Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. 2023/11/09 07:48:40 ignoring optional flag "sandboxArg"="0" 2023/11/09 07:48:41 parsed 1 programs 2023/11/09 07:48:41 executed programs: 0 [ 84.123486][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.363139][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 84.483217][ T8] usb 1-1: config 0 has an invalid interface number: 138 but max is 1 [ 84.491777][ T8] usb 1-1: config 0 has no interface number 1 [ 84.498577][ T8] usb 1-1: config 0 interface 138 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 84.511203][ T8] usb 1-1: config 0 interface 138 has no altsetting 0 [ 84.673392][ T8] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=3b.05 [ 84.682629][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.690663][ T8] usb 1-1: Product: syz [ 84.694964][ T8] usb 1-1: Manufacturer: syz [ 84.699917][ T8] usb 1-1: SerialNumber: syz [ 84.707745][ T8] usb 1-1: config 0 descriptor?? [ 84.756523][ T8] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 84.764767][ T8] usb 1-1: selecting invalid altsetting 0 [ 84.775206][ T8] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 84.987288][ T901] pvrusb2: Invalid read control endpoint [ 84.993661][ T901] ------------[ cut here ]------------ [ 84.999650][ T901] URB ffff88811206da00 submitted while active [ 85.006836][ T901] WARNING: CPU: 1 PID: 901 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14cb/0x1720 [ 85.016719][ T901] Modules linked in: [ 85.021072][ T901] CPU: 1 PID: 901 Comm: pvrusb2-context Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 85.031309][ T901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 85.041521][ T901] RIP: 0010:usb_submit_urb+0x14cb/0x1720 [ 85.047333][ T901] Code: f0 4a fe eb cb bb fe ff ff ff e9 ca f3 ff ff e8 2b ae 49 fd 48 89 de 48 c7 c7 20 33 ef 86 c6 05 81 a0 23 05 01 e8 b5 ef 12 fd <0f> 0b e9 ba fe ff ff bb f8 ff ff ff e9 9e f3 ff ff 48 89 ef e8 2c [ 85.069535][ T901] RSP: 0018:ffffc90001f3ee38 EFLAGS: 00010286 [ 85.075929][ T901] RAX: 0000000000000000 RBX: ffff88811206da00 RCX: ffffffff811733b9 [ 85.084319][ T901] RDX: ffff888108b68000 RSI: ffffffff811733c6 RDI: 0000000000000001 [ 85.092309][ T901] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 85.100769][ T901] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 85.109089][ T901] R13: 00000000c0008200 R14: ffff888107e60000 R15: ffff88810b3f15f0 [ 85.117557][ T901] FS: 0000000000000000(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000 [ 85.127648][ T901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.134321][ T901] CR2: 000055cb69571f98 CR3: 000000010ded3000 CR4: 00000000003506f0 [ 85.142437][ T901] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.151908][ T901] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.161173][ T901] Call Trace: [ 85.164573][ T901] [ 85.167660][ T901] ? show_regs+0x8f/0xa0 [ 85.172117][ T901] ? __warn+0xe6/0x380 [ 85.176483][ T901] ? usb_submit_urb+0x14cb/0x1720 [ 85.181648][ T901] ? report_bug+0x3bc/0x580 [ 85.186670][ T901] ? handle_bug+0x3c/0x70 [ 85.190859][ T8] usb 1-1: USB disconnect, device number 2 [ 85.191143][ T901] ? exc_invalid_op+0x17/0x40 [ 85.202206][ T901] ? asm_exc_invalid_op+0x1a/0x20 [ 85.207498][ T901] ? __warn_printk+0x199/0x350 [ 85.212308][ T901] ? __warn_printk+0x1a6/0x350 [ 85.217269][ T901] ? usb_submit_urb+0x14cb/0x1720 [ 85.222351][ T901] ? usb_submit_urb+0x14cb/0x1720 [ 85.227508][ T901] ? lockdep_init_map_type+0x16d/0x7c0 [ 85.233014][ T901] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 85.238983][ T901] ? init_timer_on_stack_key+0xdc/0x110 [ 85.244692][ T901] pvr2_send_request_ex+0x7ec/0x1ef0 [ 85.250257][ T901] ? print_usage_bug.part.0+0x670/0x670 [ 85.256412][ T901] ? pvr2_hdw_render_useless.part.0+0x2d0/0x2d0 [ 85.262704][ T901] ? pvr2_ctl_write_complete+0xe0/0xe0 [ 85.268247][ T901] pvr2_send_request+0x3a/0x50 [ 85.273495][ T901] pvr2_i2c_read+0x204/0x6c0 [ 85.278091][ T901] pvr2_i2c_basic_op+0xc7/0xf0 [ 85.283811][ T901] pvr2_i2c_xfer+0x37a/0xfc0 [ 85.288620][ T901] ? pvr2_i2c_write+0x490/0x490 [ 85.293887][ T901] ? print_usage_bug.part.0+0x670/0x670 [ 85.299632][ T901] __i2c_transfer+0x65c/0x1fd0 [ 85.304522][ T901] ? i2c_device_match+0x1e0/0x1e0 [ 85.309768][ T901] ? __lock_acquire+0x182f/0x5de0 [ 85.315216][ T901] i2c_smbus_xfer_emulated+0x23c/0x1230 [ 85.321067][ T901] ? i2c_smbus_msg_pec+0x210/0x210 [ 85.326246][ T901] ? mark_lock+0x105/0x1950 [ 85.330777][ T901] ? lock_acquire+0x1ae/0x510 [ 85.336153][ T901] ? find_held_lock+0x2d/0x110 [ 85.340952][ T901] __i2c_smbus_xfer+0x7f1/0xf30 [ 85.345971][ T901] ? i2c_smbus_xfer_emulated+0x1230/0x1230 [ 85.352169][ T901] ? lockdep_hardirqs_on+0x7d/0x100 [ 85.357436][ T901] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 85.363388][ T901] i2c_smbus_xfer+0x1f4/0x3b0 [ 85.368103][ T901] i2c_smbus_read_byte_data+0x136/0x1e0 [ 85.373898][ T901] ? i2c_smbus_write_byte+0xe0/0xe0 [ 85.379303][ T901] ? find_held_lock+0x2d/0x110 [ 85.384404][ T901] saa711x_probe+0x22d/0x20b0 [ 85.389213][ T901] ? saa711x_s_std+0x60/0x60 [ 85.394321][ T901] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 85.400264][ T901] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 85.406248][ T901] ? devres_open_group+0x3b8/0x520 [ 85.411470][ T901] ? saa711x_s_std+0x60/0x60 [ 85.416290][ T901] i2c_device_probe+0x4c7/0xb80 [ 85.421345][ T901] ? devm_i2c_del_adapter+0x20/0x20 [ 85.426709][ T901] ? sysfs_create_link+0x68/0xc0 [ 85.431706][ T901] ? devm_i2c_del_adapter+0x20/0x20 [ 85.437005][ T901] really_probe+0x234/0xc90 [ 85.441811][ T901] __driver_probe_device+0x1de/0x4b0 [ 85.448041][ T901] driver_probe_device+0x4c/0x1a0 [ 85.453237][ T901] __device_attach_driver+0x1d4/0x300 [ 85.459110][ T901] ? driver_probe_device+0x1a0/0x1a0 [ 85.464597][ T901] bus_for_each_drv+0x157/0x1d0 [ 85.470028][ T901] ? bus_for_each_dev+0x1d0/0x1d0 [ 85.475383][ T901] ? lockdep_hardirqs_on+0x7d/0x100 [ 85.480897][ T901] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 85.487430][ T901] __device_attach+0x1e8/0x4b0 [ 85.492255][ T901] ? device_driver_attach+0x200/0x200 [ 85.497862][ T901] ? do_raw_spin_unlock+0x173/0x230 [ 85.503530][ T901] bus_probe_device+0x17c/0x1c0 [ 85.508777][ T901] device_add+0x117e/0x1aa0 [ 85.513475][ T901] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 85.520381][ T901] ? __init_waitqueue_head+0xca/0x150 [ 85.525863][ T901] i2c_new_client_device+0x8ec/0xc30 [ 85.531311][ T901] v4l2_i2c_new_subdev_board+0xb6/0x2c0 [ 85.537167][ T901] v4l2_i2c_new_subdev+0x145/0x1b0 [ 85.542586][ T901] ? v4l2_i2c_new_subdev_board+0x2c0/0x2c0 [ 85.548930][ T901] ? find_held_lock+0x2d/0x110 [ 85.553795][ T901] ? pvr2_context_reset_input_limits+0x110/0x110 [ 85.560329][ T901] pvr2_hdw_initialize+0x28b5/0x44f0 [ 85.566147][ T901] ? pvr2_hdw_gpio_chg_dir+0x210/0x210 [ 85.572031][ T901] ? pvr2_context_destroy+0x270/0x270 [ 85.577784][ T901] pvr2_context_thread_func+0x254/0x960 [ 85.583454][ T901] ? pvr2_context_destroy+0x270/0x270 [ 85.589063][ T901] ? set_next_task_stop+0xc0/0xc0 [ 85.594628][ T901] ? lockdep_hardirqs_on+0x7d/0x100 [ 85.600077][ T901] ? __kthread_parkme+0x14b/0x220 [ 85.605490][ T901] ? pvr2_context_destroy+0x270/0x270 [ 85.610927][ T901] kthread+0x33c/0x440 [ 85.615201][ T901] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.620741][ T901] ? kthread_complete_and_exit+0x40/0x40 [ 85.626559][ T901] ret_from_fork+0x45/0x80 [ 85.631370][ T901] ? kthread_complete_and_exit+0x40/0x40 2023/11/09 07:48:52 executed programs: 1 [ 85.637521][ T901] ret_from_fork_asm+0x11/0x20 [ 85.642641][ T901] [ 85.645929][ T901] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.653667][ T901] CPU: 1 PID: 901 Comm: pvrusb2-context Not tainted 6.6.0-syzkaller-14651-gd2f51b3516da #0 [ 85.663744][ T901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 85.674010][ T901] Call Trace: [ 85.677518][ T901] [ 85.680475][ T901] dump_stack_lvl+0xd9/0x1b0 [ 85.685295][ T901] panic+0x6dc/0x790 [ 85.689249][ T901] ? panic_smp_self_stop+0xa0/0xa0 [ 85.694421][ T901] ? show_trace_log_lvl+0x363/0x4f0 [ 85.699639][ T901] ? check_panic_on_warn+0x1f/0xb0 [ 85.705454][ T901] ? usb_submit_urb+0x14cb/0x1720 [ 85.710510][ T901] check_panic_on_warn+0xab/0xb0 [ 85.715658][ T901] __warn+0xf2/0x380 [ 85.719693][ T901] ? usb_submit_urb+0x14cb/0x1720 [ 85.724922][ T901] report_bug+0x3bc/0x580 [ 85.729315][ T901] handle_bug+0x3c/0x70 [ 85.733481][ T901] exc_invalid_op+0x17/0x40 [ 85.738162][ T901] asm_exc_invalid_op+0x1a/0x20 [ 85.743176][ T901] RIP: 0010:usb_submit_urb+0x14cb/0x1720 [ 85.749436][ T901] Code: f0 4a fe eb cb bb fe ff ff ff e9 ca f3 ff ff e8 2b ae 49 fd 48 89 de 48 c7 c7 20 33 ef 86 c6 05 81 a0 23 05 01 e8 b5 ef 12 fd <0f> 0b e9 ba fe ff ff bb f8 ff ff ff e9 9e f3 ff ff 48 89 ef e8 2c [ 85.770364][ T901] RSP: 0018:ffffc90001f3ee38 EFLAGS: 00010286 [ 85.776456][ T901] RAX: 0000000000000000 RBX: ffff88811206da00 RCX: ffffffff811733b9 [ 85.784700][ T901] RDX: ffff888108b68000 RSI: ffffffff811733c6 RDI: 0000000000000001 [ 85.793024][ T901] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 85.801132][ T901] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 85.809745][ T901] R13: 00000000c0008200 R14: ffff888107e60000 R15: ffff88810b3f15f0 [ 85.818167][ T901] ? __warn_printk+0x199/0x350 [ 85.823294][ T901] ? __warn_printk+0x1a6/0x350 [ 85.828247][ T901] ? usb_submit_urb+0x14cb/0x1720 [ 85.833369][ T901] ? lockdep_init_map_type+0x16d/0x7c0 [ 85.838830][ T901] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 85.844734][ T901] ? init_timer_on_stack_key+0xdc/0x110 [ 85.850378][ T901] pvr2_send_request_ex+0x7ec/0x1ef0 [ 85.855677][ T901] ? print_usage_bug.part.0+0x670/0x670 [ 85.861239][ T901] ? pvr2_hdw_render_useless.part.0+0x2d0/0x2d0 [ 85.868106][ T901] ? pvr2_ctl_write_complete+0xe0/0xe0 [ 85.873663][ T901] pvr2_send_request+0x3a/0x50 [ 85.878603][ T901] pvr2_i2c_read+0x204/0x6c0 [ 85.883202][ T901] pvr2_i2c_basic_op+0xc7/0xf0 [ 85.887974][ T901] pvr2_i2c_xfer+0x37a/0xfc0 [ 85.892663][ T901] ? pvr2_i2c_write+0x490/0x490 [ 85.898046][ T901] ? print_usage_bug.part.0+0x670/0x670 [ 85.903873][ T901] __i2c_transfer+0x65c/0x1fd0 [ 85.908775][ T901] ? i2c_device_match+0x1e0/0x1e0 [ 85.913895][ T901] ? __lock_acquire+0x182f/0x5de0 [ 85.919012][ T901] i2c_smbus_xfer_emulated+0x23c/0x1230 [ 85.924771][ T901] ? i2c_smbus_msg_pec+0x210/0x210 [ 85.930333][ T901] ? mark_lock+0x105/0x1950 [ 85.935266][ T901] ? lock_acquire+0x1ae/0x510 [ 85.940037][ T901] ? find_held_lock+0x2d/0x110 [ 85.944815][ T901] __i2c_smbus_xfer+0x7f1/0xf30 [ 85.950022][ T901] ? i2c_smbus_xfer_emulated+0x1230/0x1230 [ 85.956041][ T901] ? lockdep_hardirqs_on+0x7d/0x100 [ 85.961319][ T901] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 85.967301][ T901] i2c_smbus_xfer+0x1f4/0x3b0 [ 85.972521][ T901] i2c_smbus_read_byte_data+0x136/0x1e0 [ 85.978810][ T901] ? i2c_smbus_write_byte+0xe0/0xe0 [ 85.984480][ T901] ? find_held_lock+0x2d/0x110 [ 85.989352][ T901] saa711x_probe+0x22d/0x20b0 [ 85.994037][ T901] ? saa711x_s_std+0x60/0x60 [ 85.998716][ T901] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 86.004873][ T901] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 86.010866][ T901] ? devres_open_group+0x3b8/0x520 [ 86.015983][ T901] ? saa711x_s_std+0x60/0x60 [ 86.020678][ T901] i2c_device_probe+0x4c7/0xb80 [ 86.025641][ T901] ? devm_i2c_del_adapter+0x20/0x20 [ 86.030850][ T901] ? sysfs_create_link+0x68/0xc0 [ 86.035985][ T901] ? devm_i2c_del_adapter+0x20/0x20 [ 86.041205][ T901] really_probe+0x234/0xc90 [ 86.045840][ T901] __driver_probe_device+0x1de/0x4b0 [ 86.052163][ T901] driver_probe_device+0x4c/0x1a0 [ 86.057922][ T901] __device_attach_driver+0x1d4/0x300 [ 86.063533][ T901] ? driver_probe_device+0x1a0/0x1a0 [ 86.069578][ T901] bus_for_each_drv+0x157/0x1d0 [ 86.074846][ T901] ? bus_for_each_dev+0x1d0/0x1d0 [ 86.080160][ T901] ? lockdep_hardirqs_on+0x7d/0x100 [ 86.085552][ T901] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 86.091834][ T901] __device_attach+0x1e8/0x4b0 [ 86.097473][ T901] ? device_driver_attach+0x200/0x200 [ 86.102951][ T901] ? do_raw_spin_unlock+0x173/0x230 [ 86.108356][ T901] bus_probe_device+0x17c/0x1c0 [ 86.113324][ T901] device_add+0x117e/0x1aa0 [ 86.118216][ T901] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 86.125178][ T901] ? __init_waitqueue_head+0xca/0x150 [ 86.130563][ T901] i2c_new_client_device+0x8ec/0xc30 [ 86.136327][ T901] v4l2_i2c_new_subdev_board+0xb6/0x2c0 [ 86.142787][ T901] v4l2_i2c_new_subdev+0x145/0x1b0 [ 86.148188][ T901] ? v4l2_i2c_new_subdev_board+0x2c0/0x2c0 [ 86.154135][ T901] ? find_held_lock+0x2d/0x110 [ 86.159279][ T901] ? pvr2_context_reset_input_limits+0x110/0x110 [ 86.165831][ T901] pvr2_hdw_initialize+0x28b5/0x44f0 [ 86.171518][ T901] ? pvr2_hdw_gpio_chg_dir+0x210/0x210 [ 86.177101][ T901] ? pvr2_context_destroy+0x270/0x270 [ 86.182682][ T901] pvr2_context_thread_func+0x254/0x960 [ 86.188333][ T901] ? pvr2_context_destroy+0x270/0x270 [ 86.193888][ T901] ? set_next_task_stop+0xc0/0xc0 [ 86.199006][ T901] ? lockdep_hardirqs_on+0x7d/0x100 [ 86.204426][ T901] ? __kthread_parkme+0x14b/0x220 [ 86.209542][ T901] ? pvr2_context_destroy+0x270/0x270 [ 86.215118][ T901] kthread+0x33c/0x440 [ 86.219308][ T901] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.224599][ T901] ? kthread_complete_and_exit+0x40/0x40 [ 86.230616][ T901] ret_from_fork+0x45/0x80 [ 86.235312][ T901] ? kthread_complete_and_exit+0x40/0x40 [ 86.240963][ T901] ret_from_fork_asm+0x11/0x20 [ 86.246001][ T901] [ 86.249429][ T901] Kernel Offset: disabled [ 86.254297][ T901] Rebooting in 86400 seconds..