Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. 2024/01/18 08:30:36 ignoring optional flag "sandboxArg"="0" 2024/01/18 08:30:36 parsed 1 programs 2024/01/18 08:30:37 executed programs: 0 [ 82.873275][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.113003][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 83.233175][ T9] usb 1-1: config 0 has an invalid interface number: 138 but max is 1 [ 83.241693][ T9] usb 1-1: config 0 has no interface number 1 [ 83.248294][ T9] usb 1-1: config 0 interface 138 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 83.259028][ T9] usb 1-1: config 0 interface 138 has no altsetting 0 [ 83.423168][ T9] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=3b.05 [ 83.432496][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.440755][ T9] usb 1-1: Product: syz [ 83.445112][ T9] usb 1-1: Manufacturer: syz [ 83.449711][ T9] usb 1-1: SerialNumber: syz [ 83.458282][ T9] usb 1-1: config 0 descriptor?? [ 83.506399][ T9] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 83.515163][ T9] usb 1-1: selecting invalid altsetting 0 [ 83.526161][ T9] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 83.735952][ T900] pvrusb2: Invalid read control endpoint [ 83.742049][ T900] ------------[ cut here ]------------ [ 83.747950][ T900] URB ffff88811220e000 submitted while active [ 83.754937][ T900] WARNING: CPU: 1 PID: 900 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14cb/0x1720 [ 83.765427][ T900] Modules linked in: [ 83.769404][ T900] CPU: 1 PID: 900 Comm: pvrusb2-context Not tainted 6.7.0-rc5-syzkaller-00172-g933bb7b878dd #0 [ 83.780716][ T900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 83.791345][ T900] RIP: 0010:usb_submit_urb+0x14cb/0x1720 [ 83.797386][ T900] Code: 46 4c fe eb cb bb fe ff ff ff e9 ca f3 ff ff e8 5b c0 4a fd 48 89 de 48 c7 c7 60 d0 ee 86 c6 05 54 e5 22 05 01 e8 75 ff 13 fd <0f> 0b e9 ba fe ff ff bb f8 ff ff ff e9 9e f3 ff ff 48 89 ef e8 1c [ 83.817551][ T900] RSP: 0018:ffffc90001f2ee38 EFLAGS: 00010286 [ 83.824209][ T900] RAX: 0000000000000000 RBX: ffff88811220e000 RCX: ffffffff811733b9 [ 83.832678][ T900] RDX: ffff888108339d00 RSI: ffffffff811733c6 RDI: 0000000000000001 [ 83.840866][ T900] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 83.849406][ T900] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 83.857648][ T900] R13: 00000000c0008200 R14: ffff888108e71000 R15: ffff8881215655f0 [ 83.865893][ T900] FS: 0000000000000000(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 83.875054][ T900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.881765][ T900] CR2: 00007fe1ac45e440 CR3: 0000000007c9c000 CR4: 00000000003506f0 [ 83.890162][ T900] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.898866][ T900] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.907103][ T900] Call Trace: [ 83.910497][ T900] [ 83.913505][ T900] ? show_regs+0x8f/0xa0 [ 83.917813][ T900] ? __warn+0xe6/0x380 [ 83.922040][ T900] ? usb_submit_urb+0x14cb/0x1720 [ 83.927205][ T900] ? report_bug+0x3bc/0x580 [ 83.931798][ T900] ? handle_bug+0x3c/0x70 [ 83.936468][ T900] ? exc_invalid_op+0x17/0x40 [ 83.941203][ T900] ? asm_exc_invalid_op+0x1a/0x20 [ 83.945066][ T9] usb 1-1: USB disconnect, device number 2 [ 83.946548][ T900] ? __warn_printk+0x199/0x350 [ 83.957544][ T900] ? __warn_printk+0x1a6/0x350 [ 83.962612][ T900] ? usb_submit_urb+0x14cb/0x1720 [ 83.967761][ T900] ? usb_submit_urb+0x14cb/0x1720 [ 83.972961][ T900] ? lockdep_init_map_type+0x16d/0x7c0 [ 83.978642][ T900] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 83.984645][ T900] ? init_timer_on_stack_key+0xdc/0x110 [ 83.990340][ T900] pvr2_send_request_ex+0x7ec/0x1ef0 [ 83.995832][ T900] ? unwind_next_frame+0x51/0x2390 [ 84.000985][ T900] ? pvr2_hdw_render_useless.part.0+0x2d0/0x2d0 [ 84.007808][ T900] ? ret_from_fork_asm+0x11/0x20 [ 84.013169][ T900] ? pvr2_ctl_write_complete+0xe0/0xe0 [ 84.018655][ T900] pvr2_send_request+0x3a/0x50 [ 84.023694][ T900] pvr2_i2c_read+0x204/0x6c0 [ 84.028327][ T900] pvr2_i2c_basic_op+0xc7/0xf0 [ 84.033295][ T900] pvr2_i2c_xfer+0x37a/0xfc0 [ 84.037946][ T900] ? pvr2_i2c_write+0x490/0x490 [ 84.042992][ T900] __i2c_transfer+0x65c/0x1fd0 [ 84.047980][ T900] ? i2c_device_match+0x1e0/0x1e0 [ 84.053157][ T900] ? __lock_acquire+0x1835/0x5dd0 [ 84.058860][ T900] i2c_smbus_xfer_emulated+0x23c/0x1230 [ 84.064706][ T900] ? i2c_smbus_msg_pec+0x210/0x210 [ 84.069896][ T900] ? mark_lock+0x105/0x1950 [ 84.074766][ T900] ? rt_mutex_unlock+0x24a/0x2a0 [ 84.079744][ T900] ? lock_acquire+0x1ae/0x510 [ 84.084762][ T900] ? find_held_lock+0x2d/0x110 [ 84.089654][ T900] __i2c_smbus_xfer+0x7f1/0xf30 [ 84.094655][ T900] ? i2c_smbus_xfer_emulated+0x1230/0x1230 [ 84.100684][ T900] ? lockdep_hardirqs_on+0x7d/0x100 [ 84.106004][ T900] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 84.112059][ T900] i2c_smbus_xfer+0x1f4/0x3b0 [ 84.116920][ T900] i2c_smbus_read_byte_data+0x136/0x1e0 [ 84.122859][ T900] ? i2c_smbus_write_byte+0xe0/0xe0 [ 84.128128][ T900] ? find_held_lock+0x2d/0x110 [ 84.133118][ T900] saa711x_probe+0x22d/0x20b0 [ 84.137994][ T900] ? saa711x_s_std+0x60/0x60 [ 84.142681][ T900] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 84.148565][ T900] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 84.154446][ T900] ? devres_open_group+0x3b8/0x520 [ 84.159672][ T900] ? saa711x_s_std+0x60/0x60 [ 84.164563][ T900] i2c_device_probe+0x4c7/0xb80 [ 84.169737][ T900] ? devm_i2c_del_adapter+0x20/0x20 [ 84.175303][ T900] ? sysfs_create_link+0x68/0xc0 [ 84.180706][ T900] ? devm_i2c_del_adapter+0x20/0x20 [ 84.186129][ T900] really_probe+0x234/0xc90 [ 84.190973][ T900] __driver_probe_device+0x1de/0x4b0 [ 84.196472][ T900] driver_probe_device+0x4c/0x1a0 [ 84.203163][ T900] __device_attach_driver+0x1d4/0x300 [ 84.209353][ T900] ? driver_probe_device+0x1a0/0x1a0 [ 84.214988][ T900] bus_for_each_drv+0x157/0x1d0 [ 84.220516][ T900] ? bus_for_each_dev+0x1d0/0x1d0 [ 84.225909][ T900] ? lockdep_hardirqs_on+0x7d/0x100 [ 84.231341][ T900] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 84.237349][ T900] __device_attach+0x1e8/0x4b0 [ 84.242167][ T900] ? device_driver_attach+0x200/0x200 [ 84.248078][ T900] ? do_raw_spin_unlock+0x173/0x230 [ 84.253466][ T900] bus_probe_device+0x17c/0x1c0 [ 84.258342][ T900] device_add+0x117e/0x1aa0 [ 84.263098][ T900] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 84.270093][ T900] ? __init_waitqueue_head+0xca/0x150 [ 84.275689][ T900] i2c_new_client_device+0x8ec/0xc30 [ 84.281035][ T900] v4l2_i2c_new_subdev_board+0xb6/0x2c0 [ 84.286923][ T900] v4l2_i2c_new_subdev+0x145/0x1b0 [ 84.292069][ T900] ? v4l2_i2c_new_subdev_board+0x2c0/0x2c0 [ 84.298037][ T900] ? find_held_lock+0x2d/0x110 [ 84.302837][ T900] ? pvr2_context_reset_input_limits+0x110/0x110 [ 84.309354][ T900] pvr2_hdw_initialize+0x28be/0x4500 [ 84.314790][ T900] ? pvr2_hdw_gpio_chg_dir+0x210/0x210 [ 84.320384][ T900] ? pvr2_context_destroy+0x270/0x270 [ 84.325940][ T900] pvr2_context_thread_func+0x254/0x960 [ 84.331610][ T900] ? pvr2_context_destroy+0x270/0x270 [ 84.337168][ T900] ? set_next_task_stop+0xc0/0xc0 [ 84.342278][ T900] ? lockdep_hardirqs_on+0x7d/0x100 [ 84.347766][ T900] ? __kthread_parkme+0x14b/0x220 [ 84.353302][ T900] ? pvr2_context_destroy+0x270/0x270 [ 84.358875][ T900] kthread+0x33c/0x440 [ 84.363235][ T900] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.368583][ T900] ? kthread_complete_and_exit+0x40/0x40 [ 84.374552][ T900] ret_from_fork+0x45/0x80 [ 84.379024][ T900] ? kthread_complete_and_exit+0x40/0x40 2024/01/18 08:30:48 executed programs: 1 [ 84.384842][ T900] ret_from_fork_asm+0x11/0x20 [ 84.389741][ T900] [ 84.392858][ T900] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.400165][ T900] CPU: 1 PID: 900 Comm: pvrusb2-context Not tainted 6.7.0-rc5-syzkaller-00172-g933bb7b878dd #0 [ 84.410582][ T900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 84.421005][ T900] Call Trace: [ 84.424302][ T900] [ 84.427343][ T900] dump_stack_lvl+0xd9/0x1b0 [ 84.431986][ T900] panic+0x6dc/0x790 [ 84.436109][ T900] ? panic_smp_self_stop+0xa0/0xa0 [ 84.441312][ T900] ? show_trace_log_lvl+0x363/0x4f0 [ 84.446826][ T900] ? check_panic_on_warn+0x1f/0xb0 [ 84.452256][ T900] ? usb_submit_urb+0x14cb/0x1720 [ 84.457776][ T900] check_panic_on_warn+0xab/0xb0 [ 84.462971][ T900] __warn+0xf2/0x380 [ 84.467180][ T900] ? usb_submit_urb+0x14cb/0x1720 [ 84.472250][ T900] report_bug+0x3bc/0x580 [ 84.476643][ T900] handle_bug+0x3c/0x70 [ 84.480848][ T900] exc_invalid_op+0x17/0x40 [ 84.485501][ T900] asm_exc_invalid_op+0x1a/0x20 [ 84.490726][ T900] RIP: 0010:usb_submit_urb+0x14cb/0x1720 [ 84.497555][ T900] Code: 46 4c fe eb cb bb fe ff ff ff e9 ca f3 ff ff e8 5b c0 4a fd 48 89 de 48 c7 c7 60 d0 ee 86 c6 05 54 e5 22 05 01 e8 75 ff 13 fd <0f> 0b e9 ba fe ff ff bb f8 ff ff ff e9 9e f3 ff ff 48 89 ef e8 1c [ 84.517388][ T900] RSP: 0018:ffffc90001f2ee38 EFLAGS: 00010286 [ 84.524181][ T900] RAX: 0000000000000000 RBX: ffff88811220e000 RCX: ffffffff811733b9 [ 84.533871][ T900] RDX: ffff888108339d00 RSI: ffffffff811733c6 RDI: 0000000000000001 [ 84.542124][ T900] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 84.550421][ T900] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 84.558865][ T900] R13: 00000000c0008200 R14: ffff888108e71000 R15: ffff8881215655f0 [ 84.567293][ T900] ? __warn_printk+0x199/0x350 [ 84.572336][ T900] ? __warn_printk+0x1a6/0x350 [ 84.577204][ T900] ? usb_submit_urb+0x14cb/0x1720 [ 84.582406][ T900] ? lockdep_init_map_type+0x16d/0x7c0 [ 84.588408][ T900] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 84.594747][ T900] ? init_timer_on_stack_key+0xdc/0x110 [ 84.600578][ T900] pvr2_send_request_ex+0x7ec/0x1ef0 [ 84.605998][ T900] ? unwind_next_frame+0x51/0x2390 [ 84.611135][ T900] ? pvr2_hdw_render_useless.part.0+0x2d0/0x2d0 [ 84.617936][ T900] ? ret_from_fork_asm+0x11/0x20 [ 84.622920][ T900] ? pvr2_ctl_write_complete+0xe0/0xe0 [ 84.628893][ T900] pvr2_send_request+0x3a/0x50 [ 84.634311][ T900] pvr2_i2c_read+0x204/0x6c0 [ 84.639265][ T900] pvr2_i2c_basic_op+0xc7/0xf0 [ 84.644124][ T900] pvr2_i2c_xfer+0x37a/0xfc0 [ 84.648721][ T900] ? pvr2_i2c_write+0x490/0x490 [ 84.653594][ T900] __i2c_transfer+0x65c/0x1fd0 [ 84.658368][ T900] ? i2c_device_match+0x1e0/0x1e0 [ 84.663668][ T900] ? __lock_acquire+0x1835/0x5dd0 [ 84.668794][ T900] i2c_smbus_xfer_emulated+0x23c/0x1230 [ 84.674494][ T900] ? i2c_smbus_msg_pec+0x210/0x210 [ 84.679853][ T900] ? mark_lock+0x105/0x1950 [ 84.684469][ T900] ? rt_mutex_unlock+0x24a/0x2a0 [ 84.689619][ T900] ? lock_acquire+0x1ae/0x510 [ 84.694315][ T900] ? find_held_lock+0x2d/0x110 [ 84.699185][ T900] __i2c_smbus_xfer+0x7f1/0xf30 [ 84.704074][ T900] ? i2c_smbus_xfer_emulated+0x1230/0x1230 [ 84.709905][ T900] ? lockdep_hardirqs_on+0x7d/0x100 [ 84.715216][ T900] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 84.721077][ T900] i2c_smbus_xfer+0x1f4/0x3b0 [ 84.725797][ T900] i2c_smbus_read_byte_data+0x136/0x1e0 [ 84.731360][ T900] ? i2c_smbus_write_byte+0xe0/0xe0 [ 84.736940][ T900] ? find_held_lock+0x2d/0x110 [ 84.741901][ T900] saa711x_probe+0x22d/0x20b0 [ 84.746763][ T900] ? saa711x_s_std+0x60/0x60 [ 84.751464][ T900] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 84.757482][ T900] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 84.763395][ T900] ? devres_open_group+0x3b8/0x520 [ 84.768686][ T900] ? saa711x_s_std+0x60/0x60 [ 84.773714][ T900] i2c_device_probe+0x4c7/0xb80 [ 84.778579][ T900] ? devm_i2c_del_adapter+0x20/0x20 [ 84.783802][ T900] ? sysfs_create_link+0x68/0xc0 [ 84.788750][ T900] ? devm_i2c_del_adapter+0x20/0x20 [ 84.794136][ T900] really_probe+0x234/0xc90 [ 84.798842][ T900] __driver_probe_device+0x1de/0x4b0 [ 84.804717][ T900] driver_probe_device+0x4c/0x1a0 [ 84.810101][ T900] __device_attach_driver+0x1d4/0x300 [ 84.815562][ T900] ? driver_probe_device+0x1a0/0x1a0 [ 84.820933][ T900] bus_for_each_drv+0x157/0x1d0 [ 84.825819][ T900] ? bus_for_each_dev+0x1d0/0x1d0 [ 84.831212][ T900] ? lockdep_hardirqs_on+0x7d/0x100 [ 84.836505][ T900] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 84.842485][ T900] __device_attach+0x1e8/0x4b0 [ 84.847344][ T900] ? device_driver_attach+0x200/0x200 [ 84.853033][ T900] ? do_raw_spin_unlock+0x173/0x230 [ 84.858422][ T900] bus_probe_device+0x17c/0x1c0 [ 84.863644][ T900] device_add+0x117e/0x1aa0 [ 84.868343][ T900] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 84.875286][ T900] ? __init_waitqueue_head+0xca/0x150 [ 84.880849][ T900] i2c_new_client_device+0x8ec/0xc30 [ 84.886688][ T900] v4l2_i2c_new_subdev_board+0xb6/0x2c0 [ 84.893320][ T900] v4l2_i2c_new_subdev+0x145/0x1b0 [ 84.898566][ T900] ? v4l2_i2c_new_subdev_board+0x2c0/0x2c0 [ 84.904407][ T900] ? find_held_lock+0x2d/0x110 [ 84.909374][ T900] ? pvr2_context_reset_input_limits+0x110/0x110 [ 84.916162][ T900] pvr2_hdw_initialize+0x28be/0x4500 [ 84.921597][ T900] ? pvr2_hdw_gpio_chg_dir+0x210/0x210 [ 84.927349][ T900] ? pvr2_context_destroy+0x270/0x270 [ 84.933269][ T900] pvr2_context_thread_func+0x254/0x960 [ 84.939319][ T900] ? pvr2_context_destroy+0x270/0x270 [ 84.944799][ T900] ? set_next_task_stop+0xc0/0xc0 [ 84.950981][ T900] ? lockdep_hardirqs_on+0x7d/0x100 [ 84.956284][ T900] ? __kthread_parkme+0x14b/0x220 [ 84.961400][ T900] ? pvr2_context_destroy+0x270/0x270 [ 84.966957][ T900] kthread+0x33c/0x440 [ 84.971116][ T900] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.976420][ T900] ? kthread_complete_and_exit+0x40/0x40 [ 84.982106][ T900] ret_from_fork+0x45/0x80 [ 84.986567][ T900] ? kthread_complete_and_exit+0x40/0x40 [ 84.992551][ T900] ret_from_fork_asm+0x11/0x20 [ 84.997506][ T900] [ 85.000737][ T900] Kernel Offset: disabled [ 85.005266][ T900] Rebooting in 86400 seconds..