[ 51.955467][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 51.969706][ T8] device veth1_macvtap left promiscuous mode
[ 51.976716][ T8] device veth0_macvtap left promiscuous mode
[ 51.983081][ T8] device veth1_vlan left promiscuous mode
[ 51.988966][ T8] device veth0_vlan left promiscuous mode
[ 52.104233][ T8] team0 (unregistering): Port device team_slave_1 removed
[ 52.115495][ T8] team0 (unregistering): Port device team_slave_0 removed
[ 52.127462][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 52.141196][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 52.184080][ T8] bond0 (unregistering): Released all slaves
Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts.
2022/06/26 11:24:19 parsed 1 programs
[ 65.379509][ T4025] cgroup: Unknown subsys name 'net'
[ 65.388770][ T4025] cgroup: Unknown subsys name 'rlimit'
2022/06/26 11:24:20 executed programs: 0
[ 66.052369][ T1236] ieee802154 phy0 wpan0: encryption failed: -22
[ 66.058841][ T1236] ieee802154 phy1 wpan1: encryption failed: -22
[ 68.850099][ T3644] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 71.172599][ T143] cfg80211: failed to load regulatory.db
[ 73.010098][ T3644] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 75.098423][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 75.107639][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 75.115378][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 75.123245][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 75.131320][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 75.138632][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 75.202853][ T4101] chnl_net:caif_netlink_parms(): no params data found
[ 75.234636][ T4101] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.241939][ T4101] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.249496][ T4101] device bridge_slave_0 entered promiscuous mode
[ 75.257472][ T4101] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.264683][ T4101] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.272591][ T4101] device bridge_slave_1 entered promiscuous mode
[ 75.289886][ T4101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.301523][ T4101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.321346][ T4101] team0: Port device team_slave_0 added
[ 75.328196][ T4101] team0: Port device team_slave_1 added
[ 75.343793][ T4101] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.350966][ T4101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.377210][ T4101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.389146][ T4101] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.396152][ T4101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.422237][ T4101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.445587][ T4101] device hsr_slave_0 entered promiscuous mode
[ 75.452853][ T4101] device hsr_slave_1 entered promiscuous mode
[ 75.503671][ T4101] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.510753][ T4101] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.518019][ T4101] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.525199][ T4101] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.557963][ T4101] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.571461][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 75.579307][ T26] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.587788][ T26] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.595468][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 75.607688][ T4101] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.617439][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 75.625946][ T14] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.633021][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.643868][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 75.653077][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.660445][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.681370][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 75.690516][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 75.698768][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 75.711468][ T4101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 75.723209][ T4101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 75.732903][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 75.740987][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 75.760332][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 75.767873][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 75.778382][ T4101] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.946821][ T4101] device veth0_vlan entered promiscuous mode
[ 75.954005][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 75.962847][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 75.971531][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 75.979026][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 75.991477][ T4101] device veth1_vlan entered promiscuous mode
[ 76.008424][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 76.016866][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 76.025602][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 76.036084][ T4101] device veth0_macvtap entered promiscuous mode
[ 76.045240][ T4101] device veth1_macvtap entered promiscuous mode
[ 76.059282][ T4101] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.067261][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 76.076230][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 76.086995][ T4101] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.094873][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 76.141737][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.149720][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.160845][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 76.177835][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.186713][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.196144][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 76.500062][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 76.740062][ T26] usb 1-1: Using ep0 maxpacket: 8
[ 76.860269][ T26] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[ 76.868732][ T26] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[ 76.877689][ T26] usb 1-1: config 0 has no interface number 0
[ 76.884257][ T26] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8
[ 76.894396][ T26] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 76.905956][ T26] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 29939, setting to 1024
[ 76.917447][ T26] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 76.927927][ T26] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xBD, skipping
[ 76.938861][ T26] usb 1-1: config 0 interface 119 altsetting 0 has a duplicate endpoint with address 0xF, skipping
[ 76.949884][ T26] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x8 has an invalid bInterval 244, changing to 11
[ 76.961726][ T26] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 76.972408][ T26] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[ 76.984246][ T26] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x2 has an invalid bInterval 31, changing to 7
[ 76.995509][ T26] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 77.006993][ T26] usb 1-1: config 0 interface 119 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[ 77.017894][ T26] usb 1-1: config 0 interface 119 altsetting 0 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[ 77.171189][ T143] Bluetooth: hci0: command 0x0409 tx timeout
[ 77.190900][ T26] usb 1-1: New USB device found, idVendor=cace, idProduct=0300, bcdDevice=31.25
[ 77.200070][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 77.218839][ T26] usb 1-1: Product: syz
[ 77.223125][ T26] usb 1-1: Manufacturer: syz
[ 77.227748][ T26] usb 1-1: SerialNumber: syz
[ 77.237698][ T26] usb 1-1: config 0 descriptor??
