Warning: Permanently added '10.128.1.110' (ED25519) to the list of known hosts. 2023/09/13 17:08:56 ignoring optional flag "sandboxArg"="0" 2023/09/13 17:08:56 parsed 1 programs 2023/09/13 17:08:56 executed programs: 0 [ 41.341862][ T41] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.349124][ T41] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.356251][ T41] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.363416][ T41] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.370652][ T41] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.377647][ T41] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.430246][ T2200] chnl_net:caif_netlink_parms(): no params data found [ 41.443275][ T2200] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.450763][ T2200] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.457910][ T2200] device bridge_slave_0 entered promiscuous mode [ 41.464903][ T2200] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.472000][ T2200] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.479179][ T2200] device bridge_slave_1 entered promiscuous mode [ 41.487394][ T2200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.497045][ T2200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.522716][ T2200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.529682][ T2200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.555654][ T2200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.566563][ T2200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.573485][ T2200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.599480][ T2200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.645957][ T2200] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.653003][ T2200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.660210][ T2200] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.667410][ T2200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.848027][ T2200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.855842][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.863205][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.871795][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.878984][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 41.903673][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.911795][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.918823][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.926179][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.934182][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.941373][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.948759][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.956564][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.029047][ T2200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.036057][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.043321][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.070449][ T2200] device veth0_vlan entered promiscuous mode [ 42.076770][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.084978][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.092720][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.100133][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.183688][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.228622][ T2200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.237419][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.247307][ T2200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.254538][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.625789][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.895780][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 43.025988][ T21] usb 1-1: config 64 has an invalid interface number: 245 but max is 2 [ 43.034215][ T21] usb 1-1: config 64 has an invalid interface number: 155 but max is 2 [ 43.042462][ T21] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 43.051232][ T21] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 43.059977][ T21] usb 1-1: config 64 has an invalid interface number: 243 but max is 2 [ 43.068233][ T21] usb 1-1: config 64 has no interface number 0 [ 43.074349][ T21] usb 1-1: config 64 has no interface number 1 [ 43.080582][ T21] usb 1-1: