[ 135.631493][ T38] kauditd_printk_skb: 67 callbacks suppressed [ 135.631615][ T38] audit: type=1400 audit(1675350823.970:179): avc: denied { search } for pid=5309 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.701102][ T38] audit: type=1400 audit(1675350824.030:180): avc: denied { getattr } for pid=5303 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/ntp.conf" dev="tmpfs" ino=1478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.728652][ T38] audit: type=1400 audit(1675350824.040:181): avc: denied { read } for pid=5312 comm="dhcpcd-run-hook" name="ntp.conf" dev="tmpfs" ino=1478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.760815][ T38] audit: type=1400 audit(1675350824.040:182): avc: denied { open } for pid=5312 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/ntp.conf" dev="tmpfs" ino=1478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.886236][ T38] audit: type=1400 audit(1675350824.220:183): avc: denied { write } for pid=5313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1475 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.918950][ T38] audit: type=1400 audit(1675350824.230:184): avc: denied { add_name } for pid=5313 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.044714][ T38] audit: type=1400 audit(1675350824.380:185): avc: denied { remove_name } for pid=5316 comm="rm" name="resolv.conf.eth5.ipv4ll" dev="tmpfs" ino=1592 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:45665' (ECDSA) to the list of known hosts. 2023/02/02 15:13:51 ignoring optional flag "sandboxArg"="0" 2023/02/02 15:13:52 parsed 1 programs [ 143.946832][ T38] audit: type=1400 audit(1675350832.280:186): avc: denied { mounton } for pid=5376 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 143.975690][ T38] audit: type=1400 audit(1675350832.290:187): avc: denied { mount } for pid=5376 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 144.009426][ T38] audit: type=1400 audit(1675350832.300:188): avc: denied { write } for pid=5376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.040763][ T38] audit: type=1400 audit(1675350832.300:189): avc: denied { read } for pid=5376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2023/02/02 15:13:53 executed programs: 0 [ 144.862564][ T38] audit: type=1400 audit(1675350833.200:190): avc: denied { mounton } for pid=5383 comm="syz-executor.0" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 144.901561][ T38] audit: type=1400 audit(1675350833.240:191): avc: denied { create } for pid=5383 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.008427][ T63] Bluetooth: hci0: Opcode 0x c03 failed: -110 2023/02/02 15:13:56 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe wrong response packet (errno 16) loop exited with status 67 [ 149.159650][ T4534] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.168527][ T38] audit: type=1400 audit(1675350837.500:192): avc: denied { ioctl } for pid=5389 comm="syz-executor.0" path="socket:[33046]" dev="sockfs" ino=33046 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.182079][ T4534] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.215340][ T4534] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.226980][ T5141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.239507][ T5141] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.247930][ T5141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.268578][ T38] audit: type=1400 audit(1675350837.600:193): avc: denied { mounton } for pid=5389 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 149.440518][ T5389] chnl_net:caif_netlink_parms(): no params data found [ 149.589369][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.594808][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.602788][ T5389] device bridge_slave_0 entered promiscuous mode [ 149.619950][ T5389] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.627676][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.639583][ T5389] device bridge_slave_1 entered promiscuous mode [ 149.708911][ T5389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.726960][ T5389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.801413][ T5389] team0: Port device team_slave_0 added [ 149.811851][ T5389] team0: Port device team_slave_1 added [ 