[ 77.261092][ T4120] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 77.430094][ T26] usb 1-1: reset high-speed USB device number 2 using dummy_hcd
2022/06/26 11:24:32 executed programs: 1
[ 78.380008][ T26] usb 1-1: device descriptor read/64, error -71
[ 78.659990][ T26] usb 1-1: reset high-speed USB device number 2 using dummy_hcd
[ 78.909980][ T26] usb 1-1: Using ep0 maxpacket: 8
[ 79.060205][ T4124] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 79.097377][ T26] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1]
[ 79.103952][ T26] usb 1-1: firmware API: 1.9.6 2012-07-07
[ 79.110270][ T26] ------------[ cut here ]------------
[ 79.115829][ T26] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[ 79.122033][ T26] WARNING: CPU: 1 PID: 26 at drivers/usb/core/urb.c:502 usb_submit_urb+0xb07/0x1680
[ 79.131672][ T26] Modules linked in:
[ 79.135568][ T26] CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted 5.19.0-rc3-syzkaller #0
[ 79.144381][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 79.154860][ T26] Workqueue: events request_firmware_work_func
[ 79.161739][ T26] RIP: 0010:usb_submit_urb+0xb07/0x1680
[ 79.167661][ T26] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 43 e1 19 ff 44 8b 04 24 4c 89 e2 48 c7 c7 80 51 84 89 8b 4c 24 08 48 89 c6 e8 af 0d 51 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00
[ 79.187784][ T26] RSP: 0018:ffffc90000a1fba8 EFLAGS: 00010286
[ 79.194297][ T26] RAX: 0000000000000000 RBX: ffff88801a76c000 RCX: 0000000000000000
[ 79.202474][ T26] RDX: 0000000000000001 RSI: ffffffff89424540 RDI: fffff52000143f67
[ 79.210714][ T26] RBP: ffff88801faa1a00 R08: 0000000000000001 R09: ffff8880b9f34007
[ 79.218681][ T26] R10: ffffed10173e6800 R11: 0000000000000001 R12: ffff88801579ad20
[ 79.226907][ T26] R13: 000000000000000e R14: 0000000000000002 R15: 0000000000000000
[ 79.235203][ T26] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000
[ 79.244484][ T26] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 79.251216][ T26] CR2: 00007fc9a5c17111 CR3: 000000007e6ab000 CR4: 00000000003506e0
[ 79.259332][ T26] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 79.260735][ T3659] Bluetooth: hci0: command 0x041b tx timeout
[ 79.267399][ T26] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 79.282686][ T26] Call Trace:
[ 79.287656][ T3659] usb 1-1: USB disconnect, device number 2
[ 79.287992][ T26]
[ 79.296703][ T26] carl9170_usb_send_rx_irq_urb+0x266/0x340
[ 79.303332][ T26] carl9170_usb_firmware_step2+0x188/0x230
[ 79.309151][ T26] ? carl9170_usb_resume+0x130/0x130
[ 79.314726][ T26] request_firmware_work_func+0x126/0x230
[ 79.320651][ T26] ? request_partial_firmware_into_buf+0x90/0x90
[ 79.326984][ T26] process_one_work+0x841/0x13a0
[ 79.332181][ T26] ? lock_release+0x780/0x780
[ 79.337703][ T26] ? pwq_dec_nr_in_flight+0x230/0x230
[ 79.343351][ T26] ? rwlock_bug.part.0+0x90/0x90
[ 79.348301][ T26] ? _raw_spin_lock_irq+0x41/0x50
[ 79.353571][ T26] worker_thread+0x598/0xec0
[ 79.358181][ T26] ? __kthread_parkme+0xc1/0x1f0
[ 79.363370][ T26] ? process_one_work+0x13a0/0x13a0
[ 79.368601][ T26] kthread+0x299/0x340
[ 79.372750][ T26] ? kthread_complete_and_exit+0x20/0x20
[ 79.378489][ T26] ret_from_fork+0x1f/0x30
[ 79.382990][ T26]
[ 79.386003][ T26] Kernel panic - not syncing: panic_on_warn set ...
