[ 126.470415][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.481777][ T8] device veth1_macvtap left promiscuous mode [ 126.488684][ T8] device veth0_macvtap left promiscuous mode [ 126.494727][ T8] device veth1_vlan left promiscuous mode [ 126.500872][ T8] device veth0_vlan left promiscuous mode [ 126.619890][ T8] team0 (unregistering): Port device team_slave_1 removed [ 126.630551][ T8] team0 (unregistering): Port device team_slave_0 removed [ 126.642695][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.657620][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.705249][ T8] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.175' (ECDSA) to the list of known hosts. 2023/01/27 08:33:04 ignoring optional flag "sandboxArg"="0" 2023/01/27 08:33:04 parsed 1 programs [ 142.607478][ T25] audit: type=1400 audit(1674808384.523:188): avc: denied { mounton } for pid=5496 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2023/01/27 08:33:04 executed programs: 0 [ 142.639901][ T25] audit: type=1400 audit(1674808384.523:189): avc: denied { mount } for pid=5496 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 142.665626][ T25] audit: type=1400 audit(1674808384.523:190): avc: denied { create } for pid=5496 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.686682][ T25] audit: type=1400 audit(1674808384.523:191): avc: denied { write } for pid=5496 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.707644][ T25] audit: type=1400 audit(1674808384.523:192): avc: denied { read } for pid=5496 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.728390][ T25] audit: type=1400 audit(1674808384.553:193): avc: denied { read } for pid=4602 comm="dhcpcd" name="n79" dev="tmpfs" ino=1552 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.750112][ T25] audit: type=1400 audit(1674808384.553:194): avc: denied { open } for pid=4602 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1552 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.773037][ T25] audit: type=1400 audit(1674808384.553:195): avc: denied { getattr } for pid=4602 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1552 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.796497][ T25] audit: type=1400 audit(1674808384.583:196): avc: denied { create } for pid=5501 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.754968][ T4347] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 147.839304][ T25] audit: type=1400 audit(1674808389.753:197): avc: denied { ioctl } for pid=5503 comm="syz-executor.0" path="socket:[30719]" dev="sockfs" ino=30719 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.841103][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.872908][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.880681][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.888586][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.896707][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.904085][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.922222][ T25] audit: type=1400 audit(1674808389.833:198): avc: denied { read } for pid=5503 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.952968][ T25] audit: type=1400 audit(1674808389.833:199): avc: denied { open } for pid=5503 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.977118][ T25] audit: type=1400 audit(1674808389.833:200): avc: denied { mounton } for pid=5503 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 148.025267][ T5503] chnl_net:caif_netlink_parms(): no params data found [ 148.061150][ T5503] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.068301][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.076414][ T5503] device bridge_slave_0 entered promiscuous mode [ 148.084124][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.091358][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.099650][ T5503] device bridge_slave_1 entered promiscuous mode [ 148.118070][ T5503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.129977][ T5503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.151028][ T5503] team0: Port device team_slave_0 added [ 148.158241][ T5503] team0: Port device team_slave_1 added [ 148.175761][ T5503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.182711][ T5503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.208909][ T5503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.220734][ T5503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.227784][ T5503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.253768][ T5503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.280137][ T5503] device hsr_slave_0 entered promiscuous mode [ 148.287185][ T5503] device hsr_slave_1 entered promiscuous mode [ 148.547639][ T25] audit: type=1400 audit(1674808390.463:201): avc: denied { create } for pid=5511 comm="dhcpcd-run-hook" name="resolv.conf.lapb8.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.616830][ T25] audit: type=1400 audit(1674808390.463:202): avc: denied { write } for pid=5511 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb8.link" dev="tmpfs" ino=1574 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.685474][ T25] audit: type=1400 audit(1674808390.463:203): avc: denied { append } for pid=5511 comm="dhcpcd-run-hook" name="resolv.conf.lapb8.link" dev="tmpfs" ino=1574 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.748134][ T25] audit: type=1400 audit(1674808390.533:204): avc: denied { unlink } for pid=5522 comm="rm" name="resolv.conf.lapb8.link" dev="tmpfs" ino=1574 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.909435][ T5503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.919212][ T5503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.930646][ T5503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.940574][ T5503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.966755][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.973862][ T5503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.981268][ T5503] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.988412][ T5503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.041146][ T895] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.049634][ T895] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.072614][ T5503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.088714][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.098853][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.109436][ T5503] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.122594][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.132227][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.142153][ T4687] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.149306][ T4687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.168050][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.178763][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.190075][ T5542] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.197212][ T5542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.206642][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.215703][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.234672][ T5503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.250191][ T5503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.262936][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.273829][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.282764][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.293066][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.301947][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.312027][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.320831][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.330734][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.342716][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.352071][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.465356][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.473265][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.486237][ T5503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.509534][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.520634][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.541405][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.552193][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.562758][ T5503] device veth0_vlan entered promiscuous mode [ 149.572650][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.580901][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.594700][ T5503] device veth1_vlan entered promiscuous mode [ 149.615959][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.624579][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.633463][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.643814][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.655119][ T5503] device veth0_macvtap entered promiscuous mode [ 149.664400][ T5503] device veth1_macvtap entered promiscuous mode [ 149.683083][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.690467][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.699532][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.708420][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.717700][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.729403][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.738067][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.747400][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.758071][ T5503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.768134][ T5503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.777338][ T5503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.786776][ T5503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.853938][ T2410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.867661][ T2410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.888005][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.907013][ T2410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.916023][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 149.925519][ T2410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.939359][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.952660][ T25] audit: type=1400 audit(1674808391.863:205): avc: denied { mounton } for pid=5503 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 150.010797][ T25] audit: type=1400 audit(1674808391.923:206): avc: denied { ioctl } for pid=5590 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=731 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.275454][ T5548] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 150.556218][ T5548] usb 1-1: Using ep0 maxpacket: 16 [ 150.726078][ T5548] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.808368][ T5548] usb 1-1: config 7 has an invalid interface number: 112 but max is 2 [ 150.818193][ T5548] usb 1-1: config 7 has an invalid interface number: 208 but max is 2 [ 150.828026][ T5548] usb 1-1: config 7 has an invalid interface number: 86 but max is 2 [ 150.836472][ T5548] usb 1-1: config 7 has no interface number 0 [ 150.843009][ T5548] usb 1-1: config 7 has no interface number 1 [ 150.850988][ T5548] usb 1-1: config 7 has no interface number 2 [ 150.858956][ T5548] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 150.871689][ T5548] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xA has an invalid bInterval 63, changing to 9 [ 150.885037][ T5548] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x7, skipping [ 150.897548][ T5548] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 150.909070][ T5548] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 150.921743][ T5548] usb 1-1: config 7 interface 208 altsetting 163 bulk endpoint 0x5 has invalid maxpacket 64 [ 150.932221][ T5548] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x2, skipping [ 150.944701][ T5548] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 150.957574][ T5548] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x9, skipping [ 150.968825][ T5548] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0xA, skipping [ 150.981194][ T5548] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 150.993676][ T5548] usb 1-1: config 7 interface 86 altsetting 169 has an invalid endpoint with address 