Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. 2023/08/31 07:07:08 ignoring optional flag "sandboxArg"="0" 2023/08/31 07:07:08 parsed 1 programs 2023/08/31 07:07:09 executed programs: 0 [ 74.524390][ T286] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.764258][ T286] usb 1-1: Using ep0 maxpacket: 16 [ 74.894374][ T286] usb 1-1: config 0 has an invalid interface number: 138 but max is 1 [ 74.902723][ T286] usb 1-1: config 0 has no interface number 1 [ 74.909102][ T286] usb 1-1: config 0 interface 138 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 74.919747][ T286] usb 1-1: config 0 interface 138 has no altsetting 0 [ 75.084440][ T286] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=3b.05 [ 75.093513][ T286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.101741][ T286] usb 1-1: Product: syz [ 75.105932][ T286] usb 1-1: Manufacturer: syz [ 75.110766][ T286] usb 1-1: SerialNumber: syz [ 75.118172][ T286] usb 1-1: config 0 descriptor?? [ 75.167073][ T286] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 75.175223][ T286] usb 1-1: selecting invalid altsetting 0 [ 75.184439][ T286] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 75.397121][ T892] pvrusb2: Invalid read control endpoint [ 75.402882][ T892] ------------[ cut here ]------------ [ 75.408401][ T892] URB ffff8881103b6700 submitted while active [ 75.414885][ T892] WARNING: CPU: 1 PID: 892 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14cb/0x1720 [ 75.424515][ T892] Modules linked in: [ 75.428596][ T892] CPU: 1 PID: 892 Comm: pvrusb2-context Not tainted 6.5.0-rc6-syzkaller-00158-g895ed7eb263d #0 [ 75.439388][ T892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 75.449500][ T892] RIP: 0010:usb_submit_urb+0x14cb/0x1720 [ 75.455223][ T892] Code: 98 4a fe eb cb bb fe ff ff ff e9 ca f3 ff ff e8 bb 24 50 fd 48 89 de 48 c7 c7 80 31 ee 86 c6 05 19 0e 29 05 01 e8 65 4f 1a fd <0f> 0b e9 ba fe ff ff bb f8 ff ff ff e9 9e f3 ff ff 48 89 ef e8 ac [ 75.474997][ T892] RSP: 0018:ffffc9000254ee48 EFLAGS: 00010282 [ 75.481076][ T892] RAX: 0000000000000000 RBX: ffff8881103b6700 RCX: 0000000000000000 [ 75.489131][ T892] RDX: ffff888108f81d00 RSI: ffffffff81167826 RDI: 0000000000000001 [ 75.497339][ T892] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 75.505536][ T892] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 75.513601][ T892] R13: 00000000c0008200 R14: ffff888116f42000 R15: ffff88811945d5f0 [ 75.521660][ T892] FS: 0000000000000000(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 75.530651][ T892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.537307][ T892] CR2: 00000000200010c0 CR3: 0000000113770000 CR4: 00000000003506e0 [ 75.545359][ T892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.553395][ T892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.561459][ T892] Call Trace: [ 75.564782][ T892] [ 75.567713][ T892] ? __warn+0xe6/0x380 [ 75.571785][ T892] ? __wake_up_klogd.part.0+0x99/0xf0 [ 75.577255][ T892] ? usb_submit_urb+0x14cb/0x1720 [ 75.582422][ T892] ? report_bug+0x3bc/0x580 [ 75.587106][ T892] ? handle_bug+0x3c/0x70 [ 75.591549][ T892] ? exc_invalid_op+0x17/0x40 [ 75.596455][ T892] ? asm_exc_invalid_op+0x1a/0x20 [ 75.601535][ T892] ? __warn_printk+0x1a6/0x350 [ 75.607230][ T892] ? usb_submit_urb+0x14cb/0x1720 [ 75.610513][ T286] usb 1-1: USB disconnect, device number 2 [ 75.612295][ T892] ? usb_submit_urb+0x14cb/0x1720 [ 75.623375][ T892] ? lockdep_init_map_type+0x16d/0x7c0 [ 75.628954][ T892] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 75.634885][ T892] ? init_timer_on_stack_key+0xdc/0x110 [ 75.640591][ T892] pvr2_send_request_ex+0x7ec/0x1ef0 [ 75.646126][ T892] ? pvr2_hdw_render_useless.part.0+0x2d0/0x2d0 [ 75.652560][ T892] ? pvr2_ctl_write_complete+0xe0/0xe0 [ 75.658162][ T892] pvr2_send_request+0x3a/0x50 [ 75.662947][ T892] pvr2_i2c_read+0x204/0x6c0 [ 75.667592][ T892] pvr2_i2c_basic_op+0xc7/0xf0 [ 75.672376][ T892] pvr2_i2c_xfer+0x37a/0xfc0 [ 75.677060][ T892] ? pvr2_i2c_write+0x490/0x490 [ 75.682026][ T892] __i2c_transfer+0x639/0x1fb0 [ 75.687023][ T892] ? i2c_device_match+0x1e0/0x1e0 [ 75.692178][ T892] ? __lock_acquire+0x182f/0x5de0 [ 75.697343][ T892] i2c_smbus_xfer_emulated+0x23c/0x1230 [ 75.702928][ T892] ? i2c_smbus_msg_pec+0x210/0x210 [ 75.708109][ T892] ? mark_lock+0x105/0x1950 [ 75.712638][ T892] ? find_held_lock+0x2d/0x110 [ 75.717459][ T892] __i2c_smbus_xfer+0x306/0xef0 [ 75.722364][ T892] ? mark_held_locks+0x9f/0xe0 [ 75.727308][ T892] ? i2c_smbus_xfer_emulated+0x1230/0x1230 [ 75.733159][ T892] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.738417][ T892] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 75.744297][ T892] i2c_smbus_xfer+0x106/0x380 [ 75.749072][ T892] i2c_smbus_read_byte_data+0x136/0x1e0 [ 75.754684][ T892] ? i2c_smbus_write_byte+0xe0/0xe0 [ 75.759930][ T892] ? find_held_lock+0x2d/0x110 [ 75.764781][ T892] saa711x_probe+0x22d/0x20b0 [ 75.769482][ T892] ? saa711x_s_std+0x60/0x60 [ 75.774230][ T892] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 75.780593][ T892] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 75.786492][ T892] ? devres_open_group+0x3b8/0x520 [ 75.791646][ T892] ? saa711x_s_std+0x60/0x60 [ 75.796388][ T892] i2c_device_probe+0x4c7/0xb80 [ 75.801273][ T892] ? devm_i2c_del_adapter+0x20/0x20 [ 75.806533][ T892] ? sysfs_create_link+0x68/0xc0 [ 75.811500][ T892] ? devm_i2c_del_adapter+0x20/0x20 [ 75.816762][ T892] really_probe+0x234/0xc90 [ 75.821385][ T892] __driver_probe_device+0x1de/0x4b0 [ 75.826724][ T892] driver_probe_device+0x4c/0x1a0 [ 75.831774][ T892] __device_attach_driver+0x1d4/0x300 [ 75.837196][ T892] ? driver_probe_device+0x1a0/0x1a0 [ 75.842508][ T892] bus_for_each_drv+0x157/0x1d0 [ 75.847463][ T892] ? bus_for_each_dev+0x1d0/0x1d0 [ 75.852688][ T892] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 75.858547][ T892] __device_attach+0x1e8/0x4b0 [ 75.863344][ T892] ? device_driver_attach+0x200/0x200 [ 75.868857][ T892] ? do_raw_spin_unlock+0x173/0x230 [ 75.874637][ T892] bus_probe_device+0x17c/0x1c0 [ 75.879520][ T892] device_add+0x11f1/0x1b40 [ 75.884031][ T892] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 75.890932][ T892] ? __init_waitqueue_head+0xca/0x150 [ 75.896351][ T892] i2c_new_client_device+0x6a8/0xbc0 [ 75.901640][ T892] v4l2_i2c_new_subdev_board+0xb6/0x2c0 [ 75.907249][ T892] v4l2_i2c_new_subdev+0x145/0x1b0 [ 75.912400][ T892] ? v4l2_i2c_new_subdev_board+0x2c0/0x2c0 [ 75.918295][ T892] ? find_held_lock+0x2d/0x110 [ 75.923106][ T892] ? pvr2_context_reset_input_limits+0x110/0x110 [ 75.929489][ T892] pvr2_hdw_initialize+0x28b5/0x44f0 [ 75.934903][ T892] ? pvr2_hdw_gpio_chg_dir+0x210/0x210 [ 75.940364][ T892] ? pvr2_context_destroy+0x270/0x270 [ 75.945798][ T892] pvr2_context_thread_func+0x254/0x960 [ 75.951472][ T892] ? pvr2_context_destroy+0x270/0x270 [ 75.956928][ T892] ? prepare_to_swait_exclusive+0x240/0x240 [ 75.962880][ T892] ? __kthread_parkme+0x152/0x220 [ 75.967987][ T892] ? pvr2_context_destroy+0x270/0x270 [ 75.973387][ T892] kthread+0x33a/0x430 [ 75.977509][ T892] ? kthread_complete_and_exit+0x40/0x40 [ 75.983169][ T892] ret_from_fork+0x2c/0x70 [ 75.987747][ T892] ? kthread_complete_and_exit+0x40/0x40 [ 75.993405][ T892] ret_from_fork_asm+0x11/0x20 [ 75.998243][ T892] [ 76.001274][ T892] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.008806][ T892] CPU: 1 PID: 892 Comm: pvrusb2-context Not tainted 6.5.0-rc6-syzkaller-00158-g895ed7eb263d #0 [ 76.019700][ T892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 76.029751][ T892] Call Trace: [ 76.033028][ T892] [ 76.035960][ T892] dump_stack_lvl+0xd9/0x1b0 [ 76.040573][ T892] panic+0x6a4/0x750 [ 76.044490][ T892] ? panic_smp_self_stop+0xa0/0xa0 [ 76.049599][ T892] ? show_trace_log_lvl+0x29d/0x3c0 [ 76.054808][ T892] ? usb_submit_urb+0x14cb/0x1720 [ 76.059839][ T892] check_panic_on_warn+0xab/0xb0 [ 76.064777][ T892] __warn+0xf2/0x380 [ 76.068669][ T892] ? __wake_up_klogd.part.0+0x99/0xf0 [ 76.074034][ T892] ? usb_submit_urb+0x14cb/0x1720 [ 76.079060][ T892] report_bug+0x3bc/0x580 [ 76.083396][ T892] handle_bug+0x3c/0x70 [ 76.087607][ T892] exc_invalid_op+0x17/0x40 [ 76.092237][ T892] asm_exc_invalid_op+0x1a/0x20 2023/08/31 07:07:20 executed programs: 1 [ 76.097131][ T892] RIP: 0010:usb_submit_urb+0x14cb/0x1720 [ 76.102809][ T892] Code: 98 4a fe eb cb bb fe ff ff ff e9 ca f3 ff ff e8 bb 24 50 fd 48 89 de 48 c7 c7 80 31 ee 86 c6 05 19 0e 29 05 01 e8 65 4f 1a fd <0f> 0b e9 ba fe ff ff bb f8 ff ff ff e9 9e f3 ff ff 48 89 ef e8 ac [ 76.122803][ T892] RSP: 0018:ffffc9000254ee48 EFLAGS: 00010282 [ 76.128891][ T892] RAX: 0000000000000000 RBX: ffff8881103b6700 RCX: 0000000000000000 [ 76.136876][ T892] RDX: ffff888108f81d00 RSI: ffffffff81167826 RDI: 0000000000000001 [ 76.144974][ T892] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 76.152954][ T892] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 76.161113][ T892] R13: 00000000c0008200 R14: ffff888116f42000 R15: ffff88811945d5f0 [ 76.169102][ T892] ? __warn_printk+0x1a6/0x350 [ 76.173892][ T892] ? usb_submit_urb+0x14cb/0x1720 [ 76.178944][ T892] ? lockdep_init_map_type+0x16d/0x7c0 [ 76.184508][ T892] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 76.190343][ T892] ? init_timer_on_stack_key+0xdc/0x110 [ 76.196004][ T892] pvr2_send_request_ex+0x7ec/0x1ef0 [ 76.201379][ T892] ? pvr2_hdw_render_useless.part.0+0x2d0/0x2d0 [ 76.207908][ T892] ? pvr2_ctl_write_complete+0xe0/0xe0 [ 76.214028][ T892] pvr2_send_request+0x3a/0x50 [ 76.218909][ T892] pvr2_i2c_read+0x204/0x6c0 [ 76.223520][ T892] pvr2_i2c_basic_op+0xc7/0xf0 [ 76.228299][ T892] pvr2_i2c_xfer+0x37a/0xfc0 [ 76.232906][ T892] ? pvr2_i2c_write+0x490/0x490 [ 76.237778][ T892] __i2c_transfer+0x639/0x1fb0 [ 76.242566][ T892] ? i2c_device_match+0x1e0/0x1e0 [ 76.247616][ T892] ? __lock_acquire+0x182f/0x5de0 [ 76.252744][ T892] i2c_smbus_xfer_emulated+0x23c/0x1230 [ 76.258318][ T892] ? i2c_smbus_msg_pec+0x210/0x210 [ 76.263539][ T892] ? mark_lock+0x105/0x1950 [ 76.268142][ T892] ? find_held_lock+0x2d/0x110 [ 76.272930][ T892] __i2c_smbus_xfer+0x306/0xef0 [ 76.277891][ T892] ? mark_held_locks+0x9f/0xe0 [ 76.282669][ T892] ? i2c_smbus_xfer_emulated+0x1230/0x1230 [ 76.288588][ T892] ? lockdep_hardirqs_on+0x7d/0x100 [ 76.293977][ T892] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 76.299888][ T892] i2c_smbus_xfer+0x106/0x380 [ 76.304591][ T892] i2c_smbus_read_byte_data+0x136/0x1e0 [ 76.310197][ T892] ? i2c_smbus_write_byte+0xe0/0xe0 [ 76.315625][ T892] ? find_held_lock+0x2d/0x110 [ 76.320992][ T892] saa711x_probe+0x22d/0x20b0 [ 76.325881][ T892] ? saa711x_s_std+0x60/0x60 [ 76.330492][ T892] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 76.336322][ T892] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 76.342324][ T892] ? devres_open_group+0x3b8/0x520 [ 76.347456][ T892] ? saa711x_s_std+0x60/0x60 [ 76.352055][ T892] i2c_device_probe+0x4c7/0xb80 [ 76.356941][ T892] ? devm_i2c_del_adapter+0x20/0x20 [ 76.362257][ T892] ? sysfs_create_link+0x68/0xc0 [ 76.367212][ T892] ? devm_i2c_del_adapter+0x20/0x20 [ 76.372607][ T892] really_probe+0x234/0xc90 [ 76.377141][ T892] __driver_probe_device+0x1de/0x4b0 [ 76.382546][ T892] driver_probe_device+0x4c/0x1a0 [ 76.387592][ T892] __device_attach_driver+0x1d4/0x300 [ 76.393068][ T892] ? driver_probe_device+0x1a0/0x1a0 [ 76.398380][ T892] bus_for_each_drv+0x157/0x1d0 [ 76.403333][ T892] ? bus_for_each_dev+0x1d0/0x1d0 [ 76.408401][ T892] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 76.414341][ T892] __device_attach+0x1e8/0x4b0 [ 76.419145][ T892] ? device_driver_attach+0x200/0x200 [ 76.424593][ T892] ? do_raw_spin_unlock+0x173/0x230 [ 76.429814][ T892] bus_probe_device+0x17c/0x1c0 [ 76.434681][ T892] device_add+0x11f1/0x1b40 [ 76.439384][ T892] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 76.446258][ T892] ? __init_waitqueue_head+0xca/0x150 [ 76.451642][ T892] i2c_new_client_device+0x6a8/0xbc0 [ 76.456952][ T892] v4l2_i2c_new_subdev_board+0xb6/0x2c0 [ 76.462648][ T892] v4l2_i2c_new_subdev+0x145/0x1b0 [ 76.467857][ T892] ? v4l2_i2c_new_subdev_board+0x2c0/0x2c0 [ 76.473764][ T892] ? find_held_lock+0x2d/0x110 [ 76.478648][ T892] ? pvr2_context_reset_input_limits+0x110/0x110 [ 76.485011][ T892] pvr2_hdw_initialize+0x28b5/0x44f0 [ 76.490325][ T892] ? pvr2_hdw_gpio_chg_dir+0x210/0x210 [ 76.495850][ T892] ? pvr2_context_destroy+0x270/0x270 [ 76.501424][ T892] pvr2_context_thread_func+0x254/0x960 [ 76.507087][ T892] ? pvr2_context_destroy+0x270/0x270 [ 76.512479][ T892] ? prepare_to_swait_exclusive+0x240/0x240 [ 76.518424][ T892] ? __kthread_parkme+0x152/0x220 [ 76.523479][ T892] ? pvr2_context_destroy+0x270/0x270 [ 76.528983][ T892] kthread+0x33a/0x430 [ 76.533152][ T892] ? kthread_complete_and_exit+0x40/0x40 [ 76.538906][ T892] ret_from_fork+0x2c/0x70 [ 76.543362][ T892] ? kthread_complete_and_exit+0x40/0x40 [ 76.549110][ T892] ret_from_fork_asm+0x11/0x20 [ 76.553999][ T892] [ 76.557300][ T892] Kernel Offset: disabled [ 76.561774][ T892] Rebooting in 86400 seconds..