Warning: Permanently added '10.128.15.209' (ED25519) to the list of known hosts.
executing program
[ 43.775567][ T29] audit: type=1400 audit(1747058093.014:80): avc: denied { execmem } for pid=2939 comm="syz-executor735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 43.795228][ T29] audit: type=1400 audit(1747058093.024:81): avc: denied { read write } for pid=2940 comm="syz-executor735" name="raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 43.819221][ T29] audit: type=1400 audit(1747058093.024:82): avc: denied { open } for pid=2940 comm="syz-executor735" path="/dev/raw-gadget" dev="devtmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 43.842992][ T29] audit: type=1400 audit(1747058093.024:83): avc: denied { ioctl } for pid=2940 comm="syz-executor735" path="/dev/raw-gadget" dev="devtmpfs" ino=236 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 44.016033][ T38] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[ 44.167521][ T38] usb 1-1: not running at top speed; connect to a high speed hub
[ 44.176698][ T38] usb 1-1: config 1 has an invalid interface number: 78 but max is 0
[ 44.184829][ T38] usb 1-1: config 1 has no interface number 0
[ 44.191058][ T38] usb 1-1: config 1 interface 78 has no altsetting 0
[ 44.200765][ T38] usb 1-1: string descriptor 0 read error: -22
[ 44.207223][ T38] usb 1-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57
[ 44.216343][ T38] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 44.239012][ T38] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[ 44.247182][ T38] usb 1-1: selecting invalid altsetting 0
[ 44.463769][ T1305] pvrusb2: Invalid read control endpoint
[ 44.469672][ T1305] ------------[ cut here ]------------
[ 44.475217][ T1305] URB ffff88811681a200 submitted while active
[ 44.483745][ T1305] WARNING: CPU: 1 PID: 1305 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14d5/0x1730
[ 44.493585][ T1305] Modules linked in:
[ 44.497676][ T1305] CPU: 1 UID: 0 PID: 1305 Comm: pvrusb2-context Not tainted 6.15.0-rc4-syzkaller-00104-g588d032e9e56 #0 PREEMPT(voluntary)
[ 44.510618][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 44.520761][ T1305] RIP: 0010:usb_submit_urb+0x14d5/0x1730
[ 44.526487][ T1305] Code: fd eb cb bb fe ff ff ff e9 c6 f3 ff ff e8 d3 08 e7 fc c6 05 f3 b6 d5 05 01 90 48 c7 c7 60 48 c3 87 48 89 de e8 6c 86 aa fc 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 96 f3 ff ff 48 89 ef
[ 44.546236][ T1305] RSP: 0018:ffffc90001fcedc8 EFLAGS: 00010286
[ 44.552440][ T1305] RAX: 0000000000000000 RBX: ffff88811681a200 RCX: ffffffff813feaa8
[ 44.560492][ T1305] RDX: ffff888111721d40 RSI: ffffffff813feab5 RDI: 0000000000000001
[ 44.568545][ T1305] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 44.576604][ T1305] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[ 44.584637][ T1305] R13: 00000000c0008200 R14: ffff888117d12000 R15: ffff888123885608
[ 44.592730][ T1305] FS: 0000000000000000(0000) GS:ffff8882692c4000(0000) knlGS:0000000000000000
[ 44.601742][ T1305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.608445][ T1305] CR2: 00007f3e749bd440 CR3: 0000000008ea4000 CR4: 00000000003506f0
[ 44.616514][ T1305] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 44.624541][ T1305] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 44.632650][ T1305] Call Trace:
[ 44.636036][ T1305]
[ 44.639069][ T1305] ? lockdep_init_map_type+0x5c/0x280
[ 44.641700][ T1119] usb 1-1: USB disconnect, device number 2
[ 44.644582][ T1305] ? init_timer_on_stack_key+0xdc/0x120
[ 44.656114][ T1305] pvr2_send_request_ex+0x7eb/0x1ef0
