Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. 2024/06/16 16:33:25 ignoring optional flag "sandboxArg"="0" 2024/06/16 16:33:26 parsed 1 programs 2024/06/16 16:33:28 executed programs: 0 [ 99.593636][ T5392] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.606911][ T5392] syz-executor (5392) used greatest stack depth: 18832 bytes left [ 99.660033][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.668343][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.676276][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.684942][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.694874][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.702416][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.887422][ T5399] chnl_net:caif_netlink_parms(): no params data found [ 99.967379][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.975278][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.982561][ T5399] bridge_slave_0: entered allmulticast mode [ 99.989805][ T5399] bridge_slave_0: entered promiscuous mode [ 99.998321][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.005592][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.013865][ T5399] bridge_slave_1: entered allmulticast mode [ 100.021115][ T5399] bridge_slave_1: entered promiscuous mode [ 100.056888][ T5399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.069021][ T5399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.107772][ T5399] team0: Port device team_slave_0 added [ 100.117580][ T5399] team0: Port device team_slave_1 added [ 100.148982][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.156521][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.182585][ T5399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.195418][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.202472][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.228645][ T5399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.279185][ T5399] hsr_slave_0: entered promiscuous mode [ 100.286430][ T5399] hsr_slave_1: entered promiscuous mode [ 101.011134][ T5399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.024456][ T5399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.036732][ T5399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.049840][ T5399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.180145][ T5399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.210718][ T5399] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.229251][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.236500][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.273472][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.281060][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.545673][ T5399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.606103][ T5399] veth0_vlan: entered promiscuous mode [ 101.622761][ T5399] veth1_vlan: entered promiscuous mode [ 101.664829][ T5399] veth0_macvtap: entered promiscuous mode [ 101.679233][ T5399] veth1_macvtap: entered promiscuous mode [ 101.707563][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.725536][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.743572][ T5399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.752399][ T5399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.761115][ T5399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.772842][ T4483] Bluetooth: hci0: command tx timeout [ 101.775364][ T5399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.890048][ T2393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.902482][ T2393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.953944][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.965254][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.314050][ T4862] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.512530][ T4862] usb 1-1: Using ep0 maxpacket: 32 [ 102.526730][ T4862] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.537299][ T4862] usb 1-1: config 1 has an invalid interface number: 170 but max is 1 [ 102.547548][ T4862] usb 1-1: config 1 has an invalid interface number: 234 but max is 1 [ 102.556341][ T4862] usb 1-1: config 1 has no interface number 0 [ 102.564314][ T4862] usb 1-1: config 1 has no interface number 1 [ 102.570539][ T4862] usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x2 has an invalid bInterval 129, changing to 7 [ 102.584700][ T4862] usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 102.600063][ T4862] usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x82 has an invalid bInterval 33, changing to 9 [ 102.615115][ T4862] usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 102.627315][ T4862] usb 1-1: config 1 interface 170 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 102.642071][ T4862] usb 1-1: config 1 interface 234 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 102.655425][ T4862] usb 1-1: config 1 interface 234 