[ 78.979622][ T41] bond0 (unregistering): Released all slaves [ 86.813988][ T896] cfg80211: failed to load regulatory.db [ 90.187119][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 90.187236][ T26] audit: type=1400 audit(1674970315.271:178): avc: denied { search } for pid=5336 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.225020][ T26] audit: type=1400 audit(1674970315.311:179): avc: denied { read } for pid=5337 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1405 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.266764][ T26] audit: type=1400 audit(1674970315.341:180): avc: denied { open } for pid=5337 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1405 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.312347][ T26] audit: type=1400 audit(1674970315.341:181): avc: denied { getattr } for pid=5337 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1405 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.531758][ T26] audit: type=1400 audit(1674970315.611:182): avc: denied { write } for pid=5336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1404 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.581792][ T26] audit: type=1400 audit(1674970315.621:183): avc: denied { add_name } for pid=5336 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.638980][ T26] audit: type=1400 audit(1674970315.721:184): avc: denied { remove_name } for pid=5347 comm="rm" name="resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=1528 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.224' (ECDSA) to the list of known hosts. 2023/01/29 05:32:03 ignoring optional flag "sandboxArg"="0" 2023/01/29 05:32:03 parsed 1 programs [ 98.559381][ T26] audit: type=1400 audit(1674970323.641:185): avc: denied { mounton } for pid=5523 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 98.610259][ T26] audit: type=1400 audit(1674970323.641:186): avc: denied { mount } for pid=5523 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 98.636134][ T26] audit: type=1400 audit(1674970323.641:187): avc: denied { write } for pid=5523 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.657636][ T26] audit: type=1400 audit(1674970323.641:188): avc: denied { read } for pid=5523 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2023/01/29 05:32:03 executed programs: 0 [ 98.889152][ T26] audit: type=1400 audit(1674970323.971:189): avc: denied { mounton } for pid=5529 comm="syz-executor.0" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 98.915168][ T26] audit: type=1400 audit(1674970324.001:190): avc: denied { create } for pid=5529 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.935943][ T26] audit: type=1400 audit(1674970325.021:191): avc: denied { ioctl } for pid=5529 comm="syz-executor.0" path="socket:[30979]" dev="sockfs" ino=30979 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.942172][ T4375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.973525][ T4375] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.981632][ T4375] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.989817][ T4375] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.997637][ T4375] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.005709][ T4375] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.019487][ T26] audit: type=1400 audit(1674970325.101:192): avc: denied { mounton } for pid=5529 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 100.103786][ T5529] chnl_net:caif_netlink_parms(): no params data found [ 100.145255][ T5529] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.152559][ T5529] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.160814][ T5529] device bridge_slave_0 entered promiscuous mode [ 100.169689][ T5529] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.177482][ T5529] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.185896][ T5529] device bridge_slave_1 entered promiscuous mode [ 100.209563][ T5529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.220934][ T5529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.244491][ T5529] team0: Port device team_slave_0 added [ 100.254317][ T5529] team0: Port device team_slave_1 added [ 100.274624][ T5529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.282002][ T5529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.308915][ T5529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.321182][ T5529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.328582][ T5529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.356094][ T5529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.384369][ T5529] device hsr_slave_0 entered promiscuous mode [ 100.392072][ T5529] device hsr_slave_1 entered promiscuous mode [ 100.464203][ T5529] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.472256][ T5529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.479834][ T5529] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.487185][ T5529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.527574][ T5529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.543149][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.551935][ T896] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.560116][ T896] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.570790][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 100.584091][ T5529] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.595637][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.604316][ T896] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.611434][ T896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.623066][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.631537][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.638710][ T5080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.660039][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.679522][ T5529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.691848][ T5529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.705733][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.714349][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.723872][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.732525][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.751522][ T5529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.759541][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.768481][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.776770][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.165288][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.175114][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.189389][ T5529] device veth0_vlan entered promiscuous mode [ 101.198799][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.209067][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.220847][ T5529] device veth1_vlan entered promiscuous mode [ 101.229892][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.238089][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.247444][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.269525][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.278719][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.288535][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.300343][ T5529] device veth0_macvtap entered promiscuous mode [ 101.311415][ T5529] device veth1_macvtap entered promiscuous mode [ 101.328617][ T5529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.340293][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.349537][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.358434][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.368323][ T896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.382615][ T5529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.390004][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.400442][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.468367][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.489424][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.503643][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.513620][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.524175][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.534807][ T1115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.578995][ T26] audit: type=1400 audit(1674970326.661:193): avc: denied { ioctl } for pid=5548 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=732 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.871949][ T896] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.093077][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 102.262457][ T896] usb 1-1: config 128 has an invalid interface number: 35 but max is 3 [ 102.271213][ T896] usb 1-1: config 128 has an invalid interface association descriptor of length 2, skipping [ 102.283182][ T896] usb 1-1: config 128 has an invalid interface number: 157 but max is 3 [ 102.291593][ T896] usb 1-1: config 128 has an invalid descriptor of length 1, skipping