executing program
[ 44.661583][ T1305] ? pvr2_i2c_write+0x25f/0x4a0
[ 44.666600][ T1305] ? __pfx_pvr2_send_request_ex+0x10/0x10
[ 44.672382][ T1305] ? __pfx_pvr2_ctl_timeout+0x10/0x10
[ 44.677872][ T1305] ? __kasan_check_byte+0x13/0x50
[ 44.682974][ T1305] pvr2_send_request+0x3a/0x50
[ 44.687849][ T1305] pvr2_i2c_read+0x203/0x6d0
[ 44.692885][ T1305] pvr2_i2c_basic_op+0xcf/0xf0
[ 44.697783][ T1305] pvr2_i2c_xfer+0x37d/0xfd0
[ 44.702420][ T1305] ? __pfx_pvr2_i2c_basic_op+0x10/0x10
[ 44.707953][ T1305] ? ret_from_fork_asm+0x1a/0x30
[ 44.712940][ T1305] __i2c_transfer+0x6b3/0x2190
[ 44.717783][ T1305] ? __pfx___i2c_transfer+0x10/0x10
[ 44.723035][ T1305] i2c_smbus_xfer_emulated+0x230/0x11f0
[ 44.728682][ T1305] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10
[ 44.734728][ T1305] ? percpu_rwsem_wait+0x270/0x490
[ 44.739934][ T1305] __i2c_smbus_xfer+0x836/0x1020
[ 44.744931][ T1305] ? mark_held_locks+0x49/0x80
[ 44.749767][ T1305] ? lockdep_hardirqs_on+0x7c/0x110
[ 44.755016][ T1305] ? __pfx___i2c_smbus_xfer+0x10/0x10
[ 44.760462][ T1305] ? rt_mutex_slowtrylock+0xc9/0x100
[ 44.765890][ T1305] i2c_smbus_xfer+0x200/0x3c0
[ 44.770613][ T1305] i2c_smbus_read_byte_data+0x135/0x1e0
[ 44.776235][ T1305] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10
[ 44.782383][ T1305] saa711x_probe+0x234/0x20b0
[ 44.787137][ T1305] ? __pfx_saa711x_probe+0x10/0x10
[ 44.792284][ T1305] ? up_write+0x140/0x520
[ 44.796706][ T1305] ? __pfx_saa711x_probe+0x10/0x10
[ 44.801856][ T1305] i2c_device_probe+0x56f/0xcd0
[ 44.806797][ T1305] ? kernfs_put+0x35/0x60
[ 44.811165][ T1305] ? __pfx_i2c_device_probe+0x10/0x10
[ 44.816607][ T1305] ? sysfs_create_link+0x68/0xc0
[ 44.821585][ T1305] ? __pfx_i2c_device_probe+0x10/0x10
[ 44.827025][ T1305] really_probe+0x23e/0xa90
[ 44.831588][ T1305] __driver_probe_device+0x1de/0x440
[ 44.837424][ T1305] driver_probe_device+0x4c/0x1b0
[ 44.842508][ T1305] __device_attach_driver+0x1df/0x310
[ 44.847985][ T1305] ? __pfx___device_attach_driver+0x10/0x10
[ 44.854113][ T1305] bus_for_each_drv+0x156/0x1e0
[ 44.859047][ T1305] ? __pfx_bus_for_each_drv+0x10/0x10
[ 44.864469][ T1305] ? lockdep_hardirqs_on+0x7c/0x110
[ 44.869741][ T1305] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 44.875593][ T1305] __device_attach+0x1e4/0x4b0
[ 44.880441][ T1305] ? __pfx___device_attach+0x10/0x10
[ 44.885838][ T1305] ? do_raw_spin_unlock+0x172/0x230
[ 44.891136][ T1305] bus_probe_device+0x17f/0x1c0
[ 44.896068][ T1305] device_add+0x1148/0x1a70
[ 44.900616][ T1305] ? __pfx_device_add+0x10/0x10
[ 44.905489][ T1305] ? lockdep_init_map_type+0x5c/0x280
[ 44.910967][ T1305] ? __init_waitqueue_head+0xca/0x150
[ 44.916431][ T1305] i2c_new_client_device+0x6cb/0xe60
[ 44.921765][ T1305] v4l2_i2c_new_subdev_board+0xb6/0x300
[ 44.927417][ T1305] v4l2_i2c_new_subdev+0x148/0x1b0
[ 44.932617][ T1305] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10
[ 44.938356][ T1305] ? __mutex_trylock_common+0xe9/0x250
[ 44.943881][ T1305] ? __pfx_pvr2_context_notify+0x10/0x10
[ 44.949607][ T1305] pvr2_hdw_initialize+0x28d0/0x4510
[ 44.954961][ T1305] ? __pfx_pvr2_hdw_initialize+0x10/0x10
[ 44.960679][ T1305] ? __pfx___schedule+0x10/0x10
[ 44.965579][ T1305] ? find_held_lock+0x2b/0x80
[ 44.970336][ T1305] ? schedule+0x2d7/0x3a0
[ 44.974710][ T1305] ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 44.980859][ T1305] pvr2_context_thread_func+0x253/0x9b0
[ 44.986505][ T1305] ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 44.992611][ T1305] ? __pfx_autoremove_wake_function+0x10/0x10
[ 44.998756][ T1305] ? lockdep_hardirqs_on+0x7c/0x110
