Warning: Permanently added '10.128.1.92' (ECDSA) to the list of known hosts. 2022/09/07 10:35:28 ignoring optional flag "sandboxArg"="0" 2022/09/07 10:35:29 parsed 1 programs 2022/09/07 10:35:29 executed programs: 0 [ 60.888416][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.138383][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 61.268525][ T12] usb 1-1: config 0 has an invalid interface number: 138 but max is 1 [ 61.276813][ T12] usb 1-1: config 0 has no interface number 1 [ 61.283114][ T12] usb 1-1: config 0 interface 138 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 61.294017][ T12] usb 1-1: config 0 interface 138 has no altsetting 0 [ 61.458542][ T12] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=3b.05 [ 61.468151][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.477214][ T12] usb 1-1: Product: syz [ 61.481485][ T12] usb 1-1: Manufacturer: syz [ 61.486082][ T12] usb 1-1: SerialNumber: syz [ 61.495074][ T12] usb 1-1: config 0 descriptor?? [ 61.540716][ T12] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 61.548898][ T12] usb 1-1: selecting invalid altsetting 0 [ 61.557638][ T12] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 61.765171][ T895] pvrusb2: Invalid read control endpoint [ 61.771026][ T895] ------------[ cut here ]------------ [ 61.776478][ T895] URB ffff88810915df00 submitted while active [ 61.782958][ T895] WARNING: CPU: 0 PID: 895 at drivers/usb/core/urb.c:378 usb_submit_urb+0x14e8/0x1880 [ 61.792701][ T895] Modules linked in: [ 61.797034][ T895] CPU: 0 PID: 895 Comm: pvrusb2-context Not tainted 6.0.0-rc4-syzkaller-00055-g6690986da1e2 #0 [ 61.807776][ T895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 61.817909][ T895] RIP: 0010:usb_submit_urb+0x14e8/0x1880 [ 61.823695][ T895] Code: 89 de e8 ab 25 8e fd 84 db 0f 85 a3 f3 ff ff e8 1e 29 8e fd 4c 89 fe 48 c7 c7 40 b9 a9 86 c6 05 54 c2 1b 05 01 e8 f8 9b 0d 02 <0f> 0b e9 81 f3 ff ff 48 89 7c 24 40 e8 f7 28 8e fd 48 8b 7c 24 40 [ 61.843395][ T895] RSP: 0018:ffffc900021cef58 EFLAGS: 00010282 [ 61.849511][ T895] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 61.857676][ T895] RDX: ffff88810ff83900 RSI: ffffffff812c9b68 RDI: fffff52000439ddd [ 61.866024][ T895] RBP: 00000000c0008200 R08: 0000000000000005 R09: 0000000000000000 [ 61.874078][ T895] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888109a9e000 [ 61.882500][ T895] R13: 0000000000000005 R14: 00000000fffffff0 R15: ffff88810915df00 [ 61.890646][ T895] FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 61.899653][ T895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.906299][ T895] CR2: 00000000005680c0 CR3: 0000000123e2d000 CR4: 00000000003506f0 [ 61.914766][ T895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.922983][ T895] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.931023][ T895] Call Trace: [ 61.934315][ T895] [ 61.937242][ T895] ? lockdep_init_map_type+0x21a/0x7f0 [ 61.943470][ T895] ? init_timer_on_stack_key+0xd8/0x110 [ 61.949096][ T895] pvr2_send_request_ex+0x7c2/0x20e0 [ 61.954765][ T895] ? pvr2_hdw_render_useless.part.0+0x280/0x280 [ 61.962482][ T895] ? pvr2_ctl_write_complete+0xe0/0xe0 [ 61.968029][ T895] ? stack_trace_save+0x8c/0xc0 [ 61.972971][ T895] pvr2_send_request+0x35/0x40 [ 61.977785][ T895] pvr2_i2c_read+0x200/0x670 [ 61.982541][ T895] pvr2_i2c_basic_op+0xb2/0xf0 [ 61.987336][ T895] pvr2_i2c_xfer+0x375/0xb90 [ 61.992096][ T895] ? pvr2_i2c_write+0x470/0x470 [ 61.996990][ T895] ? __up_read+0x5f1/0x720 [ 62.001466][ T895] __i2c_transfer+0x526/0x17a0 [ 62.006288][ T895] i2c_smbus_xfer_emulated+0x1b5/0xfe0 [ 62.011842][ T895] ? __ww_mutex_lock.constprop.0+0x10e0/0x2df0 [ 62.018399][ T895] ? i2c_smbus_msg_pec.isra.0+0x140/0x140 [ 62.024216][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.030068][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.036078][ T895] ? lockdep_hardirqs_on+0x79/0x100 [ 62.041336][ T895] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 62.047275][ T895] ? rt_mutex_slowlock.constprop.0+0x281/0x730 [ 62.053492][ T895] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0xf50/0xf50 [ 62.060829][ T895] __i2c_smbus_xfer+0x504/0x10b0 [ 62.065958][ T895] i2c_smbus_xfer+0x100/0x380 [ 62.070679][ T895] i2c_smbus_read_byte_data+0x107/0x1b0 [ 62.076254][ T895] ? i2c_smbus_write_byte+0xe0/0xe0 [ 62.081500][ T895] ? find_held_lock+0x2d/0x110 [ 62.086287][ T895] saa711x_probe+0x1e8/0x860 [ 62.091102][ T895] ? saa711x_s_std+0x60/0x60 [ 62.095744][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.101682][ T895] ? lockdep_hardirqs_on+0x79/0x100 [ 62.106922][ T895] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 62.112812][ T895] ? devres_open_group+0x3aa/0x540 [ 62.117950][ T895] i2c_device_probe+0xa1b/0xba0 [ 62.122867][ T895] ? saa711x_s_std+0x60/0x60 [ 62.127492][ T895] ? __unregister_client+0xa0/0xa0 [ 62.132667][ T895] really_probe+0x249/0xb90 [ 62.137209][ T895] __driver_probe_device+0x1df/0x4d0 [ 62.142566][ T895] driver_probe_device+0x4c/0x1a0 [ 62.147637][ T895] __device_attach_driver+0x1d0/0x2e0 [ 62.153096][ T895] ? driver_allows_async_probing+0x170/0x170 [ 62.159130][ T895] bus_for_each_drv+0x15f/0x1e0 [ 62.163997][ T895] ? bus_for_each_dev+0x1d0/0x1d0 [ 62.169097][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.175202][ T895] ? lockdep_hardirqs_on+0x79/0x100 [ 62.180493][ T895] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 62.186603][ T895] __device_attach+0x1e4/0x530 [ 62.191440][ T895] ? device_driver_attach+0x210/0x210 [ 62.196941][ T895] ? kobject_uevent_env+0x2a7/0x1640 [ 62.202444][ T895] bus_probe_device+0x1e4/0x290 [ 62.207322][ T895] device_add+0xbd5/0x1e90 [ 62.211822][ T895] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 62.218327][ T895] ? __init_waitqueue_head+0xc6/0x150 [ 62.223749][ T895] i2c_new_client_device+0x61d/0xb00 [ 62.229197][ T895] v4l2_i2c_new_subdev_board+0xaf/0x2c0 [ 62.234762][ T895] v4l2_i2c_new_subdev+0x102/0x170 [ 62.239915][ T895] ? v4l2_i2c_new_subdev_board+0x2c0/0x2c0 [ 62.245780][ T895] ? find_held_lock+0x2d/0x110 [ 62.250632][ T895] pvr2_hdw_initialize+0xc97/0x37d0 [ 62.255855][ T895] ? pvr2_hdw_gpio_chg_dir+0x1e0/0x1e0 [ 62.261363][ T895] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 62.267020][ T895] ? bit_wait_timeout+0x160/0x160 [ 62.272264][ T895] ? lock_downgrade+0x6e0/0x6e0 [ 