Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. 2020/05/28 22:03:57 parsed 1 programs 2020/05/28 22:03:57 executed programs: 0 syzkaller login: [ 55.497433][ T7044] IPVS: ftp: loaded support on port[0] = 21 [ 55.591394][ T7044] chnl_net:caif_netlink_parms(): no params data found [ 55.639312][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.646927][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.656280][ T7044] device bridge_slave_0 entered promiscuous mode [ 55.666132][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.674352][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.682404][ T7044] device bridge_slave_1 entered promiscuous mode [ 55.703472][ T7044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.714323][ T7044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.735487][ T7044] team0: Port device team_slave_0 added [ 55.743036][ T7044] team0: Port device team_slave_1 added [ 55.759749][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.766748][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.792808][ T7044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.806395][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.813413][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.839956][ T7044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.923335][ T7044] device hsr_slave_0 entered promiscuous mode [ 55.970263][ T7044] device hsr_slave_1 entered promiscuous mode [ 56.092872][ T7044] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.142871][ T7044] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.202719][ T7044] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.262937][ T7044] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.334799][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.342085][ T7044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.349906][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.356967][ T7044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.403380][ T7044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.416253][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.427131][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.435626][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.444530][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 56.458464][ T7044] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.470422][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.478923][ T4007] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.486228][ T4007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.498834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.509020][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.516157][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.541892][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.551736][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.560500][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.569313][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.580314][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.588728][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.600612][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.620173][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.627735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.643215][ T7044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.661356][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.672026][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.691837][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.701105][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.712727][ T7044] device veth0_vlan entered promiscuous mode [ 56.721186][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.729076][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.742229][ T7044] device veth1_vlan entered promiscuous mode [ 56.764264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.772872][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.781781][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.790861][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.802952][ T7044] device veth0_macvtap entered promiscuous mode [ 56.815581][ T7044] device veth1_macvtap entered promiscuous mode [ 56.833470][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.842383][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.851381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.859292][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.869132][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.882268][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.889729][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.898390][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.389621][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.629510][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 57.749779][ T5] usb 1-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 57.758651][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.771375][ T5] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 57.781884][ T5] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 57.791691][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.804210][ T5] usb 1-1: config 0 descriptor?? [ 58.092288][ T5] usb 1-1: string descriptor 0 read error: -71 [ 58.098609][ T5] uvcvideo: Found UVC 0.00 device (0bd3:0555) [ 58.109578][ T5] uvcvideo 1-1:0.0: Entity type for entity Output 1 was not initialized! [ 58.123793][ T5] ------------[ cut here ]------------ [ 