remainder of the config [ 102.304104][ T896] usb 1-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 102.313751][ T896] usb 1-1: config 128 has no interface number 0 [ 102.320247][ T896] usb 1-1: config 128 has no interface number 1 [ 102.327359][ T896] usb 1-1: config 128 interface 35 altsetting 3 endpoint 0xA has invalid maxpacket 56508, setting to 1024 [ 102.340935][ T896] usb 1-1: config 128 interface 35 altsetting 3 bulk endpoint 0xA has invalid maxpacket 1024 [ 102.354432][ T896] usb 1-1: config 128 interface 35 altsetting 3 has an invalid endpoint with address 0x0, skipping [ 102.366713][ T896] usb 1-1: config 128 interface 35 altsetting 3 endpoint 0xD has invalid maxpacket 2031, setting to 64 [ 102.378793][ T896] usb 1-1: config 128 interface 35 altsetting 3 endpoint 0xE has invalid maxpacket 1967, setting to 1024 [ 102.392595][ T896] usb 1-1: config 128 interface 35 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 102.408713][ T896] usb 1-1: config 128 interface 157 altsetting 39 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 102.424011][ T896] usb 1-1: config 128 interface 35 has no altsetting 0 [ 102.431446][ T896] usb 1-1: config 128 interface 157 has no altsetting 0 [ 102.603237][ T896] usb 1-1: New USB device found, idVendor=08e3, idProduct=0102, bcdDevice=e3.37 [ 102.612850][ T896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.621222][ T896] usb 1-1: Product: syz [ 102.626610][ T896] usb 1-1: Manufacturer: syz [ 102.631914][ T896] usb 1-1: SerialNumber: syz [ 102.663955][ T5549] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.024059][ T896] ------------[ cut here ]------------ [ 103.031151][ T896] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 103.038198][ T896] WARNING: CPU: 0 PID: 896 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 [ 103.048775][ T896] Modules linked in: [ 103.053228][ T896] CPU: 0 PID: 896 Comm: kworker/0:2 Not tainted 6.2.0-rc5-syzkaller-00205-gc96618275234 #0 [ 103.063722][ T896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 103.074899][ T896] Workqueue: usb_hub_wq hub_event [ 103.080050][ T896] RIP: 0010:usb_submit_urb+0xed6/0x1880 [ 103.085749][ T896] Code: 7c 24 18 e8 6c ff 7f fb 48 8b 7c 24 18 e8 12 1b 01 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 91 fa 8a e8 c9 88 be 03 <0f> 0b e9 58 f8 ff ff e8 3e ff 7f fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 103.107208][ T896] RSP: 0018:ffffc90004d16e20 EFLAGS: 00010286 [ 103.113601][ T896] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 103.121994][ T896] RDX: ffff88801f57e180 RSI: ffffffff8165a14c RDI: fffff520009a2db6 [ 103.130526][ T896] RBP: ffff88807a5e51e0 R08: 0000000000000005 R09: 0000000000000000 [ 103.139219][ T896] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000001 [ 103.147773][ T896] R13: ffff88801f849c80 R14: 0000000000000002 R15: ffff88801d27e100 [ 103.155947][ T896] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 103.165307][ T896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.172465][ T896] CR2: 00007ffcedcbdc80 CR3: 0000000073de9000 CR4: 00000000003506f0 [ 103.180861][ T896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.189252][ T896] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.197314][ T896] Call Trace: [ 103.201813][ T896] [ 103.204874][ T896] ? __init_swait_queue_head+0xca/0x150 [ 103.210586][ T896] cxacru_cm+0x3c0/0x8e0 [ 103.215418][ T896] ? cxacru_start_wait_urb+0x200/0x200 [ 103.221026][ T896] ? lockdep_init_map_type+0x21e/0x800 [ 103.226791][ T896] cxacru_card_status+0x22/0xd0 [ 103.232007][ T896] cxacru_bind+0x7b0/0x11a0 [ 103.236596][ T896] ? cxacru_fw.constprop.0+0x480/0x480 [ 103.242444][ T896] usbatm_usb_probe+0x32f/0x1b00 [ 103.247622][ T896] ? __pm_runtime_set_status+0x6cd/0xc80 [ 103.253640][ T896] cxacru_usb_probe+0xe3/0x1e0 [ 103.258746][ T896] ? cxacru_card_status+0xd0/0xd0 [ 103.264371][ T896] ? __pm_runtime_set_status+0x4bc/0xc80 [ 103.270154][ T896] usb_probe_interface+0x30f/0x7f0 [ 103.275683][ T896] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 103.281545][ T896] really_probe+0x249/0xb90 [ 103.286247][ T896] __driver_probe_device+0x1df/0x4d0 [ 103.292445][ T896] ? usb_match_id.part.0+0x15d/0x1b0 [ 103.298229][ T896] driver_probe_device+0x4c/0x1a0 [ 103.303573][ T896] __device_attach_driver+0x1d4/0x2e0 [ 103.309104][ T896] ? driver_probe_device+0x1a0/0x1a0 [ 103.315306][ T896] bus_for_each_drv+0x163/0x1e0 [ 103.320410][ T896] ? bus_for_each_dev+0x1d0/0x1d0 [ 