Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. 2025/11/26 00:25:58 ignoring optional flag "sandbox_arg"="0" 2025/11/26 00:25:58 ignoring optional flag "type"="gce" 2025/11/26 00:25:59 parsed 1 programs 2025/11/26 00:25:59 executed programs: 0 [ 74.499330][ T29] audit: type=1400 audit(1764116759.072:81): avc: denied { mounton } for pid=3447 comm="syz-executor.0" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 74.525261][ T3447] cgroup: Unknown subsys name 'cpuset' [ 77.091443][ T29] audit: type=1400 audit(1764116761.662:82): avc: denied { create } for pid=3447 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.119485][ T29] audit: type=1400 audit(1764116761.662:83): avc: denied { write } for pid=3447 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.143336][ T29] audit: type=1400 audit(1764116761.692:84): avc: denied { read } for pid=3447 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.861836][ T29] audit: type=1400 audit(1764116769.432:85): avc: denied { write } for pid=3891 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.894048][ T29] audit: type=1400 audit(1764116769.432:86): avc: denied { ioctl } for pid=3891 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.103985][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.263675][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 85.271195][ T10] usb 1-1: config 0 has an invalid interface number: 138 but max is 1 [ 85.279771][ T10] usb 1-1: config 0 has no interface number 1 [ 85.286190][ T10] usb 1-1: config 0 interface 138 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 85.297230][ T10] usb 1-1: config 0 interface 138 has no altsetting 0 [ 85.306701][ T10] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=3b.05 [ 85.316270][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.324514][ T10] usb 1-1: Product: syz [ 85.328947][ T10] usb 1-1: Manufacturer: syz [ 85.333683][ T10] usb 1-1: SerialNumber: syz [ 85.341990][ T10] usb 1-1: config 0 descriptor?? [ 85.351961][ T10] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 85.360346][ T10] usb 1-1: selecting invalid altsetting 0 [ 85.371279][ T10] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 85.581938][ T1306] pvrusb2: Invalid read control endpoint [ 85.588251][ T1306] ------------[ cut here ]------------ [ 85.593867][ T1306] URB ffff88810bf39600 submitted while active [ 85.600378][ T1306] WARNING: CPU: 0 PID: 1306 at drivers/usb/core/urb.c:380 usb_submit_urb+0x16f5/0x1990 [ 85.610400][ T1306] Modules linked in: [ 85.614577][ T1306] CPU: 0 UID: 0 PID: 1306 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.624986][ T1306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.635249][ T1306] RIP: 0010:usb_submit_urb+0x16f5/0x1990 [ 85.640942][ T1306] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 73 ae d0 fc c6 05 8c 92 e5 05 01 90 48 c7 c7 20 b2 e7 87 48 89 de e8 1c 51 93 fc 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 [ 85.661690][ T1306] RSP: 0018:ffffc90001daedb0 EFLAGS: 00010286 [ 85.667913][ T1306] RAX: 0000000000000000 RBX: ffff88810bf39600 RCX: ffffffff8140f2b8 [ 85.676323][ T1306] RDX: ffff888111a19d00 RSI: ffffffff8140f2c5 RDI: 0000000000000001 [ 85.684431][ T1306] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 85.692505][ T1306] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 85.700843][ T1306] R13: 00000000c0008200 R14: ffff88811b938000 R15: ffff88811a429610 [ 85.709225][ T1306] FS: 0000000000000000(0000) GS:ffff888268ea0000(0000) knlGS:0000000000000000 [ 85.718253][ T1306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.725016][ T1306] CR2: 00007f6fba2bae9c CR3: 00000000090a4000 CR4: 00000000003506f0 [ 85.733095][ T1306] Call Trace: [ 85.736451][ T1306] [ 85.739658][ T1306] ? lockdep_init_map_type+0x5c/0x280 [ 85.745225][ T1306] ? lockdep_init_map_type+0x5c/0x280 [ 85.750720][ T1306] ? timer_init_key_on_stack+0xdc/0x120 [ 85.756544][ T1306] pvr2_send_request_ex+0x7eb/0x1ef0 [ 85.762065][ T1306] ? pvr2_i2c_write+0x25f/0x4a0 [ 85.767241][ T1306] ? __pfx_pvr2_send_request_ex+0x10/0x10 [ 85.772999][ T1306] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 85.778736][ T1306] ? rcu_is_watching+0x12/0xc0 [ 85.783578][ T1306] ? __kasan_check_byte+0x13/0x50 [ 85.788722][ T1306] pvr2_send_request+0x3a/0x50 [ 85.793657][ T1306] pvr2_i2c_read+0x203/0x6d0 [ 85.798448][ T1306] pvr2_i2c_basic_op+0xcf/0xf0 [ 85.803326][ T1306] pvr2_i2c_xfer+0x380/0xfd0 [ 85.808429][ T1306] ? __pfx_pvr2_i2c_basic_op+0x10/0x10 [ 85.814483][ T1306] ? ret_from_fork_asm+0x1a/0x30 [ 85.819718][ T1306] __i2c_transfer+0x6b6/0x2190 [ 85.824846][ T1306] ? stack_trace_snprint+0x97/0xd0 [ 85.830369][ T1306] ? __pfx___i2c_transfer+0x10/0x10 [ 85.835642][ T1306] ? check_path.constprop.0+0x24/0x50 [ 85.841129][ T1306] i2c_smbus_xfer_emulated+0x230/0x11f0 [ 85.846748][ T1306] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 85.852859][ T1306] ? __lock_acquire+0xb8a/0x1c90 [ 85.858092][ T1306] ? 0xffffffff81000000 [ 85.862566][ T1306] __i2c_smbus_xfer+0x836/0x1020 [ 85.867563][ T1306] ? mark_held_locks+0x49/0x80 [ 85.872454][ T1306] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.877816][ T1306] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 85.883337][ T1306] ? rt_mutex_slowtrylock+0xc9/0x100 [ 85.888939][ T1306] i2c_smbus_xfer+0x200/0x3c0 [ 85.893923][ T1306] i2c_smbus_read_byte_data+0x135/0x1e0 [ 85.899492][ T1306] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10 [ 85.906251][ T1306] saa711x_probe+0x234/0x20b0 [ 85.911172][ T1306] ? __pfx_saa711x_probe+0x10/0x10 [ 85.916977][ T1306] ? up_write+0xe0/0x520 [ 85.922254][ T1306] ? __pfx_saa711x_probe+0x10/0x10 [ 85.927540][ T1306] i2c_device_probe+0x66d/0xd30 [ 85.932595][ T1306] ? kernfs_put+0x35/0x60 [ 85.937081][ T1306] ? __pfx_i2c_device_probe+0x10/0x10 [ 85.942494][ T1306] ? sysfs_create_link+0x68/0xc0 [ 85.947889][ T1306] ? __pfx_i2c_device_probe+0x10/0x10 [ 85.953698][ T1306] really_probe+0x241/0xa90 [ 85.958303][ T1306] __driver_probe_device+0x1de/0x440 [ 85.963649][ T1306] driver_probe_device+0x4c/0x1b0 [ 85.968834][ T1306] __device_attach_driver+0x1df/0x310 [ 85.974512][ T1306] ? __pfx___device_attach_driver+0x10/0x10 [ 85.980838][ T1306] bus_for_each_drv+0x159/0x1e0 [ 85.985910][ T1306] ? __pfx_bus_for_each_drv+0x10/0x10 [ 85.991311][ T1306] ? lockdep_hardirqs_on+0x7c/0x110 [ 85.996602][ T1306] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.002613][ T1306] __device_attach+0x1e4/0x4b0 [ 86.007446][ T1306] ? __pfx___device_attach+0x10/0x10 [ 86.013215][ T1306] ? do_raw_spin_unlock+0x172/0x230 [ 86.019079][ T1306] bus_probe_device+0x17f/0x1c0 [ 86.024051][ T1306] device_add+0x1148/0x1aa0 [ 86.028583][ T1306] ? __pfx_device_add+0x10/0x10 [ 86.033433][ T1306] ? lockdep_init_map_type+0x5c/0x280 [ 86.039056][ T1306] ? __init_waitqueue_head+0xca/0x150 [ 86.044580][ T1306] i2c_new_client_device+0x660/0xeb0 [ 86.050143][ T1306] v4l2_i2c_new_subdev_board+0xb6/0x300 [ 86.055849][ T1306] v4l2_i2c_new_subdev+0x14f/0x1c0 [ 86.061084][ T1306] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10 [ 86.066868][ T1306] ? __pfx___mutex_trylock_common+0x10/0x10 [ 86.072866][ T1306] ? __pfx_pvr2_context_notify+0x10/0x10 [ 86.078719][ T1306] pvr2_hdw_initialize+0x28d0/0x4510 [ 86.084069][ T1306] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 86.089795][ T1306] ? __pfx___schedule+0x10/0x10 [ 86.094714][ T1306] ? find_held_lock+0x2b/0x80 [ 86.099698][ T1306] ? schedule+0x2d7/0x3a0 [ 86.104365][ T1306] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 86.111859][ T1306] pvr2_context_thread_func+0x253/0x9b0 [ 86.117736][ T1306] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 86.124083][ T1306] ? __pfx_autoremove_wake_function+0x10/0x10 [ 86.130625][ T1306] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.136246][ T1306] ? __kthread_parkme+0x19e/0x250 [ 86.141393][ T1306] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 86.147924][ T1306] kthread+0x3c5/0x780 [ 86.152220][ T1306] ? __pfx_kthread+0x10/0x10 [ 86.156991][ T1306] ? rcu_is_watching+0x12/0xc0 [ 86.162016][ T1306] ? __pfx_kthread+0x10/0x10 [ 86.166685][ T1306] ret_from_fork+0x56d/0x700 [ 86.171382][ T1306] ? __pfx_kthread+0x10/0x10 [ 86.176450][ T1306] ret_from_fork_asm+0x1a/0x30 [ 86.181434][ T1306] [ 86.184656][ T1306] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.192211][ T1306] CPU: 0 UID: 0 PID: 1306 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.202711][ T1306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.213212][ T1306] Call Trace: [ 86.216534][ T1306] [ 86.219555][ T1306] dump_stack_lvl+0x3d/0x1f0 [ 86.224474][ T1306] vpanic+0x640/0x6f0 [ 86.228479][ T1306] ? usb_submit_urb+0x16f5/0x1990 [ 86.233888][ T1306] panic+0xca/0xd0 [ 86.238160][ T1306] ? __pfx_panic+0x10/0x10 [ 86.242610][ T1306] ? check_panic_on_warn+0x1f/0xb0 [ 86.248003][ T1306] check_panic_on_warn+0xab/0xb0 [ 86.253089][ T1306] __warn+0xf6/0x3c0 [ 86.257007][ T1306] ? __pfx_vprintk_emit+0x10/0x10 [ 86.262445][ T1306] ? usb_submit_urb+0x16f5/0x1990 [ 86.267623][ T1306] report_bug+0x3c3/0x580 [ 86.272093][ T1306] ? usb_submit_urb+0x16f5/0x1990 [ 86.277306][ T1306] handle_bug+0x184/0x210 [ 86.281636][ T1306] exc_invalid_op+0x17/0x50 [ 86.286581][ T1306] asm_exc_invalid_op+0x1a/0x20 [ 86.291438][ T1306] RIP: 0010:usb_submit_urb+0x16f5/0x1990 [ 86.297263][ T1306] Code: ff ff ff bb fe ff ff ff e9 c9 f1 ff ff e8 73 ae d0 fc c6 05 8c 92 e5 05 01 90 48 c7 c7 20 b2 e7 87 48 89 de e8 1c 51 93 fc 90 <0f> 0b 90 90 e9 a6 fe ff ff bb f8 ff ff ff e9 99 f1 ff ff c7 44 24 [ 86.317138][ T1306] RSP: 0018:ffffc90001daedb0 EFLAGS: 00010286 [ 86.323305][ T1306] RAX: 0000000000000000 RBX: ffff88810bf39600 RCX: ffffffff8140f2b8 [ 86.331286][ T1306] RDX: ffff888111a19d00 RSI: ffffffff8140f2c5 RDI: 0000000000000001 [ 86.339871][ T1306] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 86.348012][ T1306] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 86.356162][ T1306] R13: 00000000c0008200 R14: ffff88811b938000 R15: ffff88811a429610 [ 86.364506][ T1306] ? __warn_printk+0x198/0x350 [ 86.369381][ T1306] ? __warn_printk+0x1a5/0x350 [ 86.374328][ T1306] ? lockdep_init_map_type+0x5c/0x280 [ 86.379890][ T1306] ? lockdep_init_map_type+0x5c/0x280 [ 86.385353][ T1306] ? timer_init_key_on_stack+0xdc/0x120 [ 86.391360][ T1306] pvr2_send_request_ex+0x7eb/0x1ef0 [ 86.396770][ T1306] ? pvr2_i2c_write+0x25f/0x4a0 [ 86.402283][ T1306] ? __pfx_pvr2_send_request_ex+0x10/0x10 [ 86.408373][ T1306] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 86.415189][ T1306] ? rcu_is_watching+0x12/0xc0 [ 86.420151][ T1306] ? __kasan_check_byte+0x13/0x50 [ 86.425556][ T1306] pvr2_send_request+0x3a/0x50 [ 86.431171][ T1306] pvr2_i2c_read+0x203/0x6d0 [ 86.436168][ T1306] pvr2_i2c_basic_op+0xcf/0xf0 [ 86.441141][ T1306] pvr2_i2c_xfer+0x380/0xfd0 [ 86.446083][ T1306] ? __pfx_pvr2_i2c_basic_op+0x10/0x10 [ 86.451882][ T1306] ? ret_from_fork_asm+0x1a/0x30 [ 86.456915][ T1306] __i2c_transfer+0x6b6/0x2190 [ 86.461866][ T1306] ? stack_trace_snprint+0x97/0xd0 [ 86.467129][ T1306] ? __pfx___i2c_transfer+0x10/0x10 [ 86.472538][ T1306] ? check_path.constprop.0+0x24/0x50 [ 86.478064][ T1306] i2c_smbus_xfer_emulated+0x230/0x11f0 [ 86.483902][ T1306] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 86.489928][ T1306] ? __lock_acquire+0xb8a/0x1c90 [ 86.495052][ T1306] ? 