149.918984][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.927039][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.954679][ T5389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.969792][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.975258][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.997578][ T5389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.090466][ T5389] device hsr_slave_0 entered promiscuous mode [ 150.101060][ T5389] device hsr_slave_1 entered promiscuous mode [ 150.386848][ T5389] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.395602][ T5389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.407278][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.416237][ T5389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.491927][ T5164] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.499538][ T5164] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.565803][ T5389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.596884][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.609550][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.628738][ T5389] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.642697][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.662186][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.675210][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.688769][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.712942][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.731235][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.744352][ T799] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.754421][ T799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.779330][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.795525][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.823794][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.853955][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.892506][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.901703][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.913234][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.939245][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.961217][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.978498][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.990330][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.006687][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.050455][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.059299][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.076190][ T5389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.300279][ T63] Bluetooth: hci0: command 0x0409 tx timeout [ 151.903762][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.921547][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.973762][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.982753][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.996971][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.006942][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.022844][ T5389] device veth0_vlan entered promiscuous mode [ 152.040246][ T5389] device veth1_vlan entered promiscuous mode [ 152.072138][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.082078][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 152.093103][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.102631][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.126368][ T5389] device veth0_macvtap entered promiscuous mode [ 152.140014][ T5389] device veth1_macvtap entered promiscuous mode [ 152.169559][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.176358][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.185794][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.197399][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.210262][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.229119][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.241294][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.249489][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.391425][ T4899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.404516][ T4899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.416473][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.456424][ T5159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.468229][ T5159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.489156][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.605812][ T38] audit: type=1400 audit(1675350840.940:194): avc: denied { ioctl } for pid=5410 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=762 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.741835][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.754844][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.920860][ T49] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.179292][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 153.340137][ T49] usb 5-1: config 0 has an invalid interface number: 191 but max is 1 [ 153.350152][ T49] usb 5-1: config 0 has no interface number 1 [ 153.358264][ T49] usb 5-1: config 0 interface 191 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 153.368507][ T63] Bluetooth: hci0: command 0x041b tx timeout [ 153.371033][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.550755][ T49] usb 5-1: New USB device found, idVendor=0572, idProduct=cb07, bcdDevice=f8.4e [ 153.569399][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.583446][ T49] usb 5-1: Product: syz [ 153.588010][ T49] usb 5-1: Manufacturer: syz [ 153.597301][ T49] usb 5-1: SerialNumber: syz [ 153.651173][ T49] usb 5-1: config 0 descriptor?? [ 153.679807][ T5411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.952722][ T49] ------------[ cut here ]------------ [ 153.959750][ T49] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 153.976590][ T49] WARNING: CPU: 0 PID: 49 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 [ 153.987913][ T49] Modules linked in: [ 153.991202][ T49] CPU: 0 PID: 49 Comm: kworker/0:2 Not tainted 6.2.0-rc6-syzkaller-33480-g9f266ccaa2f5 #0 [ 154.000383][ T49] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 154.009414][ T49] Workqueue: usb_hub_wq hub_event [ 154.019073][ T49] RIP: 0010:usb_submit_urb+0xed6/0x1880 [ 154.027984][ T49] Code: 7c 24 18 e8 7c 01 80 fb 48 8b 7c 24 18 e8 f2 1a 01 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 91 fa 8a e8 e9 89 be 03 <0f> 0b e9 58 f8 ff ff e8 4e 01 80 fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 154.047408][ T49] RSP: 0018:ffffc90000916e20 EFLAGS: 00010286 [ 154.056159][ T49] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 154.065087][ T49] RDX: ffff888015866240 RSI: ffffffff8165a14c RDI: fffff52000122db6 [ 154.072684][ T49] RBP: ffff88801ab1ce80 R08: 0000000000000005 R09: 0000000000000000 [ 154.081461][ T49] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000001 [ 154.089497][ T49] R13: ffff88801c4d6740 R14: 0000000000000002 R15: ffff88801d1c0700 [ 154.096642][ T49] FS: 0000000000000000(0000) GS:ffff88802c600000(0000) knlGS:0000000000000000 [ 154.106450][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.115684][ T49] CR2: 0000558c93b95c14 CR3: 000000001eee3000 CR4: 0000000000150ef0 [ 154.125562][ T49] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.135638][ T49] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.143852][ T49] Call Trace: [ 154.146693][ T49] [ 154.149470][ T49] ? __init_swait_queue_head+0xca/0x150 [ 154.155025][ T49] cxacru_cm+0x3c0/0x8e0 [ 154.159874][ T49] ? cxacru_start_wait_urb+0x200/0x200 [ 154.164022][ T49] ? lockdep_init_map_type+0x21e/0x800 [ 154.169626][ T49] cxacru_card_status+0x22/0xd0 [ 154.174346][ T49] cxacru_bind+0x7b0/0x11a0 [ 154.179616][ T49] ? cxacru_fw.constprop.0+0x480/0x480 [ 154.185447][ T49] usbatm_usb_probe+0x32f/0x1b00 [ 154.189181][ T49] ? __pm_runtime_set_status+0x6cd/0xc80 [ 154.195989][ T49] cxacru_usb_probe+0xe3/0x1e0 [ 154.201266][ T49] ? cxacru_card_status+0xd0/0xd0 [ 154.206894][ T49] ? __pm_runtime_set_status+0x4bc/0xc80 [ 154.213322][ T49] usb_probe_interface+0x30f/0x7f0 [ 154.220084][ T49] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 154.224579][ T49] really_probe+0x249/0xb90 [ 154.228949][ T49] __driver_probe_device+0x1df/0x4d0 [ 154.233746][ T49] ? usb_match_id.part.0+0x15d/0x1b0 [ 154.238993][ T49] driver_probe_device+0x4c/0x1a0 [ 154.244688][ T49] __device_attach_driver+0x1d4/0x2e0 [ 154.252700][ T49] ? driver_probe_device+0x1a0/0x1a0 [ 154.257937][ T49] bus_for_each_drv+0x163/0x1e0 [ 154.263339][ T49] ? bus_for_each_dev+0x1d0/0x1d0 [ 154.268314][ T49] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 154.273573][ T49] ? lockdep_hardirqs_on+0x7d/0x100 [ 154.283971][ T49] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 154.291128][ T49] __device_attach+0x1e4/0x530 [ 154.296088][ T49] ? device_driver_attach+0x210/0x210 [ 154.302315][ T49] ? kobject_uevent_env+0x2a8/0x1620 [ 154.307968][ T49] bus_probe_device+0x1e8/0x2a0 [ 154.314318][ T49] device_add+0xbd9/0x1e90 [ 154.319965][ T49] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 154.327610][ T49] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 154.336113][ T49] usb_set_configuration+0x101d/0x1900 [ 154.344564][ T49] usb_generic_driver_probe+0xbe/0x100 [ 154.349292][ T49] usb_probe_device+0xd8/0x2c0 [ 154.353410][ T49] ? usb_driver_release_interface+0x190/0x190 [ 154.363291][ T49] really_probe+0x249/0xb90 [ 154.370321][ T49] __driver_probe_device+0x1df/0x4d0 [ 154.376461][ T49] driver_probe_device+0x4c/0x1a0 [ 154.380655][ T49] __device_attach_driver+0x1d4/0x2e0 [ 154.387145][ T49] ? driver_probe_device+0x1a0/0x1a0 [ 154.396539][ T49] bus_for_each_drv+0x163/0x1e0 [ 154.402501][ T49] ? bus_for_each_dev+0x1d0/0x1d0 [ 154.411366][ T49] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 154.426945][ T49] ? lockdep_hardirqs_on+0x7d/0x100 2023/02/02 15:14:02 executed programs: 2 [ 154.434802][ T49] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 154.444378][ T49] __device_attach+0x1e4/0x530 [ 154.459816][ T49] ? device_driver_attach+0x210/0x210 [ 154.485477][ T49] ? kobject_uevent_env+0x2a8/0x1620 [ 154.491484][ T49] bus_probe_device+0x1e8/0x2a0 [ 154.496596][ T49] device_add+0xbd9/0x1e90 [ 154.507027][ T49] ? lockdep_hardirqs_on+0x7d/0x100 [ 154.515111][ T49] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 154.521024][ T49] ? add_device_randomness+0xb8/0xe0 [ 154.529881][ T49] ? __phys_addr+0xc8/0x140 [ 154.541693][ T49] usb_new_device.cold+0x685/0x10ad [ 154.546852][ T49] ? hub_disconnect+0x510/0x510 [ 154.554681][ T49] ? rwlock_bug.part.0+0x90/0x90 [ 154.562765][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.570725][ T49] hub_event+0x2d5c/0x4810 [ 154.579654][ T49] ? hub_port_debounce+0x3b0/0x3b0 [ 154.586527][ T49] ? lock_release+0x810/0x810 [ 154.607169][ T49] ? lock_downgrade+0x6e0/0x6e0 [ 154.616297][ T49] process_one_work+0x9bf/0x1710 [ 154.623057][ T49] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 154.631204][ T49] ? rwlock_bug.part.0+0x90/0x90 [ 154.639252][ T49] ? _raw_spin_lock_irq+0x45/0x50 [ 154.644595][ T49] worker_thread+0x669/0x1090 [ 154.649678][ T49] ? __kthread_parkme+0x163/0x220 [ 154.655650][ T49] ? process_one_work+0x1710/0x1710 [ 154.660448][ T49] kthread+0x2e8/0x3a0 [ 154.665174][ T49] ? kthread_complete_and_exit+0x40/0x40 [ 154.671243][ T49] ret_from_fork+0x1f/0x30 [ 154.675577][ T49] [ 154.678039][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.684074][ T49] CPU: 0 PID: 49 Comm: kworker/0:2 Not tainted 6.2.0-rc6-syzkaller-33480-g9f266ccaa2f5 #0 [ 154.691555][ T49] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 154.701123][ T49] Workqueue: usb_hub_wq hub_event [ 154.706216][ T49] Call Trace: [ 154.708764][ T49] [ 154.711096][ T49] dump_stack_lvl+0xd1/0x138 [ 154.715058][ T49] panic+0x2cc/0x626 [ 154.719849][ T49] ? panic_print_sys_info.part.0+0x110/0x110 [ 154.724883][ T49] ? usb_submit_urb+0xed6/0x1880 [ 154.729855][ T49] check_panic_on_warn.cold+0x19/0x35 [ 154.735312][ T49] __warn+0xf2/0x1a0 [ 154.739754][ T49] ? __wake_up_klogd.part.0+0x99/0xf0 [ 154.745245][ T49] ? usb_submit_urb+0xed6/0x1880 [ 154.751736][ T49] report_bug+0x1c0/0x210 [ 154.757187][ T49] handle_bug+0x3c/0x70 [ 154.761548][ T49] exc_invalid_op+0x18/0x50 [ 154.767355][ T49] asm_exc_invalid_op+0x1a/0x20 [ 154.772785][ T49] RIP: 0010:usb_submit_urb+0xed6/0x1880 [ 154.778999][ T49] Code: 7c 24 18 e8 7c 01 80 fb 48 8b 7c 24 18 e8 f2 1a 01 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 91 fa 8a e8 e9 89 be 03 <0f> 0b e9 58 f8 ff ff e8 4e 01 80 fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 154.800597][ T49] RSP: 0018:ffffc90000916e20 EFLAGS: 00010286 [ 154.814305][ T49] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 154.823694][ T49] RDX: ffff888015866240 RSI: ffffffff8165a14c RDI: fffff52000122db6 [ 154.834201][ T49] RBP: ffff88801ab1ce80 