103.326106][ T896] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 103.332176][ T896] ? lockdep_hardirqs_on+0x7d/0x100 [ 103.337597][ T896] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 103.344576][ T896] __device_attach+0x1e4/0x530 [ 103.350009][ T896] ? device_driver_attach+0x210/0x210 [ 103.356373][ T896] ? kobject_uevent_env+0x2a8/0x1620 [ 103.362050][ T896] bus_probe_device+0x1e8/0x2a0 [ 103.367273][ T896] device_add+0xbd9/0x1e90 [ 103.371820][ T896] ? __kmem_cache_free+0x182/0x3b0 [ 103.379173][ T896] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 103.386188][ T896] ? lockdep_hardirqs_on+0x7d/0x100 [ 103.392519][ T896] ? __phys_addr+0xc8/0x140 [ 103.397237][ T896] usb_set_configuration+0x101d/0x1900 [ 103.403654][ T896] usb_generic_driver_probe+0xbe/0x100 [ 103.410132][ T896] usb_probe_device+0xd8/0x2c0 [ 103.415263][ T896] ? usb_driver_release_interface+0x190/0x190 [ 103.421727][ T896] really_probe+0x249/0xb90 [ 103.426736][ T896] __driver_probe_device+0x1df/0x4d0 [ 103.432542][ T896] driver_probe_device+0x4c/0x1a0 [ 103.437842][ T896] __device_attach_driver+0x1d4/0x2e0 [ 103.443560][ T896] ? driver_probe_device+0x1a0/0x1a0 [ 103.449047][ T896] bus_for_each_drv+0x163/0x1e0 [ 103.454544][ T896] ? bus_for_each_dev+0x1d0/0x1d0 [ 103.460232][ T896] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 103.466820][ T896] ? lockdep_hardirqs_on+0x7d/0x100 [ 103.472570][ T896] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 103.482182][ T896] __device_attach+0x1e4/0x530 [ 103.487039][ T896] ? device_driver_attach+0x210/0x210 [ 103.492903][ T896] ? kobject_uevent_env+0x2a8/0x1620 [ 103.498806][ T896] bus_probe_device+0x1e8/0x2a0 [ 103.503847][ T896] device_add+0xbd9/0x1e90 [ 103.508850][ T896] ? lockdep_hardirqs_on+0x7d/0x100 [ 103.514274][ T896] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 103.520730][ T896] ? add_device_randomness+0xb8/0xe0 [ 103.526201][ T896] ? __phys_addr+0xc8/0x140 [ 103.530750][ T896] usb_new_device.cold+0x685/0x10ad [ 103.536593][ T896] ? hub_disconnect+0x510/0x510 [ 103.541521][ T896] ? rwlock_bug.part.0+0x90/0x90 [ 103.546571][ T896] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.551906][ T896] hub_event+0x2d5c/0x4810 [ 103.556416][ T896] ? hub_port_debounce+0x3b0/0x3b0 [ 103.561751][ T896] ? lock_release+0x810/0x810 [ 103.566513][ T896] ? lock_downgrade+0x6e0/0x6e0 [ 103.571399][ T896] ? do_raw_spin_lock+0x124/0x2b0 [ 103.576999][ T896] process_one_work+0x9bf/0x1710 [ 103.582130][ T896] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 103.587645][ T896] ? rwlock_bug.part.0+0x90/0x90 [ 103.592855][ T896] ? _raw_spin_lock_irq+0x45/0x50 [ 103.598016][ T896] worker_thread+0x669/0x1090 [ 103.602915][ T896] ? __kthread_parkme+0x163/0x220 [ 103.608074][ T896] ? process_one_work+0x1710/0x1710 [ 103.613413][ T896] kthread+0x2e8/0x3a0 [ 103.618402][ T896] ? kthread_complete_and_exit+0x40/0x40 [ 103.624378][ T896] ret_from_fork+0x1f/0x30 [ 103.629330][ T896] [ 103.632563][ T896] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.640035][ T896] CPU: 0 PID: 896 Comm: kworker/0:2 Not tainted 6.2.0-rc5-syzkaller-00205-gc96618275234 #0 [ 103.651139][ T896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 103.661385][ T896] Workqueue: usb_hub_wq hub_event [ 103.666442][ T896] Call Trace: [ 103.669827][ T896] [ 103.672779][ T896] dump_stack_lvl+0xd1/0x138 [ 103.680157][ T896] panic+0x2cc/0x626 [ 103.684273][ T896] ? panic_print_sys_info.part.0+0x110/0x110 [ 103.691281][ T896] ? usb_submit_urb+0xed6/0x1880 [ 103.696278][ T896] check_panic_on_warn.cold+0x19/0x35 [ 103.702489][ T896] __warn+0xf2/0x1a0 [ 103.706984][ T896] ? __wake_up_klogd.part.0+0x99/0xf0 [ 103.712522][ T896] ? usb_submit_urb+0xed6/0x1880 [ 103.718190][ T896] report_bug+0x1c0/0x210 [ 103.723046][ T896] handle_bug+0x3c/0x70 [ 103.727478][ T896] exc_invalid_op+0x18/0x50 [ 103.732081][ T896] asm_exc_invalid_op+0x1a/0x20 [ 103.736957][ T896] RIP: 0010:usb_submit_urb+0xed6/0x1880 [ 103.742522][ T896] Code: 7c 24 18 e8 6c ff 7f fb 48 8b 7c 24 18 e8 12 1b 01 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 60 91 fa 8a e8 c9 88 be 03 <0f> 0b e9 58 f8 ff ff e8 3e ff 7f fb 48 81 c5 c0 05 00 00 e9 84 f7 [ 103.762500][ T896] RSP: 0018:ffffc90004d16e20 EFLAGS: 00010286 [ 103.768593][ T896] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 103.776771][ T896] RDX: ffff88801f57e180 RSI: ffffffff8165a14c RDI: fffff520009a2db6 [ 103.785064][ T896] RBP: ffff88807a5e51e0 R08: 0000000000000005 