: type=1400 audit(1723725573.619:109): avc: denied { write } for pid=3124 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.886576][ T29] audit: type=1400 audit(1723725573.649:110): avc: denied { read } for pid=3124 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.801978][ T29] audit: type=1400 audit(1723725580.579:111): avc: denied { write } for pid=3573 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.825970][ T29] audit: type=1400 audit(1723725580.579:112): avc: denied { ioctl } for pid=3573 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=140 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.064037][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.243847][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 73.251784][ T24] usb 1-1: config 0 has an invalid interface number: 138 but max is 1 [ 73.260535][ T24] usb 1-1: config 0 has no interface number 1 [ 73.266818][ T24] usb 1-1: config 0 interface 138 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 73.278167][ T24] usb 1-1: config 0 interface 138 has no altsetting 0 [ 73.287341][ T24] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=3b.05 [ 73.296667][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.304778][ T24] usb 1-1: Product: syz [ 73.308931][ T24] usb 1-1: Manufacturer: syz [ 73.313511][ T24] usb 1-1: SerialNumber: syz [ 73.321779][ T24] usb 1-1: config 0 descriptor?? [ 73.332093][ T24] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 73.340838][ T24] usb 1-1: selecting invalid altsetting 0 [ 73.351744][ T24] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 73.562839][ T990] pvrusb2: Invalid read control endpoint [ 73.568745][ T990] ------------[ cut here ]------------ [ 73.574309][ T990] URB ffff888113174000 submitted while active [ 73.580651][ T990] WARNING: CPU: 0 PID: 990 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 [ 73.590670][ T990] Modules linked in: [ 73.594644][ T990] CPU: 0 UID: 0 PID: 990 Comm: pvrusb2-context Not tainted 6.11.0-rc3-syzkaller-00046-g82313624b2ae #0 [ 73.606136][ T990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 73.616518][ T990] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 73.622189][ T990] Code: fe eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 fe d1 fe fc c6 05 2d 88 d0 05 01 90 48 c7 c7 c0 05 a0 87 48 89 de e8 b7 cc c4 fc 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 73.641893][ T990] RSP: 0018:ffffc90001d4ee40 EFLAGS: 00010282 [ 73.648342][ T990] RAX: 0000000000000000 RBX: ffff888113174000 RCX: ffffffff81194d49 [ 73.656469][ T990] RDX: ffff88810bf2d700 RSI: ffffffff81194d56 RDI: 0000000000000001 [ 73.664495][ T990] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 73.672487][ T990] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 73.680626][ T990] R13: 00000000c0008200 R14: ffff888115b9c000 R15: ffff88811b811600 [ 73.688927][ T990] FS: 0000000000000000(0000) GS:ffff8881f6200000(0000) knlGS:0000000000000000 [ 73.698019][ T990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.704716][ T990] CR2: 00000000200010c0 CR3: 0000000120d16000 CR4: 00000000003506f0 [ 73.712952][ T990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.721097][ T990] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.729145][ T990] Call Trace: [ 73.732496][ T990] [ 73.735656][ T990] ? show_regs+0x8c/0xa0 [ 73.740057][ T990] ? __warn+0xe5/0x3c0 [ 73.744210][ T990] ? __wake_up_klogd.part.0+0x99/0xf0 [ 73.749396][ T24] usb 1-1: USB disconnect, device number 2 [ 73.749694][ T990] ? usb_submit_urb+0x14da/0x1730 [ 73.760697][ T990] ? report_bug+0x3c0/0x580 [ 73.765450][ T990] ? handle_bug+0x3d/0x70 [ 73.769810][ T990] ? exc_invalid_op+0x17/0x50 [ 73.774630][ T990] ? asm_exc_invalid_op+0x1a/0x20 [ 73.779744][ T990] ? __warn_printk+0x199/0x350 [ 73.784608][ T990] ? __warn_printk+0x1a6/0x350 [ 73.789417][ T990] ? usb_submit_urb+0x14da/0x1730 [ 73.794552][ T990] ? lockdep_init_map_type+0x16d/0x7d0 [ 73.800049][ T990] ? init_timer_on_stack_key+0xdc/0x120 [ 73.805750][ T990] pvr2_send_request_ex+0x7ec/0x1ef0 [ 73.811244][ T990] ? __mutex_lock+0x1a6/0x9c0 [ 73.815981][ T990] ? __pfx_pvr2_send_request_ex+0x10/0x10 [ 73.821787][ T990] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 73.827335][ T990] pvr2_send_request+0x3a/0x50 [ 73.832219][ T990] pvr2_i2c_read+0x203/0x6d0 [ 73.836872][ T990] pvr2_i2c_basic_op+0xcf/0xf0 [ 73.841754][ T990] pvr2_i2c_xfer+0x37a/0xfd0 [ 73.846411][ T990] ? __pfx_pvr2_i2c_basic_op+0x10/0x10 [ 73.852009][ T990] __i2c_transfer+0x69d/0x2140 [ 73.856986][ T990] ? __pfx___i2c_transfer+0x10/0x10 [ 73.862213][ T990] i2c_smbus_xfer_emulated+0x23c/0x1250 [ 73.867832][ T990] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 73.873876][ T990] ? mark_lock+0xb5/0xc60 [ 73.878310][ T990] ? __pfx___lock_acquire+0x10/0x10 [ 73.883558][ T990] ? __pfx_mark_lock+0x10/0x10 [ 73.888557][ T990] ? rt_mutex_unlock+0x24b/0x2a0 [ 73.893525][ T990] ? lock_acquire+0x1b1/0x560 [ 73.898264][ T990] ? find_held_lock+0x2d/0x110 [ 73.903116][ T990] __i2c_smbus_xfer+0x80b/0x1040 [ 73.908212][ T990] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 73.913851][ T990] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.919102][ T990] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.924976][ T990] i2c_smbus_xfer+0x200/0x3c0 [ 73.929881][ T990] i2c_smbus_read_byte_data+0x136/0x1e0 [ 73.935935][ T990] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10 [ 73.942053][ T990] ? __pfx_mark_lock+0x10/0x10 [ 73.946901][ T990] ? lock_acquire+0x1b1/0x560 [ 73.951640][ T990] saa711x_probe+0x233/0x20c0 [ 73.956397][ T990] ? __pfx_saa711x_probe+0x10/0x10 [ 73.961532][ T990] ? mark_held_locks+0x9f/0xe0 [ 73.966345][ T990] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 73.972206][ T990] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.977572][ T990] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.983717][ T990] ? __pfx_saa711x_probe+0x10/0x10 [ 73.988872][ T990] i2c_device_probe+0x4c7/0xb80 [ 73.993784][ T990] ? __pfx_i2c_device_probe+0x10/0x10 [ 73.999185][ T990] ? sysfs_create_link+0x68/0xc0 [ 74.004270][ T990] ? __pfx_i2c_device_probe+0x10/0x10 [ 74.009679][ T990] really_probe+0x23e/0xa90 [ 74.014259][ T990] __driver_probe_device+0x1de/0x440 [ 74.019582][ T990] driver_probe_device+0x4c/0x1b0 [ 74.024753][ T990] __device_attach_driver+0x1df/0x310 [ 74.030152][ T990] ? __pfx___device_attach_driver+0x10/0x10 [ 74.036139][ T990] bus_for_each_drv+0x157/0x1e0 [ 74.041124][ T990] ? __pfx_bus_for_each_drv+0x10/0x10 [ 74.046739][ T990] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.051971][ T990] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.057859][ T990] __device_attach+0x1e8/0x4b0 [ 74.062649][ T990] ? __pfx___device_attach+0x10/0x10 [ 74.068021][ T990] ? do_raw_spin_unlock+0x172/0x230 [ 74.073436][ T990] bus_probe_device+0x17f/0x1c0 [ 74.078424][ T990] device_add+0x114b/0x1a70 [ 74.082955][ T990] ? __pfx_device_add+0x10/0x10 [ 74.087869][ T990] ? __init_waitqueue_head+0xca/0x150 [ 74.093272][ T990] i2c_new_client_device+0x8f7/0xc40 [ 74.098715][ T990] v4l2_i2c_new_subdev_board+0xb6/0x300 [ 74.104309][ T990] v4l2_i2c_new_subdev+0x149/0x1b0 [ 74.109510][ T990] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10 [ 74.115240][ T990] ? find_held_lock+0x2d/0x110 [ 74.120031][ T990] ? __pfx_pvr2_context_notify+0x10/0x10 [ 74.125721][ T990] pvr2_hdw_initialize+0x28c8/0x4500 [ 74.131034][ T990] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 74.136731][ T990] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 74.142925][ T990] pvr2_context_thread_func+0x254/0x970 [ 74.148568][ T990] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 74.154855][ T990] ? __pfx_autoremove_wake_function+0x10/0x10 [ 74.161042][ T990] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.166351][ T990] ? __kthread_parkme+0x148/0x220 [ 74.171515][ T990] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 74.177747][ T990] kthread+0x2c1/0x3a0 [ 74.181939][ T990] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.187298][ T990] ? __pfx_kthread+0x10/0x10 [ 74.191930][ T990] ret_from_fork+0x45/0x80 [ 74.196429][ T990] ? __pfx_kthread+0x10/0x10 [ 74.201258][ T990] ret_from_fork_asm+0x1a/0x30 [ 74.206272][ T990] [ 74.209410][ T990] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.216739][ T990] CPU: 0 UID: 0 PID: 990 Comm: pvrusb2-context Not tainted 6.11.0-rc3-syzkaller-00046-g82313624b2ae #0 [ 74.227822][ T990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 74.237920][ T990] Call Trace: [ 74.241205][ T990] [ 74.244130][ T990] dump_stack_lvl+0x3d/0x1f0 [ 74.248725][ T990] panic+0x6f5/0x7a0 [ 74.252615][ T990] ? __pfx_panic+0x10/0x10 [ 74.257027][ T990] ? show_trace_log_lvl+0x363/0x500 [ 74.262232][ T990] ? check_panic_on_warn+0x1f/0xb0 [ 74.267429][ T990] ? usb_submit_urb+0x14da/0x1730 [ 74.272468][ T990] check_panic_on_warn+0xab/0xb0 [ 74.277512][ T990] __warn+0xf1/0x3c0 [ 74.281432][ T990] ? __wake_up_klogd.part.0+0x99/0xf0 [ 74.286812][ T990] ? usb_submit_urb+0x14da/0x1730 [ 74.291947][ T990] report_bug+0x3c0/0x580 [ 74.296294][ T990] handle_bug+0x3d/0x70 [ 74.300455][ T990] exc_invalid_op+0x17/0x50 [ 74.304963][ T990] asm_exc_invalid_op+0x1a/0x20 [ 74.309824][ T990] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 74.315463][ T990] Code: fe eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 fe d1 fe fc c6 05 2d 88 d0 05 01 90 48 c7 c7 c0 05 a0 87 48 89 de e8 b7 cc c4 fc 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 74.335251][ T990] RSP: 0018:ffffc90001d4ee40 EFLAGS: 00010282 [ 74.341321][ T990] RAX: 0000000000000000 RBX: ffff888113174000 RCX: ffffffff81194d49 [ 74.349282][ T990] RDX: ffff88810bf2d700 RSI: ffffffff81194d56 RDI: 0000000000000001 [ 74.357248][ T990] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 74.365392][ T990] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 74.373461][ T990] R13: 00000000c0008200 R14: ffff888115b9c000 R15: ffff88811b811600 [ 74.381608][ T990] ? __warn_printk+0x199/0x350 [ 74.386372][ T990] ? __warn_printk+0x1a6/0x350 [ 74.391305][ T990] ? lockdep_init_map_type+0x16d/0x7d0 [ 74.396761][ T990] ? init_timer_on_stack_key+0xdc/0x120 [ 74.402309][ T990] pvr2_send_request_ex+0x7ec/0x1ef0 [ 74.407743][ T990] ? __mutex_lock+0x1a6/0x9c0 [ 74.412439][ T990] ? __pfx_pvr2_send_request_ex+0x10/0x10 [ 74.418208][ T990] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 74.423734][ T990] pvr2_send_request+0x3a/0x50 [ 74.428613][ T990] pvr2_i2c_read+0x203/0x6d0 [ 74.433221][ T990] pvr2_i2c_basic_op+0xcf/0xf0 [ 74.437990][ T990] pvr2_i2c_xfer+0x37a/0xfd0 [ 74.442590][ T990] ? __pfx_pvr2_i2c_basic_op+0x10/0x10 [ 74.448040][ T990] __i2c_transfer+0x69d/0x2140 [ 74.452802][ T990] ? __pfx___i2c_transfer+0x10/0x10 [ 74.458003][ T990] i2c_smbus_xfer_emulated+0x23c/0x1250 [ 74.463558][ T990] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 