[ 426.499363][ T140] usb 1-1: Manufacturer: syz
[ 426.504608][ T140] usb 1-1: SerialNumber: syz
[ 426.513290][ T140] usb 1-1: config 0 descriptor??
[ 426.537677][ T4481] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 426.558764][ T140] cm109 1-1:0.0: invalid payload size 1024, expected 4
[ 426.566501][ T140] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input190
[ 426.787449][ C1] cm109 1-1:0.0: cm109_urb_irq_callback: urb status -71
[ 426.969093][ T140] usb 1-1: USB disconnect, device number 61
[ 426.987530][ C1] cm109 1-1:0.0: cm109_urb_ctl_callback: urb status -2
[ 426.994805][ T140] cm109 1-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 427.777525][ T140] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 428.017470][ T140] usb 1-1: Using ep0 maxpacket: 16
[ 428.138617][ T140] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 29, changing to 8
[ 428.149702][ T140] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 42088, setting to 1024
[ 428.318279][ T140] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f
[ 428.328030][ T140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 428.336100][ T140] usb 1-1: Product: syz
[ 428.340463][ T140] usb 1-1: Manufacturer: syz
[ 428.345132][ T140] usb 1-1: SerialNumber: syz
[ 428.351609][ T140] usb 1-1: config 0 descriptor??
[ 428.367833][ T4486] raw-gadget gadget: fail, usb_ep_enable returned -22
[ 428.389274][ T140] cm109 1-1:0.0: invalid payload size 1024, expected 4
[ 428.397293][ T140] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input191
[ 428.627622][ C1] cm109 1-1:0.0: cm109_urb_irq_callback: urb status -71
[ 428.810128][ T2925] usb 1-1: USB disconnect, device number 62
[ 428.817471][ C1] cm109 1-1:0.0: cm109_urb_ctl_callback: urb status -71
[ 428.824422][ C1] cm109 1-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 428.834169][ T2925] cm109 1-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 430.000555][ T11] device hsr_slave_0 left promiscuous mode
[ 430.006790][ T11] device hsr_slave_1 left promiscuous mode
[ 430.013422][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 430.021004][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 430.030234][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 430.037971][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 430.046560][ T11] device bridge_slave_1 left promiscuous mode
[ 430.053351][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 430.062024][ T11] device bridge_slave_0 left promiscuous mode
[ 430.069043][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 430.079926][ T11] device veth1_macvtap left promiscuous mode
[ 430.086412][ T11] device veth0_macvtap left promiscuous mode
[ 430.094103][ T11] device veth1_vlan left promiscuous mode
[ 430.101139][ T11] device veth0_vlan left promiscuous mode
[ 430.210376][ T11] team0 (unregistering): Port device team_slave_1 removed
[ 430.222873][ T11] team0 (unregistering): Port device team_slave_0 removed
[ 430.233525][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 430.246807][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 430.294733][ T11] bond0 (unregistering): Released all slaves
Warning: Permanently added '10.128.0.179' (ECDSA) to the list of known hosts.
