Warning: Permanently added '[localhost]:27150' (ED25519) to the list of known hosts. [ 50.462387][ T40] audit: type=1400 audit(1771452787.506:62): avc: denied { execute } for pid=5921 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 50.469582][ T40] audit: type=1400 audit(1771452787.506:63): avc: denied { execute_no_trans } for pid=5921 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/02/18 22:13:08 parsed 1 programs [ 51.728457][ T40] audit: type=1400 audit(1771452788.766:64): avc: denied { node_bind } for pid=5921 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.947543][ T40] audit: type=1400 audit(1771452790.986:65): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 53.955832][ T40] audit: type=1400 audit(1771452790.996:66): avc: denied { mount } for pid=5931 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.957607][ T5931] cgroup: Unknown subsys name 'net' [ 53.966522][ T40] audit: type=1400 audit(1771452791.006:67): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.134537][ T5931] cgroup: Unknown subsys name 'cpuset' [ 54.138739][ T5931] cgroup: Unknown subsys name 'rlimit' [ 54.279059][ T40] audit: type=1400 audit(1771452791.316:68): avc: denied { setattr } for pid=5931 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.287534][ T40] audit: type=1400 audit(1771452791.316:69): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.294136][ T40] audit: type=1400 audit(1771452791.316:70): avc: denied { write } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.300894][ T40] audit: type=1400 audit(1771452791.316:71): avc: denied { read } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.333732][ T5934] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 55.032294][ T5931] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.685753][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 56.685765][ T40] audit: type=1400 audit(1771452793.726:82): avc: denied { execmem } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.742557][ T40] audit: type=1400 audit(1771452793.786:83): avc: denied { read } for pid=5940 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.750576][ T40] audit: type=1400 audit(1771452793.786:84): avc: denied { open } for pid=5940 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.758375][ T40] audit: type=1400 audit(1771452793.786:85): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.797634][ T40] audit: type=1400 audit(1771452793.836:86): avc: denied { mount } for pid=5940 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.805327][ T40] audit: type=1400 audit(1771452793.836:87): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/syzkaller.LmvXjV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.813818][ T40] audit: type=1400 audit(1771452793.836:88): avc: denied { mount } for pid=5940 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.820577][ T40] audit: type=1400 audit(1771452793.846:89): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/syzkaller.LmvXjV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.828891][ T40] audit: type=1400 audit(1771452793.846:90): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/syzkaller.LmvXjV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.837722][ T40] audit: type=1400 audit(1771452793.846:91): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.848970][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.740405][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 57.802123][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.804403][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.806682][ T5970] bridge_slave_0: entered allmulticast mode [ 57.809790][ T5970] bridge_slave_0: entered promiscuous mode [ 57.813677][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.816259][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.818527][ T5970] bridge_slave_1: entered allmulticast mode [ 57.821138][ T5970] bridge_slave_1: entered promiscuous mode [ 57.840823][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.848362][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.868620][ T5970] team0: Port device team_slave_0 added [ 57.872229][ T5970] team0: Port device team_slave_1 added [ 57.890172][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.893165][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.903327][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.908970][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.911747][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.921958][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.946467][ T5970] hsr_slave_0: entered promiscuous mode [ 57.949087][ T5970] hsr_slave_1: entered promiscuous mode [ 58.054605][ T5970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.060960][ T5970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.069026][ T5970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.078293][ T5970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.094816][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.097440][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.100174][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.102503][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.135294][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.151005][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.155192][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.166009][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.175124][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.178147][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.186679][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.189018][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.313900][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.337892][ T5970] veth0_vlan: entered promiscuous mode [ 58.345497][ T5970] veth1_vlan: entered promiscuous mode [ 58.361055][ T5970] veth0_macvtap: entered promiscuous mode [ 58.368265][ T5970] veth1_macvtap: entered promiscuous mode [ 58.377706][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.384569][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.390786][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.394547][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.402240][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.405087][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.497175][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.602628][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.605277][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.614743][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.631144][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.633725][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.693777][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.773308][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.778974][ T6002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.782439][ T6002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.785172][ T6002] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.788339][ T6002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.790920][ T6002] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/02/18 22:13:16 executed programs: 0 [ 59.853176][ T5287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.856208][ T5287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.859216][ T5287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.862311][ T5287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.865124][ T5287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.961198][ T6035] chnl_net:caif_netlink_parms(): no params data found [ 60.005922][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.008230][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.010535][ T6035] bridge_slave_0: entered allmulticast mode [ 60.013322][ T6035] bridge_slave_0: entered promiscuous mode [ 60.017859][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.020155][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.022647][ T6035] bridge_slave_1: entered allmulticast mode [ 60.025416][ T6035] bridge_slave_1: entered promiscuous mode [ 60.039893][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.044268][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.059704][ T6035] team0: Port device team_slave_0 added [ 60.062866][ T6035] team0: Port device team_slave_1 added [ 60.078129][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.080295][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.088303][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.094383][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.097154][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.107254][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.135820][ T6035] hsr_slave_0: entered promiscuous mode [ 60.138250][ T6035] hsr_slave_1: