[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. syzkaller login: [ 78.112317][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 78.164492][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.172588][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.182195][ T8450] device bridge_slave_0 entered promiscuous mode [ 78.192356][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.200436][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.209039][ T8450] device bridge_slave_1 entered promiscuous mode [ 78.229837][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.241027][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.264383][ T8450] team0: Port device team_slave_0 added [ 78.272911][ T8450] team0: Port device team_slave_1 added [ 78.292806][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.300085][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.326531][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.340716][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.347727][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.374044][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.402275][ T8450] device hsr_slave_0 entered promiscuous mode [ 78.409607][ T8450] device hsr_slave_1 entered promiscuous mode [ 78.513563][ T8450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.524433][ T8450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.536340][ T8450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.546883][ T8450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.573153][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.580339][ T8450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.588532][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.595858][ T8450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.641696][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.655073][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.666792][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.677004][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.686834][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 78.701667][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.713073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.723027][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.730336][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.748579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.757043][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.764326][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.777408][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.786789][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.800964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.812824][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.826909][ T8450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.840841][ T8450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.850314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.871109][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.878934][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.891221][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.910841][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.930622][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.940674][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.949990][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.961809][ T8450] device veth0_vlan entered promiscuous mode [ 78.974303][ T8450] device veth1_vlan entered promiscuous mode [ 78.997625][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.005833][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.014889][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.026753][ T8450] device veth0_macvtap entered promiscuous mode [ 79.039010][ T8450] device veth1_macvtap entered promiscuous mode [ 79.056339][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.064333][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.074341][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.086076][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.094164][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.103180][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.115346][ T8450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.126062][ T8450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.134958][ T8450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.145201][ T8450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.247963][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.256071][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.297971][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.301581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.306059][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 79.347776][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.648083][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.258203][ T36] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 8.42 [ 80.267592][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.275853][ T36] usb 1-1: Product: syz [ 80.280179][ T36] usb 1-1: Manufacturer: syz [ 80.284782][ T36] usb 1-1: SerialNumber: syz [ 80.296916][ T36] usb 1-1: config 0 descriptor?? [ 80.352923][ T36] pvrusb2: Hardware description: Terratec Grabster AV400 [ 80.360429][ T36] pvrusb2: ********** [ 80.364430][ T36] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 80.376523][ T36] pvrusb2: Important functionality might not be entirely working. [ 80.385511][ T36] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 80.397560][ T36] pvrusb2: ********** [ 80.579685][ T3985] pvrusb2: Invalid write control endpoint [ 80.584335][ T36] usb 1-1: USB disconnect, device number 2 [ 80.672193][ T3985] pvrusb2: Invalid write control endpoint [ 80.689470][ T3985] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 80.709683][ T3985] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 80.717259][ T3985] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 80.739195][ T3985] pvrusb2: Device