ed greatest stack depth: 23768 bytes left
Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts.
2026/08/16 00:39:40 ignoring optional flag "sandbox_arg"="0"
2026/08/16 00:39:40 ignoring optional flag "type"="gce"
2026/08/16 00:39:40 parsed 1 programs
2026/08/16 00:39:40 executed programs: 0
[ 68.000608][ T29] audit: type=1400 audit(1786840780.702:97): avc: denied { mounton } for pid=3475 comm="syz-executor.0" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 68.026010][ T3475] cgroup: Unknown subsys name 'cpuset'
[ 70.496684][ T29] audit: type=1400 audit(1786840783.202:98): avc: denied { create } for pid=3475 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 77.804888][ T29] audit: type=1400 audit(1786840790.512:99): avc: denied { write } for pid=3919 comm="syz-executor.0" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 77.834882][ T29] audit: type=1400 audit(1786840790.512:100): avc: denied { ioctl } for pid=3919 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 78.069160][ T1125] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 78.228817][ T1125] usb 1-1: Using ep0 maxpacket: 16
[ 78.234714][ T1125] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=3b.05
[ 78.245544][ T1125] usb 1-1: config 0 has an invalid interface number: 138 but max is 1
[ 78.253790][ T1125] usb 1-1: config 0 has no interface number 1
[ 78.260363][ T1125] usb 1-1: config 0 interface 138 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 78.271273][ T1125] usb 1-1: config 0 interface 138 has no altsetting 0
[ 78.280022][ T1125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 78.288086][ T1125] usb 1-1: Product: syz
[ 78.292303][ T1125] usb 1-1: Manufacturer: syz
[ 78.296919][ T1125] usb 1-1: SerialNumber: syz
[ 78.304789][ T1125] usb 1-1: config 0 descriptor??
[ 78.315344][ T1125] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[ 78.323897][ T1125] usb 1-1: selecting invalid altsetting 0
[ 78.334028][ T1125] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[ 78.543400][ T1316] pvrusb2: Invalid read control endpoint
[ 78.549340][ T1316] ------------[ cut here ]------------
[ 78.554831][ T1316] URB ffff88810c7cbe00 submitted while active
[ 78.562328][ T1316] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0, CPU#1: pvrusb2-context/1316
[ 78.573784][ T1316] Modules linked in:
[ 78.577769][ T1316] CPU: 1 UID: 0 PID: 1316 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(lazy)
[ 78.587625][ T1316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 78.597817][ T1316] RIP: 0010:usb_submit_urb+0x168c/0x19b0
[ 78.603619][ T1316] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 ce 9a ba fc 48 8d 3d 67 f4 00 06 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00
[ 78.623463][ T1316] RSP: 0018:ffffc9000415ed88 EFLAGS: 00010293
[ 78.629585][ T1316] RAX: 0000000000000000 RBX: ffff88810c7cbe00 RCX: ffffffff85bfa1f1
[ 78.637626][ T1316] RDX: ffff88810ef28000 RSI: ffff88810c7cbe00 RDI: ffffffff8afa6e20
[ 78.645789][ T1316] RBP: 0000000000000005 R08: 0000000000000005 R09: 0000000000000000
