[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.47' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 73.683311][ T57] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.053395][ T57] usb 1-1: config 0 has an invalid interface number: 145 but max is 3 [ 74.062693][ T57] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 74.074035][ T57] usb 1-1: config 0 has an invalid interface number: 205 but max is 3 [ 74.082758][ T57] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 74.094256][ T57] usb 1-1: config 0 has an invalid interface number: 76 but max is 3 [ 74.104532][ T57] usb 1-1: config 0 has an invalid interface number: 206 but max is 3 [ 74.115333][ T57] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 74.125794][ T57] usb 1-1: config 0 has no interface number 0 [ 74.132730][ T57] usb 1-1: config 0 has no interface number 1 [ 74.142275][ T57] usb 1-1: config 0 has no interface number 2 [ 74.150017][ T57] usb 1-1: config 0 has no interface number 3 [ 74.159595][ T57] usb 1-1: config 0 interface 145 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 74.172242][ T57] usb 1-1: config 0 interface 145 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 74.186151][ T57] usb 1-1: config 0 interface 145 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 74.197922][ T57] usb 1-1: config 0 interface 145 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 74.211647][ T57] usb 1-1: config 0 interface 145 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 74.224222][ T57] usb 1-1: config 0 interface 145 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 74.236399][ T57] usb 1-1: config 0 interface 145 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 74.248453][ T57] usb 1-1: config 0 interface 205 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 74.260728][ T57] usb 1-1: config 0 interface 205 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 74.271891][ T57] usb 1-1: config 0 interface 205 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 74.284643][ T57] usb 1-1: config 0 interface 205 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 74.296404][ T57] usb 1-1: config 0 interface 205 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 74.307534][ T57] usb 1-1: config 0 interface 205 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 74.320162][ T57] usb 1-1: config 0 interface 205 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 74.333373][ T57] usb 1-1: config 0 interface 205 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 74.347318][ T57] usb 1-1: config 0 interface 205 altsetting 6 endpoint 0x9 has an invalid bInterval 132, changing to 11 [ 74.364310][ T57] usb 1-1: config 0 interface 205 altsetting 6 has 10 endpoint descriptors, different from the interface descriptor's value: 13 [ 74.381426][ T57] usb 1-1: config 0 interface 76 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 74.393689][ T57] usb 1-1: config 0 interface 76 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 74.405296][ T57] usb 1-1: config 0 interface 76 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 74.417958][ T57] usb 1-1: config 0 interface 76 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 74.433062][ T57] usb 1-1: config 0 interface 76 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.447125][ T57] usb 1-1: config 0 interface 206 altsetting 249 has a duplicate endpoint with address 0x2, skipping [ 74.459103][ T57] usb 1-1: config 0 interface 206 altsetting 249 has a duplicate endpoint with address 0xD, skipping [ 74.470430][ T57] usb 1-1: config 0 interface 206 altsetting 249 has a duplicate endpoint with address 0xA, skipping [ 74.482466][ T57] usb 1-1: config 0 interface 206 altsetting 249 endpoint 0x3 has an invalid bInterval 34, changing to 9 [ 74.494669][ T57] usb 1-1: config 0 interface 206 altsetting 249 has a duplicate endpoint with address 0x9, skipping [ 74.506966][ T57] usb 1-1: config 0 interface 206 altsetting 249 has a duplicate endpoint with address 0x3, skipping [ 74.519767][ T57] usb 1-1: config 0 interface 206 altsetting 249 has an invalid endpoint with address 0x0, skipping [ 74.531004][ T57] usb 1-1: config 0 interface 206 altsetting 249 has a duplicate endpoint with address 0x9, skipping [ 74.542722][ T57] usb 1-1: config 0 interface 206 altsetting 249 has a duplicate endpoint with address 0xA, skipping [ 74.554356][ T57] usb 1-1: config 0 interface 206 altsetting 249 has a duplicate endpoint with address 0x2, skipping [ 74.565783][ T57] usb 1-1: config 0 interface 206 altsetting 249 has an invalid endpoint descriptor of length 2, skipping [ 74.577554][ T57] usb 1-1: config 0 interface 206 altsetting 249 has a duplicate endpoint with address 0x2, skipping [ 74.588950][ T57] usb 1-1: config 0 interface 206 altsetting 249 has a duplicate endpoint with address 0x7, skipping [ 74.600672][ T57] usb 1-1: config 0 interface 206 altsetting 249 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 74.614820][ T57] usb 1-1: config 0 interface 205 has no altsetting 0 [ 74.621805][ T57] usb 1-1: config 0 interface 206 has no altsetting 0 [ 74.783280][ T57] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=8f.d4 [ 74.793932][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.802473][ T57] usb 1-1: Product: syz [ 74.808691][ T57] usb 1-1: Manufacturer: syz [ 74.815792][ T57] usb 1-1: SerialNumber: syz [ 74.830474][ T57] usb 1-1: config 0 descriptor?? [ 74.854874][ T8508] raw-gadget gadget: fail, usb_ep_enable returned -22 executing program [ 75.137748][ T57] pvrusb2: Hardware description: Terratec Grabster AV400 [ 75.146590][ T57] pvrusb2: ********** [ 75.150784][ T57] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 75.164164][ T57] pvrusb2: Important functionality might not be entirely working. [ 75.173995][ T57] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 75.187118][ T57] pvrusb2: ********** [ 75.204303][ T4046] pvrusb2: Invalid write control endpoint [ 75.275234][ T57] pvrusb2: Hardware description: Terratec Grabster AV400 [ 75.282616][ T57] pvrusb2: ********** [ 75.291065][ T4046] pvrusb2: Invalid write control endpoint [ 75.297798][ T4046] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 75.310018][ T57] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 75.323847][ T4046] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 75.332249][ T57] pvrusb2: Important functionality might not be entirely working. [ 75.335024][ T4046] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 75.343172][ T57] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 75.354514][ T4046] pvrusb2: Device being rendered inoperable [ 75.368793][ T57] pvrusb2: ********** [ 75.379803][ T4046] cx25840 0-0044: Unable to detect h/w, assuming cx23887 [ 75.388286][ T57] usb 1-1: selecting invalid altsetting 0 [ 75.404244][ T4046] cx25840 0-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 75.416475][ T4046] pvrusb2: Attached sub-driver cx25840 [ 75.422317][ T4046] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 75.436516][ T4046] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 75.447494][ T4046] pvrusb2: Invalid write control endpoint [ 75.465845][ T57] pvrusb2: Hardware description: Terratec Grabster AV400 [ 75.473005][ T4046] pvrusb2: Invalid write control endpoint [ 75.479565][ T4046] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 75.490591][ T57] pvrusb2: ********** [ 75.493125][ T4046] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 75.502891][ T57] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 75.504323][ T4046] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 75.527100][ T4046] pvrusb2: Device being rendered inoperable [ 75.532945][ T57] pvrusb2: Important functionality might not be entirely working. [ 75.534987][ T4046] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 75.541313][ T57] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 75.541321][ T57] pvrusb2: ********** [ 75.566006][ T4046] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 75.576044][ T4046] pvrusb2: Attached sub-driver cx25840 [ 75.583419][ T4046] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 75.594791][ T4046] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 75.605516][ T4046] pvrusb2: Invalid write control endpoint [ 75.619830][ T57] pvrusb2: Hardware description: Terratec Grabster AV400 [ 75.626373][ T4046] pvrusb2: Invalid write control endpoint [ 75.633912][ T4046] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 75.643717][ T57] pvrusb2: ********** [ 75.646973][ T4046] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 75.648481][ T57] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 75.659144][ T4046] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 75.678451][ T4046] pvrusb2: Device being rendered inoperable [ 75.685841][ T4046] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 75.692982][ T57] pvrusb2: Important functionality might not be entirely working. [ 75.692992][ T57] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 75.692999][ T57] pvrusb2: ********** [ 75.693347][ T57] usb 1-1: selecting invalid altsetting 0 [ 75.706713][ T4046] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 75.734010][ T4046] pvrusb2: Attached sub-driver cx25840 [ 75.739922][ T4046] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 75.752281][ T57] usb 1-1: USB disconnect, device number 2 [ 75.757142][ T4046] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 75.769563][ T4046] pvrusb2: Invalid write control endpoint [ 75.812096][ T4046] pvrusb2: Invalid write control endpoint [ 75.821031][ T4046] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 75.831535][ T4046] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 75.839889][ T4046] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 75.850727][ T4046] pvrusb2: Device being rendered inoperable [ 75.857466][ T4046] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 75.865104][ T4046] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 75.874987][ T4046] pvrusb2: Attached sub-driver cx25840 [ 75.882087][ T4046] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 75.893091][ T4046] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 75.918512][ T4046] ------------[ cut here ]------------ [ 75.926126][ T4046] sysfs group 'power' not found for kobject 'i2c-0' [ 75.935095][ T4046] WARNING: CPU: 0 PID: 4046 at fs/sysfs/group.c:279 sysfs_remove_group+0x126/0x170 [ 75.945523][ T4046] Modules linked in: [ 75.950264][ T4046] CPU: 1 PID: 4046 Comm: pvrusb2-context Not tainted 5.10.0-syzkaller #0 [ 75.959460][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.970993][ T4046] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 75.978490][ T4046] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 20 7c 5b 89 e8 b6 00 c5 06 <0f> 0b eb 98 e8 41 2f ca ff e9 01 ff ff ff 48 89 df e8 34 2f ca ff [ 76.000284][ T4046] RSP: 0018:ffffc90003317a38 EFLAGS: 00010286 [ 76.007799][ T4046] RAX: 0000000000000000 RBX: ffffffff89b57c00 RCX: 0000000000000000 [ 76.017493][ T4046] RDX: ffff88801d323480 RSI: ffffffff8158c865 RDI: fffff52000662f39 [ 76.025807][ T4046] RBP: 0000000000000000 R08: 0000000000000001 R09: ffff8880b9e30627 [ 76.035384][ T4046] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88814394a018 [ 76.044337][ T4046] R13: ffffffff89b581a0 R14: ffff88814386f000 R15: ffffffff8c2c7f20 [ 76.053780][ T4046] FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 76.064171][ T4046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.071455][ T4046] CR2: 00007f6bfa476000 CR3: 0000000014e05000 CR4: 00000000001506f0 [ 76.081812][ T4046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.090175][ T4046] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.098772][ T4046] Call Trace: [ 76.102474][ T4046] dpm_sysfs_remove+0x97/0xb0 [ 76.107567][ T4046] device_del+0x20c/0xec0 [ 76.112195][ T4046] ? device_link_add_missing_supplier_links+0x370/0x370 [ 76.120270][ T4046] ? do_raw_spin_lock+0x120/0x2b0 [ 76.126088][ T4046] ? rwlock_bug.part.0+0x90/0x90 [ 76.131729][ T4046] cdev_device_del+0x19/0x100 [ 76.136731][ T4046] put_i2c_dev+0x160/0x1b0 [ 76.141632][ T4046] i2cdev_detach_adapter.part.0+0x10f/0x1a0 [ 76.148480][ T4046] i2cdev_notifier_call+0xad/0xc0 [ 76.154157][ T4046] notifier_call_chain+0xb5/0x200 [ 76.159230][ T4046] blocking_notifier_call_chain+0x67/0x90 [ 76.165463][ T4046] device_del+0x1ff/0xec0 [ 76.170323][ T4046] ? lock_downgrade+0x6d0/0x6d0 [ 76.175605][ T4046] ? device_link_add_missing_supplier_links+0x370/0x370 [ 76.183421][ T4046] ? lockdep_init_map_waits+0x26a/0x720 [ 76.189937][ T4046] ? lockdep_init_map_waits+0x26a/0x720 [ 76.196330][ T4046] device_unregister+0x22/0xc0 [ 76.201173][ T4046] i2c_del_adapter+0x4d6/0x680 [ 76.207233][ T4046] ? del_timer_sync+0x12e/0x160 [ 76.213448][ T4046] pvr2_i2c_core_done+0x69/0xc0 [ 