config 64 has no interface number 2 [ 43.086780][ T21] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 43.097837][ T21] usb 1-1: config 64 interface 245 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 43.109198][ T21] usb 1-1: config 64 interface 245 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 43.120376][ T21] usb 1-1: config 64 interface 245 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 43.133551][ T21] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 43.144660][ T21] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 43.155316][ T21] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 43.166176][ T21] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 43.177000][ T21] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 43.188351][ T21] usb 1-1: config 64 interface 155 altsetting 1 endpoint 0x81 has invalid maxpacket 18251, setting to 1024 [ 43.199894][ T21] usb 1-1: config 64 interface 155 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 43.210634][ T21] usb 1-1: config 64 interface 155 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 43.221469][ T21] usb 1-1: config 64 interface 155 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 43.234767][ T21] usb 1-1: config 64 interface 243 altsetting 31 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 43.246135][ T21] usb 1-1: config 64 interface 245 has no altsetting 0 [ 43.252973][ T21] usb 1-1: config 64 interface 155 has no altsetting 0 [ 43.259813][ T21] usb 1-1: config 64 interface 243 has no altsetting 0 [ 43.395841][ T41] Bluetooth: hci0: command 0x0409 tx timeout [ 43.435993][ T21] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.7d [ 43.445106][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.453259][ T21] usb 1-1: Product: syz [ 43.457398][ T21] usb 1-1: Manufacturer: syz [ 43.461950][ T21] usb 1-1: SerialNumber: syz [ 43.786156][ T21] ------------[ cut here ]------------ [ 43.791716][ T21] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 43.797686][ T21] WARNING: CPU: 1 PID: 21 at drivers/usb/core/urb.c:505 usb_submit_urb+0x3e8/0x5c0 [ 43.806970][ T21] Modules linked in: [ 43.810923][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 6.1.53-syzkaller #0 [ 43.818977][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 43.829109][ T21] Workqueue: usb_hub_wq hub_event [ 43.834109][ T21] RIP: 0010:usb_submit_urb+0x3e8/0x5c0 [ 43.839562][ T21] Code: f8 00 00 00 48 85 d2 75 04 48 8b 55 00 8b 4b 50 c1 e9 1e 46 8b 04 ad 20 1e 90 83 48 c7 c7 1e 1f 90 83 48 89 c6 e8 98 dc 13 ff <0f> 0b 8b 3c 24 41 8d 45 fe 83 f8 02 73 1b 89 f8 34 01 0f b6 c0 c1 [ 43.859155][ T21] RSP: 0018:ffffc900000bb7f8 EFLAGS: 00010246 [ 43.865358][ T21] RAX: 9d6609ebf4e1c300 RBX: ffff88817ce5b3c0 RCX: 0000000000000002 [ 43.873344][ T21] RDX: 0000000000000000 RSI: c0000000ffffdfff RDI: 00000000ffffffff [ 43.881428][ T21] RBP: ffff8881134cb8a8 R08: 0000000000000000 R09: ffffffff83cddbc0 [ 43.889398][ T21] R10: 00000000ffffffff R11: 00000000ffffdfff R12: 0000000000000400 [ 43.897440][ T21] R13: 0000000000000003 R14: ffff8881134cb800 R15: 0000000000000a20 [ 43.905410][ T21] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 43.914346][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.920939][ T21] CR2: 0000560c70fac000 CR3: 0000000113b2d000 CR4: 00000000003506e0 [ 43.928916][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.936879][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.944816][ T21] Call Trace: [ 43.948276][ T21] [ 43.951183][ T21] ? __warn+0xc0/0x1f0 [ 43.955239][ T21] ? usb_submit_urb+0x3e8/0x5c0 [ 43.960078][ T21] ? report_bug+0xca/0x160 [ 43.964466][ T21] ? handle_bug+0x3d/0x70 [ 43.968784][ T21] ? exc_invalid_op+0x16/0x40 [ 43.973434][ T21] ? asm_exc_invalid_op+0x16/0x20 [ 43.978459][ T21] ? usb_submit_urb+0x3e8/0x5c0 [ 43.983272][ T21] ? usb_submit_urb+0x3e8/0x5c0 [ 43.988102][ T21] ar5523_submit_rx_cmd+0x64/0xa0 [ 43.993117][ T21] ar5523_probe+0x763/0xb50 [ 43.997609][ T21] usb_probe_interface+0x1d1/0x350 [ 44.002779][ T21] really_probe+0xeb/0x3e0 [ 44.007469][ T21] __driver_probe_device+0x77/0x140 [ 44.012738][ T21] driver_probe_device+0x1e/0x1b0 [ 44.017948][ T21] __device_attach_driver+0x132/0x1a0 [ 44.023307][ T21] ? coredump_store+0x40/0x40 [ 44.027978][ T21] bus_for_each_drv+0x92/0xd0 [ 44.032717][ T21] __device_attach+0xe6/0x1c0 [ 44.037385][ T21] bus_probe_device+0x2d/0xa0 [ 44.042032][ T21] device_add+0x380/0x5e0 [ 44.046418][ T21] usb_set_configuration+0x872/0xa10 [ 44.051684][ T21] usb_generic_driver_probe+0x26/0x70 [ 44.057053][ T21] usb_probe_device+0x57/0xd0 [ 44.061922][ T21] really_probe+0xeb/0x3e0 [ 44.066593][ T21] __driver_probe_device+0x77/0x140 [ 44.071784][ T21] driver_probe_device+0x1e/0x1b0 [ 44.076808][ T21] __device_attach_driver+0x132/0x1a0 [ 44.082247][ T21] ? coredump_store+0x40/0x40 [ 44.087097][ T21] bus_for_each_drv+0x92/0xd0 [ 44.091761][ T21] __device_attach+0xe6/0x1c0 [ 44.096530][ T21] bus_probe_device+0x2d/0xa0 [ 44.101184][ T21] device_add+0x380/0x5e0 [ 44.105480][ T21] usb_new_device+0x466/0x620 [ 44.110227][ T21] hub_event+0x1188/0x1bd0 [ 44.114715][ T21] process_one_work+0x261/0x4d0 [ 44.119658][ T21] worker_thread+0x240/0x3e0 [ 44.124256][ T21] ? rcu_lock_release+0x20/0x20 [ 44.129115][ T21] kthread+0xdd/0x100 [ 44.133244][ T21] ? kthread_blkcg+0x30/0x30 [ 44.137968][ T21] ret_from_fork+0x1f/0x30 [ 44.142369][ T21] [ 44.145459][ T21] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 44.152976][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 6.1.53-syzkaller #0 [ 44.160833][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 44.170946][ T21] Workqueue: usb_hub_wq hub_event [ 44.175937][ T21] Call Trace: [ 44.179193][ T21] [ 44.182095][ T21] dump_stack_lvl+0x7f/0xc2 [ 44.186742][ T21] panic+0x114/0x2b4 [ 44.190689][ T21] ? usb_submit_urb+0x3e8/0x5c0 [ 44.195588][ T21] __warn+0x162/0x1f0 [ 44.199536][ T21] ? usb_submit_urb+0x3e8/0x5c0 [ 44.204677][ T21] report_bug+0xca/0x160 [ 44.209008][ T21] handle_bug+0x3d/0x70 [ 44.213165][ T21] exc_invalid_op+0x16/0x40 [ 44.217743][ T21] asm_exc_invalid_op+0x16/0x20 [ 44.222575][ T21] RIP: 0010:usb_submit_urb+0x3e8/0x5c0 [ 44.228016][ T21] Code: f8 00 00 00 48 85 d2 75 04 48 8b 55 00 8b 4b 50 c1 e9 1e 46 8b 04 ad 20 1e 90 83 48 c7 c7 1e 1f 90 83 48 89 c6 e8 98 dc 13 ff <0f> 0b 8b 3c 24 41 8d 45 fe 83 f8 02 73 1b 89 f8 34 01 0f b6 c0 c1 [ 44.248126][ T21] RSP: 0018:ffffc900000bb7f8 EFLAGS: 00010246 [ 44.254246][ T21] RAX: 9d6609ebf4e1c300 RBX: ffff88817ce5b3c0 RCX: 0000000000000002 [ 44.262379][ T21] RDX: 0000000000000000 RSI: c0000000ffffdfff RDI: 00000000ffffffff [ 44.270320][ T21] RBP: ffff8881134cb8a8 R08: 0000000000000000 R09: ffffffff83cddbc0 [ 44.278352][ T21] R10: 00000000ffffffff R11: 00000000ffffdfff R12: 0000000000000400 [ 44.286294][ T21] R13: 0000000000000003 R14: ffff8881134cb800 R15: 0000000000000a20 [ 44.294322][ T21] ? usb_submit_urb+0x3e8/0x5c0 [ 44.299684][ T21] ar5523_submit_rx_cmd+0x64/0xa0 [ 44.304682][ T21] ar5523_probe+0x763/0xb50 [ 44.309164][ T21] usb_probe_interface+0x1d1/0x350 [ 44.314249][ T21] really_probe+0xeb/0x3e0 [ 44.319169][ T21] __driver_probe_device+0x77/0x140 [ 44.324697][ T21] driver_probe_device+0x1e/0x1b0 [ 44.329873][ T21] __device_attach_driver+0x132/0x1a0 [ 44.335212][ T21] ? coredump_store+0x40/0x40 [ 44.339937][ T21] bus_for_each_drv+0x92/0xd0 [ 44.344604][ T21] __device_attach+0xe6/0x1c0 [ 44.349431][ T21] bus_probe_device+0x2d/0xa0 [ 44.354079][ T21] device_add+0x380/0x5e0 [ 44.358408][ T21] usb_set_configuration+0x872/0xa10 [ 44.363758][ T21] usb_generic_driver_probe+0x26/0x70 [ 44.369207][ T21] usb_probe_device+0x57/0xd0 [ 44.373849][ T21] really_probe+0xeb/0x3e0 [ 44.378263][ T21] __driver_probe_device+0x77/0x140 [ 44.383609][ T21] driver_probe_device+0x1e/0x1b0 [ 44.388964][ T21] __device_attach_driver+0x132/0x1a0 [ 44.394319][ T21] ? coredump_store+0x40/0x40 [ 44.398967][ T21] bus_for_each_drv+0x92/0xd0 [ 44.403609][ T21] __device_attach+0xe6/0x1c0 [ 44.408349][ T21] bus_probe_device+0x2d/0xa0 [ 44.413000][ T21] device_add+0x380/0x5e0 [ 44.417560][ T21] usb_new_device+0x466/0x620 [ 44.422216][ T21] hub_event+0x1188/0x1bd0 [ 44.426612][ T21] process_one_work+0x261/0x4d0 [ 44.431528][ T21] worker_thread+0x240/0x3e0 [ 44.436086][ T21] ? rcu_lock_release+0x20/0x20 [ 44.440914][ T21] kthread+0xdd/0x100 [ 44.444875][ T21] ? kthread_blkcg+0x30/0x30 [ 44.449448][ T21] ret_from_fork+0x1f/0x30 [ 44.453855][ T21] [ 44.457118][ T21] Kernel Offset: disabled [ 44.461502][ T21] Rebooting in 86400 seconds..