Warning: Permanently added '10.128.1.188' (ECDSA) to the list of known hosts.
2023/03/29 13:17:09 ignoring optional flag "sandboxArg"="0"
2023/03/29 13:17:09 parsed 1 programs
2023/03/29 13:17:09 executed programs: 0
[ 95.536411][ T26] audit: type=1400 audit(1680095829.963:188): avc: denied { mounton } for pid=5475 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 95.580304][ T26] audit: type=1400 audit(1680095829.963:189): avc: denied { mount } for pid=5475 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 95.595643][ T5081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.612052][ T5081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.619310][ T26] audit: type=1400 audit(1680095829.963:190): avc: denied { create } for pid=5475 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 95.640288][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.644730][ T26] audit: type=1400 audit(1680095829.963:191): avc: denied { write } for pid=5475 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 95.669435][ T26] audit: type=1400 audit(1680095829.963:192): avc: denied { read } for pid=5475 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 95.691299][ T26] audit: type=1400 audit(1680095830.003:193): avc: denied { getattr } for pid=5476 comm="rm" path="/run/dhcpcd/hook-state/ntp.conf.lapb8.ipv4ll" dev="tmpfs" ino=1548 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 95.693209][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.724766][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 95.724790][ T26] audit: type=1400 audit(1680095830.003:194): avc: denied { unlink } for pid=5476 comm="rm" name="ntp.conf.lapb8.ipv4ll" dev="tmpfs" ino=1548 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 95.742963][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.759671][ T26] audit: type=1400 audit(1680095830.003:195): avc: denied { create } for pid=5481 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 95.782865][ T26] audit: type=1400 audit(1680095830.003:196): avc: denied { ioctl } for pid=5481 comm="syz-executor.0" path="socket:[30698]" dev="sockfs" ino=30698 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 95.808695][ T26] audit: type=1400 audit(1680095830.093:197): avc: denied { read } for pid=5486 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1451 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 95.914446][ T5481] chnl_net:caif_netlink_parms(): no params data found
[ 95.962604][ T5481] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.970240][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.977763][ T5481] bridge_slave_0: entered allmulticast mode
[ 95.984520][ T5481] bridge_slave_0: entered promiscuous mode
[ 95.992156][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.999918][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.008055][ T5481] bridge_slave_1: entered allmulticast mode
[ 96.014900][ T5481] bridge_slave_1: entered promiscuous mode
[ 96.037350][ T5481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.048805][ T5481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.077583][ T5481] team0: Port device team_slave_0 added
[ 96.086212][ T5481] team0: Port device team_slave_1 added
[ 96.107961][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.116313][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.144328][ T5481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.157421][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.165732][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.193490][ T5481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.228245][ T5481] hsr_slave_0: entered promiscuous mode
[ 96.235937][ T5481] hsr_slave_1: entered promiscuous mode
