[ 24.558094][ T1440] device veth0_vlan entered promiscuous mode [ 24.564555][ T661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.572796][ T661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.580500][ T661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.587717][ T661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.638334][ T661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.665860][ T661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.674259][ T661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.767824][ T1440] syz-executor.0 (1440) used greatest stack depth: 11512 bytes left [ 24.858402][ T9] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. 2024/04/01 04:03:05 ignoring optional flag "sandboxArg"="0" 2024/04/01 04:03:05 parsed 1 programs 2024/04/01 04:03:05 executed programs: 0 [ 42.873692][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.881947][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.900513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.909117][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.917744][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.925589][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.032640][ T1791] device veth0_vlan entered promiscuous mode [ 43.039003][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.047194][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.055220][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.062733][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.122758][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.153530][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.162181][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.477649][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.717707][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 43.877700][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.957689][ T24] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 43.965832][ T24] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 43.973984][ T24] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 43.982332][ T24] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 43.990992][ T24] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 43.999654][ T24] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 44.008701][ T24] usb 1-1: config 6 has no interface number 0 [ 44.014734][ T24] usb 1-1: config 6 has no interface number 1 [ 44.020802][ T24] usb 1-1: config 6 has no interface number 2 [ 44.026844][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 44.037864][ T24] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 44.048612][ T24] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 44.059709][ T24] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 44.069668][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 44.080776][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 44.091986][ T24] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 44.102811][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 44.113821][ T24] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 44.124644][ T24] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 44.135475][ T24] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 44.148847][ T24] usb 1-1: config 6 interface 199 has no altsetting 0 [ 44.155671][ T24] usb 1-1: config 6 interface 48 has no altsetting 0 [ 44.162834][ T24] usb 1-1: config 6 interface 105 has no altsetting 0 [ 44.407690][ T24] usb 1-1: string descriptor 0 read error: -22 [ 44.414030][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 44.423226][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.468173][ T24] ------------[ cut here ]------------ [ 44.473740][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 44.480706][ T24] WARNING: CPU: 0 PID: 24 at drivers/usb/core/urb.c:502 usb_submit_urb+0x44f/0x6a0 [ 44.490087][ T24] Modules linked in: [ 44.493946][ T24] CPU: 0 PID: 24 Comm: kworker/0:1 Not tainted 5.15.153-syzkaller #0 [ 44.502271][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.513927][ T24] Workqueue: usb_hub_wq hub_event [ 44.519194][ T24] RIP: 0010:usb_submit_urb+0x44f/0x6a0 [ 44.524821][ T24] Code: 89 54 24 10 44 89 44 24 08 e8 4d f3 e3 ff 44 8b 44 24 08 44 89 f9 48 c7 c7 a8 dd 9a 82 48 8b 54 24 10 48 89 c6 e8 da cc 62 00 <0f> 0b e9 68 fd ff ff 41 b8 85 03 00 00 45 29 f0 e9 82 fd ff ff 89 [ 44.545278][ T24] RSP: 0018:ffffc900000d7760 EFLAGS: 00010286 [ 44.551429][ T24] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 00000000ffffdfff [ 44.559395][ T24] RDX: 00000000ffffffea RSI: 00000000ffffdfff RDI: 0000000000000001 [ 44.567422][ T24] RBP: ffff88811062fc00 R08: ffffffff82d750e8 R09: 0000000000000003 [ 44.575735][ T24] R10: 00000000ffffe000 R11: 3fffffffffffffff R12: ffff88810f159000 [ 44.584275][ T24] R13: 0000000000000002 R14: 0000000000000001 R15: 0000000000000001 [ 44.592513][ T24] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 44.601556][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.608767][ T24] CR2: 00007fa138886a38 CR3: 0000000116f2d000 CR4: 00000000003506f0 [ 44.616882][ T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.624885][ T24] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.632947][ T24] Call Trace: [ 44.636208][ T24] [ 44.639253][ T24] ? __warn+0x7b/0xf0 [ 44.644210][ T24] ? usb_submit_urb+0x44f/0x6a0 [ 44.649733][ T24] ? report_bug+0x9a/0xc0 [ 44.654996][ T24] ? handle_bug+0x3c/0x60 [ 44.660145][ T24] ? exc_invalid_op+0x14/0x70 [ 44.664925][ T24] ? asm_exc_invalid_op+0x16/0x20 [ 44.670135][ T24] ? usb_submit_urb+0x44f/0x6a0 [ 44.674986][ T24] usb_start_wait_urb+0x60/0x160 [ 44.679977][ T24] ? verify_cpu+0x100/0x100 [ 44.685426][ T24] amradio_send_cmd+0xb8/0x310 [ 44.690188][ T24] usb_amradio_probe+0x195/0x230 [ 44.695095][ T24] usb_probe_interface+0xda/0x290 [ 44.700382][ T24] really_probe+0xbc/0x3b0 [ 44.704783][ T24] __driver_probe_device+0xd1/0x120 [ 44.709968][ T24] driver_probe_device+0x19/0x90 [ 44.714881][ T24] __device_attach_driver+0x71/0xf0 [ 44.720350][ T24] ? driver_allows_async_probing+0x40/0x40 [ 44.726334][ T24] ? driver_allows_async_probing+0x40/0x40 [ 44.732482][ T24] bus_for_each_drv+0x79/0xc0 [ 44.737409][ T24] __device_attach+0xb9/0x210 [ 44.742428][ T24] bus_probe_device+0x97/0xb0 [ 44.747089][ T24] device_add+0x421/0x930 [ 44.751405][ T24] ? __mutex_unlock_slowpath+0x37/0x280 [ 44.757039][ T24] usb_set_configuration+0x4f7/0x8e0 [ 44.762350][ T24] usb_generic_driver_probe+0x47/0x70 [ 44.767808][ T24] usb_probe_device+0x2b/0xf0 [ 44.772482][ T24] really_probe+0xbc/0x3b0 [ 44.776985][ T24] __driver_probe_device+0xd1/0x120 [ 44.782310][ T24] driver_probe_device+0x19/0x90 [ 44.787518][ T24] __device_attach_driver+0x71/0xf0 [ 44.793162][ T24] ? driver_allows_async_probing+0x40/0x40 [ 44.799210][ T24] ? driver_allows_async_probing+0x40/0x40 [ 44.804981][ T24] bus_for_each_drv+0x79/0xc0 [ 44.809636][ T24] __device_attach+0xb9/0x210 [ 44.814282][ T24] bus_probe_device+0x97/0xb0 [ 44.818947][ T24] device_add+0x421/0x930 [ 44.823245][ T24] usb_new_device.cold+0xbc/0x3c9 [ 44.828288][ T24] hub_event+0xea2/0x1810 [ 44.832682][ T24] ? process_one_work+0x1e2/0x4e0 [ 44.837785][ T24] process_one_work+0x26f/0x4e0 [ 44.842630][ T24] worker_thread+0x4d/0x3b0 [ 44.847182][ T24] ? rescuer_thread+0x360/0x360 [ 44.852027][ T24] kthread+0x122/0x140 [ 44.856076][ T24] ? set_kthread_struct+0x40/0x40 [ 44.861108][ T24] ret_from_fork+0x1f/0x30 [ 44.865615][ T24] [ 44.868913][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 44.876370][ T24] CPU: 0 PID: 24 Comm: kworker/0:1 Not tainted 5.15.153-syzkaller #0 [ 44.884495][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.895000][ T24] Workqueue: usb_hub_wq hub_event [ 44.900489][ T24] Call Trace: [ 44.903859][ T24] [ 44.906788][ T24] dump_stack_lvl+0x41/0x5e [ 44.911268][ T24] panic+0xfb/0x2ae [ 44.915138][ T24] check_panic_on_warn.cold+0xf/0x1e [ 44.920391][ T24] __warn+0x87/0xf0 [ 44.924212][ T24] ? usb_submit_urb+0x44f/0x6a0 [ 44.929489][ T24] report_bug+0x9a/0xc0 [ 44.933888][ T24] handle_bug+0x3c/0x60 [ 44.938135][ T24] exc_invalid_op+0x14/0x70 [ 44.942616][ T24] asm_exc_invalid_op+0x16/0x20 [ 44.947472][ T24] RIP: 0010:usb_submit_urb+0x44f/0x6a0 [ 44.953028][ T24] Code: 89 54 24 10 44 89 44 24 08 e8 4d f3 e3 ff 44 8b 44 24 08 44 89 f9 48 c7 c7 a8 dd 9a 82 48 8b 54 24 10 48 89 c6 e8 da cc 62 00 <0f> 0b e9 68 fd ff ff 41 b8 85 03 00 00 45 29 f0 e9 82 fd ff ff 89 [ 44.973733][ T24] RSP: 0018:ffffc900000d7760 EFLAGS: 00010286 [ 44.979875][ T24] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 00000000ffffdfff [ 44.988157][ T24] RDX: 00000000ffffffea RSI: 00000000ffffdfff RDI: 0000000000000001 [ 44.996186][ T24] RBP: ffff88811062fc00 R08: ffffffff82d750e8 R09: 0000000000000003 [ 45.004956][ T24] R10: 00000000ffffe000 R11: 3fffffffffffffff R12: ffff88810f159000 [ 45.013004][ T24] R13: 0000000000000002 R14: 0000000000000001 R15: 0000000000000001 [ 45.021300][ T24] usb_start_wait_urb+0x60/0x160 [ 45.026478][ T24] ? verify_cpu+0x100/0x100 [ 45.030968][ T24] amradio_send_cmd+0xb8/0x310 [ 45.035837][ T24] usb_amradio_probe+0x195/0x230 [ 45.040930][ T24] usb_probe_interface+0xda/0x290 [ 45.045922][ T24] really_probe+0xbc/0x3b0 [ 45.050303][ T24] __driver_probe_device+0xd1/0x120 [ 45.055481][ T24] driver_probe_device+0x19/0x90 [ 45.060401][ T24] __device_attach_driver+0x71/0xf0 [ 45.065571][ T24] ? driver_allows_async_probing+0x40/0x40 [ 45.071423][ T24] ? driver_allows_async_probing+0x40/0x40 [ 45.077276][ T24] bus_for_each_drv+0x79/0xc0 [ 45.082024][ T24] __device_attach+0xb9/0x210 [ 45.086701][ T24] bus_probe_device+0x97/0xb0 [ 45.091351][ T24] device_add+0x421/0x930 [ 45.095816][ T24] ? __mutex_unlock_slowpath+0x37/0x280 [ 45.101323][ T24] usb_set_configuration+0x4f7/0x8e0 [ 45.106656][ T24] usb_generic_driver_probe+0x47/0x70 [ 45.111989][ T24] usb_probe_device+0x2b/0xf0 [ 45.116645][ T24] really_probe+0xbc/0x3b0 [ 45.121025][ T24] __driver_probe_device+0xd1/0x120 [ 45.126208][ T24] driver_probe_device+0x19/0x90 [ 45.131121][ T24] __device_attach_driver+0x71/0xf0 [ 45.136465][ T24] ? driver_allows_async_probing+0x40/0x40 [ 45.142414][ T24] ? driver_allows_async_probing+0x40/0x40 [ 45.148279][ T24] bus_for_each_drv+0x79/0xc0 [ 45.152943][ T24] __device_attach+0xb9/0x210 [ 45.157713][ T24] bus_probe_device+0x97/0xb0 [ 45.162380][ T24] device_add+0x421/0x930 [ 45.166915][ T24] usb_new_device.cold+0xbc/0x3c9 [ 45.172178][ T24] hub_event+0xea2/0x1810 [ 45.176480][ T24] ? process_one_work+0x1e2/0x4e0 [ 45.181478][ T24] process_one_work+0x26f/0x4e0 [ 45.186301][ T24] worker_thread+0x4d/0x3b0 [ 45.190801][ T24] ? rescuer_thread+0x360/0x360 [ 45.195617][ T24] kthread+0x122/0x140 [ 45.199822][ T24] ? set_kthread_struct+0x40/0x40 [ 45.204916][ T24] ret_from_fork+0x1f/0x30 [ 45.209592][ T24] [ 45.213114][ T24] Kernel Offset: disabled [ 45.217436][ T24] Rebooting in 86400 seconds..