[ 82.081155][ T46] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. 2024/09/06 05:07:12 ignoring optional flag "sandboxArg"="0" 2024/09/06 05:07:12 parsed 1 programs 2024/09/06 05:07:14 executed programs: 0 [ 85.632723][ T5515] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.644383][ T5515] syz-executor (5515) used greatest stack depth: 18736 bytes left [ 85.685506][ T4613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.693722][ T4613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.701784][ T4613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.710669][ T4613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.718580][ T4613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.726918][ T4613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.840583][ T5524] chnl_net:caif_netlink_parms(): no params data found [ 85.892623][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.899940][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.907083][ T5524] bridge_slave_0: entered allmulticast mode [ 85.914349][ T5524] bridge_slave_0: entered promiscuous mode [ 85.922247][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.929398][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.937145][ T5524] bridge_slave_1: entered allmulticast mode [ 85.944643][ T5524] bridge_slave_1: entered promiscuous mode [ 85.968603][ T5524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.980296][ T5524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.007874][ T5524] team0: Port device team_slave_0 added [ 86.015743][ T5524] team0: Port device team_slave_1 added [ 86.037997][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.045486][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.072021][ T5524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.084986][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.092028][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.117975][ T5524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.153180][ T5524] hsr_slave_0: entered promiscuous mode [ 86.159479][ T5524] hsr_slave_1: entered promiscuous mode [ 86.729283][ T5524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.743245][ T5524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.755654][ T5524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.767995][ T5524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.796721][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.803961][ T5524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.811457][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.818806][ T5524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.888097][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.902570][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.926112][ T5524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.948438][ T5524] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.964674][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.971893][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.002004][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.009288][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.225873][ T5524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.276973][ T5524] veth0_vlan: entered promiscuous mode [ 87.295161][ T5524] veth1_vlan: entered promiscuous mode [ 87.336751][ T5524] veth0_macvtap: entered promiscuous mode [ 87.348290][ T5524] veth1_macvtap: entered promiscuous mode [ 87.374836][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.391124][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.406445][ T5524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.416815][ T5524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.428700][ T5524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.438602][ T5524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.545287][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.562806][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.588579][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.596977][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.770906][ T4613] Bluetooth: hci0: command tx timeout [ 87.939962][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.129877][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 88.140449][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.153602][ T9] usb 1-1: config 1 has an invalid interface number: 170 but max is 1 [ 88.162637][ T9] usb 1-1: config 1 has an invalid interface number: 