[ 96.746539][ T5481] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.767253][ T5481] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.776836][ T5481] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.787370][ T5481] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.809548][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.816689][ T5481] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.824078][ T5481] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.831180][ T5481] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.880149][ T5481] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.892656][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 96.901274][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.909909][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.919373][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 96.931150][ T5481] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.940688][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 96.950598][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 96.959303][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.966459][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.984495][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 96.993970][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 97.002478][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.009619][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.019466][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 97.028883][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 97.058776][ T5481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 97.069719][ T5481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 97.082676][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 97.092549][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 97.102551][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 97.111485][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 97.121035][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 97.129795][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 97.138671][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 97.147521][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 97.159594][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 97.167822][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 97.276812][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 97.286196][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 97.298306][ T5481] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 97.319034][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 97.329508][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 97.350644][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 97.358986][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 97.369811][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 97.377708][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 97.388302][ T5481] veth0_vlan: entered promiscuous mode
[ 97.401145][ T5481] veth1_vlan: entered promiscuous mode
[ 97.418478][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 97.426763][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 97.435191][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 97.444625][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 97.455292][ T5481] veth0_macvtap: entered promiscuous mode
[ 97.465588][ T5481] veth1_macvtap: entered promiscuous mode
[ 97.479909][ T5481] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.487989][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 97.497251][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 97.505243][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 97.514064][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 97.525762][ T5481] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.533752][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 97.542355][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 97.553341][ T5481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.562138][ T5481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.571809][ T5481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.581120][ T5481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.635911][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.662870][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.665356][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.672087][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 97.679861][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.697877][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 97.883751][ T5081] Bluetooth: hci0: command 0x0409 tx timeout
