[ 23.984274][ T1440] device veth0_vlan entered promiscuous mode [ 23.991188][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.999661][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.007531][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.014757][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.062585][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.089588][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.097877][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.201167][ T1440] syz-executor.0 (1440) used greatest stack depth: 11528 bytes left [ 24.321356][ T256] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. 2023/10/21 19:26:15 ignoring optional flag "sandboxArg"="0" 2023/10/21 19:26:15 parsed 1 programs 2023/10/21 19:26:15 executed programs: 0 [ 41.786893][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.795348][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.811580][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.819679][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.828063][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.835812][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.926829][ T1790] device veth0_vlan entered promiscuous mode [ 41.933405][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.941604][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.949560][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.956966][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.007865][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.034854][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.043642][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.350936][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.590987][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 42.750973][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.851041][ T24] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 42.859932][ T24] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 42.868706][ T24] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 42.877048][ T24] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 42.885987][ T24] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 42.894895][ T24] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 42.903887][ T24] usb 1-1: config 6 has no interface number 0 [ 42.909927][ T24] usb 1-1: config 6 has no interface number 1 [ 42.916076][ T24] usb 1-1: config 6 has no interface number 2 [ 42.922225][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 42.933682][ T24] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 42.944588][ T24] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 42.955756][ T24] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 42.965967][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 42.977434][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 42.988532][ T24] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 42.999623][ T24] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 43.010633][ T24] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 43.021472][ T24] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 43.032543][ T24] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 43.046070][ T24] usb 1-1: config 6 interface 199 has no altsetting 0 [ 43.052914][ T24] usb 1-1: config 6 interface 48 has no altsetting 0 [ 43.059840][ T24] usb 1-1: config 6 interface 105 has no altsetting 0 [ 43.300984][ T24] usb 1-1: string descriptor 0 read error: -22 [ 43.308004][ T24] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 43.317263][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.371249][ T24] ------------[ cut here ]------------ [ 43.376993][ T24] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 43.383357][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:502 usb_submit_urb+0x44f/0x6a0 [ 43.392921][ T24] Modules linked in: [ 43.397260][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.15.136-syzkaller #0 [ 43.405406][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 43.415947][ T24] Workqueue: usb_hub_wq hub_event [ 43.421368][ T24] RIP: 0010:usb_submit_urb+0x44f/0x6a0 [ 43.427162][ T24] Code: 89 54 24 10 44 89 44 24 08 e8 dd f8 e3 ff 44 8b 44 24 08 44 89 f9 48 c7 c7 28 b2 9a 82 48 8b 54 24 10 48 89 c6 e8 4e b8 62 00 <0f> 0b e9 68 fd ff ff 41 b8 85 03 00 00 45 29 f0 e9 82 fd ff ff 89 [ 43.447493][ T24] RSP: 0018:ffffc900000d7760 EFLAGS: 00010286 [ 43.453555][ T24] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 00000000ffffdfff [ 43.461710][ T24] RDX: 00000000ffffffea RSI: 00000000ffffdfff RDI: 0000000000000001 [ 43.470139][ T24] RBP: ffff8881051dc900 R08: ffffffff82d75008 R09: 0000000000000003 [ 43.478635][ T24] R10: 00000000ffffe000 R11: 3fffffffffffffff R12: ffff88810f2da800 [ 43.486802][ T24] R13: 0000000000000002 R14: 0000000000000001 R15: 0000000000000001 [ 43.495095][ T24] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 43.504292][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.511460][ T24] CR2: 00007f1c95be577b CR3: 0000000117622000 CR4: 00000000003506e0 [ 43.519689][ T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.528021][ T24] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.536177][ T24] Call Trace: [ 43.539520][ T24] [ 43.542555][ T24] ? __warn+0x7b/0xf0 [ 43.546687][ T24] ? usb_submit_urb+0x44f/0x6a0 [ 43.551526][ T24] ? report_bug+0x9a/0xc0 [ 43.555831][ T24] ? handle_bug+0x3c/0x60 [ 43.560257][ T24] ? exc_invalid_op+0x14/0x70 [ 43.564955][ T24] ? asm_exc_invalid_op+0x16/0x20 [ 43.570103][ T24] ? usb_submit_urb+0x44f/0x6a0 [ 43.575234][ T24] usb_start_wait_urb+0x60/0x160 [ 43.580246][ T24] ? verify_cpu+0x100/0x100 [ 43.584838][ T24] amradio_send_cmd+0xb8/0x310 [ 43.589684][ T24] usb_amradio_probe+0x195/0x230 [ 43.595977][ T24] usb_probe_interface+0xda/0x290 [ 43.603150][ T24] really_probe+0xbc/0x3b0 [ 43.607633][ T24] __driver_probe_device+0xd1/0x120 [ 43.612820][ T24] driver_probe_device+0x19/0x90 [ 43.617903][ T24] __device_attach_driver+0x71/0xf0 [ 43.623364][ T24] ? driver_allows_async_probing+0x40/0x40 [ 43.629159][ T24] ? driver_allows_async_probing+0x40/0x40 [ 43.635042][ T24] bus_for_each_drv+0x79/0xc0 [ 43.639778][ T24] __device_attach+0xb9/0x210 [ 43.644576][ T24] bus_probe_device+0x97/0xb0 [ 43.649253][ T24] device_add+0x421/0x930 [ 43.653940][ T24] ? __mutex_unlock_slowpath+0x37/0x280 [ 43.659715][ T24] usb_set_configuration+0x4f7/0x8e0 [ 43.665089][ T24] usb_generic_driver_probe+0x47/0x70 [ 43.670843][ T24] usb_probe_device+0x2b/0xf0 [ 43.675570][ T24] really_probe+0xbc/0x3b0 [ 43.680061][ T24] __driver_probe_device+0xd1/0x120 [ 43.685445][ T24] driver_probe_device+0x19/0x90 [ 43.690397][ T24] __device_attach_driver+0x71/0xf0 [ 43.695879][ T24] ? driver_allows_async_probing+0x40/0x40 [ 43.701783][ T24] ? driver_allows_async_probing+0x40/0x40 [ 43.707672][ T24] bus_for_each_drv+0x79/0xc0 [ 43.712512][ T24] __device_attach+0xb9/0x210 [ 43.717272][ T24] bus_probe_device+0x97/0xb0 [ 43.722052][ T24] device_add+0x421/0x930 [ 43.726593][ T24] usb_new_device.cold+0xbc/0x3be [ 43.731914][ T24] hub_event+0xea2/0x1810 [ 43.736402][ T24] ? process_one_work+0x1e2/0x4e0 [ 43.741591][ T24] process_one_work+0x26f/0x4e0 [ 43.746609][ T24] worker_thread+0x4d/0x3b0 [ 43.751462][ T24] ? rescuer_thread+0x360/0x360 [ 43.756491][ T24] kthread+0x122/0x140 [ 43.760704][ T24] ? set_kthread_struct+0x40/0x40 [ 43.766239][ T24] ret_from_fork+0x1f/0x30 [ 43.770719][ T24] [ 43.773729][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 43.781068][ T24] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 5.15.136-syzkaller #0 [ 43.789307][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 43.799517][ T24] Workqueue: usb_hub_wq hub_event [ 43.804629][ T24] Call Trace: [ 43.808385][ T24] [ 43.811495][ T24] dump_stack_lvl+0x41/0x5e [ 43.815980][ T24] panic+0xfb/0x2ae [ 43.819875][ T24] check_panic_on_warn.cold+0xf/0x1e [ 43.825218][ T24] __warn+0x87/0xf0 [ 43.829029][ T24] ? usb_submit_urb+0x44f/0x6a0 [ 43.834069][ T24] report_bug+0x9a/0xc0 [ 43.838802][ T24] handle_bug+0x3c/0x60 [ 43.842962][ T24] exc_invalid_op+0x14/0x70 [ 43.847435][ T24] asm_exc_invalid_op+0x16/0x20 [ 43.852981][ T24] RIP: 0010:usb_submit_urb+0x44f/0x6a0 [ 43.858496][ T24] Code: 89 54 24 10 44 89 44 24 08 e8 dd f8 e3 ff 44 8b 44 24 08 44 89 f9 48 c7 c7 28 b2 9a 82 48 8b 54 24 10 48 89 c6 e8 4e b8 62 00 <0f> 0b e9 68 fd ff ff 41 b8 85 03 00 00 45 29 f0 e9 82 fd ff ff 89 [ 43.878873][ T24] RSP: 0018:ffffc900000d7760 EFLAGS: 00010286 [ 43.884904][ T24] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 00000000ffffdfff [ 43.892927][ T24] RDX: 00000000ffffffea RSI: 00000000ffffdfff RDI: 0000000000000001 [ 43.900887][ T24] RBP: ffff8881051dc900 R08: ffffffff82d75008 R09: 0000000000000003 [ 43.908922][ T24] R10: 00000000ffffe000 R11: 3fffffffffffffff R12: ffff88810f2da800 [ 43.917157][ T24] R13: 0000000000000002 R14: 0000000000000001 R15: 0000000000000001 [ 43.925102][ T24] usb_start_wait_urb+0x60/0x160 [ 43.930005][ T24] ? verify_cpu+0x100/0x100 [ 43.934906][ T24] amradio_send_cmd+0xb8/0x310 [ 43.939634][ T24] usb_amradio_probe+0x195/0x230 [ 43.944558][ T24] usb_probe_interface+0xda/0x290 [ 43.949567][ T24] really_probe+0xbc/0x3b0 [ 43.953946][ T24] __driver_probe_device+0xd1/0x120 [ 43.959121][ T24] driver_probe_device+0x19/0x90 [ 43.964019][ T24] __device_attach_driver+0x71/0xf0 [ 43.969191][ T24] ? driver_allows_async_probing+0x40/0x40 [ 43.974959][ T24] ? driver_allows_async_probing+0x40/0x40 [ 43.980734][ T24] bus_for_each_drv+0x79/0xc0 [ 43.985385][ T24] __device_attach+0xb9/0x210 [ 43.990124][ T24] bus_probe_device+0x97/0xb0 [ 43.994785][ T24] device_add+0x421/0x930 [ 43.999081][ T24] ? __mutex_unlock_slowpath+0x37/0x280 [ 44.004609][ T24] usb_set_configuration+0x4f7/0x8e0 [ 44.009858][ T24] usb_generic_driver_probe+0x47/0x70 [ 44.015208][ T24] usb_probe_device+0x2b/0xf0 [ 44.019864][ T24] really_probe+0xbc/0x3b0 [ 44.024259][ T24] __driver_probe_device+0xd1/0x120 [ 44.029687][ T24] driver_probe_device+0x19/0x90 [ 44.034695][ T24] __device_attach_driver+0x71/0xf0 [ 44.039864][ T24] ? driver_allows_async_probing+0x40/0x40 [ 44.045828][ T24] ? driver_allows_async_probing+0x40/0x40 [ 44.051887][ T24] bus_for_each_drv+0x79/0xc0 [ 44.056538][ T24] __device_attach+0xb9/0x210 [ 44.061198][ T24] bus_probe_device+0x97/0xb0 [ 44.065935][ T24] device_add+0x421/0x930 [ 44.070317][ T24] usb_new_device.cold+0xbc/0x3be [ 44.075321][ T24] hub_event+0xea2/0x1810 [ 44.079709][ T24] ? process_one_work+0x1e2/0x4e0 [ 44.084703][ T24] process_one_work+0x26f/0x4e0 [ 44.089712][ T24] worker_thread+0x4d/0x3b0 [ 44.094441][ T24] ? rescuer_thread+0x360/0x360 [ 44.099260][ T24] kthread+0x122/0x140 [ 44.103305][ T24] ? set_kthread_struct+0x40/0x40 [ 44.108506][ T24] ret_from_fork+0x1f/0x30 [ 44.112978][ T24] [ 44.116156][ T24] Kernel Offset: disabled [ 44.120676][ T24] Rebooting in 86400 seconds..