Warning: Permanently added '10.128.10.25' (ECDSA) to the list of known hosts. 2022/07/26 19:36:01 parsed 1 programs [ 117.216333][ T3931] cgroup: Unknown subsys name 'net' [ 117.224849][ T3931] cgroup: Unknown subsys name 'rlimit' 2022/07/26 19:36:01 executed programs: 0 [ 118.543235][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.550481][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.557726][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.565249][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.572842][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 118.580180][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.618055][ T3969] chnl_net:caif_netlink_parms(): no params data found [ 118.641282][ T3969] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.648330][ T3969] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.655883][ T3969] device bridge_slave_0 entered promiscuous mode [ 118.663153][ T3969] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.670204][ T3969] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.677614][ T3969] device bridge_slave_1 entered promiscuous mode [ 118.691737][ T3969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.702344][ T3969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.717445][ T3969] team0: Port device team_slave_0 added [ 118.723925][ T3969] team0: Port device team_slave_1 added [ 118.735580][ T3969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.743005][ T3969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.769438][ T3969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.780629][ T3969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.787649][ T3969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.814700][ T3969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.833326][ T3969] device hsr_slave_0 entered promiscuous mode [ 118.839639][ T3969] device hsr_slave_1 entered promiscuous mode [ 118.873443][ T3969] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.880480][ T3969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.887727][ T3969] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.894764][ T3969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.917392][ T3969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.926818][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.934800][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.942900][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.950249][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 118.960258][ T3969] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.968546][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.976895][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.984186][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.994933][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.003743][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.010779][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.030074][ T3969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.041932][ T3969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.054889][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.063667][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.072288][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.080431][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.097993][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.105454][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.113337][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.120804][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.129415][ T3969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.233908][ T3969] device veth0_vlan entered promiscuous mode [ 119.242194][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.250525][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.259406][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.267093][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.275662][ T3969] device veth1_vlan entered promiscuous mode [ 119.287385][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.295127][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.303038][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.312600][ T3969] device veth0_macvtap entered promiscuous mode [ 119.320593][ T3969] device veth1_macvtap entered promiscuous mode [ 119.331566][ T3969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.338792][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.347897][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.357351][ T3969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.365509][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.392546][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.400726][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.409757][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.418051][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.426405][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.434456][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.721424][ T3373] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.961727][ T3373] usb 1-1: Using ep0 maxpacket: 8 [ 120.081614][ T3373] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 120.090212][ T3373] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 120.099167][ T3373] usb 1-1: config 0 has no interface number 0 [ 120.105473][ T3373] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0xF has invalid maxpacket 8 [ 120.115422][ T3373] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 120.126653][ T3373] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 29939, setting to 1024 [ 120.138089][ T3373] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 120.148681][ T3373] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xBD, skipping [ 120.159540][ T3373] usb 1-1: config 0 interface 119 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 120.170529][ T3373] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x8 has an invalid bInterval 244, changing to 11 [ 120.182245][ T3373] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 120.193218][ T3373] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 120.204660][ T3373] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x2 has an invalid bInterval 31, changing to 7 [ 120.217204][ T3373] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 120.228626][ T3373] usb 1-1: config 0 interface 119 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 120.240115][ T3373] usb 1-1: config 0 interface 119 altsetting 0 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 120.411426][ T3373] usb 1-1: New USB device found, idVendor=cace, idProduct=0300, bcdDevice=31.25 [ 120.420466][ T3373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.428703][ T3373] usb 1-1: Product: syz [ 120.432902][ T3373] usb 1-1: Manufacturer: syz [ 120.437567][ T3373] usb 1-1: SerialNumber: syz [ 120.443671][ T3373] usb 1-1: config 0 descriptor?? [ 120.462091][ T4033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.631423][ T1147] Bluetooth: hci0: command 0x0409 tx timeout [ 120.631667][ T3373] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 121.591380][ T3373] usb 1-1: device descriptor read/64, error -71 [ 121.861355][ T3373] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 122.101483][ T3373] usb 1-1: Using ep0 maxpacket: 8 [ 122.241586][ T4039] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.279754][ T3373] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 122.286157][ T3373] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 122.292085][ T3373] ------------[ cut here ]------------ [ 122.297623][ T3373] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 122.303709][ T3373] WARNING: CPU: 1 PID: 3373 at drivers/usb/core/urb.c:502 usb_submit_urb+0xb07/0x1680 [ 122.313267][ T3373] Modules linked in: [ 122.317145][ T3373] CPU: 1 PID: 3373 Comm: kworker/1:3 Not tainted 5.19.0-rc8-syzkaller #0 [ 122.325560][ T3373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 122.335696][ T3373] Workqueue: events request_firmware_work_func [ 122.341943][ T3373] RIP: 0010:usb_submit_urb+0xb07/0x1680 [ 122.347503][ T3373] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 b3 d8 19 ff 44 8b 04 24 4c 89 e2 48 c7 c7 80 6c 84 89 8b 4c 24 08 48 89 c6 e8 1f 24 51 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 122.367216][ T3373] RSP: 0018:ffffc90002e8fba8 EFLAGS: 00010286 [ 122.373307][ T3373] RAX: 0000000000000000 RBX: ffff888014c32000 RCX: 0000000000000000 [ 122.381378][ T3373] RDX: 0000000000000001 RSI: 0000000000000008 RDI: fffff520005d1f67 [ 122.389420][ T3373] RBP: ffff88801514b500 R08: 0000000000000000 R09: ffffc90002e8f8df [ 122.397420][ T3373] R10: fffff520005d1f1b R11: 3a312d3120627375 R12: ffff88801a4363c0 [ 122.405402][ T3373] R13: 000000000000000e R14: 0000000000000002 R15: 0000000000000000 [ 122.413474][ T3373] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 122.422438][ T3373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.429007][ T3373] CR2: 0000555a6b5f8600 CR3: 0000000070052000 CR4: 00000000003506e0 [ 122.436990][ T3373] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.444972][ T3373] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.452945][ T3373] Call Trace: [ 122.456210][ T3373] [ 122.459215][ T3373] ? trace_hardirqs_on+0x2d/0x120 [ 122.463703][ T1147] usb 1-1: USB disconnect, device number 2 [ 122.464301][ T3373] carl9170_usb_send_rx_irq_urb+0x266/0x340 [ 122.475925][ T3373] carl9170_usb_firmware_step2+0x188/0x230 [ 122.481770][ T3373] ? carl9170_usb_resume+0x130/0x130 [ 122.487035][ T3373] request_firmware_work_func+0x126/0x230 [ 122.492762][ T3373] ? request_partial_firmware_into_buf+0x90/0x90 [ 122.499069][ T3373] ? read_word_at_a_time+0xe/0x20 [ 122.504177][ T3373] ? strscpy+0xa1/0x2a0 [ 122.508316][ T3373] process_one_work+0x841/0x13a0 [ 122.513252][ T3373] ? lock_release+0x780/0x780 [ 122.517921][ T3373] ? pwq_dec_nr_in_flight+0x230/0x230 [ 122.523308][ T3373] ? rwlock_bug.part.0+0x90/0x90 [ 122.528231][ T3373] worker_thread+0x598/0xec0 [ 122.532833][ T3373] ? __kthread_parkme+0xc1/0x1f0 [ 122.537752][ T3373] ? process_one_work+0x13a0/0x13a0 [ 122.543009][ T3373] kthread+0x299/0x340 [ 122.547063][ T3373] ? kthread_complete_and_exit+0x20/0x20 [ 122.552705][ T3373] ret_from_fork+0x1f/0x30 [ 122.557106][ T3373] [ 122.560253][ T3373] Kernel panic - not syncing: panic_on_warn set ... [ 122.566825][ T3373] CPU: 1 PID: 3373 Comm: kworker/1:3 Not tainted 5.19.0-rc8-syzkaller #0 [ 122.575232][ T3373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 122.585258][ T3373] Workqueue: events request_firmware_work_func [ 122.591561][ T3373] Call Trace: [ 122.594899][ T3373] [ 122.597806][ T3373] dump_stack_lvl+0x57/0x7d [ 122.602283][ T3373] panic+0x227/0x466 [ 122.606242][ T3373] ? panic_print_sys_info.part.0+0x69/0x69 [ 122.612025][ T3373] ? usb_submit_urb+0xb07/0x1680 [ 122.617021][ T3373] __warn.cold+0x14b/0x1d9 [ 122.621404][ T3373] ? usb_submit_urb+0xb07/0x1680 [ 122.626307][ T3373] report_bug+0x15a/0x1c0 [ 122.630605][ T3373] ? vprintk_emit+0x122/0x3d0 [ 122.635252][ T3373] handle_bug+0x3c/0x60 [ 122.639376][ T3373] exc_invalid_op+0x14/0x40 [ 122.643863][ T3373] asm_exc_invalid_op+0x16/0x20 [ 122.648681][ T3373] RIP: 0010:usb_submit_urb+0xb07/0x1680 [ 122.654198][ T3373] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 b3 d8 19 ff 44 8b 04 24 4c 89 e2 48 c7 c7 80 6c 84 89 8b 4c 24 08 48 89 c6 e8 1f 24 51 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 122.673860][ T3373] RSP: 0018:ffffc90002e8fba8 EFLAGS: 00010286 [ 122.679984][ T3373] RAX: 0000000000000000 RBX: ffff888014c32000 RCX: 0000000000000000 [ 122.687938][ T3373] RDX: 0000000000000001 RSI: 0000000000000008 RDI: fffff520005d1f67 [ 122.695879][ T3373] RBP: ffff88801514b500 R08: 0000000000000000 R09: ffffc90002e8f8df [ 122.703907][ T3373] R10: fffff520005d1f1b R11: 3a312d3120627375 R12: ffff88801a4363c0 [ 122.711849][ T3373] R13: 000000000000000e R14: 0000000000000002 R15: 0000000000000000 [ 122.719886][ T3373] ? usb_submit_urb+0xb07/0x1680 [ 122.724805][ T3373] ? trace_hardirqs_on+0x2d/0x120 [ 122.729802][ T3373] carl9170_usb_send_rx_irq_urb+0x266/0x340 [ 122.735762][ T3373] carl9170_usb_firmware_step2+0x188/0x230 [ 122.741541][ T3373] ? carl9170_usb_resume+0x130/0x130 [ 122.746791][ T3373] request_firmware_work_func+0x126/0x230 [ 122.752477][ T3373] ? request_partial_firmware_into_buf+0x90/0x90 [ 122.758773][ T3373] ? read_word_at_a_time+0xe/0x20 [ 122.763771][ T3373] ? strscpy+0xa1/0x2a0 [ 122.767894][ T3373] process_one_work+0x841/0x13a0 [ 122.772857][ T3373] ? lock_release+0x780/0x780 [ 122.777504][ T3373] ? pwq_dec_nr_in_flight+0x230/0x230 [ 122.782844][ T3373] ? rwlock_bug.part.0+0x90/0x90 [ 122.787766][ T3373] worker_thread+0x598/0xec0 [ 122.792326][ T3373] ? __kthread_parkme+0xc1/0x1f0 [ 122.797320][ T3373] ? process_one_work+0x13a0/0x13a0 [ 122.802488][ T3373] kthread+0x299/0x340 [ 122.806524][ T3373] ? kthread_complete_and_exit+0x20/0x20 [ 122.812126][ T3373] ret_from_fork+0x1f/0x30 [ 122.816514][ T3373] [ 122.819558][ T3373] Kernel Offset: disabled [ 122.823863][ T3373] Rebooting in 86400 seconds..