0x80, skipping [ 151.006202][ T5548] usb 1-1: config 7 interface 112 has no altsetting 0 [ 151.012989][ T5548] usb 1-1: config 7 interface 208 has no altsetting 0 [ 151.020192][ T5548] usb 1-1: config 7 interface 86 has no altsetting 0 [ 151.305003][ T5548] usb 1-1: string descriptor 0 read error: -22 [ 151.311449][ T5548] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 151.323112][ T5548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.391096][ T5548] ------------[ cut here ]------------ [ 151.399308][ T5548] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 151.405721][ T5548] WARNING: CPU: 1 PID: 5548 at drivers/usb/core/urb.c:504 usb_submit_urb+0xb07/0x1690 [ 151.415690][ T5548] Modules linked in: [ 151.419689][ T5548] CPU: 1 PID: 5548 Comm: kworker/1:5 Not tainted 6.2.0-rc5-syzkaller #0 [ 151.428536][ T5548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 151.439202][ T5548] Workqueue: usb_hub_wq hub_event [ 151.444381][ T5548] RIP: 0010:usb_submit_urb+0xb07/0x1690 [ 151.450430][ T5548] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 73 84 17 ff 44 8b 04 24 4c 89 e2 48 c7 c7 40 82 a9 89 8b 4c 24 08 48 89 c6 e8 9e 10 64 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 151.471738][ T5548] RSP: 0018:ffffc9000323ee70 EFLAGS: 00010286 [ 151.478102][ T5548] RAX: 0000000000000000 RBX: ffff8880216ff000 RCX: 0000000000000000 [ 151.487731][ T5548] RDX: 0000000000000001 RSI: ffffffff8965ee20 RDI: fffff52000647dc0 [ 151.496060][ T5548] RBP: ffff88801b4b2200 R08: 0000000000000001 R09: ffffc9000323ec97 [ 151.504641][ T5548] R10: fffff52000647d92 R11: 0000000000000000 R12: ffff88807b346200 [ 151.514252][ T5548] R13: 00000000000000ae R14: 0000000000000002 R15: 0000000000000001 [ 151.522623][ T5548] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 151.533134][ T5548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.540054][ T5548] CR2: 00007fc32a045378 CR3: 000000007df12000 CR4: 00000000003506e0 [ 151.550046][ T5548] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.558583][ T5548] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.568095][ T5548] Call Trace: [ 151.571399][ T5548] [ 151.574342][ T5548] ? __init_swait_queue_head+0xc6/0x150 [ 151.580343][ T5548] usb_start_wait_urb+0xf9/0x450 [ 151.594103][ T5548] ? usb_api_blocking_completion+0xa0/0xa0 [ 151.600372][ T5548] ? verify_cpu+0xc0/0x100 [ 151.606853][ T5548] ? usb_init_urb+0x27/0x110 [ 151.611477][ T5548] ? usb_alloc_urb+0x35/0x50 [ 151.616508][ T5548] ? usb_bulk_msg+0x84/0x5f0 [ 151.621121][ T5548] shark_write_reg+0x1da/0x2f0 [ 151.627527][ T5548] ? shark_read_reg+0x430/0x430 [ 151.632414][ T5548] ? snprintf+0x9e/0xd0 [ 151.636991][ T5548] radio_tea5777_set_freq+0x1df/0x480 [ 151.642385][ T5548] radio_tea5777_init+0xb2/0x610 [ 151.648996][ T5548] usb_shark_probe+0x6ae/0x8e0 [ 151.653806][ T5548] usb_probe_interface+0x274/0x6a0 [ 151.660039][ T5548] really_probe+0x5a6/0xa50 [ 151.664648][ T5548] __driver_probe_device+0x186/0x460 [ 151.671567][ T5548] ? usb_match_id.part.0+0xdd/0x140 [ 151.677160][ T5548] driver_probe_device+0x44/0x110 [ 151.682257][ T5548] __device_attach_driver+0x14a/0x270 [ 151.689237][ T5548] ? driver_probe_device+0x110/0x110 [ 151.694634][ T5548] bus_for_each_drv+0x11e/0x1a0 [ 151.699961][ T5548] ? bus_for_each_dev+0x1a0/0x1a0 [ 151.707125][ T5548] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 151.713132][ T5548] ? lockdep_hardirqs_on+0x79/0x100 [ 151.718722][ T5548] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 151.724553][ T5548] __device_attach+0x19e/0x440 [ 151.730845][ T5548] ? device_driver_attach+0x1b0/0x1b0 [ 151.736601][ T5548] ? kobject_uevent_env+0x225/0x12d0 [ 151.741934][ T5548] bus_probe_device+0x19d/0x250 [ 151.748413][ T5548] device_add+0xa14/0x1b80 [ 151.752871][ T5548] ? wait_for_completion_io_timeout+0x20/0x20 [ 151.759395][ T5548] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 151.767628][ T5548] ? lockdep_hardirqs_on+0x79/0x100 [ 151.772853][ T5548] usb_set_configuration+0xa01/0x18a0 [ 151.778661][ T5548] ? kernfs_create_link+0x167/0x220 [ 151.783888][ T5548] ? do_raw_spin_unlock+0x171/0x230 [ 151.790620][ T5548] usb_generic_driver_probe+0x74/0xa0 [ 151.796416][ T5548] usb_probe_device+0x94/0x230 [ 151.801200][ T5548] really_probe+0x5a6/0xa50 [ 151.807802][ T5548] __driver_probe_device+0x186/0x460 [ 151.813115][ T5548] driver_probe_device+0x44/0x110 [ 151.818478][ T5548] __device_attach_driver+0x14a/0x270 [ 151.823871][ T5548] ? driver_probe_device+0x110/0x110 [ 151.830860][ T5548] bus_for_each_drv+0x11e/0x1a0 [ 151.836272][ T5548] ? bus_for_each_dev+0x1a0/0x1a0 [ 151.841325][ T5548] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 151.848840][ T5548] ? lockdep_hardirqs_on+0x79/0x100 [ 151.854075][ T5548] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 151.860329][ T5548] __device_attach+0x19e/0x440 [ 151.866562][ T5548] ? device_driver_attach+0x1b0/0x1b0 [ 151.871965][ T5548] ? kobject_uevent_env+0x225/0x12d0 [ 151.877853][ T5548] bus_probe_device+0x19d/0x250 [ 151.882942][ T5548] device_add+0xa14/0x1b80 [ 151.888962][ T5548] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 151.895660][ T5548] ? usb_detect_static_quirks+0xbc/0x2d0 [ 151.901326][ T5548] usb_new_device.cold+0x600/0xf02 [ 151.908579][ T5548] ? hub_disconnect+0x470/0x470 [ 151.913491][ T5548] ? rwlock_bug.part.0+0x90/0x90 [ 151.918983][ T5548] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 151.926461][ T5548] hub_event+0x244c/0x3cd0 [ 151.930915][ T5548] ? hub_port_debounce+0x2e0/0x2e0 [ 151.936414][ T5548] ? lock_acquire+0x1df/0x630 [ 151.941112][ T5548] ? lock_release+0x810/0x810 [ 151.947492][ T5548] ? lock_downgrade+0x6e0/0x6e0 [ 151.952363][ T5548] ? do_raw_spin_lock+0x120/0x2a0 [ 151.957801][ T5548] process_one_work+0x8ba/0x14b0 [ 151.962760][ T5548] ? pwq_dec_nr_in_flight+0x230/0x230 [ 151.969713][ T5548] ? rwlock_bug.part.0+0x90/0x90 [ 151.974672][ T5548] ? _raw_spin_lock_irq+0x41/0x50 [ 151.980204][ T5548] worker_thread+0x598/0xec0 [ 151.985121][ T5548] ? __kthread_parkme+0xc1/0x1f0 [ 151.990167][ T5548] ? process_one_work+0x14b0/0x14b0 [ 151.995546][ T4347] Bluetooth: hci0: command 0x041b tx timeout [ 152.003397][ T5548] kthread+0x294/0x330 [ 152.007853][ T5548] ? kthread_complete_and_exit+0x20/0x20 [ 152.014098][ T5548] ret_from_fork+0x1f/0x30 [ 152.020146][ T5548] [ 152.023192][ T5548] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.030477][ T5548] CPU: 1 PID: 5548 Comm: kworker/1:5 Not tainted 6.2.0-rc5-syzkaller #0 2023/01/27 08:33:14 executed programs: 1 [ 152.038808][ T5548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 152.048960][ T5548] Workqueue: usb_hub_wq hub_event [ 152.054005][ T5548] Call Trace: [ 152.057304][ T5548] [ 152.060250][ T5548] dump_stack_lvl+0x57/0x7d [ 152.064761][ T5548] panic+0x219/0x453 [ 152.068759][ T5548] ? panic_print_sys_info.part.0+0x6e/0x6e [ 152.074575][ T5548] ? usb_submit_urb+0xb07/0x1690 [ 152.079524][ T5548] check_panic_on_warn.cold+0x14/0x2b [ 152.084905][ T5548] __warn+0xd0/0x170 [ 152.088810][ T5548] ? usb_submit_urb+0xb07/0x1690 [ 152.093754][ T5548] report_bug+0x15a/0x1c0 [ 152.098109][ T5548] ? usb_bulk_msg+0x84/0x5f0 [ 152.102721][ T5548] handle_bug+0x3c/0x70 [ 152.106888][ T5548] exc_invalid_op+0x14/0x40 [ 152.111397][ T5548] asm_exc_invalid_op+0x16/0x20 [ 152.116258][ T5548] RIP: 0010:usb_submit_urb+0xb07/0x1690 [ 152.121811][ T5548] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 73 84 17 ff 44 8b 04 24 4c 89 e2 48 c7 c7 40 82 a9 89 8b 4c 24 08 48 89 c6 e8 9e 10 64 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 152.141774][ T5548] RSP: 0018:ffffc9000323ee70 EFLAGS: 00010286 [ 152.147860][ T5548] RAX: 0000000000000000 RBX: ffff8880216ff000 RCX: 0000000000000000 [ 152.155842][ T5548] RDX: 0000000000000001 RSI: ffffffff8965ee20 RDI: fffff52000647dc0 [ 152.163908][ T5548] RBP: ffff88801b4b2200 R08: 0000000000000001 R09: ffffc9000323ec97 [ 152.171885][ T5548] R10: fffff52000647d92 R11: 0000000000000000 R12: ffff88807b346200 [ 152.179947][ T5548] R13: 00000000000000ae R14: 0000000000000002 R15: 0000000000000001 [ 152.187930][ T5548] ? __init_swait_queue_head+0xc6/0x150 [ 152.193490][ T5548] usb_start_wait_urb+0xf9/0x450 [ 