[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.62' (ECDSA) to the list of known hosts. syzkaller login: [ 75.724665][ T8446] chnl_net:caif_netlink_parms(): no params data found [ 75.776471][ T8446] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.784456][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.793500][ T8446] device bridge_slave_0 entered promiscuous mode [ 75.803968][ T8446] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.811081][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.821219][ T8446] device bridge_slave_1 entered promiscuous mode [ 75.841468][ T8446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.853260][ T8446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.876182][ T8446] team0: Port device team_slave_0 added [ 75.883403][ T8446] team0: Port device team_slave_1 added [ 75.901037][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.908177][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.934803][ T8446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.947691][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.954737][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.980850][ T8446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.007826][ T8446] device hsr_slave_0 entered promiscuous mode [ 76.014832][ T8446] device hsr_slave_1 entered promiscuous mode [ 76.119022][ T8446] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.130639][ T8446] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.141665][ T8446] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.150528][ T8446] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.175874][ T8446] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.183085][ T8446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.190874][ T8446] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.198013][ T8446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.245197][ T8446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.259544][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.271950][ T3158] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.280246][ T3158] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.289280][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.302963][ T8446] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.315940][ T3158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.324382][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.331524][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.342354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.350734][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.357893][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.379150][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.388661][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.402217][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.415095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.429462][ T8446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.442245][ T8446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.450024][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.468235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.476082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.492247][ T8446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.510656][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.532081][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.540959][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.550698][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.562728][ T8446] device veth0_vlan entered promiscuous mode [ 76.575356][ T8446] device veth1_vlan entered promiscuous mode [ 76.597324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.605475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.614694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.626240][ T8446] device veth0_macvtap entered promiscuous mode [ 76.636691][ T8446] device veth1_macvtap entered promiscuous mode [ 76.656009][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.663897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.675404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.687919][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.696861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 76.708223][ T8446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.717261][ T8446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.727915][ T8446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.736782][ T8446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.072910][ T3158] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.322783][ T3158] usb 1-1: Using ep0 maxpacket: 16 [ 77.475097][ T3158] usb 1-1: config 0 has an invalid interface number: 121 but max is 0 [ 77.483816][ T3158] usb 1-1: config 0 has no interface number 0 [ 77.489927][ T3158] usb 1-1: config 0 interface 121 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 77.562356][ T8] Bluetooth: hci0: command 0x0409 tx timeout [ 77.662122][ T3158] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=8e.9f [ 77.671606][ T3158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.679594][ T3158] usb 1-1: Product: syz [ 77.685044][ T3158] usb 1-1: Manufacturer: syz [ 77.689908][ T3158] usb 1-1: SerialNumber: syz [ 77.702828][ T3158] usb 1-1: config 0 descriptor?? [ 77.746443][ T3158] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 77.955697][ T3987] pvrusb2: Invalid write control endpoint [ 77.977035][ T3158] usb 1-1: USB disconnect, device number 2 [ 78.092671][ T3987] pvrusb2: Invalid write control endpoint [ 78.098613][ T3987] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 78.123041][ T3987] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 78.130626][ T3987] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 78.146841][ T3987] pvrusb2: Device being rendered inoperable [ 78.161778][ T3987] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 78.169025][ T3987] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 78.181508][ T3987] pvrusb2: Attached sub-driver cx25840 [ 78.199836][ T3987] pvrusb2: Attempted to execute control transfer when device not ok [ 78.208400][ T3987] pvrusb2: Attempted to execute control transfer when device not ok [ 78.217938][ T3987] pvrusb2: Attempted to execute control transfer when device not ok [ 78.227776][ T3987] pvrusb2: Attempted to execute control transfer when device not ok [ 78.236818][ T3987] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 78.297448][ T3987] TUNER: Unable to find symbol tda829x_probe() [ 78.316378][ T3987] DVB: Unable to find symbol tda9887_attach() [ 78.323002][ T3987] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 78.330857][ T3987] pvrusb2: Attached sub-driver tuner [ 78.339737][ T3987] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 78.354323][ T3987] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 78.397624][ T3987] ------------[ cut here ]------------ [ 78.409532][ T3987] sysfs group 'power' not found for kobject '1-0043' [ 78.437138][ T3987] WARNING: CPU: 1 PID: 3987 at fs/sysfs/group.c:279 sysfs_remove_group+0x126/0x170 [ 78.447563][ T3987] Modules linked in: [ 78.453962][ T3987] CPU: 1 PID: 3987 Comm: pvrusb2-context Not tainted 5.12.0-next-20210504-syzkaller #0 [ 78.465698][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.476818][ T3987] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 78.483475][ T3987] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 e0 b8 7c 89 e8 cd 6e e3 06 <0f> 0b eb 98 e8 a1 90 c8 ff e9 01 ff ff ff 48 89 df e8 94 90 c8 ff [ 78.504616][ T3987] RSP: 0018:ffffc900034dfb80 EFLAGS: 00010286 [ 78.510709][ T3987] RAX: 0000000000000000 RBX: ffffffff89db4ca0 RCX: 0000000000000000 [ 78.520101][ T3987] RDX: ffff888022070000 RSI: ffffffff815cc9f5 RDI: fffff5200069bf62 [ 78.529315][ T3987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.538152][ T3987] R10: ffffffff815c685e R11: 0000000000000000 R12: ffff888020db7020 [ 78.547037][ T3987] R13: ffffffff89db5240 R14: 1ffff9200069bf98 R15: dffffc0000000000 [ 78.556705][ T3987] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 78.566584][ T3987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.573968][ T3987] CR2: 00007effd317c000 CR3: 00000000275ac000 CR4: 00000000001506e0 [ 78.582814][ T3987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.590888][ T3987] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.600723][ T3987] Call Trace: [ 78.605405][ T3987] ? i2c_adapter_lock_bus+0x130/0x130 [ 78.610810][ T3987] dpm_sysfs_remove+0x97/0xb0 [ 78.616742][ T3987] device_del+0x20c/0xd40 [ 78.621905][ T3987] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 78.628288][ T3987] ? kobject_put+0x1f3/0x540 [ 78.634288][ T3987] ? dev_fwnode+0x79/0x90 [ 78.634422][ T164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.638651][ T3987] ? i2c_adapter_lock_bus+0x130/0x130 [ 78.657429][ T3987] device_unregister+0x22/0xc0 [ 78.662634][ T3987] ? i2c_adapter_lock_bus+0x130/0x130 [ 78.668043][ T3987] __unregister_client+0x95/0xa0 [ 78.673694][ T3987] device_for_each_child+0xf9/0x170 [ 78.679056][ T3987] ? device_remove_class_symlinks+0x210/0x210 [ 78.685214][ T3987] ? __radix_tree_lookup+0x211/0x2a0 [ 78.690521][ T3987] i2c_del_adapter+0x37b/0x680 [ 78.695821][ T3987] ? del_timer_sync+0x17e/0x1b0 [ 78.700762][ T3987] pvr2_i2c_core_done+0x69/0xc0 [ 78.705711][ T3987] pvr2_hdw_destroy+0x179/0x3b0 [ 78.710574][ T3987] pvr2_context_destroy+0x84/0x230 [ 78.715810][ T3987] pvr2_context_thread_func+0x64b/0x850 [ 78.721469][ T3987] ? pvr2_context_destroy+0x230/0x230 [ 78.726967][ T3987] ? finish_wait+0x260/0x260 [ 78.731634][ T3987] ? lockdep_hardirqs_on+0x79/0x100 [ 78.736936][ T3987] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 78.743266][ T3987] ? __kthread_parkme+0x13f/0x1e0 [ 78.748414][ T3987] ? pvr2_context_destroy+0x230/0x230 [ 78.753885][ T3987] kthread+0x3b1/0x4a0 [ 78.757985][ T3987] ? __kthread_bind_mask+0xc0/0xc0 [ 78.763193][ T3987] ret_from_fork+0x1f/0x30 [ 78.767654][ T3987] Kernel panic - not syncing: panic_on_warn set ... [ 78.774341][ T3987] CPU: 1 PID: 3987 Comm: pvrusb2-context Not tainted 5.12.0-next-20210504-syzkaller #0 [ 78.783969][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.794018][ T3987] Call Trace: [ 78.797290][ T3987] dump_stack+0x141/0x1d7 [ 78.801788][ T3987] panic+0x306/0x73d [ 78.805675][ T3987] ? __warn_printk+0xf3/0xf3 [ 78.810260][ T3987] ? __warn.cold+0x1a/0x44 [ 78.814667][ T3987] ? sysfs_remove_group+0x126/0x170 [ 78.819858][ T3987] __warn.cold+0x35/0x44 [ 78.824104][ T3987] ? sysfs_remove_group+0x126/0x170 [ 78.829304][ T3987] report_bug+0x1bd/0x210 [ 78.833640][ T3987] handle_bug+0x3c/0x60 [ 78.837792][ T3987] exc_invalid_op+0x14/0x40 [ 78.842287][ T3987] asm_exc_invalid_op+0x12/0x20 [ 78.847127][ T3987] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 78.852934][ T3987] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 e0 b8 7c 89 e8 cd 6e e3 06 <0f> 0b eb 98 e8 a1 90 c8 ff e9 01 ff ff ff 48 89 df e8 94 90 c8 ff [ 78.872530][ T3987] RSP: 0018:ffffc900034dfb80 EFLAGS: 00010286 [ 78.878585][ T3987] RAX: 0000000000000000 RBX: ffffffff89db4ca0 RCX: 0000000000000000 [ 78.886556][ T3987] RDX: ffff888022070000 RSI: ffffffff815cc9f5 RDI: fffff5200069bf62 [ 78.894529][ T3987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.902486][ T3987] R10: ffffffff815c685e R11: 0000000000000000 R12: ffff888020db7020 [ 78.910445][ T3987] R13: ffffffff89db5240 R14: 1ffff9200069bf98 R15: dffffc0000000000 [ 78.918533][ T3987] ? wake_up_klogd.part.0+0x8e/0xd0 [ 78.923745][ T3987] ? vprintk+0x95/0x260 [ 78.927904][ T3987] ? i2c_adapter_lock_bus+0x130/0x130 [ 78.933277][ T3987] dpm_sysfs_remove+0x97/0xb0 [ 78.938046][ T3987] device_del+0x20c/0xd40 [ 78.942377][ T3987] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 78.948698][ T3987] ? kobject_put+0x1f3/0x540 [ 78.953282][ T3987] ? dev_fwnode+0x79/0x90 [ 78.957754][ T3987] ? i2c_adapter_lock_bus+0x130/0x130 [ 78.963138][ T3987] device_unregister+0x22/0xc0 [ 78.967929][ T3987] ? i2c_adapter_lock_bus+0x130/0x130 [ 78.973303][ T3987] __unregister_client+0x95/0xa0 [ 78.978265][ T3987] device_for_each_child+0xf9/0x170 [ 78.983460][ T3987] ? device_remove_class_symlinks+0x210/0x210 [ 78.989521][ T3987] ? __radix_tree_lookup+0x211/0x2a0 [ 78.994803][ T3987] i2c_del_adapter+0x37b/0x680 [ 78.999562][ T3987] ? del_timer_sync+0x17e/0x1b0 [ 79.004405][ T3987] pvr2_i2c_core_done+0x69/0xc0 [ 79.009249][ T3987] pvr2_hdw_destroy+0x179/0x3b0 [ 79.014144][ T3987] pvr2_context_destroy+0x84/0x230 [ 79.019246][ T3987] pvr2_context_thread_func+0x64b/0x850 [ 79.024798][ T3987] ? pvr2_context_destroy+0x230/0x230 [ 79.030204][ T3987] ? finish_wait+0x260/0x260 [ 79.034809][ T3987] ? lockdep_hardirqs_on+0x79/0x100 [ 79.040009][ T3987] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 79.046249][ T3987] ? __kthread_parkme+0x13f/0x1e0 [ 79.051273][ T3987] ? pvr2_context_destroy+0x230/0x230 [ 79.056635][ T3987] kthread+0x3b1/0x4a0 [ 79.060695][ T3987] ? __kthread_bind_mask+0xc0/0xc0 [ 79.065802][ T3987] ret_from_fork+0x1f/0x30 [ 79.071005][ T3987] Kernel Offset: disabled [ 79.075426][ T3987] Rebooting in 86400 seconds..