[ 78.653903][ T1316] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 78.662078][ T1316] R13: 00000000c0008200 R14: ffff88811b4bf000 R15: ffff88811a80d650
[ 78.670195][ T1316] FS: 0000000000000000(0000) GS:ffff888268733000(0000) knlGS:0000000000000000
[ 78.679221][ T1316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.685934][ T1316] CR2: 00007f75458ba6b0 CR3: 00000000094ac000 CR4: 00000000003506f0
[ 78.694105][ T1316] Call Trace:
[ 78.697489][ T1316]
[ 78.700470][ T1316] ? lockdep_init_map_type+0x5c/0x250
[ 78.705980][ T1316] ? lockdep_init_map_type+0x5c/0x250
[ 78.711431][ T1316] ? timer_init_key_on_stack+0xdc/0x120
[ 78.717082][ T1316] pvr2_send_request_ex+0x7ed/0x1ea0
[ 78.722456][ T1316] ? __pfx_pvr2_send_request_ex+0x10/0x10
[ 78.728220][ T1316] ? __pfx___mutex_lock+0x10/0x10
[ 78.733520][ T1316] ? __pfx_pvr2_ctl_timeout+0x10/0x10
[ 78.739054][ T1316] ? unwind_next_frame+0x3be/0x2090
[ 78.744266][ T1316] ? lock_release+0x24d/0x310
[ 78.748996][ T1316] pvr2_send_request+0x3a/0x50
[ 78.753900][ T1316] pvr2_i2c_read+0x20c/0x670
[ 78.758513][ T1316] pvr2_i2c_basic_op+0xa4/0x100
[ 78.763450][ T1316] pvr2_i2c_xfer+0x380/0xb50
[ 78.768123][ T1316] ? __pfx_pvr2_i2c_basic_op+0x10/0x10
[ 78.773745][ T1316] __i2c_transfer+0x5d9/0x1740
[ 78.778564][ T1316] ? __pfx___i2c_transfer+0x10/0x10
[ 78.783847][ T1316] i2c_smbus_xfer_emulated+0x235/0x1110
[ 78.789475][ T1316] ? lock_pin_lock+0xd1/0x140
[ 78.794175][ T1316] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10
[ 78.800322][ T1316] ? check_irq_usage+0x6b0/0x810
[ 78.805476][ T1316] __i2c_smbus_xfer+0x619/0x1100
[ 78.810462][ T1316] ? mark_held_locks+0x40/0x70
[ 78.815277][ T1316] ? lockdep_hardirqs_on+0x78/0x100
[ 78.820525][ T1316] ? __pfx___i2c_smbus_xfer+0x10/0x10
[ 78.826087][ T1316] ? rt_mutex_slowtrylock+0x93/0x100
[ 78.831512][ T1316] i2c_smbus_xfer+0x185/0x3c0
[ 78.836233][ T1316] i2c_smbus_read_byte_data+0x135/0x1e0
[ 78.841951][ T1316] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10
[ 78.848075][ T1316] ? check_irq_usage+0x6b0/0x810
[ 78.853063][ T1316] ? fast_dput+0x494/0x6d0
[ 78.857532][ T1316] saa711x_probe+0x1e1/0x870
[ 78.862365][ T1316] ? __pfx_saa711x_probe+0x10/0x10
[ 78.867502][ T1316] ? _raw_spin_unlock+0x28/0x50
[ 78.872464][ T1316] ? dentry_kill+0xc10/0xc20
[ 78.877193][ T1316] ? dput+0x24/0x30
[ 78.881062][ T1316] ? end_dirop+0x82/0xa0
[ 78.885333][ T1316] ? __pfx_saa711x_probe+0x10/0x10
[ 78.890507][ T1316] i2c_device_probe+0x658/0xd10
[ 78.895484][ T1316] ? kernfs_put+0x3f/0x60
[ 78.900064][ T1316] ? __pfx_i2c_device_probe+0x10/0x10
[ 78.905680][ T1316] ? sysfs_create_link+0x68/0xc0
[ 78.910751][ T1316] ? __pfx_i2c_device_probe+0x10/0x10
[ 78.916163][ T1316] really_probe+0x241/0xa60
[ 78.920819][ T1316] __driver_probe_device+0x20e/0x450
[ 78.926128][ T1316] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 78.932091][ T1316] driver_probe_device+0x4a/0x140
[ 78.937145][ T1316] __device_attach_driver+0x1df/0x320
[ 78.942582][ T1316] ? __pfx___device_attach_driver+0x10/0x10
[ 78.948584][ T1316] bus_for_each_drv+0x159/0x1e0
