[ 32.586109][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.596461][ T1120] device veth1_macvtap left promiscuous mode [ 32.602850][ T1120] device veth0_macvtap left promiscuous mode [ 32.610746][ T1120] device veth1_vlan left promiscuous mode [ 32.616862][ T1120] device veth0_vlan left promiscuous mode [ 32.649269][ T1120] team0 (unregistering): Port device team_slave_1 removed [ 32.657820][ T1120] team0 (unregistering): Port device team_slave_0 removed [ 32.667012][ T1120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.677070][ T1120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.695721][ T1120] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.136' (ECDSA) to the list of known hosts. 2023/07/07 10:28:16 ignoring optional flag "sandboxArg"="0" 2023/07/07 10:28:16 parsed 1 programs 2023/07/07 10:28:16 executed programs: 0 [ 44.575781][ T3851] chnl_net:caif_netlink_parms(): no params data found [ 44.588989][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.596638][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.604375][ T3851] device bridge_slave_0 entered promiscuous mode [ 44.612893][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.620561][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.629299][ T3851] device bridge_slave_1 entered promiscuous mode [ 44.639544][ T3851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.649442][ T3851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.661870][ T3851] team0: Port device team_slave_0 added [ 44.668745][ T3851] team0: Port device team_slave_1 added [ 44.676563][ T3851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.684411][ T3851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.712617][ T3851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.724074][ T3851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.732276][ T3851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.762524][ T3851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.778311][ T3851] device hsr_slave_0 entered promiscuous mode [ 44.785800][ T3851] device hsr_slave_1 entered promiscuous mode [ 45.006398][ T3851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.014584][ T3851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.022441][ T3851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.030546][ T3851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.042597][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.050073][ T3851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.057415][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.064707][ T3851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.081635][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.090102][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.098948][ T1303] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.107428][ T1303] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.115537][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 45.124219][ T3851] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.133402][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.141828][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.149115][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.156719][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.165105][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.172197][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.179770][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.188334][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.198182][ T3851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.208887][ T3851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.220599][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.229279][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.237443][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.246430][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.273263][ T3851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.281722][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.289719][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.301273][ T3851] device veth0_vlan entered promiscuous mode [ 45.309489][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.317798][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.325875][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.333302][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.342078][ T3851] device veth1_vlan entered promiscuous mode [ 45.351420][ T3851] device veth0_macvtap entered promiscuous mode [ 45.358548][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.366770][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.375016][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.383873][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.392817][ T3851] device veth1_macvtap entered promiscuous mode [ 45.401549][ T3851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.409909][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.419673][ T3851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.427359][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.436761][ T3851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.446360][ T3851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.455617][ T3851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.464723][ T3851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.486809][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.498212][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.506599][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.507392][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.518693][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.530233][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.812844][ T2923] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.052883][ T2923] usb 1-1: Using ep0 maxpacket: 32 [ 46.212491][ T2923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.292521][ T2923] usb 1-1: config 6 has an invalid interface number: 199 but max is 2 [ 46.300963][ T2923] usb 1-1: config 6 has an invalid interface number: 48 but max is 2 [ 46.309907][ T2923] usb 1-1: config 6 has an invalid interface number: 105 but max is 2 [ 46.318231][ T2923] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 46.327510][ T2923] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 46.336639][ T2923] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 46.346145][ T2923] usb 1-1: config 6 has no interface number 0 [ 46.352568][ T2923] usb 1-1: config 6 has no interface number 1 [ 46.358608][ T2923] usb 1-1: config 6 has no interface number 2 [ 46.364793][ T2923] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 46.376477][ T2923] usb 1-1: config 6 interface 199 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 46.388799][ T2923] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 46.399641][ T2923] usb 1-1: config 6 interface 199 altsetting 128 bulk endpoint 0x2 has invalid maxpacket 8 [ 46.410395][ T2923] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 46.421764][ T2923] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 46.433314][ T2923] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x1, skipping [ 46.444232][ T2923] usb 1-1: config 6 interface 199 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 46.455663][ T2923] usb 1-1: config 6 interface 199 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 46.466594][ T2923] usb 1-1: config 6 interface 48 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 46.477826][ T2923] usb 1-1: config 6 interface 105 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 46.491359][ T2923] usb 1-1: config 6 interface 199 has no altsetting 0 [ 46.498235][ T2923] usb 1-1: config 6 interface 48 has no altsetting 0 [ 46.504993][ T2923] usb 1-1: config 6 interface 105 has no altsetting 0 [ 46.573020][ T1281] Bluetooth: hci0: command 0x0409 tx timeout [ 46.742943][ T2923] usb 1-1: string descriptor 0 read error: -22 [ 46.749288][ T2923] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=b9.c5 [ 46.758542][ T2923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.804570][ T2923] ------------[ cut here ]------------ [ 46.810389][ T2923] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 46.816839][ T2923] WARNING: CPU: 0 PID: 2923 at drivers/usb/core/urb.c:502 usb_submit_urb+0x44f/0x6a0 [ 46.826482][ T2923] Modules linked in: [ 46.830360][ T2923] CPU: 0 PID: 2923 Comm: kworker/0:3 Not tainted 5.15.120-syzkaller #0 [ 46.839179][ T2923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 46.849766][ T2923] Workqueue: usb_hub_wq hub_event [ 46.854921][ T2923] RIP: 0010:usb_submit_urb+0x44f/0x6a0 [ 46.860402][ T2923] Code: 89 54 24 10 44 89 44 24 08 e8 fd 32 bd ff 44 8b 44 24 08 44 89 f9 48 c7 c7 38 1b 92 84 48 8b 54 24 10 48 89 c6 e8 80 67 fd 00 <0f> 0b e9 68 fd ff ff 41 b8 85 03 00 00 45 29 f0 e9 82 fd ff ff 89 [ 46.881291][ T2923] RSP: 0018:ffffc90009c13758 EFLAGS: 00010282 [ 46.887515][ T2923] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 46.895905][ T2923] RDX: 0000000000000001 RSI: ffffffff849e0dc1 RDI: 00000000ffffffff [ 46.904405][ T2923] RBP: ffff88810af089c0 R08: ffffffff84ff6488 R09: 0000000000000003 [ 46.912421][ T2923] R10: 00000000ffffe000 R11: 3fffffffffffffff R12: ffff888117da3800 [ 46.920465][ T2923] R13: 0000000000000002 R14: 0000000000000001 R15: 0000000000000001 [ 46.928445][ T2923] FS: 0000000000000000(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 46.937735][ T2923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.944453][ T2923] CR2: 000055b6b028d131 CR3: 000000010ad1b000 CR4: 00000000003506f0 [ 46.952608][ T2923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.960782][ T2923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.968861][ T2923] Call Trace: [ 46.972216][ T2923] [ 46.975166][ T2923] ? __warn+0x7b/0x100 [ 46.979734][ T2923] ? usb_submit_urb+0x44f/0x6a0 [ 46.984588][ T2923] ? report_bug+0x9a/0xc0 [ 46.989072][ T2923] ? handle_bug+0x3c/0x60 [ 46.993690][ T2923] ? exc_invalid_op+0x14/0x70 [ 46.998525][ T2923] ? asm_exc_invalid_op+0x16/0x20 [ 47.003847][ T2923] ? usb_submit_urb+0x44f/0x6a0 [ 47.008768][ T2923] ? usb_submit_urb+0x44f/0x6a0 [ 47.014012][ T2923] usb_start_wait_urb+0x60/0x160 [ 47.018925][ T2923] ? ilk_irq_handler+0x550/0x940 [ 47.023976][ T2923] amradio_send_cmd+0xb8/0x310 [ 47.029718][ T2923] usb_amradio_probe+0x195/0x230 [ 47.034973][ T2923] usb_probe_interface+0xda/0x290 [ 47.040225][ T2923] really_probe+0xbc/0x3b0 [ 47.044733][ T2923] __driver_probe_device+0xd1/0x120 [ 47.049994][ T2923] driver_probe_device+0x19/0x90 [ 47.055132][ T2923] __device_attach_driver+0x71/0xf0 [ 47.060856][ T2923] ? driver_allows_async_probing+0x40/0x40 [ 47.067040][ T2923] ? driver_allows_async_probing+0x40/0x40 [ 47.073290][ T2923] bus_for_each_drv+0x79/0xc0 [ 47.078290][ T2923] __device_attach+0xb9/0x210 [ 47.083651][ T2923] bus_probe_device+0x97/0xb0 [ 47.088868][ T2923] device_add+0x421/0x930 [ 47.093211][ T2923] ? __mutex_unlock_slowpath+0x37/0x280 [ 47.099299][ T2923] usb_set_configuration+0x4f7/0x8e0 [ 47.104763][ T2923] usb_generic_driver_probe+0x47/0x70 [ 47.110108][ T2923] usb_probe_device+0x2b/0xf0 [ 47.114791][ T2923] really_probe+0xbc/0x3b0 [ 47.119352][ T2923] __driver_probe_device+0xd1/0x120 [ 47.124541][ T2923] driver_probe_device+0x19/0x90 [ 47.129452][ T2923] __device_attach_driver+0x71/0xf0 [ 47.134751][ T2923] ? driver_allows_async_probing+0x40/0x40 [ 47.140615][ T2923] ? driver_allows_async_probing+0x40/0x40 [ 47.146515][ T2923] bus_for_each_drv+0x79/0xc0 [ 47.151173][ T2923] __device_attach+0xb9/0x210 [ 47.155945][ T2923] bus_probe_device+0x97/0xb0 [ 47.160683][ T2923] device_add+0x421/0x930 [ 47.165080][ T2923] usb_new_device.cold+0xbc/0x3be [ 47.170212][ T2923] hub_event+0xe9a/0x1860 [ 47.174561][ T2923] ? process_one_work+0x1fe/0x510 [ 47.179565][ T2923] process_one_work+0x26f/0x510 [ 47.184432][ T2923] worker_thread+0x4d/0x3b0 [ 47.189092][ T2923] ? process_one_work+0x510/0x510 [ 47.194224][ T2923] kthread+0x13c/0x160 [ 47.198263][ T2923] ? set_kthread_struct+0x40/0x40 [ 47.203375][ T2923] ret_from_fork+0x1f/0x30 [ 47.208302][ T2923] [ 47.211305][ T2923] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 47.218818][ T2923] CPU: 0 PID: 2923 Comm: kworker/0:3 Not tainted 5.15.120-syzkaller #0 [ 47.227461][ T2923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 47.237492][ T2923] Workqueue: usb_hub_wq hub_event [ 47.242638][ T2923] Call Trace: [ 47.246322][ T2923] [ 47.249223][ T2923] dump_stack_lvl+0x57/0x7d [ 47.253779][ T2923] panic+0x10f/0x2c7 [ 47.257730][ T2923] check_panic_on_warn.cold+0xf/0x1e [ 47.263110][ T2923] __warn+0x87/0x100 [ 47.266986][ T2923] ? usb_submit_urb+0x44f/0x6a0 [ 47.272078][ T2923] report_bug+0x9a/0xc0 [ 47.276373][ T2923] handle_bug+0x3c/0x60 [ 47.280666][ T2923] exc_invalid_op+0x14/0x70 [ 47.285138][ T2923] asm_exc_invalid_op+0x16/0x20 [ 47.291277][ T2923] RIP: 0010:usb_submit_urb+0x44f/0x6a0 [ 47.296715][ T2923] Code: 89 54 24 10 44 89 44 24 08 e8 fd 32 bd ff 44 8b 44 24 08 44 89 f9 48 c7 c7 38 1b 92 84 48 8b 54 24 10 48 89 c6 e8 80 67 fd 00 <0f> 0b e9 68 fd ff ff 41 b8 85 03 00 00 45 29 f0 e9 82 fd ff ff 89 [ 47.317155][ T2923] RSP: 0018:ffffc90009c13758 EFLAGS: 00010282 [ 47.323279][ T2923] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 47.331653][ T2923] RDX: 0000000000000001 RSI: ffffffff849e0dc1 RDI: 00000000ffffffff [ 47.339705][ T2923] RBP: ffff88810af089c0 R08: ffffffff84ff6488 R09: 0000000000000003 [ 47.347940][ T2923] R10: 00000000ffffe000 R11: 3fffffffffffffff R12: ffff888117da3800 [ 47.356068][ T2923] R13: 0000000000000002 R14: 0000000000000001 R15: 0000000000000001 [ 47.364361][ T2923] ? usb_submit_urb+0x44f/0x6a0 [ 47.369180][ T2923] usb_start_wait_urb+0x60/0x160 [ 47.374176][ T2923] ? ilk_irq_handler+0x550/0x940 [ 47.379168][ T2923] amradio_send_cmd+0xb8/0x310 [ 47.383905][ T2923] usb_amradio_probe+0x195/0x230 [ 47.389036][ T2923] usb_probe_interface+0xda/0x290 [ 47.394027][ T2923] really_probe+0xbc/0x3b0 [ 47.398418][ T2923] __driver_probe_device+0xd1/0x120 [ 47.403674][ T2923] driver_probe_device+0x19/0x90 [ 47.408849][ T2923] __device_attach_driver+0x71/0xf0 [ 47.414193][ T2923] ? driver_allows_async_probing+0x40/0x40 [ 47.419968][ T2923] ? driver_allows_async_probing+0x40/0x40 [ 47.425829][ T2923] bus_for_each_drv+0x79/0xc0 [ 47.430470][ T2923] __device_attach+0xb9/0x210 [ 47.435110][ T2923] bus_probe_device+0x97/0xb0 [ 47.439768][ T2923] device_add+0x421/0x930 [ 47.444070][ T2923] ? __mutex_unlock_slowpath+0x37/0x280 [ 47.449581][ T2923] usb_set_configuration+0x4f7/0x8e0 [ 47.455007][ T2923] usb_generic_driver_probe+0x47/0x70 [ 47.460432][ T2923] usb_probe_device+0x2b/0xf0 [ 47.465273][ T2923] really_probe+0xbc/0x3b0 [ 47.469763][ T2923] __driver_probe_device+0xd1/0x120 [ 47.475210][ T2923] driver_probe_device+0x19/0x90 [ 47.480125][ T2923] __device_attach_driver+0x71/0xf0 [ 47.485390][ T2923] ? driver_allows_async_probing+0x40/0x40 [ 47.491335][ T2923] ? driver_allows_async_probing+0x40/0x40 [ 47.497191][ T2923] bus_for_each_drv+0x79/0xc0 [ 47.502010][ T2923] __device_attach+0xb9/0x210 [ 47.507002][ T2923] bus_probe_device+0x97/0xb0 [ 47.511859][ T2923] device_add+0x421/0x930 [ 47.516525][ T2923] usb_new_device.cold+0xbc/0x3be [ 47.521529][ T2923] hub_event+0xe9a/0x1860 [ 47.526378][ T2923] ? process_one_work+0x1fe/0x510 [ 47.531372][ T2923] process_one_work+0x26f/0x510 [ 47.536507][ T2923] worker_thread+0x4d/0x3b0 [ 47.541243][ T2923] ? process_one_work+0x510/0x510 [ 47.546236][ T2923] kthread+0x13c/0x160 [ 47.550365][ T2923] ? set_kthread_struct+0x40/0x40 [ 47.555576][ T2923] ret_from_fork+0x1f/0x30 [ 47.559965][ T2923] [ 47.563214][ T2923] Kernel Offset: disabled [ 47.567564][ T2923] Rebooting in 86400 seconds..