58.129274][ T5] WARNING: CPU: 0 PID: 5 at drivers/media/mc/mc-entity.c:666 media_create_pad_link+0x4e2/0x650 [ 58.139589][ T5] Kernel panic - not syncing: panic_on_warn set ... [ 58.146168][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.7.0-rc7-syzkaller #0 [ 58.154205][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.164247][ T5] Workqueue: usb_hub_wq hub_event [ 58.169262][ T5] Call Trace: [ 58.172534][ T5] dump_stack+0x188/0x20d [ 58.176932][ T5] ? media_create_pad_link+0x420/0x650 [ 58.182374][ T5] panic+0x2e3/0x75c [ 58.186245][ T5] ? add_taint.cold+0x16/0x16 [ 58.190901][ T5] ? printk+0xba/0xed [ 58.194868][ T5] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 58.200306][ T5] ? __warn.cold+0x14/0x35 [ 58.204711][ T5] ? __warn+0xd5/0x1c8 [ 58.208759][ T5] ? media_create_pad_link+0x4e2/0x650 [ 58.214193][ T5] __warn.cold+0x2f/0x35 [ 58.218426][ T5] ? media_create_pad_link+0x4e2/0x650 [ 58.224398][ T5] report_bug+0x27b/0x2f0 [ 58.228716][ T5] do_error_trap+0x12b/0x220 [ 58.233288][ T5] ? media_create_pad_link+0x4e2/0x650 [ 58.238751][ T5] do_invalid_op+0x32/0x40 [ 58.243159][ T5] ? media_create_pad_link+0x4e2/0x650 [ 58.248619][ T5] invalid_op+0x23/0x30 [ 58.252785][ T5] RIP: 0010:media_create_pad_link+0x4e2/0x650 [ 58.258829][ T5] Code: 04 7a 31 fc 44 89 e0 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 ed 79 31 fc 0f 0b 41 bc ea ff ff ff eb da e8 de 79 31 fc <0f> 0b 41 bc ea ff ff ff eb cb e8 cf 79 31 fc 0f 0b 41 bc ea ff ff [ 58.278426][ T5] RSP: 0018:ffffc90000cbef70 EFLAGS: 00010293 [ 58.284483][ T5] RAX: ffff8880a9598140 RBX: ffff888098c79870 RCX: ffffffff8541c05e [ 58.292442][ T5] RDX: 0000000000000000 RSI: ffffffff8541c4c2 RDI: 0000000000000002 [ 58.300412][ T5] RBP: ffff88809233b870 R08: ffff8880a9598140 R09: ffffed1012467498 [ 58.308374][ T5] R10: ffff88809233a4bb R11: ffffed1012467497 R12: 0000000000000001 [ 58.316340][ T5] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 58.324308][ T5] ? media_create_pad_link+0x7e/0x650 [ 58.329660][ T5] ? media_create_pad_link+0x4e2/0x650 [ 58.335100][ T5] ? v4l2_device_register_subdev+0x422/0x640 [ 58.341062][ T5] uvc_mc_register_entities+0x468/0x77a [ 58.346614][ T5] uvc_probe.cold+0x23c9/0x2a44 [ 58.351460][ T5] ? __pm_runtime_set_status+0x702/0xa10 [ 58.357078][ T5] ? lock_acquire+0x1f2/0x8f0 [ 58.361764][ T5] ? pm_runtime_enable+0x2a/0x310 [ 58.366780][ T5] ? mark_lock+0x12b/0xf10 [ 58.371183][ T5] ? print_usage_bug+0x240/0x240 [ 58.376101][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 58.381037][ T5] ? mark_held_locks+0x9f/0xe0 [ 58.385804][ T5] ? usb_probe_interface+0x305/0x7a0 [ 58.391242][ T5] usb_probe_interface+0x305/0x7a0 [ 58.396336][ T5] ? usb_probe_device+0x1f0/0x1f0 [ 58.401337][ T5] really_probe+0x281/0x6d0 [ 58.405823][ T5] driver_probe_device+0x104/0x210 [ 58.411697][ T5] __device_attach_driver+0x1c2/0x220 [ 58.417047][ T5] ? driver_allows_async_probing+0x170/0x170 [ 58.423026][ T5] bus_for_each_drv+0x162/0x1e0 [ 58.427877][ T5] ? bus_rescan_devices+0x20/0x20 [ 58.432888][ T5] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 58.438765][ T5] ? lockdep_hardirqs_on+0x463/0x620 [ 58.444028][ T5] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 58.449825][ T5] __device_attach+0x21a/0x360 [ 58.454873][ T5] ? device_bind_driver+0xd0/0xd0 [ 58.459899][ T5] bus_probe_device+0x1e4/0x290 [ 58.464743][ T5] device_add+0x132d/0x1c10 [ 58.469305][ T5] ? wait_for_completion+0x270/0x270 [ 58.474651][ T5] ? uevent_show+0x360/0x360 [ 58.479273][ T5] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 58.485066][ T5] usb_set_configuration+0xec5/0x1740 [ 58.490434][ T5] usb_generic_driver_probe+0x9d/0xe0 [ 58.495784][ T5] usb_probe_device+0xc6/0x1f0 [ 58.500526][ T5] ? usb_suspend+0x630/0x630 [ 58.505097][ T5] really_probe+0x281/0x6d0 [ 58.509581][ T5] driver_probe_device+0x104/0x210 [ 58.514765][ T5] __device_attach_driver+0x1c2/0x220 [ 58.520135][ T5] ? driver_allows_async_probing+0x170/0x170 [ 58.526268][ T5] bus_for_each_drv+0x162/0x1e0 [ 58.531129][ T5] ? bus_rescan_devices+0x20/0x20 [ 58.536148][ T5] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 58.541944][ T5] ? lockdep_hardirqs_on+0x463/0x620 [ 58.547213][ T5] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 58.553012][ T5] __device_attach+0x21a/0x360 [ 58.557791][ T5] ? device_bind_driver+0xd0/0xd0 [ 58.562804][ T5] bus_probe_device+0x1e4/0x290 [ 58.567654][ T5] device_add+0x132d/0x1c10 [ 58.572156][ T5] ? uevent_show+0x360/0x360 [ 58.576741][ T5] usb_new_device.cold+0x701/0xfcf [ 58.581847][ T5] ? hub_disconnect+0x4a0/0x4a0 [ 58.586866][ T5] ? mark_held_locks+0x9f/0xe0 [ 58.591634][ T5] ? _raw_spin_unlock_irq+0x1f/0x80 [ 58.596823][ T5] hub_event+0x1eca/0x38f0 [ 58.601258][ T5] ? hub_port_debounce+0x260/0x260 [ 58.606364][ T5] ? perf_trace_workqueue_execute_end+0x181/0x420 [ 58.612791][ T5] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 58.618337][ T5] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 58.624309][ T5] ? _raw_spin_unlock_irq+0x1f/0x80 [ 58.629516][ T5] process_one_work+0x965/0x16a0 [ 58.634458][ T5] ? lock_release+0x800/0x800 [ 58.639215][ T5] ? pwq_dec_nr_in_flight+0x310/0x310 [ 58.645012][ T5] ? rwlock_bug.part.0+0x90/0x90 [ 58.649951][ T5] worker_thread+0x96/0xe20 [ 58.654455][ T5] ? process_one_work+0x16a0/0x16a0 [ 58.659652][ T5] kthread+0x388/0x470 [ 58.663791][ T5] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 58.669519][ T5] ret_from_fork+0x24/0x30 [ 58.675465][ T5] Kernel Offset: disabled [ 58.679855][ T5] Rebooting in 86400 seconds..