76.220013][ T4046] pvr2_hdw_destroy+0x179/0x3b0 [ 76.225756][ T4046] pvr2_context_destroy+0x84/0x230 [ 76.231799][ T4046] pvr2_context_thread_func+0x641/0x850 [ 76.238424][ T4046] ? pvr2_context_destroy+0x230/0x230 [ 76.244327][ T4046] ? add_wait_queue_exclusive+0x180/0x180 [ 76.250624][ T4046] ? lockdep_hardirqs_on+0x79/0x100 [ 76.256693][ T4046] ? __kthread_parkme+0x13f/0x1e0 [ 76.262238][ T4046] ? pvr2_context_destroy+0x230/0x230 [ 76.268377][ T57] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.270236][ T4046] kthread+0x3b1/0x4a0 [ 76.281428][ T4046] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 76.288471][ T4046] ret_from_fork+0x1f/0x30 [ 76.293526][ T4046] Kernel panic - not syncing: panic_on_warn set ... [ 76.302137][ T4046] CPU: 0 PID: 4046 Comm: pvrusb2-context Not tainted 5.10.0-syzkaller #0 [ 76.311088][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.323230][ T4046] Call Trace: [ 76.326566][ T4046] dump_stack+0x107/0x163 [ 76.331582][ T4046] panic+0x306/0x73d [ 76.336099][ T4046] ? __warn_printk+0xf3/0xf3 [ 76.340919][ T4046] ? __warn.cold+0x1a/0x44 [ 76.345808][ T4046] ? __warn+0xf1/0x210 [ 76.351069][ T4046] ? sysfs_remove_group+0x126/0x170 [ 76.356787][ T4046] __warn.cold+0x35/0x44 [ 76.361463][ T4046] ? wake_up_klogd.part.0+0x8e/0xd0 [ 76.366971][ T4046] ? sysfs_remove_group+0x126/0x170 [ 76.372714][ T4046] report_bug+0x1bd/0x210 [ 76.377466][ T4046] handle_bug+0x3c/0x60 [ 76.381925][ T4046] exc_invalid_op+0x14/0x40 [ 76.386663][ T4046] asm_exc_invalid_op+0x12/0x20 [ 76.392385][ T4046] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 76.398566][ T4046] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 20 7c 5b 89 e8 b6 00 c5 06 <0f> 0b eb 98 e8 41 2f ca ff e9 01 ff ff ff 48 89 df e8 34 2f ca ff [ 76.420480][ T4046] RSP: 0018:ffffc90003317a38 EFLAGS: 00010286 [ 76.427529][ T4046] RAX: 0000000000000000 RBX: ffffffff89b57c00 RCX: 0000000000000000 [ 76.435803][ T4046] RDX: ffff88801d323480 RSI: ffffffff8158c865 RDI: fffff52000662f39 [ 76.444951][ T4046] RBP: 0000000000000000 R08: 0000000000000001 R09: ffff8880b9e30627 [ 76.453990][ T4046] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88814394a018 [ 76.463255][ T4046] R13: ffffffff89b581a0 R14: ffff88814386f000 R15: ffffffff8c2c7f20 [ 76.471606][ T4046] ? vprintk_func+0x95/0x1e0 [ 76.476374][ T4046] ? sysfs_remove_group+0x126/0x170 [ 76.481644][ T4046] dpm_sysfs_remove+0x97/0xb0 [ 76.486647][ T4046] device_del+0x20c/0xec0 [ 76.491004][ T4046] ? device_link_add_missing_supplier_links+0x370/0x370 [ 76.497957][ T4046] ? do_raw_spin_lock+0x120/0x2b0 [ 76.503117][ T4046] ? rwlock_bug.part.0+0x90/0x90 [ 76.508265][ T4046] cdev_device_del+0x19/0x100 [ 76.513059][ T4046] put_i2c_dev+0x160/0x1b0 [ 76.517603][ T4046] i2cdev_detach_adapter.part.0+0x10f/0x1a0 [ 76.524563][ T4046] i2cdev_notifier_call+0xad/0xc0 [ 76.529842][ T4046] notifier_call_chain+0xb5/0x200 [ 76.535070][ T4046] blocking_notifier_call_chain+0x67/0x90 [ 76.541219][ T4046] device_del+0x1ff/0xec0 [ 76.547039][ T4046] ? lock_downgrade+0x6d0/0x6d0 [ 76.553499][ T4046] ? device_link_add_missing_supplier_links+0x370/0x370 [ 76.560880][ T4046] ? lockdep_init_map_waits+0x26a/0x720 [ 76.567129][ T4046] ? lockdep_init_map_waits+0x26a/0x720 [ 76.572841][ T4046] device_unregister+0x22/0xc0 [ 76.577843][ T4046] i2c_del_adapter+0x4d6/0x680 [ 76.582948][ T4046] ? del_timer_sync+0x12e/0x160 [ 76.588054][ T4046] pvr2_i2c_core_done+0x69/0xc0 [ 76.593064][ T4046] pvr2_hdw_destroy+0x179/0x3b0 [ 76.598501][ T4046] pvr2_context_destroy+0x84/0x230 [ 76.604099][ T4046] pvr2_context_thread_func+0x641/0x850 [ 76.610556][ T4046] ? pvr2_context_destroy+0x230/0x230 [ 76.616315][ T4046] ? add_wait_queue_exclusive+0x180/0x180 [ 76.622478][ T4046] ? lockdep_hardirqs_on+0x79/0x100 [ 76.628944][ T4046] ? __kthread_parkme+0x13f/0x1e0 [ 76.633148][ T57] usb 1-1: config 0 has an invalid interface number: 145 but max is 3 [ 76.634009][ T4046] ? pvr2_context_destroy+0x230/0x230 [ 76.634030][ T4046] kthread+0x3b1/0x4a0 [ 76.634052][ T4046] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 76.642522][ T57] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 76.648315][ T4046] ret_from_fork+0x1f/0x30 [ 76.653933][ T4046] Kernel Offset: disabled [ 76.679698][ T4046] Rebooting in 86400 seconds..