[ 58.028564][ T934] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.043922][ T934] device veth1_macvtap left promiscuous mode [ 58.050430][ T934] device veth0_macvtap left promiscuous mode [ 58.058088][ T934] device veth1_vlan left promiscuous mode [ 58.064232][ T934] device veth0_vlan left promiscuous mode [ 58.306149][ T934] team0 (unregistering): Port device team_slave_1 removed [ 58.321201][ T934] team0 (unregistering): Port device team_slave_0 removed [ 58.333840][ T934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.347538][ T934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.392158][ T934] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.165' (ECDSA) to the list of known hosts. 2023/02/01 22:25:55 ignoring optional flag "sandboxArg"="0" 2023/02/01 22:25:56 parsed 1 programs 2023/02/01 22:25:56 executed programs: 0 [ 74.645711][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.653902][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.663864][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.672537][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.681453][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.690167][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.795041][ T5527] chnl_net:caif_netlink_parms(): no params data found [ 74.834907][ T5527] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.842102][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.850465][ T5527] device bridge_slave_0 entered promiscuous mode [ 74.859341][ T5527] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.866715][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.874534][ T5527] device bridge_slave_1 entered promiscuous mode [ 74.893702][ T5527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.904928][ T5527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.926850][ T5527] team0: Port device team_slave_0 added [ 74.934062][ T5527] team0: Port device team_slave_1 added [ 74.952755][ T5527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.959849][ T5527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.986873][ T5527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.000812][ T5527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.008211][ T5527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.034613][ T5527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.062982][ T5527] device hsr_slave_0 entered promiscuous mode [ 75.072043][ T5527] device hsr_slave_1 entered promiscuous mode [ 75.823033][ T5527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.833292][ T5527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.845609][ T5527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.859311][ T5527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.932835][ T5527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.947179][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.956367][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.966989][ T5527] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.978303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.988086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.998244][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.005576][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.031311][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.040187][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.051004][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.060025][ T5062] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.067592][ T5062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.077720][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.086987][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.097827][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.108015][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.129464][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.138849][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.148251][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.158573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.168048][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.181606][ T5527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.196773][ T5527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.208017][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.217662][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.397755][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.405917][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.418158][ T5527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.443154][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.453095][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.476255][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.485906][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.496499][ T5527] device veth0_vlan entered promiscuous mode [ 76.507679][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.516132][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.529407][ T5527] device veth1_vlan entered promiscuous mode [ 76.554498][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.563337][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.573504][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.576451][ T14] cfg80211: failed to load regulatory.db [ 76.585222][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.599820][ T5527] device veth0_macvtap entered promiscuous mode [ 76.618963][ T5527] device veth1_macvtap entered promiscuous mode [ 76.640032][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.648528][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.660237][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.668610][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.678835][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.691570][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.700804][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.710462][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.723193][ T5527] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.734082][ T5527] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.743003][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 76.753098][ T5527] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.767775][ T5527] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.851828][ T934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.873405][ T934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.892672][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.912655][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.921472][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.933061][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.264897][ T5062] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.625050][ T5062] usb 1-1: config 0 has an invalid interface number: 72 but max is 0 [ 77.633969][ T5062] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 77.645332][ T5062] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 