[ 432.323326][ T27] audit: type=1400 audit(1652316702.002:214): avc: denied { execmem } for pid=4490 comm="syz-executor247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 432.405686][ T4491] chnl_net:caif_netlink_parms(): no params data found
[ 432.442042][ T4491] bridge0: port 1(bridge_slave_0) entered blocking state
[ 432.449408][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state
[ 432.457139][ T4491] device bridge_slave_0 entered promiscuous mode
[ 432.465390][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state
[ 432.472822][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state
[ 432.481353][ T4491] device bridge_slave_1 entered promiscuous mode
[ 432.500560][ T4491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 432.511765][ T4491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 432.533480][ T4491] team0: Port device team_slave_0 added
[ 432.540952][ T4491] team0: Port device team_slave_1 added
[ 432.559681][ T4491] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 432.566935][ T4491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 432.593541][ T4491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 432.605365][ T4491] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 432.612642][ T4491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 432.639620][ T4491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 432.662991][ T4491] device hsr_slave_0 entered promiscuous mode
[ 432.669681][ T4491] device hsr_slave_1 entered promiscuous mode
[ 432.724127][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state
[ 432.731210][ T4491] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 432.738610][ T4491] bridge0: port 1(bridge_slave_0) entered blocking state
[ 432.745788][ T4491] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 432.783831][ T4491] 8021q: adding VLAN 0 to HW filter on device bond0
[ 432.795043][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 432.803981][ T3595] bridge0: port 1(bridge_slave_0) entered disabled state
[ 432.812646][ T3595] bridge0: port 2(bridge_slave_1) entered disabled state
[ 432.821072][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 432.833366][ T4491] 8021q: adding VLAN 0 to HW filter on device team0
[ 432.843489][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 432.852757][ T140] bridge0: port 1(bridge_slave_0) entered blocking state
[ 432.859888][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 432.880909][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 432.889943][ T4454] bridge0: port 2(bridge_slave_1) entered blocking state
[ 432.896995][ T4454] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 432.905622][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 432.914058][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 432.923353][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 432.936477][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 432.949202][ T4491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 432.961770][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 432.969690][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 432.987222][ T4491] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 432.994543][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 433.014640][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 433.161009][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 433.170374][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 433.179100][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 433.186903][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 433.197455][ T4491] device veth0_vlan entered promiscuous mode
[ 433.208618][ T4491] device veth1_vlan entered promiscuous mode
[ 433.225134][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 433.233824][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 433.242034][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 433.254190][ T4491] device veth0_macvtap entered promiscuous mode
[ 433.263924][ T4491] device veth1_macvtap entered promiscuous mode
[ 433.279292][ T4491] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 433.286860][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 433.297059][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 433.310068][ T4491] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 433.317961][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 433.617468][ T140] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 433.857609][ T140] usb 1-1: Using ep0 maxpacket: 16
[ 433.977722][ T140] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24592, setting to 1024
[ 434.149534][ T140] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f
[ 434.158858][ T140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 434.167281][ T140] usb 1-1: Product: syz
[ 434.172125][ T140] usb 1-1: Manufacturer: syz
[ 434.177090][ T140] usb 1-1: SerialNumber: syz
[ 434.184171][ T140] usb 1-1: config 0 descriptor??
[ 434.229545][ T140] cm109 1-1:0.0: invalid payload size 1024, expected 4
[ 434.237296][ T140] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input192
write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory
write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory
[ 434.651304][ T3595] usb 1-1: USB disconnect, device number 63
[ 434.667485][ C1] cm109 1-1:0.0: cm109_urb_ctl_callback: urb status -71
[ 434.675055][ C1] cm109 1-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 434.685229][ T3595] cm109 1-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 434.789329][ T1223] ieee802154 phy0 wpan0: encryption failed: -22
[ 434.795656][ T1223] ieee802154 phy1 wpan1: encryption failed: -22
[ 435.057462][ T3595] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 435.297488][ T3595] usb 1-1: Using ep0 maxpacket: 16
[ 435.417713][ T3595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24592, setting to 1024
[ 435.597603][ T3595] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f
[ 435.607099][ T3595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 435.615684][ T3595] usb 1-1: Product: syz
[ 435.620072][ T3595] usb 1-1: Manufacturer: syz
[ 435.624679][ T3595] usb 1-1: SerialNumber: syz
[ 435.632367][ T3595] usb 1-1: config 0 descriptor??
[ 435.678976][ T3595] cm109 1-1:0.0: invalid payload size 1024, expected 4
[ 435.686937][ T3595] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input193
write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory
write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory
[ 436.103648][ T3595] usb 1-1: USB disconnect, device number 64
[ 436.117483][ C0] cm109 1-1:0.0: cm109_urb_ctl_callback: urb status -71
[ 436.124432][ C0] cm109 1-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 436.135002][ T3595] cm109 1-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 436.487447][ T3595] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 436.727498][ T3595] usb 1-1: Using ep0 maxpacket: 16
[ 436.847656][ T3595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24592, setting to 1024
[ 437.047677][ T3595] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f
[ 437.056730][ T3595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 437.065053][ T3595] usb 1-1: Product: syz
[ 437.069248][ T3595] usb 1-1: Manufacturer: syz
[ 437.073824][ T3595] usb 1-1: SerialNumber: syz
[ 437.079881][ T3595] usb 1-1: config 0 descriptor??