entered promiscuous mode [ 60.140260][ T6035] debugfs: 'hsr0' already exists in 'hsr' [ 60.142204][ T6035] Cannot create hsr debugfs directory [ 61.912642][ T5287] Bluetooth: hci0: command tx timeout [ 61.953239][ T46] bridge_slave_1: left allmulticast mode [ 61.955144][ T46] bridge_slave_1: left promiscuous mode [ 61.957476][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.963700][ T46] bridge_slave_0: left allmulticast mode [ 61.965628][ T46] bridge_slave_0: left promiscuous mode [ 61.967559][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.127632][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.133538][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.138098][ T46] bond0 (unregistering): Released all slaves [ 62.214023][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 62.214040][ T40] audit: type=1400 audit(1771452799.256:112): avc: denied { create } for pid=6051 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.225312][ T40] audit: type=1400 audit(1771452799.256:113): avc: denied { write } for pid=6051 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2099 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.236411][ T40] audit: type=1400 audit(1771452799.256:114): avc: denied { append } for pid=6051 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2099 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.264421][ T40] audit: type=1400 audit(1771452799.306:115): avc: denied { unlink } for pid=6054 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2099 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.325983][ T46] hsr_slave_0: left promiscuous mode [ 62.328819][ T46] hsr_slave_1: left promiscuous mode [ 62.331015][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.334258][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.337576][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.340289][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.347663][ T46] veth1_macvtap: left promiscuous mode [ 62.350056][ T46] veth0_macvtap: left promiscuous mode [ 62.352028][ T46] veth1_vlan: left promiscuous mode [ 62.353750][ T46] veth0_vlan: left promiscuous mode [ 62.488126][ T46] team0 (unregistering): Port device team_slave_1 removed [ 62.500382][ T46] team0 (unregistering): Port device team_slave_0 removed [ 62.888105][ T6035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.902724][ T6035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.908395][ T6035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.912691][ T6035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.985591][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.003943][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.011197][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.014010][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.020954][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.023556][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.343320][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.387972][ T6035] veth0_vlan: entered promiscuous mode [ 63.398160][ T6035] veth1_vlan: entered promiscuous mode [ 63.418960][ T6035] veth0_macvtap: entered promiscuous mode [ 63.422708][ T6035] veth1_macvtap: entered promiscuous mode [ 63.455905][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.464249][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.470392][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.475080][ T73] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.483482][ T73] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.487155][ T73] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.542166][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.544679][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.559227][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.561654][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.607667][ T40] audit: type=1400 audit(1771452800.646:116): avc: denied { read write } for pid=6084 comm="syz.0.17" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.617924][ T40] audit: type=1400 audit(1771452800.646:117): avc: denied { open } for pid=6084 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.625998][ T40] audit: type=1400 audit(1771452800.646:118): avc: denied { ioctl } for pid=6084 comm="syz.0.17" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.842097][ T3249] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 