[ 45.004092][ T1305] ? __kthread_parkme+0x19e/0x250
[ 45.009191][ T1305] ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 45.015313][ T1305] kthread+0x3c2/0x780
[ 45.019498][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.024230][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.028970][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.033611][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.038287][ T1305] ? rcu_is_watching+0x12/0xc0
[ 45.043265][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.047933][ T1305] ret_from_fork+0x45/0x80
[ 45.052489][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.057163][ T1305] ret_from_fork_asm+0x1a/0x30
[ 45.061996][ T1305]
[ 45.065024][ T1305] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 45.072317][ T1305] CPU: 1 UID: 0 PID: 1305 Comm: pvrusb2-context Not tainted 6.15.0-rc4-syzkaller-00104-g588d032e9e56 #0 PREEMPT(voluntary)
[ 45.085272][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 45.095339][ T1305] Call Trace:
[ 45.098628][ T1305]
[ 45.101564][ T1305] dump_stack_lvl+0x3d/0x1f0
[ 45.106180][ T1305] panic+0x71c/0x800
[ 45.110110][ T1305] ? __pfx_panic+0x10/0x10
[ 45.114561][ T1305] ? show_trace_log_lvl+0x29b/0x3e0
[ 45.119798][ T1305] ? check_panic_on_warn+0x1f/0xb0
[ 45.124947][ T1305] ? usb_submit_urb+0x14d5/0x1730
[ 45.129985][ T1305] check_panic_on_warn+0xab/0xb0
[ 45.135226][ T1305] __warn+0xf6/0x3c0
[ 45.139233][ T1305] ? usb_submit_urb+0x14d5/0x1730
[ 45.144271][ T1305] report_bug+0x3c3/0x580
[ 45.148621][ T1305] ? usb_submit_urb+0x14d5/0x1730
[ 45.153659][ T1305] handle_bug+0x184/0x210
[ 45.158015][ T1305] exc_invalid_op+0x17/0x50
[ 45.162541][ T1305] asm_exc_invalid_op+0x1a/0x20
[ 45.167402][ T1305] RIP: 0010:usb_submit_urb+0x14d5/0x1730
[ 45.173088][ T1305] Code: fd eb cb bb fe ff ff ff e9 c6 f3 ff ff e8 d3 08 e7 fc c6 05 f3 b6 d5 05 01 90 48 c7 c7 60 48 c3 87 48 89 de e8 6c 86 aa fc 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 96 f3 ff ff 48 89 ef
[ 45.192747][ T1305] RSP: 0018:ffffc90001fcedc8 EFLAGS: 00010286
[ 45.198832][ T1305] RAX: 0000000000000000 RBX: ffff88811681a200 RCX: ffffffff813feaa8
[ 45.207000][ T1305] RDX: ffff888111721d40 RSI: ffffffff813feab5 RDI: 0000000000000001
[ 45.215067][ T1305] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 45.223045][ T1305] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[ 45.231048][ T1305] R13: 00000000c0008200 R14: ffff888117d12000 R15: ffff888123885608
[ 45.239052][ T1305] ? __warn_printk+0x198/0x350
[ 45.243840][ T1305] ? __warn_printk+0x1a5/0x350
[ 45.248635][ T1305] ? usb_submit_urb+0x14d4/0x1730
[ 45.253674][ T1305] ? lockdep_init_map_type+0x5c/0x280
[ 45.259089][ T1305] ? init_timer_on_stack_key+0xdc/0x120
[ 45.264671][ T1305] pvr2_send_request_ex+0x7eb/0x1ef0
[ 45.270970][ T1305] ? pvr2_i2c_write+0x25f/0x4a0
[ 45.275849][ T1305] ? __pfx_pvr2_send_request_ex+0x10/0x10
[ 45.281678][ T1305] ? __pfx_pvr2_ctl_timeout+0x10/0x10
[ 45.287073][ T1305] ? __kasan_check_byte+0x13/0x50
[ 45.292120][ T1305] pvr2_send_request+0x3a/0x50
[ 45.296912][ T1305] pvr2_i2c_read+0x203/0x6d0
[ 45.301519][ T1305] pvr2_i2c_basic_op+0xcf/0xf0
[ 45.306302][ T1305] pvr2_i2c_xfer+0x37d/0xfd0
[ 45.310905][ T1305] ? __pfx_pvr2_i2c_basic_op+0x10/0x10
[ 45.316388][ T1305] ? ret_from_fork_asm+0x1a/0x30
[ 45.321348][ T1305] __i2c_transfer+0x6b3/0x2190
[ 45.326143][ T1305] ? __pfx___i2c_transfer+0x10/0x10
[ 45.331366][ T1305] i2c_smbus_xfer_emulated+0x230/0x11f0
[ 45.336957][ T1305] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10
