Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts. 2023/05/04 17:48:04 ignoring optional flag "sandboxArg"="0" 2023/05/04 17:48:05 parsed 1 programs 2023/05/04 17:48:05 executed programs: 0 [ 67.242045][ T4392] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.251028][ T4392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.259592][ T4392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.268175][ T4392] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.276506][ T4392] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.284779][ T4392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.369029][ T5334] chnl_net:caif_netlink_parms(): no params data found [ 67.405070][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.412522][ T5334] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.420206][ T5334] bridge_slave_0: entered allmulticast mode [ 67.426744][ T5334] bridge_slave_0: entered promiscuous mode [ 67.434817][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.442658][ T5334] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.450561][ T5334] bridge_slave_1: entered allmulticast mode [ 67.457073][ T5334] bridge_slave_1: entered promiscuous mode [ 67.474096][ T5334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.485507][ T5334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.507050][ T5334] team0: Port device team_slave_0 added [ 67.514198][ T5334] team0: Port device team_slave_1 added [ 67.530074][ T5334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.537024][ T5334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.563054][ T5334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.574793][ T5334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.581912][ T5334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.607943][ T5334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.635137][ T5334] hsr_slave_0: entered promiscuous mode [ 67.642425][ T5334] hsr_slave_1: entered promiscuous mode [ 68.094445][ T5334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.104121][ T5334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.114500][ T5334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.124263][ T5334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.145666][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.152842][ T5334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.160268][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.167411][ T5334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.221133][ T5334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.235545][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.246131][ T4997] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.255001][ T4997] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.263460][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.277362][ T5334] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.289171][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.298507][ T4997] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.305968][ T4997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.329760][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.339513][ T4983] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.346714][ T4983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.355546][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.374418][ T5334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.388276][ T5334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.401666][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.411417][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.420808][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.429669][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.443012][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.560891][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.568942][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.580895][ T5334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.599729][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.611340][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.631862][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.640500][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.651190][ T5334] veth0_vlan: entered promiscuous mode [ 68.658062][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.665849][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.680572][ T5334] veth1_vlan: entered promiscuous mode [ 68.703211][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.714054][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.722392][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.733929][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.744597][ T5334] veth0_macvtap: entered promiscuous mode [ 68.757451][ T5334] veth1_macvtap: entered promiscuous mode [ 68.774284][ T5334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.783237][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.791811][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.800548][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.809827][ T1972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.822645][ T5334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.831301][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.840412][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.850889][ T5334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.861739][ T5334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.871863][ T5334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.881868][ T5334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.946126][ T2851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.964480][ T2851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.976188][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.986914][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.997097][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.010580][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.328604][ T4392] Bluetooth: hci0: command 0x0409 tx timeout [ 69.339738][ T4399] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.748464][ T4399] usb 1-1: config 0 has an invalid interface number: 72 but max is 0 [ 69.757136][ T4399] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 69.766911][ T4399] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 69.777498][ T4399] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 69.787731][ T4399] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 69.796421][ T4399] usb 1-1: config 0 has no interface number 0 [ 