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 102.670351][ T4862] usb 1-1: config 1 interface 234 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 102.682969][ T4862] usb 1-1: config 1 interface 170 has no altsetting 0 [ 102.689847][ T4862] usb 1-1: config 1 interface 234 has no altsetting 0 [ 102.703051][ T4862] usb 1-1: string descriptor 0 read error: -22 [ 102.709379][ T4862] usb 1-1: New USB device found, idVendor=080e, idProduct=4eb9, bcdDevice=d7.f6 [ 102.719111][ T4862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.776633][ T4862] ------------[ cut here ]------------ [ 102.790534][ T4862] UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1024:7 [ 102.807062][ T4862] index 1 is out of range for type 'struct hid_class_descriptor[1]' [ 102.817263][ T4862] CPU: 0 PID: 4862 Comm: kworker/0:3 Not tainted 6.10.0-rc3-syzkaller-00174-ga3e18a540541 #0 [ 102.827438][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.837507][ T4862] Workqueue: usb_hub_wq hub_event [ 102.842591][ T4862] Call Trace: [ 102.845901][ T4862] [ 102.848857][ T4862] dump_stack_lvl+0x241/0x360 [ 102.853576][ T4862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.858804][ T4862] ? __pfx__printk+0x10/0x10 [ 102.863423][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.869100][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.874770][ T4862] __ubsan_handle_out_of_bounds+0x121/0x150 [ 102.880711][ T4862] usbhid_parse+0x5a7/0xc80 [ 102.885262][ T4862] ? __pfx_usbhid_parse+0x10/0x10 [ 102.890504][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.896184][ T4862] ? hid_ignore+0x5dc/0x7a0 [ 102.900729][ T4862] hid_add_device+0x134/0x520 [ 102.905440][ T4862] usbhid_probe+0xb38/0xea0 [ 102.909994][ T4862] usb_probe_interface+0x647/0xbb0 [ 102.915149][ T4862] ? __pfx_usb_probe_interface+0x10/0x10 [ 102.920803][ T4862] really_probe+0x2ba/0xad0 [ 102.925353][ T4862] __driver_probe_device+0x1a2/0x390 [ 102.930688][ T4862] driver_probe_device+0x50/0x430 [ 102.935757][ T4862] __device_attach_driver+0x2d6/0x530 [ 102.941174][ T4862] bus_for_each_drv+0x250/0x2e0 [ 102.946057][ T4862] ? __pfx___device_attach_driver+0x10/0x10 [ 102.951989][ T4862] ? __pfx_bus_for_each_drv+0x10/0x10 [ 102.957390][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.963064][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.968736][ T4862] __device_attach+0x333/0x520 [ 102.973546][ T4862] ? __pfx_lock_release+0x10/0x10 [ 102.978604][ T4862] ? __pfx___device_attach+0x10/0x10 [ 102.983927][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.989595][ T4862] ? do_raw_spin_unlock+0x13c/0x8b0 [ 102.994841][ T4862] bus_probe_device+0x189/0x260 [ 102.999725][ T4862] device_add+0x856/0xbf0 [ 103.004095][ T4862] usb_set_configuration+0x1976/0x1fb0 [ 103.009625][ T4862] usb_generic_driver_probe+0x88/0x140 [ 103.015121][ T4862] usb_probe_device+0x1ba/0x380 [ 103.020030][ T4862] ? __pfx_usb_probe_device+0x10/0x10 [ 103.025517][ T4862] really_probe+0x2ba/0xad0 [ 103.030073][ T4862] __driver_probe_device+0x1a2/0x390 [ 103.035401][ T4862] driver_probe_device+0x50/0x430 [ 103.040466][ T4862] __device_attach_driver+0x2d6/0x530 [ 103.045884][ T4862] bus_for_each_drv+0x250/0x2e0 [ 103.050764][ T4862] ? __pfx___device_attach_driver+0x10/0x10 [ 103.056696][ T4862] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.062102][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.067776][ T4862] __device_attach+0x333/0x520 [ 103.072587][ T4862] ? __pfx___device_attach+0x10/0x10 [ 103.078001][ T4862] bus_probe_device+0x189/0x260 [ 103.082878][ T4862] device_add+0x856/0xbf0 [ 103.087248][ T4862] usb_new_device+0x104a/0x19a0 [ 103.092158][ T4862] ? __pfx_usb_new_device+0x10/0x10 [ 103.097394][ T4862] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.102623][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.108292][ T4862] ? lockdep_hardirqs_on+0x99/0x150 [ 103.113595][ T4862] hub_event+0x2d6a/0x5150 [ 103.118117][ T4862] ? __pfx_hub_event+0x10/0x10 [ 103.122924][ T4862] ? __pfx_lock_acquire+0x10/0x10 [ 103.127973][ T4862] ? __entry_text_end+0xfe0c6/0x1020c9 [ 103.133466][ T4862] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.139479][ T4862] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.145852][ T4862] ? process_scheduled_works+0x945/0x1830 [ 103.151600][ T4862] process_scheduled_works+0xa2e/0x1830 [ 103.157213][ T4862] ? __pfx_process_scheduled_works+0x10/0x10 [ 103.163234][ T4862] ? assign_work+0x364/0x3d0 [ 103.167868][ T4862] worker_thread+0x86d/0xd70 [ 103.172504][ T4862] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 103.178456][ T4862] ? __kthread_parkme+0x169/0x1d0 [ 103.183518][ T4862] ? __pfx_worker_thread+0x10/0x10 [ 103.188703][ T4862] kthread+0x2f2/0x390 [ 103.192807][ T4862] ? __pfx_worker_thread+0x10/0x10 [ 103.198029][ T4862] ? __pfx_kthread+0x10/0x10 [ 103.202649][ T4862] ret_from_fork+0x4d/0x80 [ 103.207100][ T4862] ? __pfx_kthread+0x10/0x10 [ 