63.995259][ T3249] usb 5-1: not running at top speed; connect to a high speed hub [ 63.999411][ T3249] usb 5-1: config 1 has an invalid interface number: 78 but max is 0 [ 64.002526][ T5287] Bluetooth: hci0: command tx timeout [ 64.003041][ T3249] usb 5-1: config 1 has no interface number 0 [ 64.007902][ T3249] usb 5-1: config 1 interface 78 has no altsetting 0 [ 64.013851][ T3249] usb 5-1: string descriptor 0 read error: -22 [ 64.016698][ T3249] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 64.020427][ T3249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.042614][ T3249] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 64.046361][ T3249] usb 5-1: selecting invalid altsetting 0 [ 64.269107][ T2489] pvrusb2: Invalid read control endpoint [ 64.271071][ T2489] ------------[ cut here ]------------ [ 64.272936][ T2489] URB ffff88802a666200 submitted while active [ 64.274997][ T2489] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x15fa/0x1910, CPU#1: pvrusb2-context/2489 [ 64.278421][ T2489] Modules linked in: [ 64.279763][ T2489] CPU: 1 UID: 0 PID: 2489 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 64.283069][ T2489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.286200][ T2489] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 64.288319][ T2489] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d d8 b8 fa 48 8d 3d 56 54 96 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 64.294738][ T2489] RSP: 0018:ffffc9000e05ed68 EFLAGS: 00010293 [ 64.296596][ T2489] RAX: 0000000000000000 RBX: ffff88802a666200 RCX: ffffffff8828bb41 [ 64.299002][ T2489] RDX: ffff88802f890000 RSI: ffff88802a666200 RDI: ffffffff90e616d0 [ 64.301458][ T2489] RBP: 0000000000000005 R08: 0000000000000005 R09: 0000000000000000 [ 64.304117][ T2489] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 64.306733][ T2489] R13: 00000000c0008200 R14: ffff8880381b4000 R15: ffff888038775628 [ 64.309219][ T2489] FS: 0000000000000000(0000) GS:ffff8880d644a000(0000) knlGS:0000000000000000 [ 64.312115][ T2489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.314288][ T2489] CR2: 00007f84638436d4 CR3: 0000000033d32000 CR4: 0000000000352ef0 [ 64.317099][ T2489] Call Trace: [ 64.318362][ T2489] [ 64.319375][ T2489] ? lockdep_init_map_type+0x5c/0x250 [ 64.321123][ T2489] ? lockdep_init_map_type+0x5c/0x250 [ 64.322917][ T2489] ? timer_init_key_on_stack+0xdc/0x120 [ 64.324763][ T2489] pvr2_send_request_ex+0x7ed/0x1ea0 [ 64.326492][ T2489] ? __pfx_pvr2_send_request_ex+0x10/0x10 [ 64.328247][ T2489] ? __pfx___mutex_lock+0x10/0x10 [ 64.329881][ T2489] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 64.331593][ T2489] ? __kasan_check_byte+0x13/0x50 [ 64.333287][ T2489] pvr2_send_request+0x3a/0x50 [ 64.334931][ T2489] pvr2_i2c_read+0x20c/0x670 [ 64.336478][ T2489] pvr2_i2c_basic_op+0xa4/0x100 [ 64.338070][ T2489] pvr2_i2c_xfer+0x380/0xb50 [ 64.339601][ T2489] ? __pfx_pvr2_i2c_basic_op+0x10/0x10 [ 64.341394][ T2489] ? ret_from_fork_asm+0x1a/0x30 [ 64.343076][ T2489] __i2c_transfer+0x5d9/0x17f0 [ 64.344725][ T2489] ? __pfx___i2c_transfer+0x10/0x10 [ 64.346489][ T2489] ? check_noncircular+0x97/0x160 [ 64.348280][ T2489] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 64.350046][ T2489] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 64.352020][ T2489] ? down_write_trylock+0x190/0x3b0 [ 64.353712][ T2489] __i2c_smbus_xfer+0x5b7/0x1080 [ 64.355419][ T2489] ? mark_held_locks+0x40/0x70 [ 64.357066][ T2489] ? lockdep_hardirqs_on+0x78/0x100 [ 64.358738][ T2489] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 64.360471][ T2489] ? rt_mutex_slowtrylock+0x93/0x100 [ 64.362187][ T2489] i2c_smbus_xfer+0x185/0x3c0 [ 64.363680][ T2489] i2c_smbus_read_byte_data+0x135/0x1e0 [ 64.365496][ T2489] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10 [ 64.367600][ T2489] saa711x_probe+0x1e1/0x870 [ 64.369083][ T2489] ? __pfx_saa711x_probe+0x10/0x10 [ 64.370691][ T2489] ? dput.part.0+0xdd/0x570 [ 64.372225][ T2489] ? dput+0x24/0x30 [ 64.373635][ T2489] ? __pfx_saa711x_probe+0x10/0x10 [ 64.375359][ T2489] i2c_device_probe+0x658/0xd10 [ 64.376999][ T2489] ? kernfs_put+0x3f/0x60 [ 64.378421][ T2489] ? __pfx_i2c_device_probe+0x10/0x10 [ 64.380125][ T2489] ? sysfs_create_link+0x68/0xc0 [ 64.381691][ T2489] ? __pfx_i2c_device_probe+0x10/0x10 [ 64.383490][ T2489] really_probe+0x241/0xa60 [ 64.385003][ T2489] __driver_probe_device+0x1de/0x400 [ 64.386869][ T2489] driver_probe_device+0x4c/0x1b0 [ 64.388540][ T2489] __device_attach_driver+0x1ff/0x3e0 [ 64.390262][ T2489] ? __pfx___device_attach_driver+0x10/0x10 [ 64.392256][ T2489] bus_for_each_drv+0x159/0x1e0 [ 64.393917][ T2489] ? __pfx_bus_for_each_drv+0x10/0x10 [ 64.395609][ T2489] ? lockdep_hardirqs_on+0x78/0x100 [ 64.397356][ T2489] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.399195][ T2489] __device_attach+0x1e4/0x4d0 [ 64.400725][ T2489] ? __pfx___device_attach+0x10/0x10 [ 64.402486][ T2489] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.404190][ T2489] device_initial_probe+0xaf/0xd0 [ 64.405829][ T2489] bus_probe_device+0x64/0x160 [ 64.407548][ T2489] device_add+0x11d9/0x1950 [ 64.409005][ T2489] ? __pfx_device_add+0x10/0x10 [ 64.410567][ T2489] ? lockdep_init_map_type+0x5c/0x250 [ 64.412397][ T2489] ? __init_waitqueue_head+0xca/0x150 [ 64.414199][ T2489] i2c_new_client_device+0x660/0xd30 [ 64.415965][ T2489] v4l2_i2c_new_subdev_board+0xb6/0x2b0 [ 64.417828][ T2489] v4l2_i2c_new_subdev+0x13e/0x190 [ 64.419565][ T2489] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10 [ 64.421471][ T2489] ? __pfx_pvr2_context_notify+0x10/0x10 [ 64.423287][ T2489] pvr2_hdw_initialize+0x2158/0x3710 [ 64.425019][ T2489] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 64.426832][ T2489] ? __pfx___schedule+0x10/0x10 [ 64.428418][ T2489] ? find_held_lock+0x2b/0x80 [ 64.429921][ T2489] ? schedule+0x2bf/0x390 [ 64.431312][ T2489] ? kthread+0x13a/0x450 [ 64.432722][ T2489] pvr2_context_thread_func+0x253/0x920 [ 64.434610][ T2489] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 64.436634][ T2489] ? rcu_is_watching+0x12/0xc0 [ 64.438284][ T2489] ? __pfx_autoremove_wake_function+0x10/0x10 [ 64.440239][ T2489] ? __kthread_parkme+0x18c/0x230 [ 64.441893][ T2489] ? kthread+0x13a/0x450 [ 64.443291][ T2489] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 64.443909][ T830] usb 5-1: USB disconnect, device number 2 [ 64.445297][ T2489] kthread+0x370/0x450 [ 64.448417][ T2489] ? __pfx_kthread+0x10/0x10 [ 64.449852][ T2489] ret_from_fork+0x754/0xd80 [ 64.451299][ T2489] ? __pfx_ret_from_fork+0x10/0x10 [ 64.452988][ T2489] ? __switch_to+0x7b4/0x1120 [ 64.454569][ T2489] ? __pfx_kthread+0x10/0x10 [ 64.456049][ T2489] ret_from_fork_asm+0x1a/0x30 [ 64.457631][ T2489] [ 64.458615][ T2489] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.460858][ T2489] CPU: 1 UID: 0 PID: 2489 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 64.463928][ T2489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.467061][ T2489] Call Trace: [ 64.468166][ T2489] [ 64.469083][ T2489] dump_stack_lvl+0x100/0x190 [ 64.470547][ T2489] vpanic+0x552/0x970 [ 64.471816][ T2489] ? __pfx_vpanic+0x10/0x10 [ 64.473244][ T2489] panic+0xd1/0xe0 [ 64.474441][ T2489] ? __pfx_panic+0x10/0x10 [ 64.475865][ T2489] ? check_panic_on_warn+0x1f/0x90 [ 64.477647][ T2489] check_panic_on_warn.cold+0x19/0x34 [ 64.479325][ T2489] ? usb_submit_urb+0x15fa/0x1910 [ 64.480949][ T2489] __warn.cold+0x191/0x348 [ 64.482390][ T2489] __report_bug+0x296/0x3d0 [ 64.484030][ T2489] ? usb_submit_urb+0x15fa/0x1910 [ 64.485692][ T2489] ? __pfx___report_bug+0x10/0x10 [ 64.487361][ T2489] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 64.489162][ T2489] ? pvr2_send_request_ex+0x7b1/0x1ea0 [ 64.491297][ T2489] ? do_raw_spin_lock+0x128/0x260 [ 64.493361][ T2489] report_bug_entry+0xe1/0x290 [ 64.495388][ T2489] ? usb_submit_urb+0x15fd/0x1910 [ 64.497507][ T2489] handle_bug+0x1c9/0x2a0 [ 64.499455][ T2489] exc_invalid_op+0x17/0x50 [ 64.501345][ T2489] asm_exc_invalid_op+0x1a/0x20 [ 64.503332][ T2489] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 64.505611][ T2489] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d d8 b8 fa 48 8d 3d 56 54 96 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 64.513367][ T2489] RSP: 0018:ffffc9000e05ed68 EFLAGS: 00010293 [ 64.516096][ T2489] RAX: 0000000000000000 RBX: ffff88802a666200 RCX: ffffffff8828bb41 [ 64.519441][ T2489] RDX: ffff88802f890000 RSI: ffff88802a666200 RDI: ffffffff90e616d0 [ 64.522733][ T2489] RBP: 0000000000000005 R08: 0000000000000005 R09: 0000000000000000 [ 64.526057][ T2489] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 64.529391][ T2489] R13: 00000000c0008200 R14: ffff8880381b4000 R15: ffff888038775628 [ 64.532627][ T2489] ? pvr2_send_request_ex+0x7b1/0x1ea0 [ 64.534922][ T2489] ? usb_submit_urb+0x15f3/0x1910 [ 64.536955][ T2489] ? lockdep_init_map_type+0x5c/0x250 [ 64.538980][ T2489] ? lockdep_init_map_type+0x5c/0x250 [ 64.540998][ T2489] ? timer_init_key_on_stack+0xdc/0x120 [ 64.542900][ T2489] pvr2_send_request_ex+0x7ed/0x1ea0 [ 64.544786][ T2489] ? __pfx_pvr2_send_request_ex+0x10/0x10 [ 64.546904][ T2489] ? __pfx___mutex_lock+0x10/0x10 [ 64.548515][ T2489] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 64.550232][ T2489] ? __kasan_check_byte+0x13/0x50 [ 64.551854][ T2489] pvr2_send_request+0x3a/0x50 [ 64.553404][ T2489] pvr2_i2c_read+0x20c/0x670 [ 64.554898][ T2489] pvr2_i2c_basic_op+0xa4/0x100 [ 64.556589][ T2489] pvr2_i2c_xfer+0x380/0xb50 [ 64.558239][ T2489] ? __pfx_pvr2_i2c_basic_op+0x10/0x10 [ 64.559997][ T2489] ? ret_from_fork_asm+0x1a/0x30 [ 64.561540][ T2489] __i2c_transfer+0x5d9/0x17f0 [ 64.563019][ T2489] ? __pfx___i2c_transfer+0x10/0x10 [ 64.564681][ T2489] ? check_noncircular+0x97/0x160 [ 64.566255][ T2489] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 64.567948][ T2489] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 64.569841][ T2489] ? down_write_trylock+0x190/0x3b0 [ 64.571452][ T2489] __i2c_smbus_xfer+0x5b7/0x1080 [ 64.573015][ T2489] ? mark_held_locks+0x40/0x70 [ 64.574550][ T2489] ? lockdep_hardirqs_on+0x78/0x100 [ 64.576186][ T2489] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 64.577886][ T2489] ? rt_mutex_slowtrylock+0x93/0x100 [ 64.579530][ T2489] i2c_smbus_xfer+0x185/0x3c0 [ 64.581019][ T2489] i2c_smbus_read_byte_data+0x135/0x1e0 [ 64.582752][ T2489] ? __pfx_i2c_smbus_read_byte_data+0x10/0x10 [ 64.584667][ T2489] saa711x_probe+0x1e1/0x870 [ 64.586119][ T2489] ? __pfx_saa711x_probe+0x10/0x10 [ 64.587725][ T2489] ? dput.part.0+0xdd/0x570 [ 64.589176][ T2489] ? dput+0x24/0x30 [ 64.590382][ T2489] ? __pfx_saa711x_probe+0x10/0x10 [ 64.591957][ T2489] i2c_device_probe+0x658/0xd10 [ 64.593533][ T2489] ? kernfs_put+0x3f/0x60 [ 64.594918][ T2489] ? __pfx_i2c_device_probe+0x10/0x10 [ 64.596610][ T2489] ? sysfs_create_link+0x68/0xc0 [ 64.598145][ T2489] ? __pfx_i2c_device_probe+0x10/0x10 [ 64.599770][ T2489] really_probe+0x241/0xa60 [ 64.601211][ T2489] __driver_probe_device+0x1de/0x400 [ 64.602824][ T2489] driver_probe_device+0x4c/0x1b0 [ 64.604401][ T2489] __device_attach_driver+0x1ff/0x3e0 [ 64.606083][ T2489] ? __pfx___device_attach_driver+0x10/0x10 [ 64.607889][ T2489] bus_for_each_drv+0x159/0x1e0 [ 64.609395][ T2489] ? __pfx_bus_for_each_drv+0x10/0x10 [ 64.611085][ T2489] ? lockdep_hardirqs_on+0x78/0x100 [ 64.612692][ T2489] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.614551][ T2489] __device_attach+0x1e4/0x4d0 [ 64.616066][ T2489] ? __pfx___device_attach+0x10/0x10 [ 64.617671][ T2489] ? do_raw_spin_unlock+0x145/0x1e0 [ 64.619321][ T2489] device_initial_probe+0xaf/0xd0 [ 64.620941][ T2489] bus_probe_device+0x64/0x160 [ 64.622471][ T2489] device_add+0x11d9/0x1950 [ 64.623956][ T2489] ? __pfx_device_add+0x10/0x10 [ 64.625526][ T2489] ? lockdep_init_map_type+0x5c/0x250 [ 64.627232][ T2489] ? __init_waitqueue_head+0xca/0x150 [ 64.628950][ T2489] i2c_new_client_device+0x660/0xd30 [ 64.630577][ T2489] v4l2_i2c_new_subdev_board+0xb6/0x2b0 [ 64.632261][ T2489] v4l2_i2c_new_subdev+0x13e/0x190 [ 64.634007][ T2489] ? __pfx_v4l2_i2c_new_subdev+0x10/0x10 [ 64.635795][ T2489] ? __pfx_pvr2_context_notify+0x10/0x10 [ 64.637570][ T2489] pvr2_hdw_initialize+0x2158/0x3710 [ 64.639222][ T2489] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 64.640980][ T2489] ? __pfx___schedule+0x10/0x10 [ 64.642517][ T2489] ? find_held_lock+0x2b/0x80 [ 64.644018][ T2489] ? schedule+0x2bf/0x390 [ 64.645388][ T2489] ? kthread+0x13a/0x450 [ 64.646731][ T2489] pvr2_context_thread_func+0x253/0x920 [ 64.648457][ T2489] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 64.650355][ T2489] ? rcu_is_watching+0x12/0xc0 [ 64.651850][ T2489] ? __pfx_autoremove_wake_function+0x10/0x10 [ 64.653726][ T2489] ? __kthread_parkme+0x18c/0x230 [ 64.655326][ T2489] ? kthread+0x13a/0x450 [ 64.656666][ T2489] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 64.658561][ T2489] kthread+0x370/0x450 [ 64.659840][ T2489] ? __pfx_kthread+0x10/0x10 [ 64.661286][ T2489] ret_from_fork+0x754/0xd80 [ 64.662750][ T2489] ? __pfx_ret_from_fork+0x10/0x10 [ 64.664370][ T2489] ? __switch_to+0x7b4/0x1120 [ 64.665817][ T2489] ? __pfx_kthread+0x10/0x10 [ 64.667299][ T2489] ret_from_fork_asm+0x1a/0x30 [ 64.668848][ T2489] [ 64.670472][ T2489] Kernel Offset: disabled [ 64.671845][ T2489] Rebooting in 86400 seconds..