62.277136][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.283078][ T895] pvr2_context_thread_func+0x250/0x850 [ 62.288692][ T895] ? pvr2_context_destroy+0x230/0x230 [ 62.294354][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.300302][ T895] ? prepare_to_swait_exclusive+0x240/0x240 [ 62.306231][ T895] ? __kthread_parkme+0x15f/0x220 [ 62.311318][ T895] ? pvr2_context_destroy+0x230/0x230 [ 62.316912][ T895] kthread+0x2ea/0x3a0 [ 62.321023][ T895] ? kthread_complete_and_exit+0x40/0x40 [ 62.326674][ T895] ret_from_fork+0x1f/0x30 [ 62.331172][ T895] [ 62.334231][ T895] Kernel panic - not syncing: panic_on_warn set ... [ 62.340835][ T895] CPU: 0 PID: 895 Comm: pvrusb2-context Not tainted 6.0.0-rc4-syzkaller-00055-g6690986da1e2 #0 [ 62.351174][ T895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 62.361313][ T895] Call Trace: [ 62.364675][ T895] [ 62.367603][ T895] dump_stack_lvl+0xcd/0x134 [ 62.372216][ T895] panic+0x2c8/0x627 [ 62.376205][ T895] ? panic_print_sys_info.part.0+0x10b/0x10b [ 62.382272][ T895] ? __warn.cold+0x248/0x2c4 [ 62.386871][ T895] ? usb_submit_urb+0x14e8/0x1880 [ 62.392207][ T895] __warn.cold+0x259/0x2c4 [ 62.396731][ T895] ? usb_submit_urb+0x14e8/0x1880 [ 62.401754][ T895] report_bug+0x1bc/0x210 [ 62.406107][ T895] handle_bug+0x3c/0x60 [ 62.410354][ T895] exc_invalid_op+0x14/0x40 [ 62.414848][ T895] asm_exc_invalid_op+0x16/0x20 [ 62.419695][ T895] RIP: 0010:usb_submit_urb+0x14e8/0x1880 [ 62.425326][ T895] Code: 89 de e8 ab 25 8e fd 84 db 0f 85 a3 f3 ff ff e8 1e 29 8e fd 4c 89 fe 48 c7 c7 40 b9 a9 86 c6 05 54 c2 1b 05 01 e8 f8 9b 0d 02 <0f> 0b e9 81 f3 ff ff 48 89 7c 24 40 e8 f7 28 8e fd 48 8b 7c 24 40 [ 62.445382][ T895] RSP: 0018:ffffc900021cef58 EFLAGS: 00010282 [ 62.451905][ T895] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 62.459881][ T895] RDX: ffff88810ff83900 RSI: ffffffff812c9b68 RDI: fffff52000439ddd [ 62.468042][ T895] RBP: 00000000c0008200 R08: 0000000000000005 R09: 0000000000000000 [ 62.476025][ T895] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888109a9e000 [ 62.484819][ T895] R13: 0000000000000005 R14: 00000000fffffff0 R15: ffff88810915df00 [ 62.492892][ T895] ? vprintk+0x88/0x90 [ 62.496978][ T895] ? usb_submit_urb+0x14e8/0x1880 [ 62.502107][ T895] ? lockdep_init_map_type+0x21a/0x7f0 [ 62.507582][ T895] ? init_timer_on_stack_key+0xd8/0x110 [ 62.513226][ T895] pvr2_send_request_ex+0x7c2/0x20e0 [ 62.518616][ T895] ? pvr2_hdw_render_useless.part.0+0x280/0x280 [ 62.524873][ T895] ? pvr2_ctl_write_complete+0xe0/0xe0 [ 62.530346][ T895] ? stack_trace_save+0x8c/0xc0 [ 62.535207][ T895] pvr2_send_request+0x35/0x40 [ 62.539980][ T895] pvr2_i2c_read+0x200/0x670 [ 62.544581][ T895] pvr2_i2c_basic_op+0xb2/0xf0 [ 62.549357][ T895] pvr2_i2c_xfer+0x375/0xb90 [ 62.553958][ T895] ? pvr2_i2c_write+0x470/0x470 [ 62.558818][ T895] ? __up_read+0x5f1/0x720 [ 62.563258][ T895] __i2c_transfer+0x526/0x17a0 [ 62.568207][ T895] i2c_smbus_xfer_emulated+0x1b5/0xfe0 [ 62.573679][ T895] ? __ww_mutex_lock.constprop.0+0x10e0/0x2df0 [ 62.579843][ T895] ? i2c_smbus_msg_pec.isra.0+0x140/0x140 [ 62.585574][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.591476][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.597292][ T895] ? lockdep_hardirqs_on+0x79/0x100 [ 62.602502][ T895] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 62.608318][ T895] ? rt_mutex_slowlock.constprop.0+0x281/0x730 [ 62.614585][ T895] ? task_blocks_on_rt_mutex.constprop.0.isra.0+0xf50/0xf50 [ 62.621880][ T895] __i2c_smbus_xfer+0x504/0x10b0 [ 62.626830][ T895] i2c_smbus_xfer+0x100/0x380 [ 62.631520][ T895] i2c_smbus_read_byte_data+0x107/0x1b0 [ 62.637095][ T895] ? i2c_smbus_write_byte+0xe0/0xe0 [ 62.642314][ T895] ? find_held_lock+0x2d/0x110 [ 62.647100][ T895] saa711x_probe+0x1e8/0x860 [ 62.651722][ T895] ? saa711x_s_std+0x60/0x60 [ 62.656346][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.662163][ T895] ? lockdep_hardirqs_on+0x79/0x100 [ 62.667459][ T895] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 62.673289][ T895] ? devres_open_group+0x3aa/0x540 [ 62.678424][ T895] i2c_device_probe+0xa1b/0xba0 [ 62.683313][ T895] ? saa711x_s_std+0x60/0x60 [ 62.688000][ T895] ? __unregister_client+0xa0/0xa0 [ 62.693133][ T895] really_probe+0x249/0xb90 [ 62.697654][ T895] __driver_probe_device+0x1df/0x4d0 [ 62.702955][ T895] driver_probe_device+0x4c/0x1a0 [ 62.707992][ T895] __device_attach_driver+0x1d0/0x2e0 [ 62.713551][ T895] ? driver_allows_async_probing+0x170/0x170 [ 62.719565][ T895] bus_for_each_drv+0x15f/0x1e0 [ 62.724457][ T895] ? bus_for_each_dev+0x1d0/0x1d0 [ 62.729506][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.735336][ T895] ? lockdep_hardirqs_on+0x79/0x100 [ 62.740646][ T895] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 62.746832][ T895] __device_attach+0x1e4/0x530 [ 62.751612][ T895] ? device_driver_attach+0x210/0x210 [ 62.757015][ T895] ? kobject_uevent_env+0x2a7/0x1640 [ 62.762309][ T895] bus_probe_device+0x1e4/0x290 [ 62.767349][ T895] device_add+0xbd5/0x1e90 [ 62.771976][ T895] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 62.778228][ T895] ? __init_waitqueue_head+0xc6/0x150 [ 62.783616][ T895] i2c_new_client_device+0x61d/0xb00 [ 62.788925][ T895] v4l2_i2c_new_subdev_board+0xaf/0x2c0 [ 62.794499][ T895] v4l2_i2c_new_subdev+0x102/0x170 [ 62.800502][ T895] ? v4l2_i2c_new_subdev_board+0x2c0/0x2c0 [ 62.806317][ T895] ? find_held_lock+0x2d/0x110 [ 62.811110][ T895] pvr2_hdw_initialize+0xc97/0x37d0 [ 62.816321][ T895] ? pvr2_hdw_gpio_chg_dir+0x1e0/0x1e0 [ 62.821884][ T895] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 62.827536][ T895] ? bit_wait_timeout+0x160/0x160 [ 62.832660][ T895] ? lock_downgrade+0x6e0/0x6e0 [ 62.837523][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.843354][ T895] pvr2_context_thread_func+0x250/0x850 [ 62.848920][ T895] ? pvr2_context_destroy+0x230/0x230 [ 62.854308][ T895] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 62.860125][ T895] ? prepare_to_swait_exclusive+0x240/0x240 [ 62.866034][ T895] ? __kthread_parkme+0x15f/0x220 [ 62.871241][ T895] ? pvr2_context_destroy+0x230/0x230 [ 62.876655][ T895] kthread+0x2ea/0x3a0 [ 62.880759][ T895] ? kthread_complete_and_exit+0x40/0x40 [ 62.886420][ T895] ret_from_fork+0x1f/0x30 [ 62.890848][ T895] [ 62.894179][ T895] Kernel Offset: disabled [ 62.898669][ T895] Rebooting in 86400 seconds..