[ 78.953577][ T1316] ? __pfx_bus_for_each_drv+0x10/0x10
[ 78.958993][ T1316] ? lockdep_hardirqs_on+0x78/0x100
[ 78.964311][ T1316] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 78.970177][ T1316] __device_attach+0x1e4/0x4d0
[ 78.974972][ T1316] ? __pfx___device_attach+0x10/0x10
[ 78.980318][ T1316] ? do_raw_spin_unlock+0x145/0x1e0
[ 78.985552][ T1316] device_initial_probe+0xaf/0xd0
[ 78.990628][ T1316] bus_probe_device+0x64/0x160
[ 78.995447][ T1316] device_add+0x121d/0x1970
[ 79.000009][ T1316] ? __pfx_device_add+0x10/0x10
[ 79.004990][ T1316] ? lockdep_init_map_type+0x5c/0x250
[ 79.010414][ T1316] ? __init_waitqueue_head+0xca/0x150
[ 79.015810][ T1316] i2c_new_client_device+0x660/0xd30
[ 79.021166][ T1316] v4l2_i2c_new_subdev_board+0xb6/0x2b0
[ 79.026745][ T1316] v4l2_i2c_new_subdev+0x13e/0x190
[ 79.031907][ T1316] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10
[ 79.037591][ T1316] ? __pfx_pvr2_context_notify+0x10/0x10
[ 79.043270][ T1316] pvr2_hdw_initialize+0x2158/0x3710
[ 79.048820][ T1316] ? __pfx_pvr2_hdw_initialize+0x10/0x10
[ 79.054469][ T1316] ? __mutex_unlock_slowpath+0x35d/0x930
[ 79.060169][ T1316] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 79.066268][ T1316] ? __pfx___schedule+0x10/0x10
[ 79.071360][ T1316] ? find_held_lock+0x2b/0x80
[ 79.076064][ T1316] ? schedule+0x225/0x2c0
[ 79.080494][ T1316] ? kthread+0x13a/0x450
[ 79.084859][ T1316] pvr2_context_thread_func+0x253/0x920
[ 79.090586][ T1316] ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 79.096705][ T1316] ? rcu_is_watching+0x12/0xc0
[ 79.101599][ T1316] ? __pfx_autoremove_wake_function+0x10/0x10
[ 79.107697][ T1316] ? __kthread_parkme+0x18c/0x230
[ 79.112781][ T1316] ? kthread+0x13a/0x450
[ 79.117048][ T1316] ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 79.123238][ T1316] kthread+0x370/0x450
[ 79.127442][ T1316] ? __pfx_kthread+0x10/0x10
[ 79.132077][ T1316] ret_from_fork+0x69a/0xc80
[ 79.136707][ T1316] ? __pfx_ret_from_fork+0x10/0x10
[ 79.142138][ T1316] ? __switch_to+0x7f6/0x10e0
[ 79.146841][ T1316] ? __switch_to_asm+0x39/0x70
[ 79.151699][ T1316] ? __pfx_kthread+0x10/0x10
[ 79.156428][ T1316] ret_from_fork_asm+0x1a/0x30
[ 79.161363][ T1316]
[ 79.164490][ T1316] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 79.172323][ T1316] CPU: 1 UID: 0 PID: 1316 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(lazy)
[ 79.182044][ T1316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 79.192203][ T1316] Call Trace:
[ 79.195509][ T1316]
[ 79.198534][ T1316] dump_stack_lvl+0x100/0x190
[ 79.203396][ T1316] vpanic+0x552/0x970
[ 79.207409][ T1316] ? __pfx_vpanic+0x10/0x10
[ 79.212128][ T1316] panic+0xd1/0xe0
[ 79.215876][ T1316] ? __pfx_panic+0x10/0x10
[ 79.220315][ T1316] ? check_panic_on_warn+0x1f/0x90
[ 79.225510][ T1316] check_panic_on_warn.cold+0x19/0x34
[ 79.230905][ T1316] ? usb_submit_urb+0x1689/0x19b0
[ 79.235943][ T1316] __warn.cold+0x191/0x318
[ 79.240407][ T1316] __report_bug+0x30f/0x440
[ 79.244922][ T1316] ? usb_submit_urb+0x1689/0x19b0
