Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts. 2023/04/03 09:35:45 ignoring optional flag "sandboxArg"="0" 2023/04/03 09:35:45 parsed 1 programs 2023/04/03 09:35:46 executed programs: 0 [ 67.489441][ T4392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.498064][ T4392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.507053][ T4392] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.515076][ T4392] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.522623][ T4392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.655854][ T5495] chnl_net:caif_netlink_parms(): no params data found [ 67.709124][ T5495] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.716378][ T5495] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.723530][ T5495] bridge_slave_0: entered allmulticast mode [ 67.731135][ T5495] bridge_slave_0: entered promiscuous mode [ 67.739302][ T5495] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.746707][ T5495] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.753878][ T5495] bridge_slave_1: entered allmulticast mode [ 67.760979][ T5495] bridge_slave_1: entered promiscuous mode [ 67.785171][ T5495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.796748][ T5495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.826245][ T5495] team0: Port device team_slave_0 added [ 67.834049][ T5495] team0: Port device team_slave_1 added [ 67.859155][ T5495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.866557][ T5495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.893008][ T5495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.905882][ T5495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.912843][ T5495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.939323][ T5495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.988439][ T5495] hsr_slave_0: entered promiscuous mode [ 67.995147][ T5495] hsr_slave_1: entered promiscuous mode [ 68.581551][ T5495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.591105][ T5495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.602627][ T5495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.612551][ T5495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.634779][ T5495] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.642041][ T5495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.649519][ T5495] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.656936][ T5495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.698002][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.706880][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.730429][ T5495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.745299][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.754674][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.765432][ T5495] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.777948][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.787637][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.797977][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.805112][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.825112][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.833984][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.843668][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.850821][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.859981][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.869070][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.888240][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.898257][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.907111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.916982][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.925474][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.934803][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.948055][ T5495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.961067][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.972094][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.981637][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.990556][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.139747][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.147866][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.159932][ T5495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.180558][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.190903][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.211986][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.221352][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.232006][ T5495] veth0_vlan: entered promiscuous mode [ 69.241606][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.252381][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.263774][ T5495] veth1_vlan: entered promiscuous mode [ 69.289378][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.299240][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.309258][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.318297][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.329908][ T5495] veth0_macvtap: entered promiscuous mode [ 69.340663][ T5495] veth1_macvtap: entered promiscuous mode [ 69.358657][ T5495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.368666][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.378493][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.388976][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.397987][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.410695][ T5495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.421828][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.432221][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.443303][ T5495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.454593][ T5495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.464310][ T5495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.475086][ T5495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.534552][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.547955][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.566506][ T5082] Bluetooth: hci0: command 0x0409 tx timeout [ 69.578349][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.592157][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.602263][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.614834][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.925724][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.287728][ T26] usb 1-1: config 0 has an invalid interface number: 72 but max is 0 [ 70.296261][ T26] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 70.305127][ T26] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 70.316289][ T26] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 70.327074][ T26] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 70.336067][ T26] usb 1-1: config 0 has no interface number 0 [ 70.342171][ T26] usb 1-1: config 0 interface 72 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 70.354077][ T26] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 70.366627][ T26] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 70.377798][ T26] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 70.389801][ T26] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 8 [ 70.399946][ T26] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 70.412144][ T26] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 70.423089][ T26] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 70.435000][ T26] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 70.445115][ T26] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 70.458052][ T26] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 70.469172][ T26] usb 1-1: New USB device found, idVendor=0846, idProduct=9010, bcdDevice=a0.e4 [ 70.479730][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.491779][ T26] usb 1-1: config 0 descriptor?? [ 70.688371][ T26] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 71.645878][ T5082] Bluetooth: hci0: command 0x041b tx timeout [ 71.652014][ T26] usb 1-1: device descriptor read/64, error -71 [ 71.925808][ T26] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 72.301580][ T26] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 72.308958][ T26] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 72.315040][ T26] ------------[ cut here ]------------ [ 72.320852][ T26] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 72.329072][ T26] WARNING: CPU: 1 PID: 26 at drivers/usb/core/urb.c:505 usb_submit_urb+0xbd5/0x1860 [ 72.338653][ T26] Modules linked in: [ 72.342558][ T26] CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted 6.3.0-rc5-syzkaller #0 [ 72.350865][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 72.361005][ T26] Workqueue: events request_firmware_work_func [ 72.367605][ T26] RIP: 0010:usb_submit_urb+0xbd5/0x1860 [ 72.373169][ T26] Code: 83 8a 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 be 08 00 00 45 8b 06 48 c7 c7 a0 30 83 8a 4c 89 fa 89 e9 e8 1b 78 6b fb <0f> 0b 44 8b 44 24 08 48 8b 14 24 8d 42 fe 83 f8 02 73 27 44 8b 6c [ 72.393174][ T26] RSP: 0018:ffffc90000a1fa38 EFLAGS: 00010246 [ 72.399386][ T26] RAX: ebeeb1d4031a0b00 RBX: ffff88807bea4000 RCX: 0000000000000002 [ 72.407845][ T26] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 72.415871][ T26] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffff52000143ec5 [ 72.423853][ T26] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888029c1a200 [ 72.431880][ T26] R13: dffffc0000000000 R14: ffffffff8a832e88 R15: ffff88801b382618 [ 72.439915][ T26] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 72.448991][ T26] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.455716][ T26] CR2: 00005648b54ce950 CR3: 000000002af71000 CR4: 00000000003506e0 [ 72.463713][ T26] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.471769][ T26] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.479972][ T26] Call Trace: [ 72.483265][ T26] [ 72.486267][ T26] carl9170_usb_init_device+0x245/0x7c0 [ 72.491837][ T26] carl9170_usb_firmware_step2+0x8e/0x210 [ 72.497652][ T26] request_firmware_work_func+0x198/0x270 [ 72.503398][ T26] ? carl9170_usb_tasklet+0x230/0x230 [ 72.508946][ T26] ? request_firmware_nowait+0x3f0/0x3f0 [ 72.514593][ T26] process_one_work+0x797/0xe20 [ 72.519510][ T26] ? worker_detach_from_pool+0x260/0x260 [ 72.525156][ T26] ? _raw_spin_lock_irqsave+0x120/0x120 [ 72.530788][ T26] worker_thread+0x8c9/0xfd0 [ 72.535406][ T26] ? __kthread_parkme+0xbb/0x190 [ 72.540420][ T26] kthread+0x232/0x2b0 [ 72.544532][ T26] ? pr_cont_work+0x490/0x490 [ 72.549287][ T26] ? kthread_blkcg+0xa0/0xa0 [ 72.553891][ T26] ret_from_fork+0x1f/0x30 [ 72.558396][ T26] [ 72.561514][ T26] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.568827][ T26] CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted 6.3.0-rc5-syzkaller #0 [ 72.577067][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 72.587145][ T26] Workqueue: events request_firmware_work_func [ 72.593320][ T26] Call Trace: [ 72.596870][ T26] [ 72.599810][ T26] dump_stack_lvl+0x167/0x220 [ 72.604501][ T26] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 72.609969][ T26] ? panic+0x540/0x540 [ 72.614063][ T26] panic+0x21f/0x540 [ 72.617996][ T26] ? memcpy_page_flushcache+0xe0/0xe0 [ 72.623389][ T26] ? ret_from_fork+0x1f/0x30 [ 72.627996][ T26] __warn+0x226/0x350 [ 72.631996][ T26] ? usb_submit_urb+0xbd5/0x1860 [ 72.636978][ T26] ? usb_submit_urb+0xbd5/0x1860 [ 72.641934][ T26] report_bug+0x1e0/0x420 [ 72.646296][ T26] handle_bug+0x3d/0x70 [ 72.650500][ T26] exc_invalid_op+0x1a/0x50 [ 72.655117][ T26] asm_exc_invalid_op+0x1a/0x20 [ 72.659988][ T26] RIP: 0010:usb_submit_urb+0xbd5/0x1860 [ 72.665665][ T26] Code: 83 8a 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 be 08 00 00 45 8b 06 48 c7 c7 a0 30 83 8a 4c 89 fa 89 e9 e8 1b 78 6b fb <0f> 0b 44 8b 44 24 08 48 8b 14 24 8d 42 fe 83 f8 02 73 27 44 8b 6c [ 72.685288][ T26] RSP: 0018:ffffc90000a1fa38 EFLAGS: 00010246 [ 72.691365][ T26] RAX: ebeeb1d4031a0b00 RBX: ffff88807bea4000 RCX: 0000000000000002 [ 72.699328][ T26] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 72.707282][ T26] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffff52000143ec5 [ 72.715331][ T26] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888029c1a200 [ 72.723289][ T26] R13: dffffc0000000000 R14: ffffffff8a832e88 R15: ffff88801b382618 [ 72.731268][ T26] ? usb_submit_urb+0xbd5/0x1860 [ 72.736197][ T26] carl9170_usb_init_device+0x245/0x7c0 [ 72.741764][ T26] carl9170_usb_firmware_step2+0x8e/0x210 [ 72.747484][ T26] request_firmware_work_func+0x198/0x270 [ 72.753199][ T26] ? carl9170_usb_tasklet+0x230/0x230 [ 72.758561][ T26] ? request_firmware_nowait+0x3f0/0x3f0 [ 72.764183][ T26] process_one_work+0x797/0xe20 [ 72.769038][ T26] ? worker_detach_from_pool+0x260/0x260 [ 72.775096][ T26] ? _raw_spin_lock_irqsave+0x120/0x120 [ 72.780630][ T26] worker_thread+0x8c9/0xfd0 [ 72.785226][ T26] ? __kthread_parkme+0xbb/0x190 [ 72.790340][ T26] kthread+0x232/0x2b0 [ 72.794474][ T26] ? pr_cont_work+0x490/0x490 [ 72.799310][ T26] ? kthread_blkcg+0xa0/0xa0 [ 72.803908][ T26] ret_from_fork+0x1f/0x30 [ 72.808424][ T26] [ 72.811595][ T26] Kernel Offset: disabled [ 72.816036][ T26] Rebooting in 86400 seconds..