[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.68' (ECDSA) to the list of known hosts. syzkaller login: [ 77.977455][ T8460] chnl_net:caif_netlink_parms(): no params data found [ 78.038650][ T8460] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.047211][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.055578][ T8460] device bridge_slave_0 entered promiscuous mode [ 78.065181][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.072682][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.081050][ T8460] device bridge_slave_1 entered promiscuous mode [ 78.103008][ T8460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.117109][ T8460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.149464][ T8460] team0: Port device team_slave_0 added [ 78.159370][ T8460] team0: Port device team_slave_1 added [ 78.179164][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.186594][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.214774][ T8460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.228669][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.235939][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.264880][ T8460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.294326][ T8460] device hsr_slave_0 entered promiscuous mode [ 78.301448][ T8460] device hsr_slave_1 entered promiscuous mode [ 78.407964][ T8460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.421837][ T8460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.431520][ T8460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.442732][ T8460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.470261][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.478222][ T8460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.486182][ T8460] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.493451][ T8460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.540779][ T8460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.554025][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.568148][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.578167][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.588552][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 78.603514][ T8460] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.615140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.626209][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.633322][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.656190][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.664631][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.671919][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.681163][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.692056][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.711664][ T8460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.723847][ T8460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.737693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.746909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.757546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.766217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.786015][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.793842][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.812837][ T8460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.836400][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.860760][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.870711][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.879867][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.893032][ T8460] device veth0_vlan entered promiscuous mode [ 78.907299][ T8460] device veth1_vlan entered promiscuous mode [ 78.932803][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.942329][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.952146][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.964834][ T8460] device veth0_macvtap entered promiscuous mode [ 78.973768][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.985534][ T8460] device veth1_macvtap entered promiscuous mode [ 79.005164][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.014605][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.024047][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.040350][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.048523][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.057394][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.071051][ T8460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.080501][ T8460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.089420][ T8460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.099000][ T8460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 79.425585][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.665601][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 79.785750][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.967113][ T20] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=f7.d7 [ 79.976527][ T20] usb 1-1: New USB device strings: Mfr=69, Product=191, SerialNumber=179 [ 79.985173][ T20] usb 1-1: Product: syz [ 79.990957][ T20] usb 1-1: Manufacturer: syz [ 79.996861][ T20] usb 1-1: SerialNumber: syz [ 80.011464][ T20] usb 1-1: config 0 descriptor?? [ 80.320501][ T20] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 80.359440][ T3985] pvrusb2: Invalid write control endpoint [ 80.368861][ T20] usb 1-1: USB disconnect, device number 2 [ 80.446084][ T3985] pvrusb2: Invalid write control endpoint [ 80.452653][ T3985] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 80.475420][ T3985] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 80.483277][ T3985] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 80.505454][ T3985] pvrusb2: Device being rendered inoperable [ 80.512626][ T3985] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 80.547707][ T3985] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 80.569859][ T3985] pvrusb2: Attached sub-driver cx25840 [ 80.599585][ T3985] pvrusb2: Attempted to execute control transfer when device not ok [ 80.608647][ T3985] pvrusb2: Attempted to execute control transfer when device not ok [ 80.619426][ T3985] pvrusb2: Attempted to execute control transfer when device not ok [ 80.629985][ T3985] pvrusb2: Attempted to execute control transfer when device not ok [ 80.639468][ T3985] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 80.707047][ T3985] TUNER: Unable to find symbol tda829x_probe() [ 80.740103][ T3985] DVB: Unable to find symbol tda9887_attach() [ 80.747185][ T3985] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 80.757177][ T3985] pvrusb2: Attached sub-driver tuner [ 80.762770][ T3985] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 80.779931][ T3985] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 80.840981][ T3985] ------------[ cut here ]------------ [ 80.857623][ T3985] sysfs group 'power' not found for kobject 'i2c-1' [ 80.864607][ T3985] WARNING: CPU: 1 PID: 3985 at fs/sysfs/group.c:279 sysfs_remove_group+0x126/0x170 [ 80.884614][ T3985] Modules linked in: [ 80.890957][ T3985] CPU: 1 PID: 3985 Comm: pvrusb2-context Not tainted 5.13.0-rc7-syzkaller #0 [ 80.902326][ T25] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.902547][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.924831][ T3985] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 80.934430][ T3985] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 e0 ad 7c 89 e8 d5 11 e4 06 <0f> 0b eb 98 e8 b1 8f c8 ff e9 01 ff ff ff 48 89 df e8 a4 8f c8 ff [ 80.956898][ T3985] RSP: 0018:ffffc9000423fc30 EFLAGS: 00010282 [ 80.963307][ T3985] RAX: 0000000000000000 RBX: ffffffff89db42e0 RCX: 0000000000000000 [ 80.972774][ T3985] RDX: ffff8880221e8000 RSI: ffffffff815ce3a5 RDI: fffff52000847f78 [ 80.981423][ T3985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.990820][ T3985] R10: ffffffff815c820e R11: 0000000000000000 R12: ffff88801d28c328 [ 80.999835][ T3985] R13: ffffffff89db4880 R14: ffff88801d28c938 R15: ffff88801d28c938 [ 81.009163][ T3985] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 81.019757][ T3985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.027706][ T3985] CR2: 00007f5914928010 CR3: 000000000bc8e000 CR4: 00000000001506f0 [ 81.036923][ T3985] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.045626][ T3985] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.053746][ T3985] Call Trace: [ 81.058235][ T3985] dpm_sysfs_remove+0x97/0xb0 [ 81.062973][ T3985] device_del+0x20c/0xd40 [ 81.069061][ T3985] ? lock_downgrade+0x6e0/0x6e0 [ 81.073953][ T3985] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 81.083099][ T3985] ? lockdep_init_map_type+0x2c3/0x7b0 [ 81.088815][ T3985] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 81.095215][ T3985] ? lockdep_init_map_type+0x2c3/0x7b0 [ 81.101969][ T3985] device_unregister+0x22/0xc0 [ 81.108077][ T3985] i2c_del_adapter+0x4d6/0x680 [ 81.112890][ T3985] ? del_timer_sync+0x17e/0x1b0 [ 81.118811][ T3985] pvr2_i2c_core_done+0x69/0xc0 [ 81.123867][ T3985] pvr2_hdw_destroy+0x179/0x3b0 [ 81.129783][ T3985] pvr2_context_destroy+0x84/0x230 [ 81.134937][ T3985] pvr2_context_thread_func+0x64b/0x850 [ 81.141821][ T3985] ? pvr2_context_destroy+0x230/0x230 [ 81.147977][ T3985] ? finish_wait+0x260/0x260 [ 81.152623][ T3985] ? lockdep_hardirqs_on+0x79/0x100 [ 81.158679][ T3985] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 81.165093][ T3985] ? __kthread_parkme+0x13f/0x1e0 [ 81.171509][ T3985] ? pvr2_context_destroy+0x230/0x230 [ 81.177280][ T3985] kthread+0x3b1/0x4a0 [ 81.181564][ T3985] ? __kthread_bind_mask+0xc0/0xc0 [ 81.187337][ T3985] ret_from_fork+0x1f/0x30 [ 81.192148][ T3985] Kernel panic - not syncing: panic_on_warn set ... [ 81.198884][ T3985] CPU: 0 PID: 3985 Comm: pvrusb2-context Not tainted 5.13.0-rc7-syzkaller #0 [ 81.208352][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.218608][ T3985] Call Trace: [ 81.221889][ T3985] dump_stack+0x141/0x1d7 [ 81.226362][ T3985] panic+0x306/0x73d [ 81.230320][ T3985] ? __warn_printk+0xf3/0xf3 [ 81.234940][ T3985] ? __warn.cold+0x1a/0x44 [ 81.239538][ T3985] ? sysfs_remove_group+0x126/0x170 [ 81.245206][ T3985] __warn.cold+0x35/0x44 [ 81.249999][ T3985] ? sysfs_remove_group+0x126/0x170 [ 81.255385][ T3985] report_bug+0x1bd/0x210 [ 81.259855][ T3985] handle_bug+0x3c/0x60 [ 81.264107][ T3985] exc_invalid_op+0x14/0x40 [ 81.269046][ T3985] asm_exc_invalid_op+0x12/0x20 [ 81.274434][ T3985] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 81.280412][ T3985] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 e0 ad 7c 89 e8 d5 11 e4 06 <0f> 0b eb 98 e8 b1 8f c8 ff e9 01 ff ff ff 48 89 df e8 a4 8f c8 ff [ 81.301149][ T3985] RSP: 0018:ffffc9000423fc30 EFLAGS: 00010282 [ 81.307234][ T3985] RAX: 0000000000000000 RBX: ffffffff89db42e0 RCX: 0000000000000000 [ 81.316045][ T3985] RDX: ffff8880221e8000 RSI: ffffffff815ce3a5 RDI: fffff52000847f78 [ 81.324304][ T3985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.332632][ T3985] R10: ffffffff815c820e R11: 0000000000000000 R12: ffff88801d28c328 [ 81.341330][ T3985] R13: ffffffff89db4880 R14: ffff88801d28c938 R15: ffff88801d28c938 [ 81.349757][ T3985] ? wake_up_klogd.part.0+0x8e/0xd0 [ 81.355677][ T3985] ? vprintk+0x95/0x260 [ 81.360142][ T3985] dpm_sysfs_remove+0x97/0xb0 [ 81.365064][ T3985] device_del+0x20c/0xd40 [ 81.369705][ T3985] ? lock_downgrade+0x6e0/0x6e0 [ 81.375539][ T3985] ? __device_links_queue_sync_state+0x3f0/0x3f0 [ 81.381969][ T3985] ? lockdep_init_map_type+0x2c3/0x7b0 [ 81.387477][ T3985] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 81.393392][ T3985] ? lockdep_init_map_type+0x2c3/0x7b0 [ 81.399006][ T3985] device_unregister+0x22/0xc0 [ 81.404455][ T3985] i2c_del_adapter+0x4d6/0x680 [ 81.409338][ T3985] ? del_timer_sync+0x17e/0x1b0 [ 81.414286][ T3985] pvr2_i2c_core_done+0x69/0xc0 [ 81.419341][ T3985] pvr2_hdw_destroy+0x179/0x3b0 [ 81.424614][ T3985] pvr2_context_destroy+0x84/0x230 [ 81.429908][ T3985] pvr2_context_thread_func+0x64b/0x850 [ 81.435569][ T3985] ? pvr2_context_destroy+0x230/0x230 [ 81.441272][ T3985] ? finish_wait+0x260/0x260 [ 81.446182][ T3985] ? lockdep_hardirqs_on+0x79/0x100 [ 81.451748][ T3985] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 81.458325][ T3985] ? __kthread_parkme+0x13f/0x1e0 [ 81.463531][ T3985] ? pvr2_context_destroy+0x230/0x230 [ 81.469024][ T3985] kthread+0x3b1/0x4a0 [ 81.473346][ T3985] ? __kthread_bind_mask+0xc0/0xc0 [ 81.478868][ T3985] ret_from_fork+0x1f/0x30 [ 81.484565][ T3985] Kernel Offset: disabled [ 81.489123][ T3985] Rebooting in 86400 seconds..