[ 437.118944][ T3595] cm109 1-1:0.0: invalid payload size 1024, expected 4
[ 437.126870][ T3595] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input194
[ 437.541428][ T3595] usb 1-1: USB disconnect, device number 65
[ 437.547430][ C0] cm109 1-1:0.0: cm109_urb_irq_callback: urb status -71
[ 437.547446][ C0] ------------[ cut here ]------------
[ 437.547450][ C0] URB ffff88801506eb00 submitted while active
[ 437.547535][ C0] WARNING: CPU: 0 PID: 3595 at drivers/usb/core/urb.c:378 usb_submit_urb+0x1057/0x1680
[ 437.547586][ C0] Modules linked in:
[ 437.547592][ C0] CPU: 0 PID: 3595 Comm: kworker/0:3 Not tainted 5.18.0-rc6-syzkaller #0
[ 437.547598][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 437.547603][ C0] Workqueue: usb_hub_wq hub_event
[ 437.547648][ C0] RIP: 0010:usb_submit_urb+0x1057/0x1680
[ 437.547653][ C0] Code: 3d 74 4e 93 07 00 b8 f0 ff ff ff 0f 85 f7 fb ff ff 48 89 ee 48 c7 c7 20 40 83 89 89 04 24 c6 05 55 4e 93 07 01 e8 b1 08 4d 03 <0f> 0b 8b 04 24 e9 d4 fb ff ff b8 ed ff ff ff e9 ca fb ff ff 66 90
[ 437.547658][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010086
[ 437.547663][ C0] RAX: 0000000000000000 RBX: ffff88807040c800 RCX: 0000000000000000
[ 437.547666][ C0] RDX: 0000000000000103 RSI: 0000000000000004 RDI: fffff52000000f39
[ 437.547669][ C0] RBP: ffff88801506eb00 R08: 0000000000000001 R09: ffff8880b9e279eb
[ 437.547672][ C0] R10: ffffed10173c4f3d R11: 0000000000000001 R12: ffff88801d68a800
[ 437.547675][ C0] R13: 0000000000000086 R14: 000000000000000f R15: ffff88801b0fc800
[ 437.547679][ C0] FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000
[ 437.547685][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 437.547688][ C0] CR2: 00007fd53e0faff0 CR3: 000000001e7eb000 CR4: 00000000003506f0
[ 437.547691][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 437.547694][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 437.547697][ C0] Call Trace:
[ 437.547700][ C0]
[ 437.547703][ C0] cm109_urb_irq_callback+0x5de/0x970
[ 437.547743][ C0] __usb_hcd_giveback_urb+0x238/0x3f0
[ 437.547747][ C0] dummy_timer+0xeb8/0x2eb0
[ 437.547777][ C0] ? __lock_acquire+0x15bc/0x5660
[ 437.547791][ C0] ? lock_acquire+0x1ab/0x510
[ 437.547795][ C0] ? dummy_dequeue+0x4a0/0x4a0
[ 437.547800][ C0] ? dummy_dequeue+0x4a0/0x4a0
[ 437.547804][ C0] call_timer_fn+0x163/0x4a0
[ 437.547828][ C0] ? timer_fixup_activate+0x240/0x240
[ 437.547832][ C0] ? dummy_dequeue+0x4a0/0x4a0
[ 437.547836][ C0] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 437.547841][ C0] ? dummy_dequeue+0x4a0/0x4a0
[ 437.547845][ C0] __run_timers.part.0+0x530/0x8e0
[ 437.547850][ C0] ? call_timer_fn+0x4a0/0x4a0
[ 437.547854][ C0] ? mark_held_locks+0x9f/0xe0
[ 437.547858][ C0] run_timer_softirq+0x9c/0x190