[ 79.392665][ T26] CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted 5.19.0-rc3-syzkaller #0
[ 79.401234][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 79.411279][ T26] Workqueue: events request_firmware_work_func
[ 79.417426][ T26] Call Trace:
[ 79.420764][ T26]
[ 79.423682][ T26] dump_stack_lvl+0x57/0x7d
[ 79.428255][ T26] panic+0x227/0x466
[ 79.432144][ T26] ? panic_print_sys_info.part.0+0x69/0x69
[ 79.437952][ T26] ? usb_submit_urb+0xb07/0x1680
[ 79.442883][ T26] __warn.cold+0x14b/0x1d9
[ 79.447424][ T26] ? usb_submit_urb+0xb07/0x1680
[ 79.452424][ T26] report_bug+0x15a/0x1c0
[ 79.456828][ T26] ? vprintk_emit+0x122/0x3d0
[ 79.461657][ T26] handle_bug+0x3c/0x60
[ 79.466163][ T26] exc_invalid_op+0x14/0x40
[ 79.470643][ T26] asm_exc_invalid_op+0x1b/0x20
[ 79.475485][ T26] RIP: 0010:usb_submit_urb+0xb07/0x1680
[ 79.481075][ T26] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 43 e1 19 ff 44 8b 04 24 4c 89 e2 48 c7 c7 80 51 84 89 8b 4c 24 08 48 89 c6 e8 af 0d 51 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00
[ 79.500944][ T26] RSP: 0018:ffffc90000a1fba8 EFLAGS: 00010286
[ 79.507474][ T26] RAX: 0000000000000000 RBX: ffff88801a76c000 RCX: 0000000000000000
[ 79.515430][ T26] RDX: 0000000000000001 RSI: ffffffff89424540 RDI: fffff52000143f67
[ 79.523377][ T26] RBP: ffff88801faa1a00 R08: 0000000000000001 R09: ffff8880b9f34007
[ 79.531501][ T26] R10: ffffed10173e6800 R11: 0000000000000001 R12: ffff88801579ad20
[ 79.539446][ T26] R13: 000000000000000e R14: 0000000000000002 R15: 0000000000000000
[ 79.547414][ T26] ? usb_submit_urb+0xb07/0x1680
[ 79.552344][ T26] carl9170_usb_send_rx_irq_urb+0x266/0x340
[ 79.558492][ T26] carl9170_usb_firmware_step2+0x188/0x230
[ 79.564289][ T26] ? carl9170_usb_resume+0x130/0x130
[ 79.569911][ T26] request_firmware_work_func+0x126/0x230
[ 79.575726][ T26] ? request_partial_firmware_into_buf+0x90/0x90
[ 79.582045][ T26] process_one_work+0x841/0x13a0
[ 79.586981][ T26] ? lock_release+0x780/0x780
[ 79.591633][ T26] ? pwq_dec_nr_in_flight+0x230/0x230
[ 79.596980][ T26] ? rwlock_bug.part.0+0x90/0x90
[ 79.601901][ T26] ? _raw_spin_lock_irq+0x41/0x50
[ 79.607012][ T26] worker_thread+0x598/0xec0
[ 79.611674][ T26] ? __kthread_parkme+0xc1/0x1f0
[ 79.616594][ T26] ? process_one_work+0x13a0/0x13a0
[ 79.621869][ T26] kthread+0x299/0x340
[ 79.626086][ T26] ? kthread_complete_and_exit+0x20/0x20
[ 79.631705][ T26] ret_from_fork+0x1f/0x30
[ 79.636216][ T26]
[ 79.639654][ T26] Kernel Offset: disabled
[ 79.644045][ T26] Rebooting in 86400 seconds..