[ 98.003112][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 98.364445][ T6] usb 1-1: config 8 has an invalid interface number: 184 but max is 0
[ 98.374012][ T6] usb 1-1: config 8 has an invalid interface number: 100 but max is 0
[ 98.382189][ T6] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[ 98.391811][ T6] usb 1-1: config 8 has 2 interfaces, different from the descriptor's value: 1
[ 98.403280][ T6] usb 1-1: config 8 has no interface number 0
[ 98.409550][ T6] usb 1-1: config 8 has no interface number 1
[ 98.417108][ T6] usb 1-1: config 8 interface 184 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16
[ 98.430562][ T6] usb 1-1: too many endpoints for config 8 interface 100 altsetting 231: 95, using maximum allowed: 30
[ 98.443106][ T6] usb 1-1: config 8 interface 100 altsetting 231 bulk endpoint 0x9 has invalid maxpacket 32
[ 98.453766][ T6] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0x9, skipping
[ 98.466485][ T6] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x0, skipping
[ 98.477663][ T6] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xE, skipping
[ 98.490560][ T6] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x80, skipping
[ 98.501510][ T6] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0x4, skipping
[ 98.522923][ T6] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xA, skipping
[ 98.534247][ T6] usb 1-1: config 8 interface 100 altsetting 231 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 98.545597][ T6] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xF, skipping
[ 98.556935][ T6] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x80, skipping
[ 98.568258][ T6] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x0, skipping
[ 98.579567][ T6] usb 1-1: config 8 interface 100 altsetting 231 has 15 endpoint descriptors, different from the interface descriptor's value: 95
[ 98.593307][ T6] usb 1-1: config 8 interface 100 has no altsetting 0
[ 98.600114][ T6] usb 1-1: New USB device found, idVendor=07d1, idProduct=3a09, bcdDevice= 1.b3
[ 98.609638][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 98.902961][ T6] usb 1-1: string descriptor 0 read error: -71
[ 99.803401][ T6] usb 1-1: reset high-speed USB device number 2 using dummy_hcd
[ 99.963043][ T5081] Bluetooth: hci0: command 0x041b tx timeout
[ 100.364236][ T5737] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 100.417190][ T13] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1]
[ 100.424419][ T13] usb 1-1: firmware API: 1.9.6 2012-07-07
[ 100.431376][ T6] ------------[ cut here ]------------
[ 100.437064][ T6] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[ 100.445406][ T6] WARNING: CPU: 0 PID: 6 at drivers/usb/core/urb.c:504 usb_submit_urb+0xb0b/0x1690
[ 100.455040][ T6] Modules linked in:
[ 100.458944][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 6.3.0-rc4-syzkaller #0
[ 100.467121][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/17/2023
[ 100.477289][ T6] Workqueue: usb_hub_wq hub_event
[ 100.482334][ T6] RIP: 0010:usb_submit_urb+0xb0b/0x1690
[ 100.488022][ T6] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 0f ef 08 ff 44 8b 04 24 4c 89 e2 48 c7 c7 a0 27 13 8a 8b 4c 24 08 48 89 c6 e8 75 f5 a4 fb <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00
[ 100.508024][ T6] RSP: 0018:ffffc900002cef48 EFLAGS: 00010282
[ 100.514381][ T6] RAX: 0000000000000000 RBX: ffff888016653000 RCX: 0000000000000000
[ 100.522367][ T6] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000001
[ 100.530471][ T6] RBP: ffff88801e4e6e00 R08: 0000000000000000 R09: ffffc900002cec77
[ 100.538487][ T6] R10: fffff52000059d8e R11: 0000000000000000 R12: ffff888025f7e5c0
[ 100.546503][ T6] R13: 0000000000000002 R14: 0000000000000002 R15: 0000000000000001
[ 100.554521][ T6] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 100.563501][ T6] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 100.570186][ T6] CR2: 00007f13475069ee CR3: 000000007ec37000 CR4: 00000000003506f0
[ 100.578303][ T6] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 100.586319][ T6] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 100.594350][ T6] Call Trace:
[ 100.597638][ T6]
[ 100.600576][ T6] ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 100.606534][ T6] carl9170_usb_submit_cmd_urb+0x61/0xe0