[ 437.547862][ C0] __do_softirq+0x29b/0x9c2
[ 437.547898][ C0] __irq_exit_rcu+0x123/0x180
[ 437.547922][ C0] irq_exit_rcu+0x5/0x20
[ 437.547927][ C0] sysvec_apic_timer_interrupt+0x93/0xc0
[ 437.547943][ C0]
[ 437.547945][ C0]
[ 437.547947][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 437.547952][ C0] RIP: 0010:console_unlock+0x5ee/0xa50
[ 437.547966][ C0] Code: 58 1e fe ff e8 73 2b 00 00 48 83 3c 24 00 0f 85 69 02 00 00 9c 58 f6 c4 02 0f 85 5c 03 00 00 48 83 3c 24 00 74 01 fb 45 85 e4 <0f> 85 b0 02 00 00 49 c7 c4 e0 48 c2 8a be 04 00 00 00 48 c7 c7 e0
[ 437.547971][ C0] RSP: 0018:ffffc90002bcf628 EFLAGS: 00000246
[ 437.547976][ C0] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 1ffffffff1de360e
[ 437.547979][ C0] RDX: 0000000000000000 RSI: ffffffff88eb8160 RDI: ffffffff894225e0
[ 437.547982][ C0] RBP: ffffc90002bcf680 R08: 0000000000000001 R09: ffffffff8ef1a907
[ 437.547985][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
[ 437.547988][ C0] R13: ffffffff8ba02c08 R14: ffffffff8ba02bd0 R15: 0000000000000000
[ 437.547992][ C0] ? devkmsg_read+0x660/0x660
[ 437.547996][ C0] ? lock_release+0x720/0x720
[ 437.548001][ C0] ? dev_vprintk_emit+0x2c9/0x30d
[ 437.548018][ C0] vprintk_emit+0xa8/0x3c0
[ 437.548022][ C0] ? usb_control_msg+0x354/0x460
[ 437.548026][ C0] dev_vprintk_emit+0x2c9/0x30d
[ 437.548032][ C0] ? dev_attr_show.cold+0x35/0x35
[ 437.548036][ C0] ? __lock_acquire+0x15bc/0x5660
[ 437.548041][ C0] ? mark_lock.part.0+0xee/0x19a0
[ 437.548045][ C0] dev_printk_emit+0x9d/0xce
[ 437.548051][ C0] ? dev_vprintk_emit+0x30d/0x30d
[ 437.548055][ C0] ? find_held_lock+0x2d/0x110
[ 437.548060][ C0] ? __dev_printk+0x6c/0xda
[ 437.548065][ C0] _dev_info+0xc8/0xf6
[ 437.548070][ C0] ? _dev_notice+0xf6/0xf6
[ 437.548075][ C0] ? mark_held_locks+0x9f/0xe0
[ 437.548079][ C0] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 437.548083][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 437.548088][ C0] usb_disconnect.cold+0x25/0x61d
[ 437.548100][ C0] hub_event+0xb46/0x39b0
[ 437.548107][ C0] ? hub_port_debounce+0x2d0/0x2d0
[ 437.548112][ C0] ? __lock_acquire+0x2080/0x5660
[ 437.548116][ C0] ? lock_release+0x720/0x720
[ 437.548120][ C0] ? lock_downgrade+0x6e0/0x6e0
[ 437.548124][ C0] ? lockdep_hardirqs_on+0x79/0x100
[ 437.548129][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 437.548133][ C0] process_one_work+0x865/0x13d0
[ 437.548160][ C0] ? lock_release+0x720/0x720
[ 437.548164][ C0] ? pwq_dec_nr_in_flight+0x230/0x230
[ 437.548167][ C0] ? rwlock_bug.part.0+0x90/0x90
[ 437.548172][ C0] ? _raw_spin_lock_irq+0x41/0x50
[ 437.548177][ C0] worker_thread+0x598/0xec0
[ 437.548182][ C0] ? __kthread_parkme+0xc1/0x1f0
[ 437.548207][ C0] ? process_one_work+0x13d0/0x13d0