[ 45.342972][ T1305] ? percpu_rwsem_wait+0x270/0x490
[ 45.348120][ T1305] __i2c_smbus_xfer+0x836/0x1020
[ 45.353106][ T1305] ? mark_held_locks+0x49/0x80
[ 45.357893][ T1305] ? lockdep_hardirqs_on+0x7c/0x110
[ 45.363106][ T1305] ? __pfx___i2c_smbus_xfer+0x10/0x10
[ 45.368524][ T1305] ? rt_mutex_slowtrylock+0xc9/0x100
[ 45.373836][ T1305] i2c_smbus_xfer+0x200/0x3c0
[ 45.378546][ T1305] i2c_smbus_read_byte_data+0x135/0x1e0
[ 45.384118][ T1305] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10
[ 45.390226][ T1305] saa711x_probe+0x234/0x20b0
[ 45.394936][ T1305] ? __pfx_saa711x_probe+0x10/0x10
[ 45.400074][ T1305] ? up_write+0x140/0x520
[ 45.404444][ T1305] ? __pfx_saa711x_probe+0x10/0x10
[ 45.409589][ T1305] i2c_device_probe+0x56f/0xcd0
[ 45.414484][ T1305] ? kernfs_put+0x35/0x60
[ 45.418860][ T1305] ? __pfx_i2c_device_probe+0x10/0x10
[ 45.424254][ T1305] ? sysfs_create_link+0x68/0xc0
[ 45.429206][ T1305] ? __pfx_i2c_device_probe+0x10/0x10
[ 45.434599][ T1305] really_probe+0x23e/0xa90
[ 45.439133][ T1305] __driver_probe_device+0x1de/0x440
[ 45.444531][ T1305] driver_probe_device+0x4c/0x1b0
[ 45.449606][ T1305] __device_attach_driver+0x1df/0x310
[ 45.455018][ T1305] ? __pfx___device_attach_driver+0x10/0x10
[ 45.460969][ T1305] bus_for_each_drv+0x156/0x1e0
[ 45.465875][ T1305] ? __pfx_bus_for_each_drv+0x10/0x10
[ 45.471296][ T1305] ? lockdep_hardirqs_on+0x7c/0x110
[ 45.476522][ T1305] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 45.482360][ T1305] __device_attach+0x1e4/0x4b0
[ 45.487180][ T1305] ? __pfx___device_attach+0x10/0x10
[ 45.492711][ T1305] ? do_raw_spin_unlock+0x172/0x230
[ 45.497947][ T1305] bus_probe_device+0x17f/0x1c0
[ 45.502834][ T1305] device_add+0x1148/0x1a70
[ 45.507447][ T1305] ? __pfx_device_add+0x10/0x10
[ 45.512425][ T1305] ? lockdep_init_map_type+0x5c/0x280
[ 45.517837][ T1305] ? __init_waitqueue_head+0xca/0x150
[ 45.523258][ T1305] i2c_new_client_device+0x6cb/0xe60
[ 45.528682][ T1305] v4l2_i2c_new_subdev_board+0xb6/0x300
[ 45.534317][ T1305] v4l2_i2c_new_subdev+0x148/0x1b0
[ 45.539549][ T1305] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10
[ 45.545297][ T1305] ? __mutex_trylock_common+0xe9/0x250
[ 45.550781][ T1305] ? __pfx_pvr2_context_notify+0x10/0x10
[ 45.556462][ T1305] pvr2_hdw_initialize+0x28d0/0x4510
[ 45.561791][ T1305] ? __pfx_pvr2_hdw_initialize+0x10/0x10
[ 45.567477][ T1305] ? __pfx___schedule+0x10/0x10
[ 45.572362][ T1305] ? find_held_lock+0x2b/0x80
[ 45.577052][ T1305] ? schedule+0x2d7/0x3a0
[ 45.581398][ T1305] ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 45.587510][ T1305] pvr2_context_thread_func+0x253/0x9b0
[ 45.593086][ T1305] ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 45.599275][ T1305] ? __pfx_autoremove_wake_function+0x10/0x10
[ 45.605367][ T1305] ? lockdep_hardirqs_on+0x7c/0x110
[ 45.610589][ T1305] ? __kthread_parkme+0x19e/0x250
[ 45.615632][ T1305] ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 45.621823][ T1305] kthread+0x3c2/0x780
[ 45.626101][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.630714][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.635325][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.639950][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.644565][ T1305] ? rcu_is_watching+0x12/0xc0
[ 45.649340][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.653971][ T1305] ret_from_fork+0x45/0x80
[ 45.658427][ T1305] ? __pfx_kthread+0x10/0x10
[ 45.663079][ T1305] ret_from_fork_asm+0x1a/0x30
[ 45.667882][ T1305]
[ 45.671157][ T1305] Kernel Offset: disabled
[ 45.675521][ T1305] Rebooting in 86400 seconds..