Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. 2023/09/20 13:37:46 ignoring optional flag "sandboxArg"="0" 2023/09/20 13:37:46 parsed 1 programs [ 115.873229][ T5392] cgroup: Unknown subsys name 'net' [ 115.886113][ T5392] cgroup: Unknown subsys name 'rlimit' 2023/09/20 13:37:46 executed programs: 0 [ 117.012559][ T5050] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.022050][ T5050] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.031987][ T5050] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.040755][ T5050] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.048900][ T5050] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.057362][ T5050] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.213286][ T5398] chnl_net:caif_netlink_parms(): no params data found [ 117.295330][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.302976][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.310483][ T5398] bridge_slave_0: entered allmulticast mode [ 117.317999][ T5398] bridge_slave_0: entered promiscuous mode [ 117.328429][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.336447][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.343833][ T5398] bridge_slave_1: entered allmulticast mode [ 117.352480][ T5398] bridge_slave_1: entered promiscuous mode [ 117.389251][ T5398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.403003][ T5398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.443072][ T5398] team0: Port device team_slave_0 added [ 117.455440][ T5398] team0: Port device team_slave_1 added [ 117.487655][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.494740][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.522357][ T5398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.535880][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.543074][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.571459][ T5398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.618577][ T5398] hsr_slave_0: entered promiscuous mode [ 117.625890][ T5398] hsr_slave_1: entered promiscuous mode [ 117.761692][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.769226][ T5398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.776985][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.784498][ T5398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.869467][ T5398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.890985][ T5398] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.899868][ T1790] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.909837][ T1790] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.931370][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.938545][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.953642][ T1790] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.961056][ T1790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.055847][ T5398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.422090][ T5398] veth0_vlan: entered promiscuous mode [ 118.439564][ T5398] veth1_vlan: entered promiscuous mode [ 118.477955][ T5398] veth0_macvtap: entered promiscuous mode [ 118.488257][ T5398] veth1_macvtap: entered promiscuous mode [ 118.514400][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.531256][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.638527][ T1790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.652743][ T1790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.691009][ T5058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.699015][ T5058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.031836][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.080658][ T5050] Bluetooth: hci0: command 0x0409 tx timeout [ 119.300962][ T55] usb 1-1: Using ep0 maxpacket: 8 [ 119.420608][ T55] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 119.429689][ T55] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 119.439662][ T55] usb 1-1: config 0 has no interface number 0 [ 119.446741][ T55] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8 [ 119.458464][ T55] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 