[ 54.011227][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.027774][ T1173] veth1_macvtap: left promiscuous mode [ 54.033637][ T1173] veth0_macvtap: left promiscuous mode [ 54.041083][ T1173] veth1_vlan: left promiscuous mode [ 54.046654][ T1173] veth0_vlan: left promiscuous mode [ 54.207247][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 54.219873][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 54.233151][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.248017][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.293022][ T1173] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.3' (ECDSA) to the list of known hosts. 2023/03/04 07:57:05 ignoring optional flag "sandboxArg"="0" 2023/03/04 07:57:06 parsed 1 programs 2023/03/04 07:57:06 executed programs: 0 [ 69.103741][ T4394] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.111756][ T4394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.119838][ T4394] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.128157][ T4394] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.137412][ T4394] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.145048][ T4394] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.233389][ T5514] chnl_net:caif_netlink_parms(): no params data found [ 69.269974][ T5514] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.277173][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.284249][ T5514] bridge_slave_0: entered allmulticast mode [ 69.291111][ T5514] bridge_slave_0: entered promiscuous mode [ 69.298747][ T5514] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.306094][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.313210][ T5514] bridge_slave_1: entered allmulticast mode [ 69.319923][ T5514] bridge_slave_1: entered promiscuous mode [ 69.339057][ T5514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.349700][ T5514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.369859][ T5514] team0: Port device team_slave_0 added [ 69.377391][ T5514] team0: Port device team_slave_1 added [ 69.393865][ T5514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.401686][ T5514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.427755][ T5514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.439759][ T5514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.446941][ T5514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.473067][ T5514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.500219][ T5514] hsr_slave_0: entered promiscuous mode [ 69.506458][ T5514] hsr_slave_1: entered promiscuous mode [ 70.058501][ T5514] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.068136][ T5514] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.078538][ T5514] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.088554][ T5514] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.110873][ T5514] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.118051][ T5514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.125467][ T5514] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.132573][ T5514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.189310][ T5514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.202997][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.212918][ T898] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.221458][ T898] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.229969][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 70.245934][ T5514] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.257421][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.267022][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.275728][ T5545] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.282819][ T5545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.316202][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.326768][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.335966][ T5545] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.343110][ T5545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.352600][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.361433][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.372021][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.381919][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.392085][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.401487][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.422425][ T5514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.434271][ T5514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.450930][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.460233][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.470867][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.480096][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.490650][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.502994][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.657686][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.666763][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.679806][ T5514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.704037][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.715473][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.739142][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.748518][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.759623][ T5514] veth0_vlan: entered promiscuous mode [ 70.769846][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.779181][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.790976][ T5514] veth1_vlan: entered promiscuous mode [ 70.817096][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.826377][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.834532][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.845477][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.856788][ T5514] veth0_macvtap: entered promiscuous mode [ 70.870276][ T5514] veth1_macvtap: entered promiscuous mode [ 70.890374][ T5514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.900844][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.909955][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.920086][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.929410][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.942466][ T5514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.951164][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.962331][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.973745][ T5514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.986043][ T5514] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.996976][ T5514] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.006078][ T5514] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.072367][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.087783][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.108323][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.127605][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.137515][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.150088][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.155557][ T4394] Bluetooth: hci0: command 0x0409 tx timeout [ 71.504834][ T898] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.896278][ T898] usb 1-1: config 0 has an invalid interface number: 72 but max is 0 [ 71.904926][ T898] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 71.913678][ T898] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 71.925957][ T898] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 71.936778][ T898] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 71.947199][ T898] usb 1-1: config 0 has no interface number 0 [ 71.953329][ T898] usb 1-1: config 0 interface 72 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 71.965098][ T898] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 71.977820][ T898] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 71.989181][ T898] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 72.001478][ T898] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 8 [ 72.011667][ T898] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 72.023940][ T898] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 72.036479][ T898] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 72.047371][ T898] usb 1-1: config 0 interface 72 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 72.058878][ T898] usb 1-1: config 0 interface 72 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 72.071501][ T898] usb 1-1: config 0 interface 72 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 72.083897][ T898] usb 1-1: New USB device found, idVendor=0846, idProduct=9010, bcdDevice=a0.e4 [ 72.093557][ T898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.118400][ T898] usb 1-1: config 0 descriptor?? [ 72.324755][ T898] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 73.235890][ T4394] Bluetooth: hci0: command 0x041b tx timeout [ 73.264779][ T898] usb 1-1: device descriptor read/64, error -71 [ 73.564954][ T898] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 74.029205][ T898] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 74.038552][ T898] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 74.046555][ T898] ------------[ cut here ]------------ [ 74.052036][ T898] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 74.060320][ T898] WARNING: CPU: 1 PID: 898 at drivers/usb/core/urb.c:505 usb_submit_urb+0xbd5/0x1860 [ 74.069861][ T898] Modules linked in: [ 74.073779][ T898] CPU: 1 PID: 898 Comm: kworker/1:2 Not tainted 6.2.0-syzkaller #0 [ 74.081798][ T898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 74.091919][ T898] Workqueue: events request_firmware_work_func [ 74.098156][ T898] RIP: 0010:usb_submit_urb+0xbd5/0x1860 [ 74.103717][ T898] Code: 83 8a 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 be 08 00 00 45 8b 06 48 c7 c7 40 c0 83 8a 4c 89 fa 89 e9 e8 cb 9a 60 fb <0f> 0b 44 8b 44 24 08 48 8b 14 24 8d 42 fe 83 f8 02 73 27 44 8b 6c [ 74.123878][ T898] RSP: 0018:ffffc9000481fa38 EFLAGS: 00010246 [ 74.130182][ T898] RAX: 0e89621febe36400 RBX: ffff888025ccc000 RCX: 0000000000000002 [ 74.138204][ T898] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 74.146242][ T898] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffff52000903ec5 [ 74.154229][ T898] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801fe29b00 [ 74.162265][ T898] R13: dffffc0000000000 R14: ffffffff8a83be28 R15: ffff888020a9e258 [ 74.170286][ T898] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 74.179285][ T898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.185940][ T898] CR2: 00007fc7a5ea5d78 CR3: 0000000029d39000 CR4: 00000000003506e0 [ 74.193934][ T898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.199190][ T14] usb 1-1: USB disconnect, device number 2 [ 74.201952][ T898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.215768][ T898] Call Trace: [ 74.219053][ T898] [ 74.222005][ T898] carl9170_usb_init_device+0x245/0x7c0 [ 74.227622][ T898] carl9170_usb_firmware_step2+0x8e/0x210 [ 74.233361][ T898] request_firmware_work_func+0x198/0x270 [ 74.239785][ T898] ? carl9170_usb_tasklet+0x230/0x230 [ 74.245210][ T898] ? request_firmware_nowait+0x3f0/0x3f0 [ 74.250856][ T898] ? do_raw_spin_unlock+0x13b/0x8b0 [ 74.256116][ T898] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.261328][ T898] process_one_work+0x7ee/0x1010 [ 74.266342][ T898] ? worker_detach_from_pool+0x260/0x260 [ 74.271988][ T898] ? _raw_spin_lock_irqsave+0x120/0x120 [ 74.277612][ T898] worker_thread+0x8c9/0xfd0 [ 74.282230][ T898] ? __kthread_parkme+0xbb/0x190 [ 74.287234][ T898] kthread+0x232/0x2b0 [ 74.291310][ T898] ? pr_cont_work+0x490/0x490 [ 74.296045][ T898] ? kthread_blkcg+0xa0/0xa0 [ 74.300642][ T898] ret_from_fork+0x1f/0x30 [ 74.305126][ T898] [ 74.308153][ T898] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.315432][ T898] CPU: 1 PID: 898 Comm: kworker/1:2 Not tainted 6.2.0-syzkaller #0 [ 74.323326][ T898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 74.333383][ T898] Workqueue: events request_firmware_work_func [ 74.339639][ T898] Call Trace: [ 74.342925][ T898] [ 74.345860][ T898] dump_stack_lvl+0x167/0x220 [ 74.350581][ T898] ? nf_tcp_handle_invalid+0x4e0/0x4e0 [ 74.356042][ T898] ? panic+0x540/0x540 [ 74.360128][ T898] panic+0x22c/0x540 [ 74.364034][ T898] ? memcpy_page_flushcache+0xe0/0xe0 [ 74.369415][ T898] ? ret_from_fork+0x1f/0x30 [ 74.374005][ T898] __warn+0x2c7/0x460 [ 74.377965][ T898] ? usb_submit_urb+0xbd5/0x1860 [ 74.382919][ T898] ? usb_submit_urb+0xbd5/0x1860 [ 74.387833][ T898] report_bug+0x1e0/0x420 [ 74.392150][ T898] handle_bug+0x3d/0x70 [ 74.396282][ T898] exc_invalid_op+0x1a/0x50 [ 74.400761][ T898] asm_exc_invalid_op+0x1a/0x20 [ 74.405602][ T898] RIP: 0010:usb_submit_urb+0xbd5/0x1860 [ 74.411134][ T898] Code: 83 8a 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 be 08 00 00 45 8b 06 48 c7 c7 40 c0 83 8a 4c 89 fa 89 e9 e8 cb 9a 60 fb <0f> 0b 44 8b 44 24 08 48 8b 14 24 8d 42 fe 83 f8 02 73 27 44 8b 6c [ 74.430722][ T898] RSP: 0018:ffffc9000481fa38 EFLAGS: 00010246 [ 74.436770][ T898] RAX: 0e89621febe36400 RBX: ffff888025ccc000 RCX: 0000000000000002 [ 74.444719][ T898] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 74.452765][ T898] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffff52000903ec5 [ 74.460717][ T898] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801fe29b00 [ 74.468676][ T898] R13: dffffc0000000000 R14: ffffffff8a83be28 R15: ffff888020a9e258 [ 74.476640][ T898] ? usb_submit_urb+0xbd5/0x1860 [ 74.481652][ T898] carl9170_usb_init_device+0x245/0x7c0 [ 74.487184][ T898] carl9170_usb_firmware_step2+0x8e/0x210 [ 74.492886][ T898] request_firmware_work_func+0x198/0x270 [ 74.498582][ T898] ? carl9170_usb_tasklet+0x230/0x230 [ 74.503943][ T898] ? request_firmware_nowait+0x3f0/0x3f0 [ 74.509555][ T898] ? do_raw_spin_unlock+0x13b/0x8b0 [ 74.514745][ T898] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.519934][ T898] process_one_work+0x7ee/0x1010 [ 74.524857][ T898] ? worker_detach_from_pool+0x260/0x260 [ 74.530472][ T898] ? _raw_spin_lock_irqsave+0x120/0x120 [ 74.536002][ T898] worker_thread+0x8c9/0xfd0 [ 74.540591][ T898] ? __kthread_parkme+0xbb/0x190 [ 74.545507][ T898] kthread+0x232/0x2b0 [ 74.549550][ T898] ? pr_cont_work+0x490/0x490 [ 74.554201][ T898] ? kthread_blkcg+0xa0/0xa0 [ 74.558783][ T898] ret_from_fork+0x1f/0x30 [ 74.563196][ T898] [ 74.566254][ T898] Kernel Offset: disabled [ 74.570665][ T898] Rebooting in 86400 seconds..