[ 437.548211][ C0] kthread+0x299/0x340
[ 437.548215][ C0] ? kthread_complete_and_exit+0x20/0x20
[ 437.548220][ C0] ret_from_fork+0x1f/0x30
[ 437.548227][ C0]
[ 437.548231][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 437.548234][ C0] CPU: 0 PID: 3595 Comm: kworker/0:3 Not tainted 5.18.0-rc6-syzkaller #0
[ 437.548238][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 437.548240][ C0] Workqueue: usb_hub_wq hub_event
[ 437.548246][ C0] Call Trace:
[ 437.548248][ C0]
[ 437.548250][ C0] dump_stack_lvl+0x57/0x7d
[ 437.548271][ C0] panic+0x227/0x466
[ 437.548290][ C0] ? panic_print_sys_info.part.0+0x69/0x69
[ 437.548296][ C0] ? usb_submit_urb+0x1057/0x1680
[ 437.548299][ C0] __warn.cold+0x14b/0x1d9
[ 437.548304][ C0] ? usb_submit_urb+0x1057/0x1680
[ 437.548307][ C0] report_bug+0x15a/0x1b0
[ 437.548317][ C0] handle_bug+0x3c/0x60
[ 437.548321][ C0] exc_invalid_op+0x14/0x40
[ 437.548325][ C0] asm_exc_invalid_op+0x12/0x20
[ 437.548328][ C0] RIP: 0010:usb_submit_urb+0x1057/0x1680
[ 437.548332][ C0] Code: 3d 74 4e 93 07 00 b8 f0 ff ff ff 0f 85 f7 fb ff ff 48 89 ee 48 c7 c7 20 40 83 89 89 04 24 c6 05 55 4e 93 07 01 e8 b1 08 4d 03 <0f> 0b 8b 04 24 e9 d4 fb ff ff b8 ed ff ff ff e9 ca fb ff ff 66 90
[ 437.548336][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010086
[ 437.548340][ C0] RAX: 0000000000000000 RBX: ffff88807040c800 RCX: 0000000000000000
[ 437.548342][ C0] RDX: 0000000000000103 RSI: 0000000000000004 RDI: fffff52000000f39
[ 437.548345][ C0] RBP: ffff88801506eb00 R08: 0000000000000001 R09: ffff8880b9e279eb
[ 437.548347][ C0] R10: ffffed10173c4f3d R11: 0000000000000001 R12: ffff88801d68a800
[ 437.548349][ C0] R13: 0000000000000086 R14: 000000000000000f R15: ffff88801b0fc800
[ 437.548352][ C0] ? usb_submit_urb+0x1057/0x1680
[ 437.548356][ C0] cm109_urb_irq_callback+0x5de/0x970
[ 437.548360][ C0] __usb_hcd_giveback_urb+0x238/0x3f0
[ 437.548363][ C0] dummy_timer+0xeb8/0x2eb0
[ 437.548367][ C0] ? __lock_acquire+0x15bc/0x5660
[ 437.548371][ C0] ? lock_acquire+0x1ab/0x510
[ 437.548375][ C0] ? dummy_dequeue+0x4a0/0x4a0
[ 437.548379][ C0] ? dummy_dequeue+0x4a0/0x4a0
[ 437.548382][ C0] call_timer_fn+0x163/0x4a0
[ 437.548386][ C0] ? timer_fixup_activate+0x240/0x240
[ 437.548389][ C0] ? dummy_dequeue+0x4a0/0x4a0
[ 437.548392][ C0] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 437.548396][ C0] ? dummy_dequeue+0x4a0/0x4a0
[ 437.548400][ C0] __run_timers.part.0+0x530/0x8e0
[ 437.548403][ C0] ? call_timer_fn+0x4a0/0x4a0
[ 437.548406][ C0] ? mark_held_locks+0x9f/0xe0
[ 437.548410][ C0] run_timer_softirq+0x9c/0x190
[ 437.548413][ C0] __do_softirq+0x29b/0x9c2
[ 437.548417][ C0] __irq_exit_rcu+0x123/0x180
[ 437.548421][ C0] irq_exit_rcu+0x5/0x20
[ 437.548426][ C0] sysvec_apic_timer_interrupt+0x93/0xc0