77.657919][ T5062] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 77.669282][ T5062] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 77.680000][ T5062] usb 1-1: config 0 has no interface number 0 [ 77.686551][ T5062] usb 1-1: config 0 interface 72 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 77.699114][ T5062] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 77.711115][ T5062] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 77.724078][ T5062] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 77.736555][ T5062] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 8 [ 77.746901][ T5062] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 77.759406][ T5062] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 77.771147][ T5062] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 77.783602][ T5062] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 77.793773][ T5062] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 77.807141][ T5062] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 77.818397][ T5062] usb 1-1: New USB device found, idVendor=0846, idProduct=9010, bcdDevice=a0.e4 [ 77.829656][ T5062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.843963][ T5062] usb 1-1: config 0 descriptor?? [ 78.034939][ T5062] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 78.815231][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 78.994767][ T5062] usb 1-1: device descriptor read/64, error -71 [ 79.264774][ T5062] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 79.651920][ T5062] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 79.662983][ T5062] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 79.669852][ T5062] ------------[ cut here ]------------ [ 79.676943][ T5062] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 79.682977][ T5062] WARNING: CPU: 0 PID: 5062 at drivers/usb/core/urb.c:505 usb_submit_urb+0xb0e/0x1660 [ 79.693222][ T5062] Modules linked in: [ 79.698833][ T5062] CPU: 0 PID: 5062 Comm: kworker/0:3 Not tainted 6.2.0-rc6-syzkaller #0 [ 79.707537][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 79.719239][ T5062] Workqueue: events request_firmware_work_func [ 79.725849][ T5062] RIP: 0010:usb_submit_urb+0xb0e/0x1660 [ 79.731529][ T5062] Code: 8a 4c 89 e8 48 c1 e8 03 8a 04 18 84 c0 0f 85 82 07 00 00 45 8b 45 00 48 c7 c7 00 2f c1 8a 4c 89 f2 89 e9 31 c0 e8 92 9f 4a fb <0f> 0b 48 8b 14 24 8d 42 fe 83 f8 02 73 20 8b 4c 24 18 89 c8 c1 e0 [ 79.752937][ T5062] RSP: 0018:ffffc900036efa08 EFLAGS: 00010246 [ 79.759349][ T5062] RAX: 8f80ba018182f800 RBX: dffffc0000000000 RCX: 0000000000000001 [ 79.769137][ T5062] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001 [ 79.777881][ T5062] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1017344f5b [ 79.787412][ T5062] R10: ffffed1017344f5b R11: 1ffff11017344f5a R12: ffff88801cd13d00 [ 79.796015][ T5062] R13: ffffffff8ac12ce8 R14: ffff888016d9a140 R15: 0000000000000cc0 [ 79.804023][ T5062] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 79.814935][ T5062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.821810][ T5062] CR2: 000055ec230c0950 CR3: 000000002b22f000 CR4: 00000000003506f0 [ 79.830378][ T5062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.832235][ T5205] usb 1-1: USB disconnect, device number 2 [ 79.845316][ T5062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.853329][ T5062] Call Trace: [ 79.860940][ T5062] [ 79.863921][ T5062] carl9170_usb_init_device+0x23e/0x7c0 [ 79.869956][ T5062] carl9170_usb_firmware_step2+0x8a/0x210 [ 79.877545][ T5062] request_firmware_work_func+0x193/0x270 [ 79.883473][ T5062] ? carl9170_usb_tasklet+0x240/0x240 [ 79.889256][ T5062] ? request_firmware_nowait+0x3f0/0x3f0 [ 79.896682][ T5062] process_one_work+0x794/0xc10 [ 79.901590][ T5062] ? worker_detach_from_pool+0x240/0x240 [ 79.908061][ T5062] ? _raw_spin_lock_irqsave+0x120/0x120 [ 79.916908][ T5062] ? wq_worker_sleeping+0x19/0x200 [ 79.922055][ T5062] worker_thread+0x8ff/0xfe0 [ 79.927248][ T5062] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 79.933198][ T5062] kthread+0x228/0x2a0 [ 79.942318][ T5062] ? rcu_lock_release+0x20/0x20 [ 79.947527][ T5062] ? kthread_blkcg+0xa0/0xa0 [ 79.952142][ T5062] ret_from_fork+0x1f/0x30 [ 79.957866][ T5062] [ 79.960908][ T5062] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.968191][ T5062] CPU: 0 PID: 5062 Comm: kworker/0:3 Not tainted 6.2.0-rc6-syzkaller #0 [ 79.976546][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 79.986689][ T5062] Workqueue: events request_firmware_work_func [ 79.992837][ T5062] Call Trace: [ 79.996104][ T5062] [ 79.999032][ T5062] dump_stack_lvl+0x163/0x220 [ 80.003785][ T5062] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 80.009222][ T5062] ? panic+0x540/0x540 [ 80.013275][ T5062] ? panic+0xfc/0x540 [ 80.017251][ T5062] panic+0x228/0x540 [ 80.021236][ T5062] ? memcpy_page_flushcache+0xe0/0xe0 [ 80.026624][ T5062] ? ret_from_fork+0x1f/0x30 [ 80.031219][ T5062] ? usb_submit_urb+0xb0e/0x1660 [ 80.036235][ T5062] __warn+0x1ea/0x250 [ 80.040302][ T5062] ? usb_submit_urb+0xb0e/0x1660 [ 80.045239][ T5062] report_bug+0x107/0x280 [ 80.049562][ T5062] handle_bug+0x3d/0x70 [ 80.053705][ T5062] exc_invalid_op+0x16/0x40 [ 80.058195][ T5062] asm_exc_invalid_op+0x16/0x20 [ 80.063050][ T5062] RIP: 0010:usb_submit_urb+0xb0e/0x1660 [ 80.068615][ T5062] Code: 8a 4c 89 e8 48 c1 e8 03 8a 04 18 84 c0 0f 85 82 07 00 00 45 8b 45 00 48 c7 c7 00 2f c1 8a 4c 89 f2 89 e9 31 c0 e8 92 9f 4a fb <0f> 0b 48 8b 14 24 8d 42 fe 83 f8 02 73 20 8b 4c 24 18 89 c8 c1 e0 [ 80.088235][ T5062] RSP: 0018:ffffc900036efa08 EFLAGS: 00010246 [ 80.094287][ T5062] RAX: 8f80ba018182f800 RBX: dffffc0000000000 RCX: 0000000000000001 [ 80.102273][ T5062] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001 [ 80.110233][ T5062] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1017344f5b [ 80.118369][ T5062] R10: ffffed1017344f5b R11: 1ffff11017344f5a R12: ffff88801cd13d00 [ 80.126352][ T5062] R13: ffffffff8ac12ce8 R14: ffff888016d9a140 R15: 0000000000000cc0 [ 80.134417][ T5062] ? usb_submit_urb+0xb0e/0x1660 [ 80.139355][ T5062] carl9170_usb_init_device+0x23e/0x7c0 [ 80.144915][ T5062] carl9170_usb_firmware_step2+0x8a/0x210 [ 80.150815][ T5062] request_firmware_work_func+0x193/0x270 [ 80.156640][ T5062] ? carl9170_usb_tasklet+0x240/0x240 [ 80.162075][ T5062] ? request_firmware_nowait+0x3f0/0x3f0 [ 80.168326][ T5062] process_one_work+0x794/0xc10 [ 80.173180][ T5062] ? worker_detach_from_pool+0x240/0x240 [ 80.178894][ T5062] ? _raw_spin_lock_irqsave+0x120/0x120 [ 80.184609][ T5062] ? wq_worker_sleeping+0x19/0x200 [ 80.189736][ T5062] worker_thread+0x8ff/0xfe0 [ 80.194315][ T5062] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 80.200201][ T5062] kthread+0x228/0x2a0 [ 80.204256][ T5062] ? rcu_lock_release+0x20/0x20 [ 80.209267][ T5062] ? kthread_blkcg+0xa0/0xa0 [ 80.213846][ T5062] ret_from_fork+0x1f/0x30 [ 80.218260][ T5062] [ 80.221606][ T5062] Kernel Offset: disabled [ 80.226038][ T5062] Rebooting in 86400 seconds..