[ 79.249960][ T1316] ? __pfx___report_bug+0x10/0x10
[ 79.255004][ T1316] ? pvr2_send_request_ex+0x7b1/0x1ea0
[ 79.260482][ T1316] ? do_raw_spin_lock+0x128/0x260
[ 79.265535][ T1316] report_bug_entry+0xe1/0x290
[ 79.270325][ T1316] ? usb_submit_urb+0x168c/0x19b0
[ 79.275360][ T1316] handle_bug+0x1cd/0x2a0
[ 79.279697][ T1316] exc_invalid_op+0x17/0x50
[ 79.284210][ T1316] asm_exc_invalid_op+0x1a/0x20
[ 79.289067][ T1316] RIP: 0010:usb_submit_urb+0x168c/0x19b0
[ 79.294889][ T1316] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 ce 9a ba fc 48 8d 3d 67 f4 00 06 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00
[ 79.314604][ T1316] RSP: 0018:ffffc9000415ed88 EFLAGS: 00010293
[ 79.320769][ T1316] RAX: 0000000000000000 RBX: ffff88810c7cbe00 RCX: ffffffff85bfa1f1
[ 79.328751][ T1316] RDX: ffff88810ef28000 RSI: ffff88810c7cbe00 RDI: ffffffff8afa6e20
[ 79.336831][ T1316] RBP: 0000000000000005 R08: 0000000000000005 R09: 0000000000000000
[ 79.344827][ T1316] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 79.352814][ T1316] R13: 00000000c0008200 R14: ffff88811b4bf000 R15: ffff88811a80d650
[ 79.360963][ T1316] ? pvr2_send_request_ex+0x7b1/0x1ea0
[ 79.366613][ T1316] ? usb_submit_urb+0x1682/0x19b0
[ 79.371663][ T1316] ? lockdep_init_map_type+0x5c/0x250
[ 79.377086][ T1316] ? lockdep_init_map_type+0x5c/0x250
[ 79.382474][ T1316] ? timer_init_key_on_stack+0xdc/0x120
[ 79.388038][ T1316] pvr2_send_request_ex+0x7ed/0x1ea0
[ 79.393439][ T1316] ? __pfx_pvr2_send_request_ex+0x10/0x10
[ 79.399189][ T1316] ? __pfx___mutex_lock+0x10/0x10
[ 79.404250][ T1316] ? __pfx_pvr2_ctl_timeout+0x10/0x10
[ 79.409691][ T1316] ? unwind_next_frame+0x3be/0x2090
[ 79.415005][ T1316] ? lock_release+0x24d/0x310
[ 79.419815][ T1316] pvr2_send_request+0x3a/0x50
[ 79.424690][ T1316] pvr2_i2c_read+0x20c/0x670
[ 79.429485][ T1316] pvr2_i2c_basic_op+0xa4/0x100
[ 79.434480][ T1316] pvr2_i2c_xfer+0x380/0xb50
[ 79.439122][ T1316] ? __pfx_pvr2_i2c_basic_op+0x10/0x10
[ 79.444707][ T1316] __i2c_transfer+0x5d9/0x1740
[ 79.449501][ T1316] ? __pfx___i2c_transfer+0x10/0x10
[ 79.454905][ T1316] i2c_smbus_xfer_emulated+0x235/0x1110
[ 79.460472][ T1316] ? lock_pin_lock+0xd1/0x140
[ 79.465250][ T1316] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10
[ 79.471258][ T1316] ? check_irq_usage+0x6b0/0x810
[ 79.476327][ T1316] __i2c_smbus_xfer+0x619/0x1100
[ 79.481279][ T1316] ? mark_held_locks+0x40/0x70
[ 79.486061][ T1316] ? lockdep_hardirqs_on+0x78/0x100
[ 79.491268][ T1316] ? __pfx___i2c_smbus_xfer+0x10/0x10
[ 79.496662][ T1316] ? rt_mutex_slowtrylock+0x93/0x100
[ 79.502150][ T1316] i2c_smbus_xfer+0x185/0x3c0
[ 79.506885][ T1316] i2c_smbus_read_byte_data+0x135/0x1e0
[ 79.512534][ T1316] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10
[ 79.518615][ T1316] ? check_irq_usage+0x6b0/0x810
[ 79.523612][ T1316] ? fast_dput+0x494/0x6d0
[ 79.528143][ T1316] saa711x_probe+0x1e1/0x870
[ 79.532852][ T1316] ? __pfx_saa711x_probe+0x10/0x10
[ 79.538088][ T1316] ? _raw_spin_unlock+0x28/0x50
[ 79.543043][ T1316] ? dentry_kill+0xc10/0xc20
[ 79.547664][ T1316] ? dput+0x24/0x30