234 but max is 1 [ 88.172011][ T9] usb 1-1: config 1 has no interface number 0 [ 88.178116][ T9] usb 1-1: config 1 has no interface number 1 [ 88.184545][ T9] usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x2 has an invalid bInterval 129, changing to 7 [ 88.195858][ T9] usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 88.207662][ T9] usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x82 has an invalid bInterval 33, changing to 9 [ 88.219462][ T9] usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 88.231511][ T9] usb 1-1: config 1 interface 170 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 88.246915][ T9] usb 1-1: config 1 interface 234 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 88.263626][ T9] usb 1-1: config 1 interface 234 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 88.274745][ T9] usb 1-1: config 1 interface 234 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 88.286132][ T9] usb 1-1: config 1 interface 170 has no altsetting 0 [ 88.293910][ T9] usb 1-1: config 1 interface 234 has no altsetting 0 [ 88.304995][ T9] usb 1-1: string descriptor 0 read error: -22 [ 88.314674][ T9] usb 1-1: New USB device found, idVendor=080e, idProduct=4eb9, bcdDevice=d7.f6 [ 88.326903][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.365211][ T9] ------------[ cut here ]------------ [ 88.379719][ T9] UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1025:7 [ 88.397856][ T9] index 1 is out of range for type 'struct hid_class_descriptor[1]' [ 88.406476][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 88.417038][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 88.427119][ T9] Workqueue: usb_hub_wq hub_event [ 88.432229][ T9] Call Trace: [ 88.435553][ T9] [ 88.438506][ T9] dump_stack_lvl+0x241/0x360 [ 88.443229][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.448460][ T9] ? __pfx__printk+0x10/0x10 [ 88.453090][ T9] ? trace_contention_end+0x3c/0x120 [ 88.458458][ T9] __ubsan_handle_out_of_bounds+0x121/0x150 [ 88.464565][ T9] usbhid_parse+0x5a7/0xc80 [ 88.469110][ T9] ? __pfx_usbhid_parse+0x10/0x10 [ 88.474175][ T9] ? hid_ignore+0x5dc/0x7a0 [ 88.478680][ T9] hid_add_device+0x132/0x520 [ 88.483372][ T9] usbhid_probe+0xb52/0xec0 [ 88.487879][ T9] usb_probe_interface+0x645/0xbb0 [ 88.493000][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 88.498633][ T9] really_probe+0x2b8/0xad0 [ 88.503156][ T9] __driver_probe_device+0x1a2/0x390 [ 88.508460][ T9] driver_probe_device+0x50/0x430 [ 88.513482][ T9] __device_attach_driver+0x2d6/0x530 [ 88.518852][ T9] bus_for_each_drv+0x24e/0x2e0 [ 88.523701][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 88.529698][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 88.535099][ T9] __device_attach+0x333/0x520 [ 88.539859][ T9] ? __pfx_lock_release+0x10/0x10 [ 88.544924][ T9] ? __pfx___device_attach+0x10/0x10 [ 88.550568][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 88.555801][ T9] bus_probe_device+0x189/0x260 [ 88.560665][ T9] device_add+0x856/0xbf0 [ 88.565260][ T9] usb_set_configuration+0x1976/0x1fb0 [ 88.570745][ T9] usb_generic_driver_probe+0x88/0x140 [ 88.576204][ T9] usb_probe_device+0x1b8/0x380 [ 88.581140][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 88.586518][ T9] really_probe+0x2b8/0xad0 [ 88.591022][ T9] __driver_probe_device+0x1a2/0x390 [ 88.596310][ T9] driver_probe_device+0x50/0x430 [ 88.601334][ T9] __device_attach_driver+0x2d6/0x530 [ 88.606707][ T9] bus_for_each_drv+0x24e/0x2e0 [ 88.611554][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 88.617438][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 88.622914][ T9] __device_attach+0x333/0x520 [ 88.627674][ T9] ? __pfx___device_attach+0x10/0x10 [ 88.632959][ T9] bus_probe_device+0x189/0x260 [ 88.637809][ T9] device_add+0x856/0xbf0 [ 88.642136][ T9] usb_new_device+0x104a/0x19a0 [ 88.646996][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 88.652217][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.657446][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 88.662653][ T9] hub_event+0x2d6d/0x5150 [ 88.667233][ T9] ? __pfx_hub_event+0x10/0x10 [ 88.671997][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 88.677027][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.683442][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.689776][ T9] ? process_scheduled_works+0x945/0x1830 [ 88.695490][ T9] process_scheduled_works+0xa2c/0x1830 [ 88.701153][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 