103.211721][ T4862] ret_from_fork_asm+0x1a/0x30 [ 103.216549][ T4862] [ 103.249618][ T4862] ---[ end trace ]--- [ 103.255078][ T4862] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 103.262343][ T4862] CPU: 0 PID: 4862 Comm: kworker/0:3 Not tainted 6.10.0-rc3-syzkaller-00174-ga3e18a540541 #0 [ 103.272520][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 103.282604][ T4862] Workqueue: usb_hub_wq hub_event [ 103.287679][ T4862] Call Trace: [ 103.290975][ T4862] [ 103.293932][ T4862] dump_stack_lvl+0x241/0x360 [ 103.298649][ T4862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.303884][ T4862] ? __pfx__printk+0x10/0x10 [ 103.308499][ T4862] ? vprintk_emit+0x631/0x770 [ 103.313227][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.318897][ T4862] ? vscnprintf+0x5d/0x90 [ 103.323278][ T4862] panic+0x349/0x860 [ 103.327204][ T4862] ? check_panic_on_warn+0x21/0xb0 [ 103.332357][ T4862] ? __pfx_panic+0x10/0x10 [ 103.336800][ T4862] ? _printk+0xd5/0x120 [ 103.341004][ T4862] ? __pfx__printk+0x10/0x10 [ 103.345627][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.351320][ T4862] check_panic_on_warn+0x86/0xb0 [ 103.356301][ T4862] __ubsan_handle_out_of_bounds+0x141/0x150 [ 103.362243][ T4862] usbhid_parse+0x5a7/0xc80 [ 103.366784][ T4862] ? __pfx_usbhid_parse+0x10/0x10 [ 103.371827][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.377472][ T4862] ? hid_ignore+0x5dc/0x7a0 [ 103.381989][ T4862] hid_add_device+0x134/0x520 [ 103.386679][ T4862] usbhid_probe+0xb38/0xea0 [ 103.391203][ T4862] usb_probe_interface+0x647/0xbb0 [ 103.396341][ T4862] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.401979][ T4862] really_probe+0x2ba/0xad0 [ 103.406506][ T4862] __driver_probe_device+0x1a2/0x390 [ 103.411816][ T4862] driver_probe_device+0x50/0x430 [ 103.416858][ T4862] __device_attach_driver+0x2d6/0x530 [ 103.422272][ T4862] bus_for_each_drv+0x250/0x2e0 [ 103.427167][ T4862] ? __pfx___device_attach_driver+0x10/0x10 [ 103.433075][ T4862] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.438456][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.444105][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.449758][ T4862] __device_attach+0x333/0x520 [ 103.454561][ T4862] ? __pfx_lock_release+0x10/0x10 [ 103.459599][ T4862] ? __pfx___device_attach+0x10/0x10 [ 103.464899][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.470575][ T4862] ? do_raw_spin_unlock+0x13c/0x8b0 [ 103.475885][ T4862] bus_probe_device+0x189/0x260 [ 103.480773][ T4862] device_add+0x856/0xbf0 [ 103.485121][ T4862] usb_set_configuration+0x1976/0x1fb0 [ 103.490648][ T4862] usb_generic_driver_probe+0x88/0x140 [ 103.496151][ T4862] usb_probe_device+0x1ba/0x380 [ 103.501008][ T4862] ? __pfx_usb_probe_device+0x10/0x10 [ 103.506378][ T4862] really_probe+0x2ba/0xad0 [ 103.510904][ T4862] __driver_probe_device+0x1a2/0x390 [ 103.516232][ T4862] driver_probe_device+0x50/0x430 [ 103.521274][ T4862] __device_attach_driver+0x2d6/0x530 [ 103.526667][ T4862] bus_for_each_drv+0x250/0x2e0 [ 103.531527][ T4862] ? __pfx___device_attach_driver+0x10/0x10 [ 103.537439][ T4862] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.542822][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.548734][ T4862] __device_attach+0x333/0x520 [ 103.553517][ T4862] ? __pfx___device_attach+0x10/0x10 [ 103.558826][ T4862] bus_probe_device+0x189/0x260 [ 103.563689][ T4862] device_add+0x856/0xbf0 [ 103.568036][ T4862] usb_new_device+0x104a/0x19a0 [ 103.572917][ T4862] ? __pfx_usb_new_device+0x10/0x10 [ 103.578130][ T4862] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.583342][ T4862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.588984][ T4862] ? lockdep_hardirqs_on+0x99/0x150 [ 103.594190][ T4862] hub_event+0x2d6a/0x5150 [ 103.598674][ T4862] ? __pfx_hub_event+0x10/0x10 [ 103.603453][ T4862] ? __pfx_lock_acquire+0x10/0x10 [ 103.608485][ T4862] ? __entry_text_end+0xfe0c6/0x1020c9 [ 103.613983][ T4862] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.619973][ T4862] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.626316][ T4862] ? process_scheduled_works+0x945/0x1830 [ 103.632060][ T4862] process_scheduled_works+0xa2e/0x1830 [ 103.637641][ T4862] ? __pfx_process_scheduled_works+0x10/0x10 [ 103.643632][ T4862] ? assign_work+0x364/0x3d0 [ 103.648228][ T4862] worker_thread+0x86d/0xd70 [ 103.652832][ T4862] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 103.658743][ T4862] ? __kthread_parkme+0x169/0x1d0 [ 103.663776][ T4862] ? __pfx_worker_thread+0x10/0x10 [ 103.668892][ T4862] kthread+0x2f2/0x390 [ 103.672973][ T4862] ? __pfx_worker_thread+0x10/0x10 [ 103.678089][ T4862] ? __pfx_kthread+0x10/0x10 [ 103.682689][ T4862] ret_from_fork+0x4d/0x80 [ 103.687116][ T4862] ? __pfx_kthread+0x10/0x10 [ 103.691713][ T4862] ret_from_fork_asm+0x1a/0x30 [ 103.696506][ T4862] [ 103.699769][ T4862] Kernel Offset: disabled [ 103.704136][ T4862] Rebooting in 86400 seconds..