[ 100.612176][ T6] carl9170_usb_disconnect+0xc5/0x100
[ 100.617617][ T6] usb_unbind_interface+0x187/0x7f0
[ 100.622866][ T6] device_release_driver_internal+0x368/0x530
[ 100.628942][ T6] usb_forced_unbind_intf+0xee/0x1c0
[ 100.634310][ T6] usb_reset_device+0x3c1/0x970
[ 100.639167][ T6] carl9170_usb_probe+0x47/0xd00
[ 100.644172][ T6] usb_probe_interface+0x26c/0x820
[ 100.649292][ T6] really_probe+0x1c7/0xb20
[ 100.653861][ T6] __driver_probe_device+0x186/0x460
[ 100.659234][ T6] ? usb_match_id.part.0+0xdd/0x140
[ 100.664580][ T6] ? driver_probe_device+0x110/0x110
[ 100.669866][ T6] driver_probe_device+0x44/0x110
[ 100.674945][ T6] __device_attach_driver+0x14e/0x270
[ 100.680342][ T6] bus_for_each_drv+0x102/0x190
[ 100.685257][ T6] ? mark_held_locks+0x9f/0xe0
[ 100.690087][ T6] ? bus_for_each_dev+0x170/0x170
[ 100.695175][ T6] ? lockdep_hardirqs_on+0x7d/0x100
[ 100.700468][ T6] ? _raw_spin_unlock_irqrestore+0x41/0x70
[ 100.706369][ T6] __device_attach+0x19e/0x3d0
[ 100.711162][ T6] ? device_driver_attach+0x1b0/0x1b0
[ 100.716623][ T6] ? do_raw_spin_unlock+0x175/0x230
[ 100.721827][ T6] bus_probe_device+0x12b/0x170
[ 100.726734][ T6] device_add+0xee4/0x1930
[ 100.731245][ T6] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0
[ 100.738166][ T6] ? usb_create_ep_devs+0x15a/0x270
[ 100.743669][ T6] ? create_intf_ep_devs.isra.0+0x113/0x190
[ 100.749768][ T6] usb_set_configuration+0xabc/0x1a20
[ 100.755230][ T6] ? kernfs_add_one+0x122/0x450
[ 100.760092][ T6] usb_generic_driver_probe+0x88/0xd0
[ 100.765785][ T6] usb_probe_device+0x98/0x240
[ 100.770564][ T6] really_probe+0x1c7/0xb20
[ 100.775135][ T6] __driver_probe_device+0x186/0x460
[ 100.780424][ T6] ? driver_probe_device+0x110/0x110
[ 100.785776][ T6] driver_probe_device+0x44/0x110
[ 100.790903][ T6] __device_attach_driver+0x14e/0x270
[ 100.796613][ T6] bus_for_each_drv+0x102/0x190
[ 100.801465][ T6] ? mark_held_locks+0x9f/0xe0
[ 100.806295][ T6] ? bus_for_each_dev+0x170/0x170
[ 100.811411][ T6] ? lockdep_hardirqs_on+0x7d/0x100
[ 100.816681][ T6] ? _raw_spin_unlock_irqrestore+0x41/0x70
[ 100.822493][ T6] __device_attach+0x19e/0x3d0
[ 100.827322][ T6] ? device_driver_attach+0x1b0/0x1b0
[ 100.832702][ T6] ? do_raw_spin_unlock+0x175/0x230
[ 100.837965][ T6] bus_probe_device+0x12b/0x170
[ 100.842857][ T6] device_add+0xee4/0x1930
[ 100.847454][ T6] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0
[ 100.854450][ T6] ? usb_detect_static_quirks+0xbc/0x2d0
[ 100.860091][ T6] usb_new_device+0xc6e/0x1930
[ 100.864921][ T6] ? hub_disconnect+0x470/0x470
[ 100.869798][ T6] hub_event+0x24cc/0x4240
[ 100.874461][ T6] ? hub_port_debounce+0x2e0/0x2e0
[ 100.879585][ T6] ? __lock_acquire+0x2731/0x5d40
[ 100.884669][ T6] ? lock_release+0x670/0x670
[ 100.889359][ T6] ? lock_downgrade+0x690/0x690
[ 100.894267][ T6] ? do_raw_spin_lock+0x124/0x2b0
[ 100.899294][ T6] process_one_work+0x865/0x1400
[ 100.904268][ T6] ? lock_release+0x670/0x670
[ 100.908953][ T6] ? pwq_dec_nr_in_flight+0x230/0x230
[ 100.914387][ T6] ? spin_bug+0x1c0/0x1c0
[ 100.918718][ T6] worker_thread+0x59c/0xec0
[ 100.923367][ T6] ? process_one_work+0x1400/0x1400
[ 100.928659][ T6] kthread+0x298/0x340
[ 100.932769][ T6] ? kthread_complete_and_exit+0x20/0x20
[ 100.938557][ T6] ret_from_fork+0x1f/0x30
[ 100.943018][ T6]
[ 100.946052][ T6] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 100.953421][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 6.3.0-rc4-syzkaller #0
[ 100.961490][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/17/2023
[ 100.971581][ T6] Workqueue: usb_hub_wq hub_event
[ 100.976713][ T6] Call Trace:
[ 100.979995][ T6]
[ 100.982933][ T6] dump_stack_lvl+0x64/0xb0
[ 100.987453][ T6] panic+0x4af/0x550
[ 100.991447][ T6] ? panic_smp_self_stop+0x70/0x70
[ 100.996562][ T6] ? usb_submit_urb+0xb0b/0x1690
[ 101.001507][ T6] check_panic_on_warn+0x75/0x80
[ 101.006452][ T6] __warn+0xd4/0x2d0
[ 101.010345][ T6] ? preempt_schedule_notrace+0x5f/0xd0
[ 101.015905][ T6] ? usb_submit_urb+0xb0b/0x1690
[ 101.020845][ T6] report_bug+0x343/0x400
[ 101.025188][ T6] handle_bug+0x3c/0x70
[ 101.029530][ T6] exc_invalid_op+0x18/0x50
[ 101.034045][ T6] asm_exc_invalid_op+0x1a/0x20
[ 101.038905][ T6] RIP: 0010:usb_submit_urb+0xb0b/0x1690