R08: 0000000000000005 R09: 0000000000000000 [ 154.842422][ T49] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000001 [ 154.851442][ T49] R13: ffff88801c4d6740 R14: 0000000000000002 R15: ffff88801d1c0700 [ 154.860676][ T49] ? vprintk+0x8c/0xa0 [ 154.864180][ T49] ? __init_swait_queue_head+0xca/0x150 [ 154.868566][ T49] cxacru_cm+0x3c0/0x8e0 [ 154.872630][ T49] ? cxacru_start_wait_urb+0x200/0x200 [ 154.877969][ T49] ? lockdep_init_map_type+0x21e/0x800 [ 154.886463][ T49] cxacru_card_status+0x22/0xd0 [ 154.892103][ T49] cxacru_bind+0x7b0/0x11a0 [ 154.896709][ T49] ? cxacru_fw.constprop.0+0x480/0x480 [ 154.902691][ T49] usbatm_usb_probe+0x32f/0x1b00 [ 154.908598][ T49] ? __pm_runtime_set_status+0x6cd/0xc80 [ 154.915392][ T49] cxacru_usb_probe+0xe3/0x1e0 [ 154.919514][ T49] ? cxacru_card_status+0xd0/0xd0 [ 154.924742][ T49] ? __pm_runtime_set_status+0x4bc/0xc80 [ 154.930938][ T49] usb_probe_interface+0x30f/0x7f0 [ 154.936421][ T49] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 154.942958][ T49] really_probe+0x249/0xb90 [ 154.950295][ T49] __driver_probe_device+0x1df/0x4d0 [ 154.961442][ T49] ? usb_match_id.part.0+0x15d/0x1b0 [ 154.967779][ T49] driver_probe_device+0x4c/0x1a0 [ 154.976685][ T49] __device_attach_driver+0x1d4/0x2e0 [ 154.983529][ T49] ? driver_probe_device+0x1a0/0x1a0 [ 154.988804][ T49] bus_for_each_drv+0x163/0x1e0 [ 154.997387][ T49] ? bus_for_each_dev+0x1d0/0x1d0 [ 155.003657][ T49] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 155.009433][ T49] ? lockdep_hardirqs_on+0x7d/0x100 [ 155.016395][ T49] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 155.022275][ T49] __device_attach+0x1e4/0x530 [ 155.029352][ T49] ? device_driver_attach+0x210/0x210 [ 155.033767][ T49] ? kobject_uevent_env+0x2a8/0x1620 [ 155.038042][ T49] bus_probe_device+0x1e8/0x2a0 [ 155.042884][ T49] device_add+0xbd9/0x1e90 [ 155.047547][ T49] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 155.055339][ T49] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 155.061621][ T49] usb_set_configuration+0x101d/0x1900 [ 155.065929][ T49] usb_generic_driver_probe+0xbe/0x100 [ 155.069735][ T49] usb_probe_device+0xd8/0x2c0 [ 155.075840][ T49] ? usb_driver_release_interface+0x190/0x190 [ 155.083995][ T49] really_probe+0x249/0xb90 [ 155.088537][ T49] __driver_probe_device+0x1df/0x4d0 [ 155.094647][ T49] driver_probe_device+0x4c/0x1a0 [ 155.099759][ T49] __device_attach_driver+0x1d4/0x2e0 [ 155.105097][ T49] ? driver_probe_device+0x1a0/0x1a0 [ 155.108948][ T49] bus_for_each_drv+0x163/0x1e0 [ 155.112773][ T49] ? bus_for_each_dev+0x1d0/0x1d0 [ 155.117322][ T49] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 155.123038][ T49] ? lockdep_hardirqs_on+0x7d/0x100 [ 155.127998][ T49] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 155.134300][ T49] __device_attach+0x1e4/0x530 [ 155.139856][ T49] ? device_driver_attach+0x210/0x210 [ 155.146555][ T49] ? kobject_uevent_env+0x2a8/0x1620 [ 155.151443][ T49] bus_probe_device+0x1e8/0x2a0 [ 155.156556][ T49] device_add+0xbd9/0x1e90 [ 155.161771][ T49] ? lockdep_hardirqs_on+0x7d/0x100 [ 155.166707][ T49] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 155.174752][ T49] ? add_device_randomness+0xb8/0xe0 [ 155.181500][ T49] ? __phys_addr+0xc8/0x140 [ 155.187138][ T49] usb_new_device.cold+0x685/0x10ad [ 155.192783][ T49] ? hub_disconnect+0x510/0x510 [ 155.198513][ T49] ? rwlock_bug.part.0+0x90/0x90 [ 155.201997][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.209835][ T49] hub_event+0x2d5c/0x4810 [ 155.214067][ T49] ? hub_port_debounce+0x3b0/0x3b0 [ 155.219495][ T49] ? lock_release+0x810/0x810 [ 155.225626][ T49] ? lock_downgrade+0x6e0/0x6e0 [ 155.231361][ T49] process_one_work+0x9bf/0x1710 [ 155.237590][ T49] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 155.244333][ T49] ? rwlock_bug.part.0+0x90/0x90 [ 155.251196][ T49] ? _raw_spin_lock_irq+0x45/0x50 [ 155.260194][ T49] worker_thread+0x669/0x1090 [ 155.265275][ T49] ? __kthread_parkme+0x163/0x220 [ 155.272004][ T49] ? process_one_work+0x1710/0x1710 [ 155.277402][ T49] kthread+0x2e8/0x3a0 [ 155.283157][ T49] ? kthread_complete_and_exit+0x40/0x40 [ 155.289756][ T49] ret_from_fork+0x1f/0x30 [ 155.294101][ T49] [ 155.304869][ T49] Kernel Offset: disabled [ 155.309941][ T49] Rebooting in 86400 seconds..