0xffffffff81000000 [ 86.499542][ T1306] __i2c_smbus_xfer+0x836/0x1020 [ 86.504597][ T1306] ? mark_held_locks+0x49/0x80 [ 86.509437][ T1306] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.514763][ T1306] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 86.520341][ T1306] ? rt_mutex_slowtrylock+0xc9/0x100 [ 86.525894][ T1306] i2c_smbus_xfer+0x200/0x3c0 [ 86.530751][ T1306] i2c_smbus_read_byte_data+0x135/0x1e0 [ 86.536424][ T1306] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10 [ 86.542530][ T1306] saa711x_probe+0x234/0x20b0 [ 86.547220][ T1306] ? __pfx_saa711x_probe+0x10/0x10 [ 86.552701][ T1306] ? up_write+0xe0/0x520 [ 86.557127][ T1306] ? __pfx_saa711x_probe+0x10/0x10 [ 86.562339][ T1306] i2c_device_probe+0x66d/0xd30 [ 86.567208][ T1306] ? kernfs_put+0x35/0x60 [ 86.571559][ T1306] ? __pfx_i2c_device_probe+0x10/0x10 [ 86.577116][ T1306] ? sysfs_create_link+0x68/0xc0 [ 86.582397][ T1306] ? __pfx_i2c_device_probe+0x10/0x10 [ 86.587784][ T1306] really_probe+0x241/0xa90 [ 86.592395][ T1306] __driver_probe_device+0x1de/0x440 [ 86.597703][ T1306] driver_probe_device+0x4c/0x1b0 [ 86.602820][ T1306] __device_attach_driver+0x1df/0x310 [ 86.608628][ T1306] ? __pfx___device_attach_driver+0x10/0x10 [ 86.614543][ T1306] bus_for_each_drv+0x159/0x1e0 [ 86.619407][ T1306] ? __pfx_bus_for_each_drv+0x10/0x10 [ 86.625225][ T1306] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.630614][ T1306] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.636462][ T1306] __device_attach+0x1e4/0x4b0 [ 86.641263][ T1306] ? __pfx___device_attach+0x10/0x10 [ 86.646645][ T1306] ? do_raw_spin_unlock+0x172/0x230 [ 86.652307][ T1306] bus_probe_device+0x17f/0x1c0 [ 86.657281][ T1306] device_add+0x1148/0x1aa0 [ 86.662184][ T1306] ? __pfx_device_add+0x10/0x10 [ 86.667708][ T1306] ? lockdep_init_map_type+0x5c/0x280 [ 86.673581][ T1306] ? __init_waitqueue_head+0xca/0x150 [ 86.679543][ T1306] i2c_new_client_device+0x660/0xeb0 [ 86.685639][ T1306] v4l2_i2c_new_subdev_board+0xb6/0x300 [ 86.691413][ T1306] v4l2_i2c_new_subdev+0x14f/0x1c0 [ 86.696887][ T1306] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10 [ 86.702732][ T1306] ? __pfx___mutex_trylock_common+0x10/0x10 [ 86.708748][ T1306] ? __pfx_pvr2_context_notify+0x10/0x10 [ 86.714674][ T1306] pvr2_hdw_initialize+0x28d0/0x4510 [ 86.720368][ T1306] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 86.726582][ T1306] ? __pfx___schedule+0x10/0x10 [ 86.731453][ T1306] ? find_held_lock+0x2b/0x80 [ 86.736365][ T1306] ? schedule+0x2d7/0x3a0 [ 86.740881][ T1306] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 86.747391][ T1306] pvr2_context_thread_func+0x253/0x9b0 [ 86.753219][ T1306] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 86.760375][ T1306] ? __pfx_autoremove_wake_function+0x10/0x10 [ 86.766623][ T1306] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.771930][ T1306] ? __kthread_parkme+0x19e/0x250 [ 86.777405][ T1306] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 86.783921][ T1306] kthread+0x3c5/0x780 [ 86.788104][ T1306] ? __pfx_kthread+0x10/0x10 [ 86.792698][ T1306] ? rcu_is_watching+0x12/0xc0 [ 86.797649][ T1306] ? __pfx_kthread+0x10/0x10 [ 86.802432][ T1306] ret_from_fork+0x56d/0x700 [ 86.807029][ T1306] ? __pfx_kthread+0x10/0x10 [ 86.811826][ T1306] ret_from_fork_asm+0x1a/0x30 [ 86.816975][ T1306] [ 86.820376][ T1306] Kernel Offset: disabled [ 86.824787][ T1306] Rebooting in 86400 seconds..