R09: 0000000000000000 [ 103.793056][ T896] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000001 [ 103.801315][ T896] R13: ffff88801f849c80 R14: 0000000000000002 R15: ffff88801d27e100 [ 103.809560][ T896] ? vprintk+0x8c/0xa0 [ 103.814193][ T896] ? __init_swait_queue_head+0xca/0x150 [ 103.820551][ T896] cxacru_cm+0x3c0/0x8e0 [ 103.824901][ T896] ? cxacru_start_wait_urb+0x200/0x200 [ 103.830640][ T896] ? lockdep_init_map_type+0x21e/0x800 [ 103.836129][ T896] cxacru_card_status+0x22/0xd0 [ 103.841089][ T896] cxacru_bind+0x7b0/0x11a0 [ 103.845607][ T896] ? cxacru_fw.constprop.0+0x480/0x480 [ 103.851361][ T896] usbatm_usb_probe+0x32f/0x1b00 [ 103.856842][ T896] ? __pm_runtime_set_status+0x6cd/0xc80 [ 103.863132][ T896] cxacru_usb_probe+0xe3/0x1e0 [ 103.868172][ T896] ? cxacru_card_status+0xd0/0xd0 [ 103.873491][ T896] ? __pm_runtime_set_status+0x4bc/0xc80 [ 103.879176][ T896] usb_probe_interface+0x30f/0x7f0 [ 103.884340][ T896] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 103.889748][ T896] really_probe+0x249/0xb90 [ 103.894306][ T896] __driver_probe_device+0x1df/0x4d0 [ 103.899982][ T896] ? usb_match_id.part.0+0x15d/0x1b0 [ 103.905685][ T896] driver_probe_device+0x4c/0x1a0 [ 103.911522][ T896] __device_attach_driver+0x1d4/0x2e0 [ 103.917111][ T896] ? driver_probe_device+0x1a0/0x1a0 [ 103.922881][ T896] bus_for_each_drv+0x163/0x1e0 [ 103.928467][ T896] ? bus_for_each_dev+0x1d0/0x1d0 [ 103.933695][ T896] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 103.939631][ T896] ? lockdep_hardirqs_on+0x7d/0x100 [ 103.944967][ T896] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 103.951002][ T896] __device_attach+0x1e4/0x530 [ 103.955800][ T896] ? device_driver_attach+0x210/0x210 [ 103.961213][ T896] ? kobject_uevent_env+0x2a8/0x1620 [ 103.966645][ T896] bus_probe_device+0x1e8/0x2a0 [ 103.971622][ T896] device_add+0xbd9/0x1e90 [ 103.976320][ T896] ? __kmem_cache_free+0x182/0x3b0 [ 103.981811][ T896] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 103.988420][ T896] ? lockdep_hardirqs_on+0x7d/0x100 [ 103.994398][ T896] ? __phys_addr+0xc8/0x140 [ 103.999313][ T896] usb_set_configuration+0x101d/0x1900 [ 104.005072][ T896] usb_generic_driver_probe+0xbe/0x100 [ 104.011004][ T896] usb_probe_device+0xd8/0x2c0 [ 104.015794][ T896] ? usb_driver_release_interface+0x190/0x190 [ 104.021892][ T896] really_probe+0x249/0xb90 [ 104.026418][ T896] __driver_probe_device+0x1df/0x4d0 [ 104.031917][ T896] driver_probe_device+0x4c/0x1a0 [ 104.036976][ T896] __device_attach_driver+0x1d4/0x2e0 [ 104.042467][ T896] ? driver_probe_device+0x1a0/0x1a0 [ 104.047865][ T896] bus_for_each_drv+0x163/0x1e0 [ 104.052828][ T896] ? bus_for_each_dev+0x1d0/0x1d0 [ 104.057954][ T896] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 104.063812][ T896] ? lockdep_hardirqs_on+0x7d/0x100 [ 104.069037][ T896] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 104.075046][ T896] __device_attach+0x1e4/0x530 [ 104.080043][ T896] ? device_driver_attach+0x210/0x210 [ 104.085559][ T896] ? kobject_uevent_env+0x2a8/0x1620 [ 104.091584][ T896] bus_probe_device+0x1e8/0x2a0 [ 104.096456][ T896] device_add+0xbd9/0x1e90 [ 104.100890][ T896] ? lockdep_hardirqs_on+0x7d/0x100 [ 104.106112][ T896] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 104.112456][ T896] ? add_device_randomness+0xb8/0xe0 [ 104.117772][ T896] ? __phys_addr+0xc8/0x140 [ 104.122313][ T896] usb_new_device.cold+0x685/0x10ad [ 104.127541][ T896] ? hub_disconnect+0x510/0x510 [ 104.132503][ T896] ? rwlock_bug.part.0+0x90/0x90 [ 104.137456][ T896] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.142683][ T896] hub_event+0x2d5c/0x4810 [ 104.147220][ T896] ? hub_port_debounce+0x3b0/0x3b0 [ 104.152363][ T896] ? lock_release+0x810/0x810 [ 104.157267][ T896] ? lock_downgrade+0x6e0/0x6e0 [ 104.162143][ T896] ? do_raw_spin_lock+0x124/0x2b0 [ 104.167291][ T896] process_one_work+0x9bf/0x1710 [ 104.172425][ T896] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 104.177913][ T896] ? rwlock_bug.part.0+0x90/0x90 [ 104.182964][ T896] ? _raw_spin_lock_irq+0x45/0x50 [ 104.188189][ T896] worker_thread+0x669/0x1090 [ 104.193060][ T896] ? __kthread_parkme+0x163/0x220 [ 104.198111][ T896] ? process_one_work+0x1710/0x1710 [ 104.203510][ T896] kthread+0x2e8/0x3a0 [ 104.207790][ T896] ? kthread_complete_and_exit+0x40/0x40 [ 104.213437][ T896] ret_from_fork+0x1f/0x30 [ 104.218070][ T896] [ 104.221168][ T896] Kernel Offset: disabled [ 104.226157][ T896] Rebooting in 86400 seconds..