69.802963][ T4399] usb 1-1: config 0 interface 72 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 69.813973][ T4399] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 69.825305][ T4399] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 69.836375][ T4399] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 69.848379][ T4399] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 8 [ 69.858400][ T4399] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 69.870388][ T4399] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 69.881322][ T4399] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 69.893318][ T4399] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 69.903401][ T4399] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 69.915470][ T4399] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 69.926533][ T4399] usb 1-1: New USB device found, idVendor=0846, idProduct=9010, bcdDevice=a0.e4 [ 69.937335][ T4399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.956969][ T4399] usb 1-1: config 0 descriptor?? [ 70.157275][ T4399] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 71.127461][ T4399] usb 1-1: device descriptor read/64, error -71 [ 71.407361][ T4399] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 71.407547][ T4392] Bluetooth: hci0: command 0x041b tx timeout [ 71.851930][ T4983] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 71.867409][ T4983] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 71.873480][ T4983] ------------[ cut here ]------------ [ 71.879001][ T4983] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 71.897788][ T4983] WARNING: CPU: 1 PID: 4983 at drivers/usb/core/urb.c:505 usb_submit_urb+0xbd5/0x1860 [ 71.907609][ T4983] Modules linked in: [ 71.911530][ T4983] CPU: 1 PID: 4983 Comm: kworker/1:3 Not tainted 6.3.0-syzkaller #0 [ 71.919599][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 71.929704][ T4983] Workqueue: events request_firmware_work_func [ 71.935876][ T4983] RIP: 0010:usb_submit_urb+0xbd5/0x1860 [ 71.941456][ T4983] Code: 84 8a 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 be 08 00 00 45 8b 06 48 c7 c7 80 1c 84 8a 4c 89 fa 89 e9 e8 bb 2b 65 fb <0f> 0b 44 8b 44 24 08 48 8b 14 24 8d 42 fe 83 f8 02 73 27 44 8b 6c [ 71.961575][ T4983] RSP: 0018:ffffc900036efa38 EFLAGS: 00010246 [ 71.967685][ T4983] RAX: be189f608b9a1000 RBX: ffff888078329000 RCX: 0000000000000002 [ 71.975839][ T4983] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 71.984030][ T4983] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffff520006ddec5 [ 71.992045][ T4983] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801cbe4e00 [ 72.000063][ T4983] R13: dffffc0000000000 R14: ffffffff8a841a68 R15: ffff888028373f00 [ 72.008096][ T4983] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 72.017325][ T4983] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.024000][ T4983] CR2: 00007f9bcd7578e5 CR3: 00000000288b3000 CR4: 00000000003506e0 [ 72.032123][ T4983] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.040599][ T4983] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.048703][ T4983] Call Trace: [ 72.052430][ T4983] [ 72.055372][ T4983] carl9170_usb_init_device+0x245/0x7c0 [ 72.060968][ T4983] carl9170_usb_firmware_step2+0x8e/0x210 [ 72.066790][ T4983] request_firmware_work_func+0x198/0x270 [ 72.072585][ T4983] ? carl9170_usb_tasklet+0x230/0x230 [ 72.078100][ T4983] ? request_firmware_nowait+0x3f0/0x3f0 [ 72.083816][ T4983] process_one_work+0x797/0xe20 [ 72.089704][ T4983] ? worker_detach_from_pool+0x260/0x260 [ 72.095362][ T4983] ? _raw_spin_lock_irqsave+0x120/0x120 [ 72.101172][ T4983] worker_thread+0x8c9/0xfd0 [ 72.105797][ T4983] ? __kthread_parkme+0xbb/0x190 [ 72.110797][ T4983] kthread+0x276/0x2f0 [ 72.114897][ T4983] ? pr_cont_work+0x490/0x490 [ 72.119636][ T4983] ? kthread_blkcg+0xa0/0xa0 [ 72.124234][ T4983] ret_from_fork+0x1f/0x30 [ 72.129174][ T4983] [ 72.132270][ T4983] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.139652][ T4983] CPU: 1 PID: 4983 Comm: kworker/1:3 Not tainted 6.3.0-syzkaller #0 [ 72.140273][ T756] usb 1-1: USB disconnect, device number 2 [ 72.153786][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 72.164373][ T4983] Workqueue: events request_firmware_work_func [ 72.170669][ T4983] Call Trace: [ 72.173937][ T4983] [ 72.176864][ T4983] dump_stack_lvl+0x167/0x220 [ 72.181529][ T4983] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 72.187147][ T4983] ? panic+0x540/0x540 [ 72.191309][ T4983] panic+0x21e/0x540 [ 72.195187][ T4983] ? __memcpy_flushcache+0x1a0/0x1a0 [ 72.200462][ T4983] ? ret_from_fork+0x1f/0x30 [ 72.205063][ T4983] __warn+0x226/0x350 [ 72.209023][ T4983] ? usb_submit_urb+0xbd5/0x1860 [ 72.214235][ T4983] ? usb_submit_urb+0xbd5/0x1860 [ 72.219159][ T4983] report_bug+0x1e0/0x420 [ 72.223743][ T4983] handle_bug+0x3d/0x70 [ 72.227878][ T4983] exc_invalid_op+0x1a/0x50 [ 72.232513][ T4983] asm_exc_invalid_op+0x1a/0x20 [ 72.237356][ T4983] RIP: 0010:usb_submit_urb+0xbd5/0x1860 [ 72.242954][ T4983] Code: 84 8a 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 be 08 00 00 45 8b 06 48 c7 c7 80 1c 84 8a 4c 89 fa 89 e9 e8 bb 2b 65 fb <0f> 0b 44 8b 44 24 08 48 8b 14 24 8d 42 fe 83 f8 02 73 27 44 8b 6c [ 72.262647][ T4983] RSP: 0018:ffffc900036efa38 EFLAGS: 00010246 [ 72.268874][ T4983] RAX: be189f608b9a1000 RBX: ffff888078329000 RCX: 0000000000000002 [ 72.276844][ T4983] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 72.284883][ T4983] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffff520006ddec5 [ 72.293298][ T4983] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801cbe4e00 [ 72.301340][ T4983] R13: dffffc0000000000 R14: ffffffff8a841a68 R15: ffff888028373f00 [ 72.309565][ T4983] ? usb_submit_urb+0xbd5/0x1860 [ 72.314692][ T4983] carl9170_usb_init_device+0x245/0x7c0 [ 72.320334][ T4983] carl9170_usb_firmware_step2+0x8e/0x210 [ 72.326062][ T4983] request_firmware_work_func+0x198/0x270 [ 72.331784][ T4983] ? carl9170_usb_tasklet+0x230/0x230 [ 72.337157][ T4983] ? request_firmware_nowait+0x3f0/0x3f0 [ 72.342794][ T4983] process_one_work+0x797/0xe20 [ 72.347634][ T4983] ? worker_detach_from_pool+0x260/0x260 [ 72.353246][ T4983] ? _raw_spin_lock_irqsave+0x120/0x120 [ 72.358779][ T4983] worker_thread+0x8c9/0xfd0 [ 72.363444][ T4983] ? __kthread_parkme+0xbb/0x190 [ 72.368452][ T4983] kthread+0x276/0x2f0 [ 72.372553][ T4983] ? pr_cont_work+0x490/0x490 [ 72.377246][ T4983] ? kthread_blkcg+0xa0/0xa0 [ 72.381831][ T4983] ret_from_fork+0x1f/0x30 [ 72.386325][ T4983] [ 72.389539][ T4983] Kernel Offset: disabled [ 72.394054][ T4983] Rebooting in 86400 seconds..