152.198623][ T5548] ? usb_api_blocking_completion+0xa0/0xa0 [ 152.204500][ T5548] ? verify_cpu+0xc0/0x100 [ 152.209013][ T5548] ? usb_init_urb+0x27/0x110 [ 152.213630][ T5548] ? usb_alloc_urb+0x35/0x50 [ 152.218227][ T5548] ? usb_bulk_msg+0x84/0x5f0 [ 152.222824][ T5548] shark_write_reg+0x1da/0x2f0 [ 152.227596][ T5548] ? shark_read_reg+0x430/0x430 [ 152.232458][ T5548] ? snprintf+0x9e/0xd0 [ 152.236614][ T5548] radio_tea5777_set_freq+0x1df/0x480 [ 152.242005][ T5548] radio_tea5777_init+0xb2/0x610 [ 152.246973][ T5548] usb_shark_probe+0x6ae/0x8e0 [ 152.251747][ T5548] usb_probe_interface+0x274/0x6a0 [ 152.256946][ T5548] really_probe+0x5a6/0xa50 [ 152.261460][ T5548] __driver_probe_device+0x186/0x460 [ 152.267187][ T5548] ? usb_match_id.part.0+0xdd/0x140 [ 152.272439][ T5548] driver_probe_device+0x44/0x110 [ 152.277468][ T5548] __device_attach_driver+0x14a/0x270 [ 152.282935][ T5548] ? driver_probe_device+0x110/0x110 [ 152.288222][ T5548] bus_for_each_drv+0x11e/0x1a0 [ 152.293076][ T5548] ? bus_for_each_dev+0x1a0/0x1a0 [ 152.298106][ T5548] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 152.304087][ T5548] ? lockdep_hardirqs_on+0x79/0x100 [ 152.309372][ T5548] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 152.315187][ T5548] __device_attach+0x19e/0x440 [ 152.319952][ T5548] ? device_driver_attach+0x1b0/0x1b0 [ 152.325413][ T5548] ? kobject_uevent_env+0x225/0x12d0 [ 152.330793][ T5548] bus_probe_device+0x19d/0x250 [ 152.335650][ T5548] device_add+0xa14/0x1b80 [ 152.340073][ T5548] ? wait_for_completion_io_timeout+0x20/0x20 [ 152.346148][ T5548] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 152.352740][ T5548] ? lockdep_hardirqs_on+0x79/0x100 [ 152.357944][ T5548] usb_set_configuration+0xa01/0x18a0 [ 152.363323][ T5548] ? kernfs_create_link+0x167/0x220 [ 152.368552][ T5548] ? do_raw_spin_unlock+0x171/0x230 [ 152.373773][ T5548] usb_generic_driver_probe+0x74/0xa0 [ 152.379252][ T5548] usb_probe_device+0x94/0x230 [ 152.384104][ T5548] really_probe+0x5a6/0xa50 [ 152.388614][ T5548] __driver_probe_device+0x186/0x460 [ 152.393905][ T5548] driver_probe_device+0x44/0x110 [ 152.398933][ T5548] __device_attach_driver+0x14a/0x270 [ 152.404302][ T5548] ? driver_probe_device+0x110/0x110 [ 152.409852][ T5548] bus_for_each_drv+0x11e/0x1a0 [ 152.414707][ T5548] ? bus_for_each_dev+0x1a0/0x1a0 [ 152.419758][ T5548] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 152.425747][ T5548] ? lockdep_hardirqs_on+0x79/0x100 [ 152.430944][ T5548] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 152.436754][ T5548] __device_attach+0x19e/0x440 [ 152.441520][ T5548] ? device_driver_attach+0x1b0/0x1b0 [ 152.446887][ T5548] ? kobject_uevent_env+0x225/0x12d0 [ 152.452173][ T5548] bus_probe_device+0x19d/0x250 [ 152.457026][ T5548] device_add+0xa14/0x1b80 [ 152.461445][ T5548] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 152.467695][ T5548] ? usb_detect_static_quirks+0xbc/0x2d0 [ 152.473335][ T5548] usb_new_device.cold+0x600/0xf02 [ 152.478449][ T5548] ? hub_disconnect+0x470/0x470 [ 152.483298][ T5548] ? rwlock_bug.part.0+0x90/0x90 [ 152.488234][ T5548] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 152.494217][ T5548] hub_event+0x244c/0x3cd0 [ 152.498638][ T5548] ? hub_port_debounce+0x2e0/0x2e0 [ 152.503757][ T5548] ? lock_acquire+0x1df/0x630 [ 152.508439][ T5548] ? lock_release+0x810/0x810 [ 152.513173][ T5548] ? lock_downgrade+0x6e0/0x6e0 [ 152.518039][ T5548] ? do_raw_spin_lock+0x120/0x2a0 [ 152.523064][ T5548] process_one_work+0x8ba/0x14b0 [ 152.528005][ T5548] ? pwq_dec_nr_in_flight+0x230/0x230 [ 152.533467][ T5548] ? rwlock_bug.part.0+0x90/0x90 [ 152.538406][ T5548] ? _raw_spin_lock_irq+0x41/0x50 [ 152.543437][ T5548] worker_thread+0x598/0xec0 [ 152.548031][ T5548] ? __kthread_parkme+0xc1/0x1f0 [ 152.552993][ T5548] ? process_one_work+0x14b0/0x14b0 [ 152.558192][ T5548] kthread+0x294/0x330 [ 152.562260][ T5548] ? kthread_complete_and_exit+0x20/0x20 [ 152.567893][ T5548] ret_from_fork+0x1f/0x30 [ 152.572315][ T5548] [ 152.575387][ T5548] Kernel Offset: disabled [ 152.579782][ T5548] Rebooting in 86400 seconds..