being rendered inoperable [ 80.747086][ T3985] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 80.755550][ T3985] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 80.766802][ T3985] pvrusb2: Attached sub-driver cx25840 [ 80.773886][ T3985] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 80.785220][ T3985] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 80.824329][ T3985] ------------[ cut here ]------------ [ 80.841835][ T3985] sysfs group 'power' not found for kobject 'i2c-1' [ 80.863031][ T3985] WARNING: CPU: 0 PID: 3985 at fs/sysfs/group.c:279 sysfs_remove_group+0x126/0x170 [ 80.873333][ T3985] Modules linked in: [ 80.877273][ T3985] CPU: 0 PID: 3985 Comm: pvrusb2-context Not tainted 5.13.0-rc6-syzkaller #0 [ 80.886986][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.898073][ T3985] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 80.903920][ T3985] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 e0 ad 7c 89 e8 d5 12 e4 06 <0f> 0b eb 98 e8 b1 8f c8 ff e9 01 ff ff ff 48 89 df e8 a4 8f c8 ff [ 80.924172][ T3985] RSP: 0018:ffffc9000384fc30 EFLAGS: 00010282 [ 80.931692][ T3985] RAX: 0000000000000000 RBX: ffffffff89db42e0 RCX: 0000000000000000 [ 80.940783][ T3985] RDX: ffff888021bb9c40 RSI: ffffffff815ce2a5 RDI: fffff52000709f78 [ 80.950360][ T3985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.959544][ T3985] R10: ffffffff815c810e R11: 0000000000000000 R12: ffff888018304328 [ 80.968671][ T3985] R13: ffffffff89db4880 R14: ffff888018304938 R15: ffff888018304938 [ 80.978339][ T3985] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 80.988437][ T3985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.995181][ T3985] CR2: 00007efcee2f7000 CR3: 0000000015783000 CR4: 00000000001506e0 [ 81.004884][ T3985] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.013804][ T3985] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.023590][ T3985] Call Trace: [ 81.026937][ T3985] dpm_sysfs_remove+0x97/0xb0 [ 81.033067][ T3985] device_del+0x20c/0xd40 [ 81.037445][ T3985] ? lock_downgrade+0x6e0/0x6e0 [ 81.048664][ T3985] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 81.055349][ T3985] ? lockdep_init_map_type+0x2c3/0x7b0 [ 81.068515][ T3985] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 81.074293][ T3985] ? lockdep_init_map_type+0x2c3/0x7b0 [ 81.081470][ T3985] device_unregister+0x22/0xc0 [ 81.086371][ T3985] i2c_del_adapter+0x4d6/0x680 [ 81.092933][ T3985] ? del_timer_sync+0x17e/0x1b0 [ 81.098796][ T3985] pvr2_i2c_core_done+0x69/0xc0 [ 81.103683][ T3985] pvr2_hdw_destroy+0x179/0x3b0 [ 81.109725][ T3985] pvr2_context_destroy+0x84/0x230 [ 81.114965][ T3985] pvr2_context_thread_func+0x64b/0x850 [ 81.121926][ T3985] ? pvr2_context_destroy+0x230/0x230 [ 81.127421][ T3985] ? finish_wait+0x260/0x260 [ 81.133871][ T3985] ? lockdep_hardirqs_on+0x79/0x100 [ 81.140099][ T3985] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 81.146371][ T3985] ? __kthread_parkme+0x13f/0x1e0 [ 81.152612][ T3985] ? pvr2_context_destroy+0x230/0x230 [ 81.159216][ T3985] kthread+0x3b1/0x4a0 [ 81.163315][ T3985] ? __kthread_bind_mask+0xc0/0xc0 [ 81.169839][ T3985] ret_from_fork+0x1f/0x30 [ 81.174304][ T3985] Kernel panic - not syncing: panic_on_warn set ... [ 81.180892][ T3985] CPU: 0 PID: 3985 Comm: pvrusb2-context Not tainted 5.13.0-rc6-syzkaller #0 [ 81.189661][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.200373][ T3985] Call Trace: [ 81.203645][ T3985] dump_stack+0x141/0x1d7 [ 81.207968][ T3985] panic+0x306/0x73d [ 81.212046][ T3985] ? __warn_printk+0xf3/0xf3 [ 81.216648][ T3985] ? __warn.cold+0x1a/0x44 [ 81.221149][ T3985] ? sysfs_remove_group+0x126/0x170 [ 81.226355][ T3985] __warn.cold+0x35/0x44 [ 81.230685][ T3985] ? sysfs_remove_group+0x126/0x170 [ 81.235869][ T3985] report_bug+0x1bd/0x210 [ 81.240186][ T3985] handle_bug+0x3c/0x60 [ 81.244327][ T3985] exc_invalid_op+0x14/0x40 [ 81.248831][ T3985] asm_exc_invalid_op+0x12/0x20 [ 81.253676][ T3985] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 81.259472][ T3985] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 e0 ad 7c 89 e8 d5 12 e4 06 <0f> 0b eb 98 e8 b1 8f c8 ff e9 01 ff ff ff 48 89 df e8 a4 8f c8 ff [ 81.279230][ T3985] RSP: 0018:ffffc9000384fc30 EFLAGS: 00010282 [ 81.285303][ T3985] RAX: 0000000000000000 RBX: ffffffff89db42e0 RCX: 0000000000000000 [ 81.293417][ T3985] RDX: ffff888021bb9c40 RSI: ffffffff815ce2a5 RDI: fffff52000709f78 [ 81.301432][ T3985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.309411][ T3985] R10: ffffffff815c810e R11: 0000000000000000 R12: ffff888018304328 [ 81.317823][ T3985] R13: ffffffff89db4880 R14: ffff888018304938 R15: ffff888018304938 [ 81.325799][ T3985] ? wake_up_klogd.part.0+0x8e/0xd0 [ 81.331085][ T3985] ? vprintk+0x95/0x260 [ 81.335241][ T3985] dpm_sysfs_remove+0x97/0xb0 [ 81.339926][ T3985] device_del+0x20c/0xd40 [ 81.344246][ T3985] ? lock_downgrade+0x6e0/0x6e0 [ 81.349086][ T3985] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 81.355409][ T3985] ? lockdep_init_map_type+0x2c3/0x7b0 [ 81.360981][ T3985] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 81.366736][ T3985] ? lockdep_init_map_type+0x2c3/0x7b0 [ 81.372372][ T3985] device_unregister+0x22/0xc0 [ 81.377253][ T3985] i2c_del_adapter+0x4d6/0x680 [ 81.382022][ T3985] ? del_timer_sync+0x17e/0x1b0 [ 81.386896][ T3985] pvr2_i2c_core_done+0x69/0xc0 [ 81.391762][ T3985] pvr2_hdw_destroy+0x179/0x3b0 [ 81.396644][ T3985] pvr2_context_destroy+0x84/0x230 [ 81.401743][ T3985] pvr2_context_thread_func+0x64b/0x850 [ 81.407278][ T3985] ? pvr2_context_destroy+0x230/0x230 [ 81.412676][ T3985] ? finish_wait+0x260/0x260 [ 81.417399][ T3985] ? lockdep_hardirqs_on+0x79/0x100 [ 81.422599][ T3985] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 81.428833][ T3985] ? __kthread_parkme+0x13f/0x1e0 [ 81.433857][ T3985] ? pvr2_context_destroy+0x230/0x230 [ 81.439232][ T3985] kthread+0x3b1/0x4a0 [ 81.443297][ T3985] ? __kthread_bind_mask+0xc0/0xc0 [ 81.448396][ T3985] ret_from_fork+0x1f/0x30 [ 81.454087][ T3985] Kernel Offset: disabled [ 81.458662][ T3985] Rebooting in 86400 seconds..