[ 79.551514][ T1316] ? end_dirop+0x82/0xa0
[ 79.555799][ T1316] ? __pfx_saa711x_probe+0x10/0x10
[ 79.560947][ T1316] i2c_device_probe+0x658/0xd10
[ 79.565832][ T1316] ? kernfs_put+0x3f/0x60
[ 79.570202][ T1316] ? __pfx_i2c_device_probe+0x10/0x10
[ 79.575627][ T1316] ? sysfs_create_link+0x68/0xc0
[ 79.580606][ T1316] ? __pfx_i2c_device_probe+0x10/0x10
[ 79.586013][ T1316] really_probe+0x241/0xa60
[ 79.590537][ T1316] __driver_probe_device+0x20e/0x450
[ 79.596113][ T1316] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 79.602018][ T1316] driver_probe_device+0x4a/0x140
[ 79.607169][ T1316] __device_attach_driver+0x1df/0x320
[ 79.612590][ T1316] ? __pfx___device_attach_driver+0x10/0x10
[ 79.618510][ T1316] bus_for_each_drv+0x159/0x1e0
[ 79.623373][ T1316] ? __pfx_bus_for_each_drv+0x10/0x10
[ 79.628764][ T1316] ? lockdep_hardirqs_on+0x78/0x100
[ 79.634004][ T1316] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 79.639847][ T1316] __device_attach+0x1e4/0x4d0
[ 79.644726][ T1316] ? __pfx___device_attach+0x10/0x10
[ 79.650027][ T1316] ? do_raw_spin_unlock+0x145/0x1e0
[ 79.655255][ T1316] device_initial_probe+0xaf/0xd0
[ 79.660312][ T1316] bus_probe_device+0x64/0x160
[ 79.665090][ T1316] device_add+0x121d/0x1970
[ 79.669668][ T1316] ? __pfx_device_add+0x10/0x10
[ 79.674670][ T1316] ? lockdep_init_map_type+0x5c/0x250
[ 79.680080][ T1316] ? __init_waitqueue_head+0xca/0x150
[ 79.685501][ T1316] i2c_new_client_device+0x660/0xd30
[ 79.690834][ T1316] v4l2_i2c_new_subdev_board+0xb6/0x2b0
[ 79.696403][ T1316] v4l2_i2c_new_subdev+0x13e/0x190
[ 79.701553][ T1316] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10
[ 79.707239][ T1316] ? __pfx_pvr2_context_notify+0x10/0x10
[ 79.712892][ T1316] pvr2_hdw_initialize+0x2158/0x3710
[ 79.718204][ T1316] ? __pfx_pvr2_hdw_initialize+0x10/0x10
[ 79.723937][ T1316] ? __mutex_unlock_slowpath+0x35d/0x930
[ 79.729586][ T1316] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 79.735576][ T1316] ? __pfx___schedule+0x10/0x10
[ 79.740442][ T1316] ? find_held_lock+0x2b/0x80
[ 79.745139][ T1316] ? schedule+0x225/0x2c0
[ 79.749491][ T1316] ? kthread+0x13a/0x450
[ 79.753762][ T1316] pvr2_context_thread_func+0x253/0x920
[ 79.759363][ T1316] ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 79.765801][ T1316] ? rcu_is_watching+0x12/0xc0
[ 79.770580][ T1316] ? __pfx_autoremove_wake_function+0x10/0x10
[ 79.776754][ T1316] ? __kthread_parkme+0x18c/0x230
[ 79.781810][ T1316] ? kthread+0x13a/0x450
[ 79.786085][ T1316] ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 79.792166][ T1316] kthread+0x370/0x450
[ 79.796259][ T1316] ? __pfx_kthread+0x10/0x10
[ 79.800864][ T1316] ret_from_fork+0x69a/0xc80
[ 79.805682][ T1316] ? __pfx_ret_from_fork+0x10/0x10
[ 79.810813][ T1316] ? __switch_to+0x7f6/0x10e0
[ 79.815512][ T1316] ? __switch_to_asm+0x39/0x70
[ 79.820451][ T1316] ? __pfx_kthread+0x10/0x10
[ 79.825106][ T1316] ret_from_fork_asm+0x1a/0x30
[ 79.830001][ T1316]
[ 79.833328][ T1316] Kernel Offset: disabled
[ 79.837739][ T1316] Rebooting in 86400 seconds..