88.707136][ T9] ? assign_work+0x364/0x3d0 [ 88.711902][ T9] worker_thread+0x86d/0xd10 [ 88.716504][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 88.722397][ T9] ? __kthread_parkme+0x169/0x1d0 [ 88.727596][ T9] ? __pfx_worker_thread+0x10/0x10 [ 88.732703][ T9] kthread+0x2f0/0x390 [ 88.736777][ T9] ? __pfx_worker_thread+0x10/0x10 [ 88.741966][ T9] ? __pfx_kthread+0x10/0x10 [ 88.746584][ T9] ret_from_fork+0x4b/0x80 [ 88.751012][ T9] ? __pfx_kthread+0x10/0x10 [ 88.755715][ T9] ret_from_fork_asm+0x1a/0x30 [ 88.760518][ T9] [ 88.794201][ T9] ---[ end trace ]--- [ 88.811205][ T9] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 88.818547][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 88.829330][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 88.839406][ T9] Workqueue: usb_hub_wq hub_event [ 88.844484][ T9] Call Trace: [ 88.847801][ T9] [ 88.850746][ T9] dump_stack_lvl+0x241/0x360 [ 88.855627][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.860856][ T9] ? __pfx__printk+0x10/0x10 [ 88.865470][ T9] ? vprintk_emit+0x667/0x7c0 [ 88.870177][ T9] ? vscnprintf+0x5d/0x90 [ 88.874540][ T9] panic+0x349/0x860 [ 88.878476][ T9] ? check_panic_on_warn+0x21/0xb0 [ 88.883642][ T9] ? __pfx_panic+0x10/0x10 [ 88.888091][ T9] ? _printk+0xd5/0x120 [ 88.892293][ T9] ? __pfx__printk+0x10/0x10 [ 88.896922][ T9] check_panic_on_warn+0x86/0xb0 [ 88.901885][ T9] __ubsan_handle_out_of_bounds+0x141/0x150 [ 88.907820][ T9] usbhid_parse+0x5a7/0xc80 [ 88.912364][ T9] ? __pfx_usbhid_parse+0x10/0x10 [ 88.917402][ T9] ? hid_ignore+0x5dc/0x7a0 [ 88.921907][ T9] hid_add_device+0x132/0x520 [ 88.926586][ T9] usbhid_probe+0xb52/0xec0 [ 88.931090][ T9] usb_probe_interface+0x645/0xbb0 [ 88.936217][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 88.941847][ T9] really_probe+0x2b8/0xad0 [ 88.946360][ T9] __driver_probe_device+0x1a2/0x390 [ 88.951640][ T9] driver_probe_device+0x50/0x430 [ 88.956666][ T9] __device_attach_driver+0x2d6/0x530 [ 88.962054][ T9] bus_for_each_drv+0x24e/0x2e0 [ 88.966921][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 88.972814][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 88.978199][ T9] __device_attach+0x333/0x520 [ 88.982980][ T9] ? __pfx_lock_release+0x10/0x10 [ 88.988006][ T9] ? __pfx___device_attach+0x10/0x10 [ 88.993291][ T9] ? do_raw_spin_unlock+0x13c/0x8b0 [ 88.998574][ T9] bus_probe_device+0x189/0x260 [ 89.003431][ T9] device_add+0x856/0xbf0 [ 89.007762][ T9] usb_set_configuration+0x1976/0x1fb0 [ 89.013236][ T9] usb_generic_driver_probe+0x88/0x140 [ 89.018692][ T9] usb_probe_device+0x1b8/0x380 [ 89.023546][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 89.028908][ T9] really_probe+0x2b8/0xad0 [ 89.033410][ T9] __driver_probe_device+0x1a2/0x390 [ 89.038690][ T9] driver_probe_device+0x50/0x430 [ 89.043708][ T9] __device_attach_driver+0x2d6/0x530 [ 89.049086][ T9] bus_for_each_drv+0x24e/0x2e0 [ 89.054018][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 89.059904][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 89.065278][ T9] __device_attach+0x333/0x520 [ 89.070052][ T9] ? __pfx___device_attach+0x10/0x10 [ 89.075423][ T9] bus_probe_device+0x189/0x260 [ 89.080294][ T9] device_add+0x856/0xbf0 [ 89.084623][ T9] usb_new_device+0x104a/0x19a0 [ 89.089571][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 89.094774][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.099970][ T9] ? lockdep_hardirqs_on+0x99/0x150 [ 89.105163][ T9] hub_event+0x2d6d/0x5150 [ 89.109713][ T9] ? __pfx_hub_event+0x10/0x10 [ 89.114480][ T9] ? __pfx_lock_acquire+0x10/0x10 [ 89.119510][ T9] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.125487][ T9] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.131823][ T9] ? process_scheduled_works+0x945/0x1830 [ 89.137560][ T9] process_scheduled_works+0xa2c/0x1830 [ 89.143151][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 89.149180][ T9] ? assign_work+0x364/0x3d0 [ 89.153774][ T9] worker_thread+0x86d/0xd10 [ 89.158368][ T9] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 89.164286][ T9] ? __kthread_parkme+0x169/0x1d0 [ 89.169310][ T9] ? __pfx_worker_thread+0x10/0x10 [ 89.174415][ T9] kthread+0x2f0/0x390 [ 89.178480][ T9] ? __pfx_worker_thread+0x10/0x10 [ 89.183614][ T9] ? __pfx_kthread+0x10/0x10 [ 89.188199][ T9] ret_from_fork+0x4b/0x80 [ 89.192614][ T9] ? __pfx_kthread+0x10/0x10 [ 89.197289][ T9] ret_from_fork_asm+0x1a/0x30 [ 89.202064][ T9] [ 89.205329][ T9] Kernel Offset: disabled [ 89.209718][ T9] Rebooting in 86400 seconds..