[ 437.548430][ C0]
[ 437.548431][ C0]
[ 437.548433][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 437.548436][ C0] RIP: 0010:console_unlock+0x5ee/0xa50
[ 437.548440][ C0] Code: 58 1e fe ff e8 73 2b 00 00 48 83 3c 24 00 0f 85 69 02 00 00 9c 58 f6 c4 02 0f 85 5c 03 00 00 48 83 3c 24 00 74 01 fb 45 85 e4 <0f> 85 b0 02 00 00 49 c7 c4 e0 48 c2 8a be 04 00 00 00 48 c7 c7 e0
[ 437.548443][ C0] RSP: 0018:ffffc90002bcf628 EFLAGS: 00000246
[ 437.548446][ C0] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: 1ffffffff1de360e
[ 437.548449][ C0] RDX: 0000000000000000 RSI: ffffffff88eb8160 RDI: ffffffff894225e0
[ 437.548451][ C0] RBP: ffffc90002bcf680 R08: 0000000000000001 R09: ffffffff8ef1a907
[ 437.548453][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
[ 437.548455][ C0] R13: ffffffff8ba02c08 R14: ffffffff8ba02bd0 R15: 0000000000000000
[ 437.548459][ C0] ? devkmsg_read+0x660/0x660
[ 437.548463][ C0] ? lock_release+0x720/0x720
[ 437.548467][ C0] ? dev_vprintk_emit+0x2c9/0x30d
[ 437.548471][ C0] vprintk_emit+0xa8/0x3c0
[ 437.548475][ C0] ? usb_control_msg+0x354/0x460
[ 437.548478][ C0] dev_vprintk_emit+0x2c9/0x30d
[ 437.548483][ C0] ? dev_attr_show.cold+0x35/0x35
[ 437.548488][ C0] ? __lock_acquire+0x15bc/0x5660
[ 437.548493][ C0] ? mark_lock.part.0+0xee/0x19a0
[ 437.548498][ C0] dev_printk_emit+0x9d/0xce
[ 437.548505][ C0] ? dev_vprintk_emit+0x30d/0x30d
[ 437.548510][ C0] ? find_held_lock+0x2d/0x110
[ 437.548515][ C0] ? __dev_printk+0x6c/0xda
[ 437.548522][ C0] _dev_info+0xc8/0xf6
[ 437.548528][ C0] ? _dev_notice+0xf6/0xf6
[ 437.548534][ C0] ? mark_held_locks+0x9f/0xe0
[ 437.548539][ C0] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 437.548544][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 437.548551][ C0] usb_disconnect.cold+0x25/0x61d
[ 437.548557][ C0] hub_event+0xb46/0x39b0
[ 437.548565][ C0] ? hub_port_debounce+0x2d0/0x2d0
[ 437.548572][ C0] ? __lock_acquire+0x2080/0x5660
[ 437.548578][ C0] ? lock_release+0x720/0x720
[ 437.548583][ C0] ? lock_downgrade+0x6e0/0x6e0
[ 437.548589][ C0] ? lockdep_hardirqs_on+0x79/0x100
[ 437.548595][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 437.548601][ C0] process_one_work+0x865/0x13d0
[ 437.548606][ C0] ? lock_release+0x720/0x720
[ 437.548610][ C0] ? pwq_dec_nr_in_flight+0x230/0x230
[ 437.548613][ C0] ? rwlock_bug.part.0+0x90/0x90
[ 437.548617][ C0] ? _raw_spin_lock_irq+0x41/0x50
[ 437.548622][ C0] worker_thread+0x598/0xec0
[ 437.548625][ C0] ? __kthread_parkme+0xc1/0x1f0
[ 437.548629][ C0] ? process_one_work+0x13d0/0x13d0
[ 437.548632][ C0] kthread+0x299/0x340
[ 437.548636][ C0] ? kthread_complete_and_exit+0x20/0x20
[ 437.548640][ C0] ret_from_fork+0x1f/0x30
[ 437.548645][ C0]
[ 437.549080][ C0] Kernel Offset: disabled