[ 101.044555][ T6] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 0f ef 08 ff 44 8b 04 24 4c 89 e2 48 c7 c7 a0 27 13 8a 8b 4c 24 08 48 89 c6 e8 75 f5 a4 fb <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00
[ 101.064250][ T6] RSP: 0018:ffffc900002cef48 EFLAGS: 00010282
[ 101.070307][ T6] RAX: 0000000000000000 RBX: ffff888016653000 RCX: 0000000000000000
[ 101.078254][ T6] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000001
[ 101.086386][ T6] RBP: ffff88801e4e6e00 R08: 0000000000000000 R09: ffffc900002cec77
[ 101.094332][ T6] R10: fffff52000059d8e R11: 0000000000000000 R12: ffff888025f7e5c0
[ 101.102285][ T6] R13: 0000000000000002 R14: 0000000000000002 R15: 0000000000000001
[ 101.110237][ T6] ? usb_submit_urb+0xb0b/0x1690
[ 101.115154][ T6] ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 101.120934][ T6] carl9170_usb_submit_cmd_urb+0x61/0xe0
[ 101.126540][ T6] carl9170_usb_disconnect+0xc5/0x100
[ 101.131881][ T6] usb_unbind_interface+0x187/0x7f0
[ 101.137055][ T6] device_release_driver_internal+0x368/0x530
[ 101.143097][ T6] usb_forced_unbind_intf+0xee/0x1c0
[ 101.148352][ T6] usb_reset_device+0x3c1/0x970
[ 101.153183][ T6] carl9170_usb_probe+0x47/0xd00
[ 101.158094][ T6] usb_probe_interface+0x26c/0x820
[ 101.163205][ T6] really_probe+0x1c7/0xb20
[ 101.167699][ T6] __driver_probe_device+0x186/0x460
[ 101.172966][ T6] ? usb_match_id.part.0+0xdd/0x140
[ 101.178152][ T6] ? driver_probe_device+0x110/0x110
[ 101.183408][ T6] driver_probe_device+0x44/0x110
[ 101.188491][ T6] __device_attach_driver+0x14e/0x270
[ 101.193850][ T6] bus_for_each_drv+0x102/0x190
[ 101.198680][ T6] ? mark_held_locks+0x9f/0xe0
[ 101.203417][ T6] ? bus_for_each_dev+0x170/0x170
[ 101.208477][ T6] ? lockdep_hardirqs_on+0x7d/0x100
[ 101.213651][ T6] ? _raw_spin_unlock_irqrestore+0x41/0x70
[ 101.219431][ T6] __device_attach+0x19e/0x3d0
[ 101.224182][ T6] ? device_driver_attach+0x1b0/0x1b0
[ 101.229530][ T6] ? do_raw_spin_unlock+0x175/0x230
[ 101.234702][ T6] bus_probe_device+0x12b/0x170
[ 101.239696][ T6] device_add+0xee4/0x1930
[ 101.244170][ T6] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0
[ 101.251078][ T6] ? usb_create_ep_devs+0x15a/0x270
[ 101.256248][ T6] ? create_intf_ep_devs.isra.0+0x113/0x190
[ 101.262114][ T6] usb_set_configuration+0xabc/0x1a20
[ 101.267551][ T6] ? kernfs_add_one+0x122/0x450
[ 101.272378][ T6] usb_generic_driver_probe+0x88/0xd0
[ 101.277808][ T6] usb_probe_device+0x98/0x240
[ 101.282803][ T6] really_probe+0x1c7/0xb20
[ 101.287282][ T6] __driver_probe_device+0x186/0x460
[ 101.292545][ T6] ? driver_probe_device+0x110/0x110
[ 101.297805][ T6] driver_probe_device+0x44/0x110
[ 101.302806][ T6] __device_attach_driver+0x14e/0x270
[ 101.308244][ T6] bus_for_each_drv+0x102/0x190
[ 101.313067][ T6] ? mark_held_locks+0x9f/0xe0
[ 101.317809][ T6] ? bus_for_each_dev+0x170/0x170
[ 101.322803][ T6] ? lockdep_hardirqs_on+0x7d/0x100
[ 101.328325][ T6] ? _raw_spin_unlock_irqrestore+0x41/0x70
[ 101.334101][ T6] __device_attach+0x19e/0x3d0
[ 101.338940][ T6] ? device_driver_attach+0x1b0/0x1b0
[ 101.344281][ T6] ? do_raw_spin_unlock+0x175/0x230
[ 101.349452][ T6] bus_probe_device+0x12b/0x170
[ 101.354274][ T6] device_add+0xee4/0x1930
[ 101.358661][ T6] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0
[ 101.365479][ T6] ? usb_detect_static_quirks+0xbc/0x2d0
[ 101.371092][ T6] usb_new_device+0xc6e/0x1930
[ 101.375999][ T6] ? hub_disconnect+0x470/0x470
[ 101.380825][ T6] hub_event+0x24cc/0x4240
[ 101.385387][ T6] ? hub_port_debounce+0x2e0/0x2e0
[ 101.390481][ T6] ? __lock_acquire+0x2731/0x5d40
[ 101.395501][ T6] ? lock_release+0x670/0x670
[ 101.400151][ T6] ? lock_downgrade+0x690/0x690
[ 101.404996][ T6] ? do_raw_spin_lock+0x124/0x2b0
[ 101.409995][ T6] process_one_work+0x865/0x1400
[ 101.414933][ T6] ? lock_release+0x670/0x670
[ 101.419579][ T6] ? pwq_dec_nr_in_flight+0x230/0x230
[ 101.424919][ T6] ? spin_bug+0x1c0/0x1c0
[ 101.429412][ T6] worker_thread+0x59c/0xec0
[ 101.433972][ T6] ? process_one_work+0x1400/0x1400
[ 101.439139][ T6] kthread+0x298/0x340
[ 101.443181][ T6] ? kthread_complete_and_exit+0x20/0x20
[ 101.448781][ T6] ret_from_fork+0x1f/0x30
[ 101.453171][ T6]
[ 101.456306][ T6] Kernel Offset: disabled
[ 101.460685][ T6] Rebooting in 86400 seconds..