74.469726][ T990] ? mark_lock+0xb5/0xc60 [ 74.474055][ T990] ? __pfx___lock_acquire+0x10/0x10 [ 74.479252][ T990] ? __pfx_mark_lock+0x10/0x10 [ 74.484193][ T990] ? rt_mutex_unlock+0x24b/0x2a0 [ 74.489412][ T990] ? lock_acquire+0x1b1/0x560 [ 74.494173][ T990] ? find_held_lock+0x2d/0x110 [ 74.498946][ T990] __i2c_smbus_xfer+0x80b/0x1040 [ 74.503897][ T990] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 74.509795][ T990] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.514994][ T990] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.520915][ T990] i2c_smbus_xfer+0x200/0x3c0 [ 74.525617][ T990] i2c_smbus_read_byte_data+0x136/0x1e0 [ 74.531185][ T990] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10 [ 74.537253][ T990] ? __pfx_mark_lock+0x10/0x10 [ 74.542009][ T990] ? lock_acquire+0x1b1/0x560 [ 74.546763][ T990] saa711x_probe+0x233/0x20c0 [ 74.551434][ T990] ? __pfx_saa711x_probe+0x10/0x10 [ 74.556564][ T990] ? mark_held_locks+0x9f/0xe0 [ 74.561318][ T990] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.567125][ T990] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.572409][ T990] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.578238][ T990] ? __pfx_saa711x_probe+0x10/0x10 [ 74.583353][ T990] i2c_device_probe+0x4c7/0xb80 [ 74.588470][ T990] ? __pfx_i2c_device_probe+0x10/0x10 [ 74.593841][ T990] ? sysfs_create_link+0x68/0xc0 [ 74.598885][ T990] ? __pfx_i2c_device_probe+0x10/0x10 [ 74.604644][ T990] really_probe+0x23e/0xa90 [ 74.609149][ T990] __driver_probe_device+0x1de/0x440 [ 74.614524][ T990] driver_probe_device+0x4c/0x1b0 [ 74.619561][ T990] __device_attach_driver+0x1df/0x310 [ 74.625046][ T990] ? __pfx___device_attach_driver+0x10/0x10 [ 74.631217][ T990] bus_for_each_drv+0x157/0x1e0 [ 74.636162][ T990] ? __pfx_bus_for_each_drv+0x10/0x10 [ 74.641538][ T990] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.646760][ T990] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.652800][ T990] __device_attach+0x1e8/0x4b0 [ 74.657678][ T990] ? __pfx___device_attach+0x10/0x10 [ 74.662967][ T990] ? do_raw_spin_unlock+0x172/0x230 [ 74.668173][ T990] bus_probe_device+0x17f/0x1c0 [ 74.673042][ T990] device_add+0x114b/0x1a70 [ 74.678133][ T990] ? __pfx_device_add+0x10/0x10 [ 74.683096][ T990] ? __init_waitqueue_head+0xca/0x150 [ 74.688484][ T990] i2c_new_client_device+0x8f7/0xc40 [ 74.693856][ T990] v4l2_i2c_new_subdev_board+0xb6/0x300 [ 74.699401][ T990] v4l2_i2c_new_subdev+0x149/0x1b0 [ 74.704600][ T990] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10 [ 74.710236][ T990] ? find_held_lock+0x2d/0x110 [ 74.715262][ T990] ? __pfx_pvr2_context_notify+0x10/0x10 [ 74.720896][ T990] pvr2_hdw_initialize+0x28c8/0x4500 [ 74.726206][ T990] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 74.731846][ T990] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 74.737921][ T990] pvr2_context_thread_func+0x254/0x970 [ 74.743485][ T990] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 74.749572][ T990] ? __pfx_autoremove_wake_function+0x10/0x10 [ 74.755727][ T990] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.760941][ T990] ? __kthread_parkme+0x148/0x220 [ 74.765984][ T990] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 74.772076][ T990] kthread+0x2c1/0x3a0 [ 74.776416][ T990] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.781688][ T990] ? __pfx_kthread+0x10/0x10 [ 74.786283][ T990] ret_from_fork+0x45/0x80 [ 74.790726][ T990] ? __pfx_kthread+0x10/0x10 [ 74.795318][ T990] ret_from_fork_asm+0x1a/0x30 [ 74.800102][ T990] [ 74.803424][ T990] Kernel Offset: disabled [ 74.807781][ T990] Rebooting in 86400 seconds..