119.470957][ T55] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 29939, setting to 1024 [ 119.488489][ T55] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 119.499226][ T55] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xBD, skipping [ 119.511692][ T55] usb 1-1: config 0 interface 119 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 119.523488][ T55] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x8 has an invalid bInterval 244, changing to 11 [ 119.536335][ T55] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 119.547406][ T55] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 119.561010][ T55] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x2 has an invalid bInterval 31, changing to 7 [ 119.575303][ T55] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 119.587858][ T55] usb 1-1: config 0 interface 119 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 119.598873][ T55] usb 1-1: config 0 interface 119 altsetting 0 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 119.802643][ T55] usb 1-1: New USB device found, idVendor=cace, idProduct=0300, bcdDevice=31.25 [ 119.813686][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.821894][ T55] usb 1-1: Product: syz [ 119.826100][ T55] usb 1-1: Manufacturer: syz [ 119.830846][ T55] usb 1-1: SerialNumber: syz [ 119.840517][ T55] usb 1-1: config 0 descriptor?? [ 119.862112][ T5421] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.041027][ T55] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 120.981158][ T55] usb 1-1: device descriptor read/64, error -71 [ 121.160456][ T5050] Bluetooth: hci0: command 0x041b tx timeout [ 121.250574][ T55] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 121.630725][ T5427] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.672838][ T5059] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 121.679571][ T5059] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 121.700697][ T5059] ------------[ cut here ]------------ [ 121.706388][ T5059] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 121.713982][ T5059] WARNING: CPU: 0 PID: 5059 at drivers/usb/core/urb.c:503 usb_submit_urb+0xe44/0x1720 [ 121.724790][ T5059] Modules linked in: [ 121.728820][ T5059] CPU: 0 PID: 5059 Comm: kworker/0:5 Not tainted 6.6.0-rc2-next-20230920-syzkaller-06619-g926f75c8a5ab #0 [ 121.741151][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 121.752263][ T5059] Workqueue: events request_firmware_work_func [ 121.758549][ T5059] RIP: 0010:usb_submit_urb+0xe44/0x1720 [ 121.764555][ T5059] Code: 0f 84 39 02 00 00 e8 bb b9 3e fb 4c 89 ef e8 03 39 ed fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 e0 ac 40 8b e8 2c 8f 04 fb <0f> 0b e9 f2 f8 ff ff e8 90 b9 3e fb 49 81 c4 c0 05 00 00 e9 1d f8 [ 121.785001][ T5059] RSP: 0018:ffffc900045a7b70 EFLAGS: 00010282 [ 121.791338][ T5059] RAX: 0000000000000000 RBX: ffff88802a347800 RCX: 0000000000000000 [ 121.799534][ T5059] RDX: ffff88801a29bb80 RSI: ffffffff814e0b96 RDI: 0000000000000001 [ 121.808474][ T5059] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 121.816647][ T5059] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 121.825470][ T5059] R13: ffff88823bdfc8a8 R14: ffff88801c83f960 R15: ffff88802a34787c [ 121.834146][ T5059] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 121.843888][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.850643][ T5059] CR2: 00007ffefe12de90 CR3: 000000001f02c000 CR4: 00000000003506f0 [ 121.858762][ T5059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.866844][ T5059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.875638][ T5059] Call Trace: [ 121.879127][ T5059] [ 121.880564][ T5058] usb 1-1: USB disconnect, device number 2 [ 121.882154][ T5059] ? show_regs+0x8f/0xa0 [ 121.892410][ T5059] ? __warn+0xe6/0x380 [ 121.896615][ T5059] ? usb_submit_urb+0xe44/0x1720 [ 121.901880][ T5059] ? report_bug+0x3bc/0x580 [ 121.906618][ T5059] ? handle_bug+0x3c/0x70 [ 121.911126][ T5059] ? exc_invalid_op+0x17/0x40 [ 121.915868][ T5059] ? asm_exc_invalid_op+0x1a/0x20 [ 121.921695][ T5059] ? __warn_printk+0x1a6/0x350 [ 121.926575][ T5059] ? usb_submit_urb+0xe44/0x1720 [ 121.931801][ T5059] ? _raw_spin_unlock_irq+0x1/0x50 [ 121.937120][ T5059] carl9170_usb_send_rx_irq_urb.constprop.0+0x273/0x330 [ 121.944230][ T5059] carl9170_usb_firmware_step2+0x175/0x330 [ 121.950188][ T5059] ? carl9170_usb_resume+0x160/0x160 [ 121.955590][ T5059] request_firmware_work_func+0x13a/0x240 [ 121.961707][ T5059] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 121.968155][ T5059] process_one_work+0x884/0x15c0 [ 121.973273][ T5059] ? lock_sync+0x190/0x190 [ 121.977734][ T5059] ? init_worker_pool+0x770/0x770 [ 121.982940][ T5059] ? assign_work+0x1a0/0x240 [ 121.987752][ T5059] worker_thread+0x8b9/0x1290 [ 121.992656][ T5059] ? __kthread_parkme+0x14b/0x220 [ 121.997724][ T5059] ? process_one_work+0x15c0/0x15c0 [ 122.003034][ T5059] kthread+0x33c/0x440 [ 122.007150][ T5059] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.012539][ T5059] ? kthread_complete_and_exit+0x40/0x40 [ 122.018348][ T5059] ret_from_fork+0x45/0x80 [ 122.023142][ T5059] ? kthread_complete_and_exit+0x40/0x40 [ 122.028985][ T5059] ret_from_fork_asm+0x11/0x20 [ 122.034040][ T5059] [ 122.037090][ T5059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.044566][ T5059] CPU: 0 PID: 5059 Comm: kworker/0:5 Not tainted 6.6.0-rc2-next-20230920-syzkaller-06619-g926f75c8a5ab #0 [ 122.056129][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 122.066543][ T5059] Workqueue: events request_firmware_work_func [ 122.073251][ T5059] Call Trace: [ 122.076545][ T5059] [ 122.079495][ T5059] dump_stack_lvl+0xd9/0x1b0 [ 122.084194][ T5059] panic+0x6dc/0x790 [ 122.088385][ T5059] ? panic_smp_self_stop+0xa0/0xa0 [ 122.093816][ T5059] ? show_trace_log_lvl+0x363/0x4f0 [ 122.099411][ T5059] ? usb_submit_urb+0xe44/0x1720 [ 122.104378][ T5059] check_panic_on_warn+0xab/0xb0 [ 122.109636][ T5059] __warn+0xf2/0x380 [ 122.113654][ T5059] ? usb_submit_urb+0xe44/0x1720 [ 122.118800][ T5059] report_bug+0x3bc/0x580 [ 122.123386][ T5059] handle_bug+0x3c/0x70 [ 122.127678][ T5059] exc_invalid_op+0x17/0x40 [ 122.132757][ T5059] asm_exc_invalid_op+0x1a/0x20 [ 122.137634][ T5059] RIP: 0010:usb_submit_urb+0xe44/0x1720 [ 122.144374][ T5059] Code: 0f 84 39 02 00 00 e8 bb b9 3e fb 4c 89 ef e8 03 39 ed fe 45 89 e0 89 e9 4c 89 f2 48 89 c6 48 c7 c7 e0 ac 40 8b e8 2c 8f 04 fb <0f> 0b e9 f2 f8 ff ff e8 90 b9 3e fb 49 81 c4 c0 05 00 00 e9 1d f8 [ 122.164527][ T5059] RSP: 0018:ffffc900045a7b70 EFLAGS: 00010282 [ 122.170818][ T5059] RAX: 0000000000000000 RBX: ffff88802a347800 RCX: 0000000000000000 [ 122.179406][ T5059] RDX: ffff88801a29bb80 RSI: ffffffff814e0b96 RDI: 0000000000000001 [ 122.187649][ T5059] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 122.196084][ T5059] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 122.204422][ T5059] R13: ffff88823bdfc8a8 R14: ffff88801c83f960 R15: ffff88802a34787c [ 122.212935][ T5059] ? __warn_printk+0x1a6/0x350 [ 122.218086][ T5059] ? _raw_spin_unlock_irq+0x1/0x50 [ 122.223231][ T5059] carl9170_usb_send_rx_irq_urb.constprop.0+0x273/0x330 [ 122.230274][ T5059] carl9170_usb_firmware_step2+0x175/0x330 [ 122.236879][ T5059] ? carl9170_usb_resume+0x160/0x160 [ 122.242445][ T5059] request_firmware_work_func+0x13a/0x240 [ 122.248904][ T5059] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 122.257116][ T5059] process_one_work+0x884/0x15c0 [ 122.262187][ T5059] ? lock_sync+0x190/0x190 [ 122.266628][ T5059] ? init_worker_pool+0x770/0x770 [ 122.271737][ T5059] ? assign_work+0x1a0/0x240 [ 122.276350][ T5059] worker_thread+0x8b9/0x1290 [ 122.281075][ T5059] ? __kthread_parkme+0x14b/0x220 [ 122.286635][ T5059] ? process_one_work+0x15c0/0x15c0 [ 122.292121][ T5059] kthread+0x33c/0x440 [ 122.296296][ T5059] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.301522][ T5059] ? kthread_complete_and_exit+0x40/0x40 [ 122.307261][ T5059] ret_from_fork+0x45/0x80 [ 122.311694][ T5059] ? kthread_complete_and_exit+0x40/0x40 [ 122.317565][ T5059] ret_from_fork_asm+0x11/0x20 [ 122.322371][ T5059] [ 122.325753][ T5059] Kernel Offset: disabled [ 122.330280][ T5059] Rebooting in 86400 seconds..